Privacy & Cookie Policy

HjerteDialog v. Knud Thorbjørn Hansen, CVR 16697796, HjerteDialog Huset, Nygade 9, 9632 Møldrup, tel. 42 60 87 87, kth@hjertedialog.dk.

I am a REG. Psykoterapeut (registered psychotherapist), somatic trauma therapist and development consultant. This policy describes how I process personal data about you when you visit my website, contact me, sign up for my newsletter or take part in courses, workshops and group programmes.

If you are a client in a therapeutic programme with me, you will additionally receive my confidentiality statement and a consent form at the start. These two documents supplement this policy with information about the specific therapeutic programme.

When you visit the website

The website is built and hosted on the Macaly platform, and the site runs on servers in the EU (Frankfurt). The database behind the site is operated by Convex and is located in the EU (Ireland) in an isolated database that only contains data from my website. My domain and my email are with the Danish provider Simply.com.

When you visit the site, the providers automatically register technical information such as IP address, browser type and time in server logs. This is done for operational and security reasons (Article 6(1)(f) of the General Data Protection Regulation - legitimate interest). I do not use the information to identify you.

When you use the contact form

If you write to me via the contact form, your name, email, phone number and message are stored in the website's database (EU, Ireland) and sent to my email. The information is used solely to answer your enquiry (Article 6(1)(b)) and is deleted from the database no later than 6 months after the enquiry has been answered. Please do not write sensitive information about your health in the form - save that for our conversation.

When you call or email me

If you write or call me, I process your name, your email/phone number and what you choose to tell me, so that I can reply to you and possibly agree on a programme (Article 6(1)(b) - preparation of an agreement). If you tell me personal or health-related things in your very first message, I treat them confidentially and solely for the purpose of assessing whether and how I can help you.

When you sign up for the newsletter

I store your name and email address in the newsletter system Lumant. The legal basis is your consent (Article 6(1)(a) and Section 10 of the Danish Marketing Practices Act). You can unsubscribe at any time via the link in the newsletter or by writing to me - and you will then be removed from the list.

When you take part in courses, workshops and group programmes

I process name, contact details and payment information in order to carry out the agreement and invoice (Article 6(1)(b) and (c)). Anything you share within the group is covered by my duty of confidentiality and by the confidentiality the participants agree among themselves.

Bookkeeping

Name, address and invoice details are kept in the accounting system Dinero, as required by the Danish Bookkeeping Act (Article 6(1)(c)).

I do not pass on your information to others unless the law obliges me to, or you have explicitly asked for it. I use the following data processors, who process information on my behalf and according to my instructions:

Macaly - website platform and hosting. Data is stored in the EU (Frankfurt).

Convex, Inc. - sub-processor for Macaly; operates the database behind the site. Convex is an American company, but my data is stored in their EU region (Ireland).

Simply.com (Denmark) - domain and email

Lumant (Denmark) - newsletter

Dinero (Denmark) - accounting and invoicing

Apple iCloud - secure storage of my working files (client records are stored here in anonymised form, see the confidentiality statement)

Google - the map on my contact page is embedded from Google Maps. When the map is shown, your browser sends your IP address to Google (see section 7 on cookies).

The website's data, newsletter and accounting are within the EU. If transfers or access take place outside the EU/EEA, it only happens on a valid basis under the GDPR, for example an adequacy decision or the European Commission's standard contractual clauses.

Enquiries via the contact form, email or telephone that do not lead to a programme: deleted no later than 6 months after the last contact - both in the website's database and in my email.

Newsletter: until you unsubscribe.

Course and participant lists: 1 year after the event.

Bookkeeping material: 5 years from the end of the financial year it concerns (the Danish Bookkeeping Act).

Server logs at the hosting provider: according to the provider's standard period (typically at most 30 days).

Client records: see the confidentiality statement.

The website's database is isolated from other customers' and located in the EU. All systems are protected with personal passwords and two-factor login where possible. The computer is encrypted. Client records are kept under a code, so that name and address are not linked to the content of the record. I do not communicate about personal matters via social media.

If a breach must be reported, I report it to the Danish Data Protection Agency without undue delay and, if possible, within 72 hours of becoming aware of the breach. If the breach involves a high risk to you, you will also be notified.

You have the right to:

gain insight into which information I hold about you

have incorrect information corrected

have information deleted, unless I am obliged to keep it

have the processing restricted and to object to it

receive your information in a commonly readable format (data portability)

withdraw a consent at any time - without affecting the lawfulness of the processing carried out up to that point

Write to kth@hjertedialog.dk and I will reply as quickly as possible and no later than within one month.

If you wish to complain, I would prefer to hear it from you first. You can always complain to the Danish Data Protection Agency (Datatilsynet), Carl Jacobsens Vej 35, 2500 Valby, tel. 33 19 32 00, dt@datatilsynet.dk, www.datatilsynet.dk.

A cookie is a small text file stored in your browser when you visit a website. Cookies may be necessary for the site to work, or be used for statistics and marketing.

Cookies on hjertedialog.dk

The website only uses technically necessary cookies, which ensure that the site is displayed correctly and remember your choices. Necessary cookies do not require consent.

I do not use statistics, marketing or tracking cookies, and I do not share any information about your visit with social media.

Google Maps on the contact page

The map on my contact page is click-to-load: the map is only shown when you click the button "Show map on the page". Google therefore sets no cookies and does not receive your IP address until you yourself choose to load the map. You can always find your way without the map: the address is written in plain text on the page, and there is a direct link to Google Maps.

Embedded videos and newsletter sign-up

When the website includes embedded videos (for example from YouTube or Vimeo), the video provider may set cookies in your browser when you play the video. The videos are therefore only loaded when you actively click on them and accept this. Newsletter sign-up happens via a form from Lumant, which only stores the information you enter yourself.

How you control cookies

You can always delete or block cookies in your browser's settings. If you block necessary cookies, parts of the site may stop working.

I update this policy when my practice or the legislation changes. The current version is always available at hjertedialog.dk with the date at the bottom of the page.

HjerteDialog v. Knud Thorbjørn Hansen CVR 16697796 HjerteDialog Huset, Nygade 9, DK-9632 Møldrup Tel. 42 60 87 87 · kth@hjertedialog.dk · www.hjertedialog.dk Foreningen af Danske Psykoterapeuter REG. Psykoterapeut - Member no. 657