At joellebujana.com, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how personal data is collected, used, and protected when you contact Joelle Bujana through this website, by email, by WhatsApp, or when you make an agreed payment through Stripe.

1. Data Controller

Joelle Bujana, Licensed Psychologist, specialised in trauma, registered with the Col·legi Oficial de Psicologia de Catalunya.

Professional registration number: 24.646

Professional address:

Centre de Psicología Balmes, C.B.

Balmes 209, 5° 1a, 08006 Barcelona, Spain

In-person sessions by appointment only

Email: joellebujana@gmail.com

Phone / WhatsApp: +34 616 501 900

2. What personal data may be collected

Personal data may be collected when you:

• contact by email

• contact by WhatsApp

• request information about services

• request or arrange an appointment

• make an agreed payment through Stripe

Depending on the case, the data collected may include:

• name

• email address

• phone number

• information you voluntarily include in your message

• billing or payment information processed through Stripe

This website does not use a contact form, does not offer newsletter subscriptions, and does not allow blog comments.

3. Purpose of processing

Your personal data may be processed for the following purposes:

• to respond to enquiries sent by email or WhatsApp

• to manage appointment requests

• to provide psychological services

• to manage agreed payments

• to comply with legal, accounting, tax, and professional obligations

In the context of psychological services, special categories of personal data may be processed, including data concerning health. Such data is necessary for the provision of psychological care and will be handled with the highest level of confidentiality.

4. Legal basis for processing

The legal bases for processing your personal data are:

• your request for information or contact before entering into a professional relationship

• the performance of services requested by you

• compliance with legal obligations

• where applicable, your consent when you voluntarily contact by WhatsApp or email

Where health-related data is processed, the legal basis is the explicit consent of the data subject, in accordance with Article 9 of the General Data Protection Regulation (GDPR).

5. Data recipients and service providers

Personal data is not shared with third parties except where necessary to provide services or comply with legal obligations.

The following service providers may process data on behalf of the data controller:

• Systeme.io, as website platform provider

• WhatsApp, when you contact through that channel

• Stripe, for agreed online payments

Some of these providers may involve international data transfers. Where this happens, appropriate safeguards will apply in accordance with applicable data protection law. Stripe, for example, acts as payment service provider and may process payment-related data.

Some service providers used (such as WhatsApp, Google services, or Stripe) may involve international data transfers outside the European Economic Area. In such cases, appropriate safeguards are applied, including Standard Contractual Clauses approved by the European Commission.

6. Data retention

Personal data will be kept only for as long as necessary for the purpose for which it was collected.

As a general rule:

• enquiry data that does not lead to an appointment or professional relationship may be kept for up to 12 months

• data related to professional services may be kept for the periods required by applicable legal, tax, and healthcare regulations

• In Spain, and particularly in Catalonia, some healthcare documentation may need to be retained for legally established minimum periods.

7. Your rights

You may exercise your rights of:

• access

• rectification

• erasure

• restriction of processing

• objection

• data portability, where applicable

To exercise these rights, you may contact:

joellebujana@gmail.com

You also have the right to lodge a complaint with the Spanish Data Protection Authority (Agencia Española de Protección de Datos) if you believe your data protection rights have been violated.

8. Data of adults only

This website and its services are intended for adults only. Psychological services are not offered to minors through this website.

9. Security

Appropriate technical and organisational measures are implemented to protect personal data, including measures adapted to the sensitivity of health-related information.

10. Changes to this Privacy Policy

This Privacy Policy may be updated from time to time to reflect legal, technical, or operational changes. The latest version will always be available on this website.