​

Effective date: 17.08.2026
Last updated: 17.08.2026

This Privacy Policy explains how Anastasia Taisumova collects, uses, stores and protects personal data in connection with my psychological counselling, psychotherapy and related professional services, as well as through my website.

I respect your privacy and process personal data in accordance with applicable data-protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Czech legislation.

1. Data Controller

The data controller responsible for your personal data is:

Anastasia Taisumova
Psychologist / Psychotherapist
Prague, Czech Republic

Email: aptaisumova@gmail.com
Phone: +420 773 883 130

If you have any questions about how your personal data is processed or wish to exercise your data-protection rights, you can contact me using the details above.

2. What Personal Data I Collect

Depending on how you interact with me and the services you receive, I may process the following categories of personal data.

Identification and contact information

This may include:

• first and last name;

• email address;

• telephone number;

• age or date of birth where relevant;

• address where necessary for invoicing or other legal purposes;

• preferred method of communication.

Appointment and administrative information

This may include:

• appointment dates and times;

• appointment history;

• cancellations and rescheduling;

• correspondence concerning appointments;

• payment and invoicing information;

• information necessary to administer the professional relationship.

Psychological and health-related information

In the course of psychological assessment, counseling or psychotherapy, I may process information that you voluntarily provide concerning:

• psychological and emotional well-being;

• mental health;

• physical health where relevant to psychological work;

• personal and family history;

• relationships and social circumstances;

• significant or traumatic life experiences;

• previous treatment or professional support;

• therapeutic goals;

• progress and difficulties discussed during therapy.

Some of this information may constitute special-category personal data, including health data, under Article 9 GDPR.

I only process information that is relevant and reasonably necessary for providing the professional services.

3. How I Collect Personal Data

I may collect personal data:

• when you contact me by email, telephone or messaging application;

• when you submit an inquiry through my website;

• when you book an appointment;

• when you attend a psychological or psychotherapeutic session;

• during psychological assessment or therapy;

• when you provide information voluntarily during our professional communication;

• when you make a payment by bank transfer;

• through the technical systems used to operate my website and provide online services.

I do not intentionally collect personal information about you from third parties unless necessary to provide services, protect your safety, or as required or permitted by law.

4. Why I Process Your Personal Data

Your personal data may be processed for the following purposes:

• responding to inquiries;

• arranging and managing appointments;

• providing psychological counseling and psychotherapy;

• conducting psychological assessment where applicable;

• establishing and documenting therapeutic goals;

• maintaining appropriate professional records;

• communicating with you about appointments and professional matters;

• processing payments and maintaining accounting records;

• complying with legal, tax, accounting and professional obligations;

• protecting the safety of Clients and other persons;

• establishing, exercising or defending legal claims where necessary.

Information disclosed during psychological or psychotherapeutic work is not used for advertising or marketing purposes.

5. Legal Basis for Processing

Depending on the circumstances, I process personal data on one or more of the following legal bases under Article 6 GDPR:

• Article 6(1)(b) — processing necessary for the performance of a contract or for taking steps at your request before entering into a contract;

• Article 6(1)(c) — processing necessary for compliance with a legal obligation;

• Article 6(1)(f) — processing necessary for my legitimate interests, where applicable and where these interests are not overridden by your rights and freedoms;

• Article 6(1)(a) — consent, where processing is specifically based on your consent.

Where special-category data, such as health information, are processed, an applicable condition under Article 9 GDPR will also apply.

The appropriate legal basis depends on the particular processing activity. Not all processing is based on consent.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. Confidentiality

Confidentiality is a fundamental principle of psychological and psychotherapeutic practice.

Information shared during sessions is confidential and is not disclosed to other persons unless there is an appropriate legal basis to do so.

Confidentiality may be limited where disclosure is required or permitted by law, including circumstances involving a serious concern regarding the safety of the Client or another person.

Where legally and professionally appropriate, I will discuss relevant confidentiality limitations with you.

