Privacy Policy
Last updated: 26 September 2026
1. Data Controller
Mag. András Acél
Clinical Psychologist and Psychotherapist
Skodagasse 21/14, 1080 Vienna, Austria
Email: praxisacel@gmail.com
2. Data Protection and Confidentiality
I process personal data as necessary to operate this website, respond to enquiries, organise appointments, provide counselling and handle billing. As a clinical psychologist and psychotherapist, I am bound by professional confidentiality.
Processing is based primarily on taking steps prior to entering into a contract and performing that contract under Article 6(1)(b) GDPR, and on complying with legal obligations under Article 6(1)(c) GDPR. Where health data is processed in the provision of clinical psychological care, processing is based on Article 9(2)(h) GDPR in conjunction with applicable professional regulations and confidentiality obligations.
3. Website, Cookies and Spam Protection
This website is hosted by Squarespace. When you visit, technical data such as your IP address, access time, browser and device information is processed. This serves to provide and secure the website, based on legitimate interests under Article 6(1)(f) GDPR.
Cookies and similar technologies requiring consent are subject to your approval. You can make your selection through the cookie banner. You may withdraw your consent with effect for the future.
Google reCAPTCHA is used to protect the contact form against automated submissions. This may involve transmitting technical device and usage information to Google.
Further information: Squarespace and Google.
4. Contact Form and Email
When you contact me, I process your name, email address and message to respond to your enquiry. The contact form is provided by Squarespace; email communication takes place through Google’s Gmail service.
Please do not send medical reports or detailed health information through the contact form or ordinary email. We can discuss your personal concerns during the counselling session.
5. Appointment Booking
I use Calendly for online appointment booking. The booking link takes you to the provider’s website, where your name, email address, appointment details and technical access data are processed.
Calendly is connected to my Google Calendar to check availability and manage appointments. Please do not provide health information when booking. Alternatively, you can arrange an appointment by email.
Further information: Calendly.
6. Payment and Invoicing
After booking, you will receive payment information separately by email. I use Stripe for online payments and the associated invoicing.
The data processed includes your name, email address, payment amount, payment status and the information required for your chosen payment method. I do not store full payment card details. Stripe also processes certain data as an independent controller, for example to prevent fraud and comply with legal obligations.
Further information: Stripe.
7. Online Sessions
Online counselling takes place via Zoom. Audio and video content, together with participant, device and connection data, is processed to conduct the session.
I do not record sessions. Automated transcriptions and AI-generated summaries are not used. Professional records are maintained separately.
Further information: Zoom.
8. Recipients and International Processing
The service providers used receive data as necessary to deliver their respective services. Other recipients may include tax advisers and public authorities where there is a legal basis for disclosure.
These services may process data outside the European Union or the European Economic Area, particularly in the United States. Information about the relevant processing locations and international transfer arrangements can be found in the providers’ privacy notices linked above.
9. Retention Periods
Personal data is retained only for as long as necessary for the relevant purpose or to meet legal obligations.
Enquiries that do not lead to counselling: until the enquiry has been fully addressed; longer retention requires specific legal grounds.
Appointment and administrative data: for as long as needed to provide the service, handle billing or resolve outstanding questions.
Invoices and payment records: generally seven years from the end of the relevant calendar year, or longer where required by law.
Clinical psychological records: at least ten years in accordance with applicable professional regulations.
10. Your Rights
Subject to the applicable legal requirements, you have the right to access, rectify and erase your personal data, restrict processing, request data portability and object to processing. You may withdraw consent at any time with effect for the future. Statutory retention obligations may prevent the deletion of certain data.
For privacy-related enquiries, please contact me at praxisacel@gmail.com.
You may also lodge a complaint with the Austrian Data Protection Authority.