Legal

Privacy policy

Last updated: October 2026

Who is responsible for your data

Data controller: Ivet Vidal Pozo, registered psychologist COPC 26559 (Me Siento Contigo) Tax ID (NIF): 45642262G Address: Carrer d'Astúries, 66, entresòl 2a, 08024 Barcelona Email: info@mesientocontigo.com Website: www.mesientocontigo.com We have not appointed a data protection officer: the practice is run by an individual professional, a case exempted by article 34.1.l) of Spanish Organic Law 3/2018 (LOPDGDD).

What data we collect and why

We only collect the data you give us, in these cases: · Downloading a resource: your name and email address, to send you the resource and not ask for them again on later downloads. Legal basis: your consent (art. 6.1.a GDPR). · Subscribing to the newsletter (by ticking its box): your name, email and language, to send you new articles and a few welcome emails. We ask you to confirm the subscription from your inbox (double opt-in). Legal basis: your consent (art. 6.1.a GDPR). · Requesting the free call: your name, your email, who the therapy is for and your preferred language, to send you the link to choose a time and to prepare the call. Legal basis: your explicit consent (art. 6.1.a and 9.2.a GDPR), because asking a psychology practice for a call may reveal health-related information. · Writing to us by email or WhatsApp: your contact details and what you tell us, to reply. Legal basis: your consent and our legitimate interest in answering enquiries (art. 6.1.a and 6.1.f GDPR). · Browsing the website: technical data (IP address, device, pages visited) so the site works and is secure and, only if you accept, to measure how it is used. See the Cookie policy. Our website forms do not ask you to describe your personal situation or give clinical information. We do not make automated decisions or build profiles with your data.

How long we keep it

· Newsletter: until you unsubscribe, using the link at the end of every email or by writing to us. · Resource downloads: until you ask us to delete them. · Call requests: for up to 2 years from the request. If you left a message, it is deleted after 90 days. · Enquiries by email or WhatsApp: as long as needed to answer them and, afterwards, for the legal limitation periods. · Browsing data: the period stated for each cookie in the Cookie policy.

Who else has access to your data

Only the providers we need for the website to work. They act as data processors, follow our instructions and have a contract under article 28 GDPR: · Vercel Inc.: website hosting. United States, with transfers covered by the EU-US Data Privacy Framework and standard contractual clauses. · Supabase Inc.: the database where requests and contacts are stored, hosted in the European Union. · Brevo (Sendinblue SAS): sending emails and managing the newsletter. France. · Make (Celonis): automations that connect the website with email, on servers in the European Union. · Cloudflare Inc.: anti-spam check on forms (Turnstile). United States, under the EU-US Data Privacy Framework. · PostHog Inc.: usage analytics, hosted in the European Union, only if you accept analytics cookies. · Google Ireland Limited: measuring visits and campaigns (Google Analytics and Google Ads), only if you accept. This may involve transfers to the United States, covered by the EU-US Data Privacy Framework. We do not share your data with anyone else unless required by law.

If you book a time or a session

To choose the time of your call or book a session we use eholo (company.eholo.health), an external platform shown inside this website or in a new tab. Whatever you enter there is processed by eholo under its own terms and privacy policy, which we recommend you read. Information on how we process the data of people who are already clients is given in session, together with the informed consent.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw your consent without affecting any processing carried out before. Write to info@mesientocontigo.com saying which right you wish to exercise. If we have reasonable doubts about your identity, we will ask you to prove it. We will reply within one month at most. If you think we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan 6, 28001 Madrid).

Security

The website always uses an encrypted connection (HTTPS). Form data is stored in a database that can only be accessed from the server, never from your browser. Forms are protected against spam, and messages with sensitive information are never sent by email or to external tools.

Children

This website is not aimed at children under 14 and we do not knowingly collect their data. If you are a parent or guardian and believe a child has given us their data, write to us and we will delete it.

Changes to this policy

We may update this policy to reflect legal changes or changes to how the website works. The date of the last update appears at the top. For any questions, write to info@mesientocontigo.com.