Privacy Statement
1. The person of the data controller
I, the undersigned Gábor Kuszing psychologist as controller consider the following privacy statement binding.
I declare that all the data processing related to my work meets the requirements of this statement, the effective national regulations and the legal acts of the European Union.
The following link contains the privacy statement of Gábor Kuszing. I reserve the right to change this statement of which I let my clients know in due time.
If you have a question regarding this privacy statement, please use the link below to write me.
2 The data of the controller
You can contact me, Gábor Kuszing on the contact page.
3 The range of personal data processed
3.1. Data provided on the psychologistonline.info website
Name, subject, e-mail address, within your message: phone number; your problem.
3.2. Data I access during my work as a psychologist
My client’s problem, birth date, residence. And usually my clients personality, behaviour, personal relationships (friends, relatives, family members), psychological state and processes, plans, interests, work, school, sex, bodily illnesses, bodily or mental health history, earlier diagnoses, world view, religious beliefs, race, sexual interests, sexual identity and other data necessary for my work as a psychologist.
4. The use of data, the legal basis for their use and their planned period of data storage
The following table contains the use of various data types, the legal basis for their use and the planned period of storage.
Data processed
Use
Legal basis
Period of storage
Client’s name
To identify and talk to my client
Personal consent
Till the end of my practice as psychologist
Subject of message from website
To identify the given message
Personal consent
Till the end of my practice as psychologist
E-mail address
To keep in touch
Personal consent
Till the end of my practice as psychologist
Phone number
To keep in touch
Personal consent
Till the end of my practice as psychologist
Problem of my client as given in initial message
I use it to determine the type of service (individual, family session, etc.) I provide and if I am competent in the given problem.
Personal consent
Till the end of my practice as psychologist
Home address
To assess the social environment of the client and to write letters if other methods of communication fail. And for drawing up invoices.
Personal consent
Till the end of my practice as psychologist
Data accessed through my work as a psychologist
Consultation with the client and quality control
Personal consent
Till the end of my practice as psychologist
Voice recording of a psychological session
Psychologist opinion, child protection alert, quality control
Personal consent, legal obligation (Gyvt – Hungarian act on child protection)
Till the end of producing the final version of the opinion or child protection alert or the end of the supervision (quality control) process
Name, address, services delivered (e.g. consultation)
Invoices drawn up after sessions contain these data.
Personal consent, tax and accountancy regulations
Till the end of the 8th year following the end of operations of my business
I store the above data until the end of my psychologist practice so that I can refresh my memories of clients who restart working with me after a break of several years and so we do not have to start work from the beginning. In addition, I use the contact details (e-mail address, telephone, address of residence) to get in touch with clients in case we restart work.
4.1. Voice recording
I do not make voice recordings of sessions by default. In case of a psychologist opinion I usually record the session. This may also be necessary for quality control and supervision in some cases. I always ask for express permission to record a session.
4.2. Children
I only process the above data on children (under the age of 18) with consent from their parent or custodian. I inform children verbally if a parent, custodian or other person may access their data such as in case of a psychologist opinion.
4.3. Invoicing
Your name and address as well as the services rendered (typically consultation) will appear on the invoice I draw up following sessions. This data processing is necessary to meet the legal requirements of Hungarian tax law. In such cases these data are stored for a minimum of 8 years. I draw up the invoices using the invoicing software of NAV (National Tax and Customs Office, Hungary), the copies of the invoices are stored electronically on my computer and in the tax authority’s system. Although I use the software of the tax authority, they do not have automatic access to these data, only in case of a tax audit.
5. The aim, method and legal basis for processing
The data processing related to my business as a psychologist is based on consent and legal regulations. In the case of voluntary consent, those involved may revoke their consent at any time.
In some cases (e.g. police interrogation, court hearing, child protection alert if a child is being endangered) legal regulations prescribe the processing, storage or transfer of a range of the personal data provided.
Please be informed that if you are not providing your own personal data, it is your responsibility to acquire the consent of the person invlved. For instance if you book an appointment for someone else or for a couples therapy session, and provide the person’s name, contact details and personal problems, you must obtain his or her consent.
My data processing is in accordance with the effective regulations on data protection, in particular with:
6. The physical place of data storage
6.1. Data provided on the website or in e-mails
The data provided on the contact page of psychologistonline.info is automatically forwarded to my e-mail address. During this, they are stored on the servers of Godaddy.com (for their privacy statement see: https://www.godaddy.com/en-ph/legal/agreements/privacy-policy) Netstudio Rendszerház Kft. (https://www.netstudio.hu/) and global e-mail servers. The captcha services are from Google, so their privacy statement also applies (https://policies.google.com/privacy). After downloading, the messages are deleted from Netstudio’s servers.
Following this, the messages are stored on my computer. My computer has an antivirus and a firewall. In case of the loss of my computer, the computer is protected by a password.
6.2. Consultation sessions
I may take notes during the psychology consultation sessions. These are stored in my office. I use keywords in taking notes, which are difficult to understand for others and I use abbreviations for socially stigmatizing information.
6.3. Invoicing
Your name and address as well as the services rendered (typically consultation) will appear on the invoice I draw up following sessions. The copies of the invoices are stored electronically on my computer and in the tax authority’s system.
7. Data transfer, data processing, the range of those accessing data
7.1. Electronic mailing, website
Data provided through psychologistonline.info or my e-mail are stored on the servers of Godaddy.com and Netstudio Rendszerfejlesztő Kft. until downloaded. The employees of Netstudio Rendszerfejlesztő Kft. do not read or examine the contents of these messages.
