Privacy & GDPR

Privacy and cookies notice

This notice explains how this website handles personal data, what optional third-party services may load, and how you can exercise privacy rights.

Last updated: 12 June 2026

Controller

The controller for this website is Antonios Noutsos, Clinical Psychologist.

For privacy requests, contact thesession.an@gmail.com. Please do not include urgent clinical information in privacy requests or general website messages.

Data this website handles

  • Contact details and message content you choose to send by email, phone, Instagram, booking request, or the connected contact form.
  • Booking details handled through Cal.com when you allow and use the booking calendar.
  • Website interaction and technical analytics collected through Microsoft Clarity and Google Tag Manager only when you allow analytics.
  • Clinical intake client details, answers, and scores submitted through the intake page.
  • Technical data needed to deliver and secure the website, such as IP address, browser/device information, request logs, and security logs.
  • Preference data stored in localStorage on your device, including theme choice and privacy consent choice.

Purposes and legal bases

  • Responding to inquiries and arranging appointments: steps requested by you before a service relationship, or legitimate interest in managing communications.
  • Providing psychological services after a booking or consultation: performance of the service relationship and applicable professional or legal obligations.
  • Handling health-related information voluntarily provided in a clinical context: explicit consent where needed, and professional confidentiality obligations where applicable.
  • Operating and securing the website: legitimate interests and legal obligations.
  • Loading the optional Cal.com booking calendar: consent.
  • Loading optional Microsoft Clarity and Google Tag Manager analytics: consent.

Cookies, local storage, and optional providers

This website uses localStorage for necessary preferences: your theme selection and your privacy choice.

The Cal.com booking calendar is not loaded until you allow the booking calendar from the privacy banner or booking dialog. Loading it may share technical data with Cal.com and lets you enter booking details there.

Contact form and intake form submissions are sent by email through Resend, which processes the submitted content for email delivery.

Microsoft Clarity and Google Tag Manager are not loaded until you allow analytics from the privacy banner. If allowed, they may collect technical and interaction data for heatmaps, session replays, usage insights, and tag management, and may use cookies where consent permits.

The Google Material Symbols stylesheet may be requested by your browser to render icons. That request can expose standard technical data such as IP address, user agent, and referrer to Google.

Recipients and international transfers

Personal data may be received by service providers that help operate hosting, email, scheduling, communications, security, or professional administration.

Some providers may process data outside the European Economic Area. Where this happens, appropriate safeguards should be used, such as adequacy decisions, standard contractual clauses, or equivalent protections.

Retention

  • Inquiry and booking communications are kept only as long as needed to respond, manage appointments, comply with legal or professional obligations, or resolve disputes.
  • Local privacy preferences remain on your device until you clear browser storage or change them through Cookie settings.
  • Clinical records, if a therapeutic relationship is established, may be retained under applicable professional and legal requirements.

Your GDPR rights

You may request access, rectification, erasure, restriction, portability, objection to processing, and withdrawal of consent where processing is based on consent.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority or another competent supervisory authority.

No automated decisions

This website does not use personal data for solely automated decisions, marketing tracking, or advertising analytics.

Sensitive information and emergencies

Mental health information is sensitive. Do not use the website for emergencies or immediate clinical risk. If you are in crisis, contact local urgent services or use the emergency resources listed on the contact page.