Feeling safe also means knowing what happens to the information you share. This page explains how your personal data is handled, protected and kept confidential throughout your contact with my practice.

​

Who is responsible for your personal data?

Greta Eller is an independent psychologist providing individual and couples therapy in private practice in the Netherlands. For the purposes of the General Data Protection Regulation (GDPR / AVG), I am responsible for the processing of personal data relating to my practice.

​

Practice: Greta Eller
AGB code healthcare provider: 94121388
AGB code practice: 94070065
Website: gretaeller.com

​

If you have any questions about how your personal information is handled, you can contact me using the contact details provided on this website.

​

What personal information do I collect?

Depending on how you interact with my practice, I may process information such as:

• your name and contact details;

• information you provide when contacting me or booking an appointment;

• information necessary to manage your appointments;

• billing and payment information;

• information relevant to your therapy;

• therapy notes and records;

• correspondence between you and the practice; and

• technical information generated when you use this website, such as your IP address, browser information and cookie preferences.
   

Information relating to your psychological or physical health is considered sensitive personal data under the GDPR and is handled with particular care.

I only collect information that is relevant and necessary for providing my services, administering my practice or meeting applicable professional and legal obligations.

​

Why do I process your information?

Your personal information may be processed in order to:

• respond to enquiries;

• arrange consultations and therapy sessions;

• provide psychological services;

• maintain appropriate professional records;

• communicate with you about appointments and your therapy;

• process payments and invoices;

• meet professional, legal and regulatory obligations; and

• maintain the security and proper functioning of my practice and website.

 

Information you share as part of therapy is not used for advertising or marketing purposes.

​

Therapy records and confidentiality

During therapy, you may share information about your mental health, relationships, personal history and other private aspects of your life. This information is treated confidentially and handled in accordance with applicable privacy, professional and legal requirements.

I aim to record only information that is relevant to our therapeutic work and take appropriate measures to protect your information against unauthorised access, loss, disclosure or misuse.

I do not disclose information about you or your therapy to third parties without an appropriate legal basis. Where your consent is required, information will only be shared after obtaining that consent.

There may be exceptional circumstances in which information can or must be disclosed without consent, for example where disclosure is required by law or where there is a serious and immediate concern regarding safety.

 

Couples therapy

In couples therapy, personal information relating to both partners may be processed.

Information shared during an individual conversation within couples therapy will not automatically be disclosed to the other partner without your knowledge. However, couples therapy cannot function effectively if I am asked to keep significant information secret that directly affects the relationship or therapeutic process.

If this situation arises, we will discuss how the information can appropriately be addressed within the therapy. The approach to confidentiality and individual conversations will be discussed with both partners at the beginning of couples therapy.

 

Service providers and sharing of personal data

I use trusted external service providers to support the operation of my practice, including services for practice management and clinical records, appointment scheduling, payment processing, email communication and website hosting.

These providers may process limited personal information where this is necessary to provide their services. Where required, appropriate data-processing agreements and safeguards are in place.

I do not sell your personal information or share it with third parties for their own marketing purposes.

Personal information may also be disclosed where required by law or where there is another valid legal basis for doing so.

 

How long is personal information kept?

Personal information is kept only for as long as necessary or as required by applicable legal and professional obligations.

Different types of information may be subject to different retention periods. Clinical records may be subject to statutory retention requirements, while financial and administrative records may need to be retained in accordance with Dutch tax and accounting legislation.

When information is no longer required, it will be securely deleted or anonymised where appropriate.

 

Website and cookies

This website may use cookies and similar technologies that are necessary for the website to function properly. Other cookies may be used for purposes such as analytics.

Where consent is required, non-essential cookies will only be used after you have made your choice through the website’s cookie settings.

You can review or change your cookie preferences through the cookie settings available on this website.

 

International data transfers

Some service providers used in connection with the practice may operate internationally. This means that, in certain circumstances, personal information may be processed outside the European Economic Area.

Where this occurs and additional protection is required under the GDPR, appropriate safeguards are used.

 

Your privacy rights

Under the GDPR, depending on the circumstances, you may have the right to:

• access the personal information held about you;

• request correction of inaccurate or incomplete information;

• request deletion of your personal information where applicable;

• request restriction of certain processing;

• object to certain processing;

• request transfer of your information where the right to data portability applies; and

• withdraw consent where processing is based on your consent.

Some of these rights may be limited where information must be retained because of legal or professional obligations.

If you would like to exercise any of these rights, please contact me using the contact details provided on this website.

You also have the right to submit a complaint to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe that your personal information has not been handled appropriately.

 

Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes to my practice, the services I use or applicable legal requirements.

The most recent version will always be available on this website, with the date of the latest update shown at the top of the page.

 

Contact

If you have questions about this Privacy Policy, how your personal information is handled or would like to exercise one of your privacy rights, please contact me using the contact details provided on this website.

​

​

​Last updated: October 2026