Privacy Policy

Last updated: 28 September 2026
 
Welcome to playtherapyka.gr, our website for play therapy services.
 
As part of our commitment to protecting your personal data, this Privacy Policy explains how we collect, use, store and protect your data. We comply with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Greek law (Law 4624/2019 and Law 3471/2006).
 
This policy applies to all users of the website, including parents, teachers and other visitors.
 
 
1. Data Controller
 
The data controller is Katerina Andrikopoulou, play therapist.
 
72 Afroditis St.,
Palaio Faliro 175 61,
Attica, Greece
 
For questions about your data, you can contact us:
 
- Email: kathyandrikopoulou@gmail.com
- Phone: +30 697 080 7869
 
 
2. Data We Collect
 
We only collect the data needed to provide our services:
 
- Personal details: name, email and phone number, submitted through the contact form.
- Information about children: age and a general description of the child's difficulties, as provided by parents in the contact form.
- Technical data: IP address, browser type and cookie data (see section 4).
- Sensitive data: information about a child's health, development or emotional state is a special category of data. We process it only with your explicit consent (Article 9(2)(a) GDPR).
 
We do not collect data about minors without the consent of a parent or guardian.
 
 
3. Purpose and Legal Basis of Processing
 
We use your data for the following purposes:
 
- Responding to inquiries, scheduling and providing sessions. The legal basis is taking steps prior to entering into a contract, or performing a contract (Article 6(1)(b) GDPR).
- Processing information about a child's health. This is based on explicit consent (Article 9(2)(a) GDPR).
- Analysing website traffic. This is based on your consent (Article 6(1)(a) GDPR).
- Complying with legal obligations, such as tax requirements (Article 6(1)(c) GDPR).
- Protecting legitimate interests, such as website security (Article 6(1)(f) GDPR).
 
Recipients and transfers
 
We do not share your data with third parties without your consent. The exception is the service providers that support us, with whom we have GDPR-compliant data processing agreements:
 
- Wix, for website hosting and the contact form.
- Google, for Google Analytics and email.
 
Some of these providers may process data outside the European Economic Area, for example in the United States. These transfers are based on:
 
- an adequacy decision of the European Commission, such as the EU-U.S. Data Privacy Framework, or
- Standard Contractual Clauses approved by the European Commission.
 
 
4. Cookies and Tracking Technologies
 
What cookies are
 
Cookies are small text files stored on your device when you visit the website. They are used to make the website work properly, to analyse traffic and to remember your choices.
 
Legal basis
 
Necessary cookies are set without consent, because the website cannot function without them (Article 4(5) of Law 3471/2006).
 
All other categories are activated only if you give your consent through the cookie banner (Article 6(1)(a) GDPR). Until you make a choice, only necessary cookies are active. Your choices are stored for 12 months.
 
4.1 Necessary
 
These cookies are essential for the basic operation and security of the website. They are used, for example, to load pages, protect against misuse, submit the contact form and store your cookie choices. They cannot be disabled and are set by the Wix platform.
 
Examples: XSRF-TOKEN, hs, svSession, consent-policy.
 
4.2 Statistics
 
These cookies help us understand how the website is used, for example which pages visitors prefer and how long they stay, so that we can improve it. The information is collected in aggregated form.
 
Provider: Google Analytics (Google Ireland Ltd).
 
Examples: _ga, _ga_* (duration up to 2 years).
 
4.3 Marketing
 
The website does not currently use marketing cookies. If this changes, we will update this policy and ask for your consent before activating them.
 
4.4 Preferences
 
These cookies allow the website to remember your choices, such as language, to give you a more personalised experience. If you disable them, some features may not work as expected.
 
Managing and withdrawing consent
 
You can give, change or withdraw your consent at any time. To do this, click the cookie settings icon (two figures next to a shield) at the bottom left of every page. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
 
You can also delete or block cookies through your browser settings. In that case, some parts of the website may not work properly.
 
 
5. Your Rights
 
Under the GDPR, you have the following rights:
 
- to access, correct and delete your data,
- to restrict processing, to object and to data portability,
- to withdraw your consent at any time,
- to lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).
 
To exercise your rights, email kathyandrikopoulou@gmail.com.
 
We respond within one month. For complex requests this period may be extended by two further months, in which case we will let you know.
 
 
6. Data Security
 
We use appropriate security measures, such as SSL encryption and restricted access, to protect your data.
 
In the event of a data breach:
 
- we notify the Hellenic Data Protection Authority within 72 hours, and
- we also notify you without undue delay, where the breach is likely to result in a high risk to your rights.
 
 
7. Data Retention
 
We keep data for the following periods:
 
- Inquiries that do not lead to working together: up to [12 months].
- Client records: for the duration of our work together and up to [X years] after it ends.
- Data required by law (e.g. tax records): for as long as the law requires.
- Cookie data: as described in section 4.
 
You can request deletion of your data at any time, unless we are required by law to keep it.
 
 
8. Changes to This Policy
 
We may update this policy from time to time. Changes are published on this page with a new "last updated" date. Where a change requires it, we will ask for your consent again.
 
For questions, contact us using the details in section 1.