General Data Protection Regulation (GDPR) Statement
Privacy Statement about personal information kept, collected, stored, and processed. By Barbara Lerch, version May 2018
The General Data Protection Regulation (GDPR) is concerned with the personal information about you that I collect, store, and share. This statement details my GDPR policy.
Personal information google analytics collects:
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; “Google”). The use includes the “Universal Analytics” operating mode. This facilitates the assignment of data, sessions and interactions across several devices to a pseudonymous user ID and thus the analysis of a user’s activities across devices.
Google Analytics uses “cookies”, which are text files placed on your computer, to allow the website operator to analyze how users use the site. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, if IP anonymisation is activated on this website, Google will reduce your IP address within Member States of the European Union or in other states party to the Agreement on the European Economic Area beforehand. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website and Internet use. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user-identifiers (e.g. User-IDs) or advertising-identifiers are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/gb.html or https://policies.google.com/?hl=en.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the Browser Add-on. Opt-out cookies prevent the future collection of your data when you visit this website. To prevent Universal Analytics from collecting data across several devices, you must opt-out on all systems used. Deactivate Google Analytics.
Personal information I collect:
I collect the following information in order to help me provide EMDR trainings, EMDR supervision and psychological therapy to you, receive clinical supervision and consultation, and to maintain my accounts for billing and invoicing.
Personal details may include: name, gender, date of birth, relationships; parents, siblings, children, occupation, address, telephone numbers, email address, counselling/therapy history, medical conditions, prescribed medication, emotional & psychological issues, employment, education, and social life details.
Sensitive information: physical and mental health details, sexual life, racial or ethnic origin, religious or other beliefs, offences and alleged offences.
How I may Process/Share your personal information
I have regular supervision/consultation with other therapists, (psychologists, psychotherapists, counsellors) for my own professional development and the wellbeing of clients or participants in the trainings of the EMDR Centre London. I will discuss personal details in these consultations. They are also bound by the same rules of confidentiality, code of ethics, and rules of GDPR.
Therapeutic Will: In the case of my death, your name and contact details will be shared with my Therapeutic Executor. This is so you can be contacted if you are still in therapy with me.
Emergencies
If I have reason to believe that you intend to harm another person/organisation (e.g. terrorism), or yourself, the law may require that I inform an authority without seeking your permission. In such a situation, the law may require that I share your personal information without your knowledge. I would always endeavour to discuss this with you in advance if possible or appropriate. It is also the law that a judge can require the release of clinical notes without your permission, and I would be bound by law to release them. Again I would discuss this with you beforehand should this occur.
Storage of Information
Paper: written notes, contact details, personal information, psychometric tests when completed, assessment/history taking notes and brief therapy process notes. All paper files/notes are kept in locked storage.
Smartphone: I do not keep any notes or personal details directly stored in my phone. I access my email account and electronic files through my computer and smartphone and all relevant devices are password protected.
Storage.
I keep electronic files with basic information on psychotherapy sessions securely stored on external hard disks, and locally on my PCs, protected by passwords and two-step authentication.
Online supervision/therapy: For online work I use Skype, which is securely encrypted end-to-end.
Longer-term retention of Information
I am required by law to keep your written notes for at least 7 years after we have completed our work together. I may keep them longer in case you return to a training, to supervision or to therapy in the future so that I have a reference for our work together.
You Have the Following Rights:
To be informed of what information I hold (this document)
To see the information that I hold about you (free of charge for the initial request)
To rectify/correct any inaccurate or incomplete personal information>
To withdraw consent for me to hold your personal information. Note that I would not in such circumstances be able to continue the provision of therapy/supervision
To request that your personal information be erased/deleted/shredded. I can decline if the information is needed for me to practice lawfully & competently, or if there is an adverse reason (such as a complaint or legal reason). In case of any other possible complaints, we have the following policy: We always take complaints seriously and, as such, we have an Independent Complaints Reviewer (ICR) to assess complaints should there be dissatisfaction with the handling or outcome of a complaint.
Continuation of participation in trainings, therapy or supervision with me will be understood as acceptance of these terms.
Barbara Lerch
Follow us for events & news