I. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

Joshua Flowers

89 Connie Dr., Buena Vista, CO 81211

Email: josh@joshflowerscounseling.com

Website: www.joshflowerscounseling.com

II. Name and address of the data protection officer

The data protection officer of the person responsible is:

Josh Flowers

89 Connie Dr., Buena Vista, CO 81211

Email: josh@joshflowerscounseling.com

Website: joshflowerscounseling.com

III. General information on data processing

1. Scope of processing personal data

We generally only process personal data of our users insofar as this is necessary to provide a functional website and our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases in which prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2. Legal basis for the processing of personal data

Insofar as we obtain the data subject's consent for the processing of personal data, Art. 6 para. 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.

When processing personal data, which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR as the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If processing is necessary to safeguard the legitimate interests of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, Art. 6 (1) lit. f GDPR as the legal basis for processing.

3. Data deletion and storage duration

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV. Provision of the website and creation of log files

Description and Scope of Data Processing

  • Every time our website is accessed, essential data and information are automatically collected from the computer system of the calling computer to ensure the website's operation and security.

  • The following essential data is collected:

    • Information about the browser type and version used

    • The user's operating system

    • The user's Internet service provider

    • Date and time of access

    • Websites from which the user's system reaches our website

    • Websites that are accessed by the user's system via our website

  • This essential data is stored in the log files to ensure the website's operation and security. This does not affect the user's IP addresses or other data that enable the data to be assigned to a user. This data is not stored together with other personal data of the user.

  1. Legal Basis for Data Processing

    • The legal basis for the temporary storage of essential data is Art. 6 Para. 1 lit. f GDPR.

  2. Purpose of Data Processing

    • The temporary storage of essential data by the system is necessary to enable the website to be delivered to the user's computer and ensure security. To do this, the essential data must remain stored for the duration of the session.

  3. Duration of Storage

    • Essential data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of essential data for the provision of the website, this is typically when the respective session has ended.

  4. Opposition and Removal Options

    • The collection of essential data for the provision and security of the website is absolutely necessary for the operation of the website. Therefore, there is no possibility for the user to object to this essential data processing.

    • Users can object to and manage the collection of non-essential data, such as analytics and marketing data, through the cookie banner and privacy settings provided on the website.

V. Use of cookies

  1. a) Description and Scope of Data Processing

    Our website uses cookies. Cookies are text files stored in the internet browser or by the internet browser on the user's computer system. When a user visits our website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be clearly identified when the website is called up again.

    We use cookies to make our website more user-friendly and to analyze user behavior. Some elements of our website require that the calling browser can be identified even after a page change.

    Types of Cookies Used:

    1. Essential Cookies: These cookies are necessary for the basic functioning of our website and cannot be switched off in our systems. They are usually set only in response to actions made by you, such as setting your privacy preferences, logging in, or filling out forms.

      • Examples: Language settings, login sessions.

    2. Analytics Cookies: These cookies help us understand how visitors interact with our website, discover errors, and provide a better overall analytics experience. We use:

      • Google Analytics: Collects data such as entered search terms, frequency of page views, and use of website functions. The data collected in this way is pseudonymized and not stored together with other personal data.

      • Squarespace Analytics: Collects standard internet log information and details of visitor behavior patterns to find out the number of visitors to the various parts of the site.

    3. Advertising Cookies: These cookies are used to deliver relevant ads to users and measure the effectiveness of advertising campaigns. We use:

      • Google Ads: Collects data for the personalization of ads and tracking ad performance. Data includes user interactions with ads and website visits after clicking on ads.

    4. Functionality Cookies: These cookies enable our website to provide enhanced functionality and personalization. They may be set by us or by third-party providers whose services we have added to our pages.

      • Acuity Scheduling: Uses cookies to manage online scheduling and intake forms. Data includes user interaction with scheduling features and form submissions.

    b) Legal Basis for Data Processing

    The legal basis for the processing of personal data using technically necessary cookies is Art. 6 Para. 1 lit. f GDPR.

    The legal basis for the processing of personal data using cookies for analysis and advertising purposes is the consent of the user, Art. 6 para. 1 lit. a GDPR.

    c) Purpose of Data Processing

    • The purpose of using technically necessary cookies is to simplify the use of our website for users. Some functions of our website cannot be offered without the use of cookies. For this, it is necessary that the browser is recognized even after a page change.

