Privacy Policy – Solution-Focused Art Therapy

Responsible Entity:

Solution-Focused Art Therapy, Rahel Brügger
Phone: +4551744199
Email: solutionfocusedarttherapy@gmail.com
Website: https://www.arttherapy.dk/

Effective Date: September 11, 2025

This privacy policy describes how Solution-Focused Art Therapy collects, processes, and protects personal data in accordance with the General Data Protection Regulation (GDPR/DSGVO) and Danish data protection law (Databeskyttelsesloven).

1. Data Controller

The data controller responsible for your personal data is: Solution-Focused Art Therapy, Rahel Brügger.
You can contact the data controller at the contact details above regarding any privacy concerns.

2. Legal Basis for Data Processing

Personal data is processed based on one or more of the following legal grounds:

Consent (Art. 6(1)(a) GDPR / Art. 9(2)(a) for health data) – e.g., agreeing to therapy sessions or newsletter subscription
Contractual necessity (Art. 6(1)(b)) – e.g., fulfilling therapy agreements
Legal obligations (Art. 6(1)(c)) – e.g., accounting, insurance, or mandatory reporting
Legitimate interests (Art. 6(1)(f)), only when not overridden by your rights

Health-related data is considered special category personal data and is only processed with your explicit consent or under legal obligations.

3. Data Collected

We collect the following types of personal data:

a) Therapy-related data (collected with consent):

Name, contact details (email, phone, address)
Health information, diagnoses, therapy notes
Appointment dates and session notes
Any additional information voluntarily shared during therapy

b) Website-related data:

IP addresses
Browser type and version
Operating system
Date and time of website access
Pages visited and referral URLs

This data is collected only for providing services, statistical analysis, website security, and legal compliance.

4. Purpose of Data Processing

Personal data is used for:

Delivering therapy services and supporting your health needs
Scheduling, billing, and administration
Legal compliance and insurance purposes
Improving website functionality and security
Communication in response to inquiries

5. Data Storage and Security

Physical documents are stored in a locked room or cabinet.
Electronic data is stored securely using passwords, encryption, and firewalls.
Therapy session data is stored in secure client dossiers or approved billing software.
Only authorized personnel have access.

Unless otherwise required by law, therapy data is deleted 20 years after your last session. Website log data is deleted automatically after statistical use.

6. Data Sharing

Your personal data is never shared with third parties without your explicit consent, except:

To fulfill legal obligations (e.g., court orders)
To fulfill insurance or billing requirements
To protect life or health in emergencies (e.g., child protection law)

Third-party service providers for online tools (e.g., Google Analytics, Mailchimp, Zoom) may process data under strict contractual agreements ensuring GDPR compliance.

7. Cookies and Tracking

We use cookies to improve website functionality, analyze usage, and enhance user experience.
Cookies may include Google Analytics, Facebook/Instagram plugins, or embedded content.
No cookies for marketing or tracking are activated without your consent.
You may disable cookies in your browser, but some website functions may not work.
Further opt-out information: EU Cookie Choices

8. Online Therapy / Teletherapy

If therapy is provided online via Zoom, Teams, or similar:

All sessions use end-to-end encryption where available
No session recordings are made without explicit consent
Data from online sessions is stored securely in client dossiers

9. Your Rights (GDPR)

As a data subject, you have the following rights:

Right of Access – request all personal data held about you
Right to Rectification – correct inaccurate or incomplete data
Right to Erasure (“Right to be Forgotten”) – request deletion of your data if no legal reason exists to retain it
Right to Restrict Processing – limit processing under specific conditions
Right to Data Portability – receive your data in a structured, machine-readable format and transfer it to another provider
Right to Object – object to processing of your data based on personal grounds
Right to Withdraw Consent – revoke consent at any time
Right to Lodge a Complaint – contact the Danish Data Protection Authority (Datatilsynet) at https://www.datatilsynet.dk/

Requests can be made by contacting Solution-Focused Art Therapy at the details above.

10. Communication

Contact via website, email, or phone is for professional communication.
Sensitive information should not be transmitted via unsecured channels unless necessary.

11. Use of Third-Party Services

Google Maps – data may be transmitted to the USA; consent is given by using the map
Google Ads / Conversion Tracking – anonymized cookies for advertising analytics
Facebook / Instagram Plugins – may transmit user data to the USA; consent required
All third-party services are GDPR-compliant and under contractual agreements

12. Copyright

All website content (text, images, videos) is © Solution-Focused Art Therapy unless otherwise stated. Reproduction requires written permission.

13. Changes to Privacy Policy

This privacy policy may be updated at any time. The current version applies when posted on the website.

Contact:
For any questions or concerns about your personal data:
Solution-Focused Art Therapy, Rahel Brügger
Email: solutionfocusedarttherapy@gmail.com
Phone: +4551744199