Personal data processing principles

Hedepy s.r.o., IČ: 09206281, DIČ: CZ09206281, with registered office at Sestupná 105/8, 160 00 Praha 6, represented by Roman Zámečník and Lukáš Krčil – Managing Directors, Bank Account No.: 2801819429/2010, e-mail: podpora@hedepy.cz, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 332559 (“Hedepy”) processes your data below for the purpose of providing therapeutic services and ensuring the functioning of the website. We value your trust and process all the data provided confidentially.

What data do we process about you as the Data Controller?

• Your contact details: name and surname, telephone and e-mail;
• Information on how to pay;
• Information about feedback and therapist ratings, if you provide it;
• Information from the booking system – session dates, cancellations, etc.
• Information about your visit to our site in accordance with our Cookie Policy.

For the elimination of doubt, we would like to point out that (a) Hedepy does not have access to video conferences with your therapist, nor does it receive any information about you from your therapist, only confirmation that the session did/did not take place (therefore, only your therapist is the controller of the personal data communicated during the session); and (b) Hedepy does not have access to your payment card information (the controller is Commgate Payments a. s.) – we only receive information if the payment was/was not made).

Why do we process them?

We process your personal data for the purpose of arranging meetings with the therapist, payment for his/her services and surveying the quality of the sessions, unless you have declined the opportunity to be contacted when registering or have subsequently withdrawn your consent to provide feedback.

How long will we process your personal data?

We will only process data about you in the booking system for as long as you are our client. We will automatically delete your personal data one year after the last session. Of course, we will delete them immediately at any time upon request. According to the Accounting Act, we have to process information about past payments for a period of 10 years. After that it will be deleted.

Sensitive data

As we have already stated above, our company, as the controller, does not process any of your sensitive data, i.e. information about your health or recommended sessions or treatment. The relationship between you and your therapist is a confidential relationship between you and any sensitive information is/may only be processed by your therapist who is bound by the Code of the European Association of Psychotherapists.

In the event that you and your therapist choose to record the session, our company does not and will not have access to the recording.

Who do we pass your personal data to?

We use the services of Twilio Inc. to provide a secure connection with your therapist. Our company has chosen the American company for its high security systems and its high standard when it comes to data protection, fully compliant with GDPR. With Twilio Inc. we have concluded the so-called standard contractual clauses, which are recommended by the European Commission as completely sufficient to ensure the same protection for personal data as provided by the European Union countries.

Furthermore, payment for individual sessions is organized by Comgate Payments Inc., which is the controller of your personal data and only passes on to our company the information whether the payment was/was not made in order. It does not pass on any of your payment-related data to us.

We recommend that you familiarize yourself with the privacy policy before you join.

If you have received a session voucher, we would like to assure you that we do not pass on any of your personal data to the voucher provider, only aggregated data on the total number of sessions per voucher and the total face value of the vouchers redeemed.

How do we protect your personal data?

Our company emphasizes the confidentiality of consultations and the security of your data. We have adopted a high standard of security requirements for systems and collaborators. The main ones include:

• High standards for therapists and their professionalism, including requirements to keep your information secure;
• Technical measures to secure the booking system and video conferencing;
• Minimisation of data processed and people with access to the data;
• Confidentiality of all persons who have access to the booking system and/or deal with session facilitation.

What rights do you have?

1. First of all, you have the right to information: you can ask us if and, where applicable, what personal data we process about you and anything else relating to your personal data not already answered above.
2. Right to rectification/completion: if your email, phone or name has changed, please contact us at the contact details below and we will be happy to rectify or complete your contact details.
3. Right to object to processing: if you believe that we are processing your personal data in violation of the protection of your personal data and the statutory data protection conditions, you may request an explanation, request that we remedy the situation, in particular, you may request the blocking of your personal data or the destruction of your personal data. 
4. Right to transfer: you can ask us and we will send you an electronic extract of your personal data.
5. Right to erasure: You can request the deletion of your personal data at any time. We will be happy to comply unless there are legal grounds for further processing, e.g. payment information due to the Accountancy Act.
6. Right to complain:  If you believe that, despite our best efforts, we are in breach of data protection legislation, you can contact the Office for Personal Data Protection, www.uoou.cz, phone +420 234 665 111, Pplk. Sochora 27, Prague 7, Postal Code 170 00.

And where can I exercise these rights?

We are happy to be in contact with you and we try to deal with your suggestions, requests or complaints as quickly as possible.

You can contact us at podpora@hedepy.cz, at our address listed in the header. We are also available by phone at 772 123 001 and online chat at https://hedepy.cz/ on weekdays from 9am to 5pm.