Last Updated: May 2026
1. Introduction
Welcome to the psychological practice of Camelia-Gabriela Ionescu. I am committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how I collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and the professional standards of the Colegiul Psihologilor din România (Romanian Board of Psychologists).
2. Data Controller
For the purposes of the GDPR, the Data Controller is:
- Private Practice: IONESCU CAMELIA-GABRIELA, CABINET INDIVIDUAL DE PSIHOLOGIE
- VAT: RO 51677364
- CPR Practice Reg. No.: 10B16249
- Psychologist: Camelia-Gabriela Ionescu, Clinical Psychologist & EFT Psychotherapist
- CPR Psychologist Reg. No.: 10399
- Location: Bucharest, Romania
- Contact: Please use the Contact Form for any data privacy inquiries.
3. Information We Collect
In order to provide psychological services, I collect and process the following types of data:
A. Standard Personal Data
- Identity Data: First name, last name, date of birth.
- Contact Data: Email address, telephone number, billing address.
- Technical Data: IP address, browser type, and interaction data when you use this website (see our Cookie Policy).
B. Special Category Data (Health Data)
Given the nature of my services, I process sensitive health data. This includes:
- Clinical assessments, psychological evaluations, and testing results.
- Session notes, therapeutic goals, and treatment plans.
- Medical history relevant to your psychological care.
Under GDPR Article 9, health data requires higher levels of protection. This data is kept strictly confidential and is only processed with your explicit consent for the purpose of providing health or social care.
4. How We Use Your Data
Your data is collected and used solely for the following purposes:
- To provide clinical psychological services, psychotherapy, and assessments.
- To communicate with you regarding appointments, scheduling, and invoicing.
- To maintain accurate professional clinical records as required by Romanian law.
- To manage website security and improve user experience.
5. Data Storage and Retention
Your personal and health data is stored securely. Digital records are encrypted and protected by secure passwords, and physical records (if any) are kept in locked filing cabinets accessible only by the Data Controller.
In accordance with the guidelines set by the Romanian College of Psychologists, clinical records and associated personal data are retained for a minimum period of 10 years following the conclusion of our professional relationship, after which they are securely destroyed.
6. Confidentiality and Data Sharing
As a licensed psychologist, confidentiality is the cornerstone of my practice. Your data will never be sold or shared with third parties for marketing purposes.
Information may only be disclosed to third parties under the following strict exceptions:
- If there is an explicit, written consent from you to share information with another healthcare provider.
- If there is a legal obligation to disclose information (e.g., a court order).
- If there is a risk of imminent, severe harm to yourself or a third party, requiring emergency intervention.
7. Your Rights Under GDPR
Under the GDPR, you have several rights regarding your personal data:
- The Right of Access: You have the right to request copies of your personal data.
- The Right to Rectification: You have the right to request correction of any information you believe is inaccurate.
- The Right to Erasure: You have the right to request the deletion of your personal data, under certain conditions (note: clinical record retention laws may override this right in some instances).
- The Right to Restrict Processing: You have the right to request that I restrict the processing of your data, under certain conditions.
- The Right to Data Portability: You have the right to request that I transfer the data collected to another organization, or directly to you.
To exercise any of these rights, please contact me via the Contact Page. I will respond to your request within 30 days.
8. Complaints
If you feel that your data has not been handled correctly, or you are unhappy with my response to any requests regarding your personal data, you have the right to lodge a complaint with the Autoritatea Naţională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian National Supervisory Authority for Personal Data Processing).