Last updated: 25 October 2026
This page explains what personal data is collected when you visit psypassport.com or get in touch with me, what it is used for and what your rights are. The General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and French data protection law (Loi Informatique et Libertés) apply.
1. Data controller
- Gonzalo Garzo, clinical psychologist (sole trader, SIRET 842 784 134 00012)
- Address: 22 bis rue Georges Émonin, 17000 La Rochelle, France
- Email: cabinet@gonzalogarzo.com
2. What data is collected, and why
When you contact me (email, WhatsApp or booking the free first contact on Calendly): your name, your contact details and whatever you choose to tell me in your message. I only use them to reply to you, arrange the appointment and, if we start working together, to follow up on the sessions. Legal basis: your request and pre-contractual or contractual measures (Art. 6(1)(b) GDPR).
Information about your health: if you share information about your psychological health, in your message or in a session, it is treated as specially protected data (Art. 9 GDPR). It is used only to provide you with psychological support, is covered by professional confidentiality and is not shared with anyone without your consent, unless required by law. I recommend not sending detailed clinical information by WhatsApp or through forms before the first appointment.
Comments on articles: if you leave a comment, your name, email address (not published), the text and your IP address are stored to moderate comments and prevent spam. Legal basis: your consent when you submit the comment (Art. 6(1)(a) GDPR).
Visit statistics: only if you accept it in the cookie banner, I use Google Analytics and Microsoft Clarity to understand, in aggregate, how people navigate the website (pages viewed, clicks, scrolling) and to improve it. Legal basis: your consent, which you can withdraw at any time.
YouTube videos: embedded videos only load if you accept the corresponding cookies. When you play them, YouTube (Google) may collect data under its own privacy policy.
3. Service providers that process data
- Web hosting: o2switch (France).
- Appointment booking: Calendly (Calendly LLC, United States).
- Video sessions: Google Meet (Google Ireland Ltd.).
- Messaging: WhatsApp (WhatsApp Ireland Ltd., Meta group).
- Statistics, with your consent: Google Analytics (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Corporation).
- Videos, with your consent: YouTube (Google Ireland Ltd.).
Some of these providers may transfer data outside the European Economic Area. In that case, transfers rely on the EU–US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
4. How long data is kept
- Messages and contact requests that do not lead to therapy: up to 1 year after the last exchange.
- Data of people who have had sessions with me: for the duration of the therapy, then for the period required by legal, professional and tax obligations.
- Comments: for as long as the comment is published.
- Statistics data: up to 14 months (Google Analytics) and 13 months (Microsoft Clarity).
5. Your rights
You can exercise your rights of access, rectification, erasure, restriction, objection and portability, and withdraw your consent, at any time by writing to cabinet@gonzalogarzo.com. I will reply within one month at the latest.
If you believe your rights have not been respected, you can lodge a complaint with the CNIL (www.cnil.fr), the French supervisory authority, or with the data protection authority of your country of residence.
6. Cookies
Details of the cookies used are in the cookie policy. You can change your choices at any time from the “Manage cookies” link at the bottom of each page.
7. Security
The website uses an encrypted connection (HTTPS) and I take reasonable measures to protect your data. Sessions take place by video call on Google Meet, over an encrypted connection and with a private link for each appointment; they are not recorded.