7. Professional Records and Clinical Notes

I may create and maintain professional records relating to the services provided.

These records may contain information necessary for:

• assessment;

• therapeutic planning;

• documentation of professional work;

• monitoring therapeutic progress;

• continuity of care;

• professional and legal compliance.

Clinical notes may be maintained in paper form and/or electronically on my Computer.

Electronic notes are stored locally on the device and are not synchronized with any cloud storage service.

Paper records are kept in a manner designed to prevent unauthorized access.

I do not intentionally store clinical session notes in WhatsApp, Telegram, Gmail or Google Calendar.

8. Email and Google Calendar

I use Gmail for professional email communication and Google Calendar for appointment scheduling and management.

These services may process information such as:

• your name;

• email address;

• appointment dates and times;

• correspondence;

• calendar information;

• other information contained in emails exchanged with me.

Google provides Gmail and Google Calendar, which are subject to Google's applicable privacy and security practices.

I use Google Calendar primarily for managing appointments. I aim to keep calendar entries limited to information necessary for scheduling and administration and do not intentionally include detailed clinical information.

9. Website and Wix

My website is operated using Wix.com.

When you visit the website, Wix and associated website technologies may process certain technical and usage information necessary to operate, secure, and maintain the website.

Depending on how you interact with the website, this may include:

• IP address;

• browser and device information;

• pages visited;

• information submitted through website forms;

• technical information concerning website usage;

• cookie and similar technology information.

If you submit an inquiry through the website, the information you provide may be used to respond to your inquiry and arrange services.

Wix may process personal data in accordance with its own privacy documentation and applicable data-processing arrangements.

10. Online Sessions

Depending on the circumstances, online psychological or psychotherapeutic sessions may be conducted using:

• Zoom

• Google Meet

• WhatsApp

• Telegram

The platform used for a particular session may be agreed between us in advance.

These platforms are independent third-party services and may process certain technical, account and communication information necessary to provide their services.

The relevant provider's own privacy policy applies to its processing of personal data.

I do not intentionally record audio or video of psychological or psychotherapeutic sessions.

Neither the Client nor the Therapist should record, photograph or otherwise capture a session without prior explicit agreement.

For confidentiality reasons, I recommend that Clients:

• use a private room for online sessions;

• use headphones where appropriate;

• avoid public Wi-Fi where reasonably possible;

• protect their devices with a password or other security measure;

• avoid sharing session links with other people.

11. WhatsApp and Telegram

WhatsApp and Telegram may be used for practical communication with Clients, including appointment arrangements and other administrative matters.

These applications are operated by independent third-party providers and process personal data according to their respective privacy policies.

For confidentiality reasons, I recommend using messaging applications primarily for administrative communication, such as scheduling, cancellation, and practical questions.

Please avoid sending detailed descriptions of highly sensitive psychological or health information through ordinary messaging unless specifically necessary.

12. Payments and Banking Information

Payments for my services are made by bank transfer, including transfers to my account with Air Bank.

When you make a bank transfer, the bank and payment system may process information such as:

• your name;

• bank account information;

• payment amount;

• payment date;

• payment reference;

• information included in the payment message.

I use payment information primarily to:

• confirm payment;

• maintain accounting records;

• issue or maintain invoices where applicable;

• comply with tax and other legal obligations;

• manage outstanding payments.

Air Bank processes personal data in accordance with applicable banking and data-protection legislation.

I do not request or store your online banking login details, passwords or authentication information.

13. Third-Party Services

I use selected third-party services to operate my professional practice and provide services.

These currently include:

Service provider Purpose

Wix Website hosting and website functionality

Google / Gmail Professional email communication

Google Calendar Appointment scheduling and administration

Zoom Online psychological/psychotherapeutic sessions

Google Meet Online psychological/psychotherapeutic sessions

WhatsApp Communication and appointment administration

Telegram Communication and appointment administration

Air BankBank-transfer payments

iPad Local electronic storage of professional notes

Paper records Physical storage of professional notes

Third-party providers may act as independent controllers or processors depending on the service and the particular processing activity.

