Our Privacy Policy explains our principles when it comes to the collection, processing, and storage of your information. The Cookie Policy specifically explains how we deploy cookies, as well as the options you have to control them.
What this Privacy Policy covers
This Privacy Policy gives you information about how I, Karin Sieger, treat personal information I receive about you from the following sources:
1. contacts and enquiries submitted through my website (https://KarinSieger.com) (” Website “);
2. telephone calls or email;
3. sign ups to my online newsletter via my Website.
Please read the following sections carefully to understand how your personal information will be used and handled by me.
I collect and use your data in accordance with current data protection law (which includes, from 25 May 2018, the General Data Protect ion Regulation (Regulation (EU) 2016/679)) (” data protection law “).
Who I am
The data controller with control of your personal information is Karin Sieger, “The Bridge Workspace, 7 (b) Parkshot, Richmond TW9 2RD UK”.
The Data Protection Officer is Karin Sieger of “The Bridge Workspace, 7 (b) Parkshot, Richmond TW9 2RD UK”
My Website may, from time to time, contain links to and from other websites. Please note that those websites will have their own privacy policies and I do not accept any responsibility or liability for such policies / websites. Please check these other policies before submitting any personal information to those websites.
Intermediaries
If you are an intermediary acting for an individual and you provide that individual’s personal information to me via my website, over the phone or by other means, then you warrant and confirm that you are supplying their information in accordance with the data protection law and that you have first drawn their attention to this Privacy Policy. Please refer to your Intermediary Terms of Business for further information concerning your data protection obligations.
If you are an individual and a third party authorised to supply your personal information to me in accordance with data protection law, then this Privacy Policy refers to that third party as an ” authorised intermediary “.
For the avoidance of doubt, the terms of this Privacy Policy concern the relationship between me and you, not the relationship between your authorised intermediary and you. If you have any questions about how your authorised intermediary processes your personal information, please speak to them directly.
Information: Collection, Use and Grounds for Processing / Storage
I collect, process and store information about you from a variety of sources. These are summarised below:
i. Information you give to me:
This includes information about yourself which you provide to me by paper application form, enquiry letter, email, phone call, face to face or online meetings or by contacting me through the ‘Book an Appointment’ section of my website or sign up forms to my newsletter.
The information you give me may include (but is not limited to) your name, address, email address, phone number, date of birth, gender and personal descriptions.
Information you give me during appointments might also include more sensitive personal information, which helps determine whether I can offer suitable support for you.
I process / store this information to:
(a) supply you with details of services you have contacted me about;
(b) check your eligibility and suitability for services I offer and to notify you of what services I can offer you.
(c) manage your contact with me (including session bookings, payment handling and any other relevant communication relating to any service/s you have contacted me about) and to respond to you when you contact me;
(d) notify you of any changes to services, procedures and terms (including material changes to this Privacy Policy) from time to time;
(e) comply with record keeping and regulatory compliance obligations.
I process / store this information on the following grounds:
(i) because the processing is necessary for me to provide you with a service you have requested;
(ii) because, in certain cases, the processing is necessary for me to comply with me legal obligations, for example where regulations oblige me to keep records of my customers’ details or the details supplied by potential customers;
(iii) because, in certain circumstances, I may have a legitimate business interest in doing so and that interest is not overridden by your interests or fundamental rights and freedoms (for example because you can opt – out of such materials at any time);
(iv) additionally, in the case of special categories of information where there is a dispute or potential for a dispute between us, because the processing is necessary for the establishment, exercise or defence of a legal claim.
ii. Information provided by third parties:
This relates to circumstances where a third party sends me information about you. Examples of when this might occur include (but are not limited to) where:
1. you consent to your employer, relative, doctor or another medical professional providing me with your medical records or information from them;
2. your authorised intermediary contacts me on your behalf and provides me with information about you as part of any enquiry regards services I am able to offer;
The information I may receive about you from third parties may include your name, address, email address, phone number, date of birth, gender and personal description.
I may also receive more sensitive personal information about you. This could include information about your health which I need to consider when determining whether I can offer suitable services for you.
I process this information to:
(a) supply you with details of services you have contacted me about;
(b) check your eligibility and suitability for services I offer and to notify you of what services I can offer you.
(c) manage your contact with me (including session bookings, payment handling and any other relevant communication relating to any service/s you have contacted me about) and to respond to you when you contact me;
(d) notify you of any changes to services, procedures and terms (including material changes to this Privacy Policy) from time to time;
(e) comply with record keeping and regulatory compliance obligations.