7.2. Disclosure as requested by law or the protection of others
I shall disclose data of a client If obliged by a legal regulation to do so. Among other cases I am obliged to draw up a child protection alert under the Act on child protection if a child is endangered, and in certain cases I must comply with police or court orders to testify. In addition I must disclose data in the absence of my client’s consent if others’ human rights are in danger, as provided in point (1)f Article 6 of the GDPR. This disclosure shall be to the extent necessary to fulfil the legal requirement or to protect the human right.
7.3. Psychological examination, opinion
In case of a psychological examination, I draw up an opinion based on the session with the client, which I disclose based on the client’s request (to lawyers, court, etc.).
In case of an opinion on a minor, when the parent requests the opinion but the opinion is based on data acquired from the child, before the examination I inform the child of the fact that I am to draw up an opinion, of the objective of the opinion and that at least the parent but probably other adults will find put about the contents of the opinion. This information is always in a form appropriate to the child’s age and I discuss the possible consequences of the examination with the child before it starts.
7.5. Supervision
I attend regular supervisions by a senior colleague (Péter Szil, www.szil.info) for the purposes of quality control and continuous training. This is necessary for me to get help if I encounter a difficulty in my work as a psychologist and in general to control and improve the quality of my work.
The supervision is in group format with other helping professionals. These people have a legal obligation to keep any information I may mention about clients private. I only provide information of my clients necessary for the purposes of quality control and training, thus it is usually anonymous. Often we do not even concentrate on the particulars of the case but the dilemmas I have in relation to a case.
7.6. Psychological processes of partners, family members, friends
If your partner, friend, family member, acquaintance, member of a community you are in is a client of mine, a helping professional I know, or is in some way connected to me (e.g. goes to the same therapy group as I do), I may transfer data to the person or the helping professional or may receive data from them. This is very useful for the psychological work because in individual sessions we can largely talk about what the client already has some knowledge of. Consultation with partners, friends, family members, acquaintances or their helpers brings the viewpoint of the outsider into our work, which may raise a new aspect or even a new topic. I am careful in such consultations so that the information transferred is not empty gossip. You may request that I do not share information about something.
7.7. Professional cooperation
From time to time I am in touch with other professionals working with my client, their partner, friend, family member, acquaintance. Any information transfer in such case is limited to the extent necessary for the professional purpose and the other professional must also observe the client's privacy.
7.8. Accounting
Your name and address as well as the services rendered will appear on invoices related to our sessions and an accountant or the tax authority may have access to these data. The accountant is bound to keep your privacy.
8. The rights and access to justice of data subjects
The data subject may request information about the handling of their data and may request the rectification of their data and, with the exception of data that I am legally obliged to keep, the erasure of data, withdrawal of consent and to object using the my contact details.
8.1 Right to information
I have taken the necessary steps to provide all information of Articles 13 and 14 of GDPR and all instances of information under sections 15 to 22 of Article 34 in a concise, clear, comprehensible and easily accessible form, phrased in a clear and plain language. If you don’t understand something in this statement, please contact me in person, on the phone or in e-mail..
8.2 The right of the data subject to access
The data subject (usually you) has a right to be informed from the controller (me) whether the data subject’s personal data are being processed and if so, the subject is entitled to access those data and the following information: the aims of the processing, the categories of data processed, those recipients or categories of recipients that have received or will receive the personal data including in particular recipients in third countries and international organizations, the planned time frame of the data retention, the right to rectification, erasure, objection or limitation of data processing, the right to address a complaint to the authority responsible for oversight, the information on data sources, , the fact of automatized decision taking including profiling and information on the logic applied and the significance of such data processing for the data subject and the consequences to be expected. The controller will provide the information within one month of the request the latest.
8.3 Right of rectification
The data subject may request the rectification of inaccurate data and the completion of incomplete data.
8.4 Right to erasure
The data subject is entitled to Gábor Kuszing erasing his or her personal data without undue delay :
The erasure of data may not be initiated if the data processing is necessary to exercise the right to freedom of opinion and information; to fulfil a legal obligation under Hungarian law or the law of the European Union pertaining to the controller; for reasons of public interest or a task under the public authority vested with the controller, or to achieve an archiving, scientific or historical research goal of public interest; or to claim, exercise or protect a legal right.
8.5 The right to the limitation of data processing
At the request of the data subject I will limit data processing if one of the following requirements are met:
If the data processing is limited, with the exception of storage, the personal data may only be processed with consent from the data subject or to claim, exercise or protect a legal right, or in order to protect the rights of a natural or legal person, or out of the public interest of a member state or the Union.
8.6. The right to portability
The data subject has a right to obtain the personal data he or she provided to the data controller in a widely used form that is possible to read by machine and to further these data to another controller.
8.7. Right to objection
The data subject has the right to object to the processing of his or her personal data for personal reasons.
8.8. Automated decision taking and profiling.
I do not do these.
8.9. Right to withdrawal
You may withdraw your consent any time.
8.10. Right to turn to a court
The data subject may turn to a court if his or her rights are violated.
8.11. Procedure before the data protection agency
You may contact the Nemzeti Adatvédelmi és Információszabadság Hatóság with your complaint
Name: Nemzeti Adatvédelmi és Információszabadság Hatóság
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Mailing address: 1530 Budapest, Pf.: 5.
Telefon: 0613911400
Fax: 0613911410
E-mail: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu