Privacy notice
This notice explains which personal data this website processes, why, for how long, and what rights you have. It is effective from 1 October 2026.
Who is the controller
The controller of your personal data is Mgr. Roman Kamenišťák, Company ID (IČO) 23082488, Na Poříčí 1041/12, 110 00 Prague 1, Czech Republic, email terapie.kamenistak@gmail.com.
You can write to me at that address with any question about your personal data or to exercise your rights.
The contact form
What I process. Your name, email address, phone number if you give it, your preferred language and format of sessions, and the text of your message. The form also records the page you sent it from.
Why. To reply to you and, if you wish, to arrange a first session.
Legal basis. Processing is necessary to take steps at your request before entering into an agreement (Article 6(1)(b) GDPR). Because a message may contain information about your health, I also ask for your explicit consent, given by ticking the checkbox in the form (Article 9(2)(a) GDPR). You can withdraw your consent at any time by writing to the email address above. Withdrawal does not affect processing that took place before it.
Is it required. Filling in the form is voluntary, but without your name, email and consent I cannot reply.
Who else handles the data. I use these service providers, who process data on my behalf:
- Cloudflare, Inc. (USA): website hosting, Turnstile protection against automated spam, and cookieless Web Analytics.
- Resend (Plus Five Five, Inc., USA): delivery of messages from the form by email.
- Google (Google Workspace): the mailbox where messages arrive.
Messages from the form are delivered by email to my mailbox roman@kamenistak.com, hosted on Google Workspace.
Turnstile processes your IP address and technical browser signals to block automated abuse.
Cloudflare keeps short-lived technical request logs (IP address, time, requested URL) for security and operation of the website.
Resend keeps a copy of sent emails for a limited time under its terms.
The technical operation of the website (hosting, the form and email delivery) is handled for me by a technical administrator, who has access to this data only as far as running the site requires.
Where data is transferred to the USA, the transfer relies on standard contractual clauses approved by the European Commission or on the EU-US Data Privacy Framework.
How long. Only as long as needed to reply and to arrange our cooperation. If no cooperation follows, I delete the message no later than 12 months after our last contact.
Please do not include detailed health information in the form. We can talk about it in the session.
Self-checks
The self-check questionnaires on this website are computed entirely in your browser. Your answers are never sent to me or to anyone else, and they are not stored.
Analytics
The website uses Cloudflare Web Analytics, which measures visits without using cookies.
Cookies
The website uses no cookies and no marketing or advertising tools.
Therapy records
If we start working together, records connected with therapy are handled separately from this website. I will explain how at our first session.
Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you
- have inaccurate data corrected
- have your data erased
- restrict processing
- receive your data in a portable format, where the processing is based on consent or an agreement
- object to processing
- withdraw your consent at any time
To exercise any of these rights, write to terapie.kamenistak@gmail.com.
Complaints
If you believe your data is being processed unlawfully, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
Effective date
This notice is effective from 1 October 2026.