I process this information on the following grounds:
(i) because the processing is necessary for me to provide you with service you have requested;
(ii) because, in certain cases, the processing is necessary for me to comply with me legal obligations, for example where regulations oblige me to keep records of my customers’ details or the details supplied by potential customers;
(iii) because, in certain circumstances, I may have a legitimate business interest in doing so and that interest is not overridden by your interests or fundamental rights and freedoms (for example because you can opt – out of such materials at any time);
(iv) additionally, in the case of special categories of information where there is a dispute or potential for a dispute between us, because the processing is necessary for the establishment, exercise or defence of a legal claim.
iii. Information I collect about you:
The information I may receive directly from you or about you from third parties may include your name, address, email address, phone number, date of birth, gender and personal description. Where you attend an initial therapy session with me in person, online or via any other media the information you choose to provide me with is determined by you, and you can decline to such information provision at any time. Depending on the nature of the information you decline to provide, this may impact the service and assistance I can provide you with.
I process this information to:
(a) to allow me to administer any service you agree to receive from me;
(b) any notes I take at any meetings are taken by hand only and not transferred to any online storage;
(c) any notes I take are not identifiable;
(d) any notes I take I stored safely with no excess by any other parties;
(e) any online, email, or telephone communications are kept safely and are not accessible by other parties;
How long we keep your Information for
I only keep your information for so long as it is reasonably necessary. Generally speaking, I retain your information for the following periods of time:
(a) if you (or a third party acting on your behalf) makes an enquiry but you do not proceed with obtaining a service from me, 2 years from the date of the enquiry;
(b) if you (or a third party acting on your behalf) makes an enquiry and I advise you that I do not offer suitable services or support for you, 2 years following the date the enquiry;
(c) if you cancelled any (paid) services you have agreed to receive from me (by whatever means), 6 years after the date of cancellation; and
(d) where any paid services (eg therapy, counselling, workshops, courses etc) you receive reach their agreed end, 6 years after that date.
How I share your Information
Your personal information is not shared with anyone without your knowledge and consent, except where I am required to do so to comply with the law, to protect my rights or to properly administer the service/s you agree to receive from me.
Your Rights
Under data protection law you have the following rights:
(a) the right to be informed as to what we do with your information. This includes, but is not limited to, the right to know what information we gather, process and store, what we do with it, who we share it with and how long we keep it for;
(b) where I am keeping your information on the grounds of your consent, you have the right to withdraw that consent at any time. Depending on the circumstances on this decision, this may mean changes or the ending of any service/s you may be receiving from me.
(i) any payments due under the terms of agreed may still need to be paid and you will not usually be entitled to a refund of monies already paid; and
(c) the right to access a copy of your information which I hold. This is called a ‘subject access request’. Additional details on how to exercise this right are set out in the ‘Access to Information’ section, below;
(d) in certain circumstances, the rights to request that I erase, rectify, cease to store and/or delete your information where the original purpose for which the data was collected has expired;
(e) the right to prevent me processing your information for direct marketing purposes. I will usually inform you (before collecting your information) if I intend to use your information for such purposes or if I intend to disclose your information to any third party for such purposes. You can exercise your right to prevent such processing by checking certain boxes on the forms I use to collect your information (eg newsletter sign up up forms), clicking the unsubscribe link in marketing emails I send you, opting out of marketing communications by changing your account details through my Website (where applicable) or by contacting me using the details set out in the ‘Book an Appointment’ section, below;
(f) the right, in certain circumstances, to have your information rectified, blocked, erased or destroyed if it is inaccurate; and
You also have the general right to complain to me (in the first instance) and to the Information Commissioner’s Office (if you are not satisfied by our response) if you have any concerns about how I hold and process your information. My contact details are set out at the end of the Privacy Policy. The Information Commissioner’s Office website is www.ico.org.uk.
For further information on your rights under data protection law and how to exercise them, you can contact Citizens Advice Bureau (www.citizensadvice.org.uk) or the Information Commissioner’s Office (www.ico.org.uk).
Access to Information
Under data protection law you can exercise your right of access by making a written request to receive copies of some of the information I hold on you. You must send me proof of your identity, or proof of authority if making the request on behalf of someone else, before I can supply the information to you.
From 25 May 2018 I will be allowed to charge you for my reasonable administrative costs in collating and providing you with details of the information I hold about you if your request is clearly unfounded or excessive.
Access to Medical Reports Act 1988 Consent
Please note that if you give consent for me to request a copy of your medical records in accordance with the Access to Medical Reports Act 1988, that consent is separate to the consent you may give me to process your information under data protection law.
Changes to this Privacy Policy
Any changes made to this Privacy Policy in the future will be posted on the Website and, where appropriate, notified to you by email. It is recommended that you visit this page from time to time to review any changes. This Privacy Policy was last updated in April 2018.
Contact
For questions, comments and requests regarding this Privacy Policy please contact us by email to KarinSieger (at) KarinSieger.com or by post to Karin Sieger, “The Bridge Workspace, 7 (b) Parkshot, Richmond TW9 2RD UK”.
Be the first to comment