This policy explains what personal data I collect through agtherapy.eu and when providing consultations, why I process it and how I protect it. I process data in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.
Andrej Gušča, medical psychologist (licence No. ASL-16100)
Address: A. Smetonos g. 5, Room 309, Vilnius
Email: andrej.gusca@gmail.com
Policy updated on 10 October 2026.
I collect only the data needed to make contact, arrange a session and provide psychological support. I do not sell data or use it for advertising.
Data: first name, email address and message content. Purpose: to answer your question. Legal basis: steps taken at your request before entering into a contract and your consent (GDPR Article 6(1)(a) and (b)). Retention: up to 12 months after the last correspondence if we do not begin consultations.
Data: first name, email address, selected time and format, phone number and comment (if provided). Purpose: to arrange a session, send confirmations and reminders, and inform you of any changes to the session. Legal basis: entering into and performing a contract (GDPR Article 6(1)(b)). Retention: up to 12 months after the last session.
Data: first name, surname, contact details, session dates and working notes. Purpose: to provide psychological support and ensure continuity. Legal basis: performing a contract and providing healthcare services, subject to professional secrecy (GDPR Article 6(1)(b) and Article 9(2)(h)). Retention: 3 years after the last consultation, unless the law requires a longer mandatory period.
Online consultations take place via Google Meet. No video or audio recordings of consultations are made.
If services are paid, the following data is processed: first name, surname, payment amount and date, and payment details (if you pay by bank transfer). Purpose: accounting. Legal basis: a legal obligation (GDPR Article 6(1)(c)). Retention: 10 years, as required by accounting document retention rules.
Data: technical information (IP address, browser and visit time). Purpose: website operation and security. Legal basis: a legitimate interest (GDPR Article 6(1)(f)).
Information about your wellbeing and health is special category data. I process it only when you provide it yourself, and only for the purpose of helping you.
Please do not give detailed information about your condition in the contact form or when booking. A brief indication of what brings you here is enough — we will discuss the rest during the session.
What we discuss in consultations is covered by professional secrecy. It may be disclosed only in cases provided for by law: where there is a real threat to your or another person’s life or health, or where a court or another authorised body lawfully requires it.
I mainly work with adults. If a minor (under 18) receives consultations, services are provided and their data is processed only with the consent of at least one parent or another legal representative, as required by law.
I do not sell your data or disclose it for marketing. It may be processed only by service providers needed for the website and booking system to function:
When data is transferred to the USA, the transfer is based on the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.
I provide data to public authorities only when required by law.
The website uses only essential cookies — they ensure that the website, language selection and contact form work. I do not use analytics or marketing cookies.
You can delete or block cookies in your browser settings, but some parts of the website may then stop working.
The website uses an encrypted connection (HTTPS). Access to email and booking accounts is protected by strong passwords and two-factor authentication. I keep working notes so that only I can access them.
Under the GDPR, you have the right to:
To exercise these rights, email me at andrej.gusca@gmail.com. If necessary, I may ask you to verify your identity. I will respond within one month.
If you believe your data is being processed improperly, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija): L. Sapiegos g. 17, 10312 Vilnius, https://vdai.lrv.lt/