    • We need cookies for the following applications:

      • Acceptance of language settings

      • Remembering search terms

    • The user data collected through technically necessary cookies are not used to create user profiles.

    • Analysis cookies are used to improve the quality of our website and its content. Through analysis cookies, we learn how the website is used and can continuously optimize our offerings.

    • Advertising cookies are used to deliver relevant advertisements to users and measure the effectiveness of advertising campaigns.

    Our legitimate interest in the processing of personal data in accordance with Art. 6 Para. 1 lit. f GDPR lies in these purposes.

    d) Duration of Storage, Objection, and Removal Options

    Cookies are stored on the user's computer and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.

    When you visit our website, you are informed about the use of cookies for analysis and advertising purposes, and your consent to the processing of personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration.

VI. WEB ANALYSIS BY GOOGLE ANALYTICS

We use Google Analytics, a web analytics service provided by Google Inc., to understand how our site is used and to improve our services. Google Analytics uses cookies to help analyze how users interact with the site. The information generated by the cookie about your use of the website (including your IP address) is anonymized by Google to prevent identification and transmitted to and stored by Google on servers in the United States.

a) Description and Scope of Data Processing

  • The following data is collected and processed:

    • Browser type and version

    • Operating system used

    • Referrer URL (the previously visited page)

    • Host name of the accessing computer (IP address)

    • Time of the server request

  • This data is used to analyze website usage, compile reports on website activity, and provide other services related to website activity and internet usage.

b) Anonymization of IP Addresses

  • IP addresses are anonymized to prevent identification. This means that the last part of the IP address is masked before being sent to Google, ensuring that individual users cannot be identified.

c) Legal Basis for Data Processing

  • The legal basis for the processing of personal data using cookies for analysis purposes is the consent of the user, Art. 6 para. 1 lit. a GDPR.

d) Purpose of Data Processing

  • The data collected via Google Analytics is used to understand user behavior and improve the website. This helps us to optimize our services and provide a better user experience.

e) User Rights and Opt-Out Options

  • Users have the right to object to the collection and processing of their data by Google Analytics. To opt-out of Google Analytics, you can:

f) Further Information

VII. How I use your information should you begin counseling with me

When using the online scheduler and intake forms, I use the data you enter to determine if my qualifications are a good fit for your presenting concerns. This includes your email address, telephone number, and home address. This data is stored briefly in a secure cloud service provided by a third party: Acuity Scheduling. As soon as I am notified that you have entered data, I transfer this information from Acuity Scheduling to a secure file on my personal computer and delete your information from the cloud service. I require this information for your invoices and my accounts. I do not share any information. Your name and address may be visible to any relevant financial services dealing with my tax submissions, should I use such services in the future. This will be included on my invoices.

I will not contact you unless it is related to scheduling appointments, sending invoices, or anything related to your therapy process.

Permission to contact you via email is limited to me (Josh Flowers).

Once you have commenced therapy, your information is stored securely and deleted after the period specified by the ethical guidelines for Licensed Professional Counselors as regulated by DORA in Colorado, USA. Notes on therapeutic treatment are stored electronically in a password-protected file on my personal computer, which is also password protected. Treatment notes will be deleted seven years after our final session.

If you enter your data online via the online calendar system but do not commence therapy and do not incur any costs for which you are invoiced, your data will be deleted within one month of entry.

VIII. User Rights

  • You have the right to access, rectify, and delete your personal data. You can also withdraw your consent at any time. To exercise these rights, please contact us at josh@joshflowerscounseling.com."

IX. Data Security Measures

We take the security of your personal data seriously and implement several measures to protect it:

  • Encrypted Storage: Personal data is stored in an encrypted format to prevent unauthorized access.

  • Secure Devices: Personal data is stored on password-protected devices to ensure its safety.

  • Regular Updates: Software and devices used to store personal data are regularly updated to protect against security vulnerabilities.

  • Limited Access: Only I, Josh Flowers, have access to your personal data to ensure it remains confidential.

X. Other questions

If you have any further questions you can contact me at any time:

Josh Flowers

Email: josh@joshflowerscounseling.com