Where a provider processes personal data on my behalf, I take reasonable steps to ensure that appropriate contractual and technical safeguards are in place.

Third-party providers may update their privacy policies, subprocessors or technical infrastructure from time to time.

14. International Data Transfers

Some of the technology providers used in my practice may process personal data outside the European Economic Area (EEA).

Where personal data are transferred outside the EEA, the transfer will take place only where permitted by applicable data-protection law and where an appropriate legal safeguard is available.

Depending on the particular provider and circumstances, this may include:

• an adequacy decision;

• Standard Contractual Clauses;

• another recognized transfer mechanism; or

• another lawful safeguard under applicable law.

Because third-party providers may change their infrastructure and processing arrangements, processing locations may vary.

15. Cookies and Website Technologies

My website may use cookies and similar technologies to provide website functionality, security and, where applicable, analytics.

Some cookies may be necessary for the website to function, while others may require your consent under applicable law.

Where required, the website will provide a cookie consent mechanism.

You can also manage cookie settings through your browser and, where available, through the website's cookie settings.

16. Data Security

I take reasonable technical and organisational measures to protect personal data against:

• unauthorised access;

• accidental loss;

• destruction;

• alteration;

• inappropriate disclosure; and

• other unlawful processing.

These measures include appropriate device security, restricted access to professional records and reasonable precautions when using electronic communication.

However, no electronic communication system or storage method can be guaranteed to be completely secure.

17. Data Retention

Personal data are retained only for as long as necessary for the purposes for which they were collected and/or for as long as required by applicable legal, professional, accounting or tax obligations.

Different categories of personal data may therefore be retained for different periods.

Professional and clinical records may be retained for the period required by the legal and professional requirements applicable to the particular services.

When information is no longer required, it will be securely deleted, destroyed or anonymized where appropriate.

Information may be retained for longer where necessary for the establishment, exercise or defense of legal claims.

18. Your Rights Under the GDPR

Subject to the conditions and limitations established by applicable law, you may have the right to:

Right of access

You may request confirmation of whether your personal data are being processed and, where applicable, request access to those data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data where the legal conditions for erasure are met.

This right is not absolute. Certain information may need to be retained because of legal, professional, accounting or other obligations.

Right to restriction of processing

You may request restriction of processing in circumstances provided by the GDPR.

Right to object

You may object to certain processing activities where the GDPR provides this right.

Right to data portability

Where the legal requirements are met, you may request your personal data in a structured, commonly used and machine-readable format and request that it be transmitted to another controller.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

19. How to Exercise Your Rights

To exercise your rights or ask a question about the processing of your personal data, please contact:

Anastasia Taisumova
Email: aptaisumova@gmail.com
Phone: +420 773 883 130

Please provide enough information for me to identify you and understand your request.

I will respond within the period required by applicable data-protection legislation.

Where necessary, I may request additional information to verify your identity before providing access to personal data or taking other action.

20. Right to Lodge a Complaint

If you believe that your personal data have been processed unlawfully or that your rights under data-protection legislation have not been respected, you have the right to lodge a complaint with the competent data-protection supervisory authority.

In the Czech Republic, the competent supervisory authority is:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů / ÚOOÚ)

Official website: https://uoou.gov.cz/en

21. Children and Adolescents

Where psychological services are provided to children or adolescents, personal data are processed in accordance with applicable law and professional requirements.

The arrangements concerning consent, parental or legal representative involvement, confidentiality and access to information will be discussed at the beginning of the therapeutic process.

The child's age, developmental level and best interests will be taken into account where applicable.

22. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in:

• applicable legislation;

• professional requirements;

• services provided;

• technology;

• data-processing practices; or

• third-party service providers.

The current version will be published on this website.

The date of the latest update is shown at the top of this page.​