Privacy Policy

Effective Date:  April 2026

 

This Privacy Policy explains how Catalina Andreea Oprea (“we,” “us,” or “our”) collects, uses, and protects your personal information when you visit our website, book sessions, or communicate with us.

 

We are committed to protecting your privacy and handling your personal data with care, respect, and transparency in compliance with the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

 

1. Data Controller

The data controller responsible for your personal data is:

Catalina Andreea Oprea  

​

2. Information We Collect

We collect only the information necessary to provide you with professional RTT services and a smooth online experience.

 

Information you provide directly:

• Name, email address, phone number, and other contact details

• Information shared during consultations or therapy sessions

• Health or wellness information you choose to disclose voluntarily

• Billing and payment details

• Consent forms, session notes, and communications

 

Information collected automatically (via website use):

• IP address and browser type

• Date and time of website visits

• Pages viewed and time spent on the site

• Cookies and similar technologies (see below)

 

3. How We Use Your Information

 

Your information is used for the following purposes:

• To schedule and conduct RTT sessions or consultations

• To provide personalized care and follow-up support

• To send session-related materials, including your personalized audio recording

• To process payments and manage invoices

• To communicate with you regarding appointments, updates, or relevant information

• To comply with legal, ethical, and professional obligations

• We will never sell, rent, or share your personal data with third parties for marketing purposes.

 

4. Legal Basis for Processing

 

We process your personal data based on one or more of the following legal grounds:

• Consent – when you voluntarily provide information or agree to participate in therapy sessions.

• Contract – to fulfill our agreement to provide RTT services.

• Legal obligation – to comply with tax, recordkeeping, or regulatory requirements.

• Legitimate interest – to improve our services and maintain communication with clients.

 

5. Data Retention

 

Your personal data will be kept only as long as necessary for the purpose it was collected, or as required by applicable laws.

• Session notes and consent forms are securely stored for up to 7 years (as recommended for therapeutic records).

• Contact and communication data may be retained for ongoing client relationships or until you request deletion.

​

6. Confidentiality and Data Security

• All client information is treated as strictly confidential.

• We use secure, encrypted systems to protect data against unauthorized access, alteration, or disclosure.

• Only the therapist and authorized personnel (if applicable) have access to session records.

• If a data breach ever occurs, affected individuals will be notified in accordance with GDPR requirements.

​

7. Sharing Your Information

 

Your information will only be shared in limited circumstances, such as:

• With your explicit written consent

• When required by law or professional ethics

• To process payments through secure third-party providers (e.g., PayPal, Stripe, etc.)

• All third-party service providers comply with GDPR or equivalent data protection standards.

 

8. International Clients

If you are located outside the European Union, please note that your information may be transferred and processed in Germany or other countries where our systems or service providers operate. We take all necessary steps to ensure your data receives the same high level of protection required by the GDPR.

 

9. Cookies and Website Analytics

Our website may use cookies to improve functionality and analyze traffic. Cookies are small text files stored on your device that help enhance your browsing experience.

 

You can manage or disable cookies at any time through your browser settings.

 

10. Your Rights Under GDPR

 

You have the following rights regarding your personal data:

• Access – to request a copy of your personal information

• Correction – to update or correct inaccuracies

• Deletion – to request your data be erased (“right to be forgotten”)

• Restriction – to limit processing under certain conditions

• Data portability – to receive your data in a structured format

• Objection – to object to certain types of processing

• Withdraw consent – at any time, without affecting prior lawful processing

 

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the revised effective date.

​

12. Contact

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please use the contact form.