Last updated: 10/04/2026
 

At Storylines Psychology, transparency and trust are the foundations of the therapeutic relationship. This Privacy Policy explains how your personal data is handled with the respect and confidentiality it deserves.
 

1. Identity and Contact Details

Storylines Psychology Data Controller: Carla de Souza Martoni

Address: Keizersgracht 394, Amsterdam

Email: carlamartonipsi@gmail.com
 

2. Why I Process Your Data

I collect and process personal data to provide psychological therapy, supervision, and consulting services. The legal basis for this is the execution of a treatment contract or a service agreement. I process sensitive "special category" data (health-related information) only as necessary for your psychological care.
 

3. What Information I Collect

• Administrative Data: Name, contact details (email/phone), and address for scheduling and invoicing.

• Clinical Records: Notes regarding our sessions and your history, which are essential for responsible care.

• Corporate Data: Professional contact information for organizational consulting.
   

4. Confidentiality and Sharing

Confidentiality is at the core of my practice. I do not share your personal information or the content of our sessions with third parties (such as insurance companies or employers) without your explicit consent.

I use a limited number of "Data Processors" to run my practice securely:

• Wix: For website hosting and initial contact forms.

• Wix booking tool: For managing appointments.

• Secure Email/Storage: For professional correspondence and record-keeping.
   

5. Data Retention

In accordance with the Dutch WGBO (Wet op de geneeskundige behandelingsovereenkomst), I am legally required to keep clinical records for a period of 20 years from the end of the treatment, or longer if required for responsible care. After this period, records are securely destroyed.
 

6. Your Rights

Under the GDPR, you have the following rights regarding your data:

• The right to access and view your clinical record.

• The right to rectify or update any incorrect information.

• The right to request erasure of administrative data (subject to legal retention requirements).

• The right to withdraw consent for data processing at any time.
   

7. Security

I take appropriate technical and organizational measures to ensure your data is safe from unauthorized access or loss. This includes using encrypted storage and secure communication channels.
 

8. Complaints

If you have concerns about how your data is handled, I encourage you to discuss them with me first. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).