Privacy Policy

1. Who I am
My name is Nikolas Pediotidis Maniatis. I am a psychologist providing psychological support and counseling services registered with the Dutch Chamber of Commerce (KvK) under number 42002838. I am a member of the Nederlands Instituut van Psychologen (NIP) and bound by the NIP Code of Ethics. As a psychologist I am bound by professional secrecy and this obligation applies in addition to, and sometimes beyond, the GDPR.

I am the controller for the personal data processed via this website. You can contact me at nikolaspsychology@gmail.com. For privacy-specific questions, please mark your message "Privacy".

​

2. What data I collect
When you use this website or contact me, I may process:

Contact details and correspondence content that you provide via the contact form or by email, typically your name, email address, phone number (if you provide it), and the content of your message.

Data concerning health (Art. 9 GDPR): Because I am a psychologist, any message you send me about seeking, considering, or receiving psychological support is likely to qualify as data concerning health, even if you do not describe specific symptoms. I treat all correspondence on that basis.

Basic technical data required for the website to function and to remain secure (see the Cookie Policy below).

I do not ask you to provide more data than is necessary to respond to your inquiry. Please do not include sensitive details (diagnosis, medication, trauma history, etc.) in an initial contact message; a brief indication of what you are looking for is enough, and further information is better discussed in a secure intake setting.

​

3. How your data is used
Your data is used only to:

• Respond to your inquiries

• Communicate with you about potential or ongoing services

Your data is not used for marketing purposes.

​

4. Legal basis for processing

I rely on the following legal bases, depending on the purpose of the processing:

Responding to your inquiry and taking steps toward a possible treatment agreement: Art. 6(1)(b) GDPR (pre-contractual steps at your request). Where your inquiry reveals data concerning health, I additionally rely on your explicit consent under Art. 9(2)(a) GDPR, which you give by choosing to contact me about psychological services.

Keeping the website secure and operational, and keeping minimal records of inquiries for administrative purposes: Art. 6(1)(f) GDPR (my legitimate interest in running a functioning and secure professional website). You can object to this processing at any time on grounds relating to your particular situation.

Complying with legal obligations: Art. 6(1)(c) GDPR, and where health data is involved, Art. 9(2)(h) GDPR.

Non-essential analytics cookies (if you consent): Art. 6(1)(a) GDPR. You can withdraw consent at any time via the cookie settings, without affecting any processing that took place before withdrawal.

​

5. Data storage
Your information is stored securely and retained only for as long as necessary to respond to your request or provide services.

​

6. Data sharing
I do not sell your data and I do not share it for marketing purposes. I do use a limited number of processors and recipients:

Wix: This website is hosted on Wix.com Ltd., which processes technical data (including IP address) and any data you submit via forms on the site, acting as my processor under a data-processing agreement compliant with Art. 28 GDPR. Wix is established in Israel, which benefits from a European Commission adequacy decision, and uses sub-processors in the EEA and the United States. Transfers to the United States are covered by the EU-US Data Privacy Framework and/or Standard Contractual Clauses under Art. 46(2)(c) GDPR.

Microsoft Clarity: If you consent to analytics cookies, Microsoft Ireland Operations Ltd. processes limited interaction data as my processor, with onward transfers to Microsoft Corporation in the United States under the EU-US Data Privacy Framework / SCCs. See the Cookie Policy below.

​

7. Your rights
Under the GDPR, you have the following rights in relation to your personal data:

the right of access (Art. 15); the right to rectification (Art. 16); the right to erasure (Art. 17); the right to restriction of processing (Art. 18); the right to data portability for data you provided and that is processed by automated means on the basis of consent or contract (Art. 20); the right to object to processing based on legitimate interest (Art. 21); the right not to be subject to a decision based solely on automated processing (Art. 22) - I confirm that I do not use automated decision-making or profiling; and the right to withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).

To exercise any of these rights, contact me at the email above. I will respond within a reasonable timeframe and in any case within one month (Art. 12(3) GDPR).

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Postbus 93374, 2509 AJ Den Haag — https://autoriteitpersoonsgegevens.nl — or with the supervisory authority in your EU country of residence (Art. 77 GDPR).