Client Privacy Policy

1. I am the data controller

I am the data controller for the processing of personal data that I receive about my clients.

My contact details are:

Village Therapy

Ariel Andersen

Kompagnistræde 16, 2.

T: 30136011

info@villagetherapy.dk

CVR: 3874721

2. I take care of your personal data

Your personal data is processed in accordance with the requirements of data protection legislation.

It is essential for me to take good care of my clients’ information. Therefore, I have implemented technical and organisational measures to ensure that I can fulfil my data protection responsibilities.

To secure data, I update my systems, and keep up to date with IT developments so that I can protect myself against vulnerable IT systems and current IT threats.

I only process information that is necessary for me to perform my work as a psychotherapist and for which I have legal authority. I have processes in place to continuously delete information that no longer meets these conditions (data minimisation).

As an additional risk mitigating initiative, I use encryption when processing sensitive information, including health information.

3. Personal data: what, why, and for how long

3.1 For inquiries

Below you can see how I process your information if you contact me with an inquiry.

What information

I store your contact information. Typically, this is the name, email address, and/or phone number that you have provided in your inquiry.

Purpose (legal basis)

I store your contact information so that I can respond to your inquiry. My legal basis is based on a legitimate interest (General Data Protection Regulation, Article 6(1)(f)

How long

I store your contact information for a maximum of 6 months after I have assessed that your inquiry has been answered satisfactorily.

3.2 If you are undergoing treatment with me

Below you can see how I process your information if you are undergoing therapy with me.

What information

I store your contact information. Typically, this includes your name, email address, and/or phone number. In addition, I keep a journal where I store excerpts of what we talk about in therapy, including health information.

Purpose (legal basis)

I process this contact information in connection with my accounting, including invoicing, and so that I can contact you, e.g. in the event that an appointment needs to be rescheduled. My legal basis for this is my contractual obligation (Article 6(1)(b) of the General Data Protection Regulation).

In addition, I keep records in order to provide the best possible therapy and to comply with my legal obligations to the Danish Business Authority and the Danish Tax Agency. My legal basis for this is that I have received your explicit consent (Article 6(1)(a) of the General Data Protection Regulation).

You have the right to withdraw your consent at any time. In that case, I will stop processing your personal data going forward. Information that was processed while the consent was valid will be stored so that I can comply with my legal obligations (Article 6(1)(c) of the General Data Protection Regulation).

How long

Accounting information that I am required to store in accordance with the instructions of the Danish Business Authority and the Danish Tax Agency will be stored for 6.5 years. Other information will be stored for a maximum of 1 year after our process has been completed.

4. My collaboration with third parties

Your personal data will not be sold to third parties, nor will it be transferred to third countries.

My website acts as my data processor. All personal data that you provide on the website will be stored in my web host’s data centres.

I use external companies as suppliers for accounting software, booking systems, etc. These external suppliers are data processors and, in certain cases, process personal data in connection with their provision of services to my company.

The data processors only process personal data according to my instructions and in accordance with the legal requirements for data processors.

I have entered into agreements with my data processors, which is my assurance that they comply with the applicable rules on the protection of your personal data.

5. Your rights

Under the General Data Protection Regulation, you have a number of rights in relation to the processing of your information.

You have the right to: Information. Access. Rectification. Erasure. Restriction of processing. Data portability. Objection. Not to be subject to an automated decision.

You can read more about the various rights on the Danish Data Protection Agency’s website here.

If you wish to exercise your rights, please contact me as the data controller. See contact details below.

6. If you wish to complain to the Danish Data Protection Agency

You have the right to lodge a complaint with the Danish Data Protection Agency if you are dissatisfied with the way your personal data is processed. You can find the Danish Data Protection Agency’s complaint guidelines here.

Last updated 24-10-2025