IT EN
Contact me

Privacy Policy

Last updated: October 15, 2026

This policy explains how personal data is handled when you visit psitaliana.com or contact Dr. Elisa De Cruto through the site, in accordance with Articles 13 and 14 of EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003.

1. Data controller

The data controller is Dr. Elisa De Cruto, clinical psychologist and psychotherapist, with practices in Milan and New York.
Email: [email protected]

2. What data is processed

  • Browsing data. Like every website, our servers automatically record some technical data (IP address, date and time, pages requested, browser and operating system). It is used to run and secure the site.
  • Data you provide. If you use the contact form, write an email or send a WhatsApp message, we process the data you choose to share: name, email address, phone number (optional) and the content of your message.
  • Cookies and similar tools. See the “Cookies” section below.

Please do not include detailed information about your health in the form or in your first messages. The first contact is only meant to get to know each other and to schedule a session. Health data is handled only in the professional setting, with a specific notice and consent, and in compliance with professional confidentiality and the Code of Ethics of Italian Psychologists.

3. Purposes and legal bases

  • Replying to your requests for information or a first contact. Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the box in the form, and pre-contractual steps taken at your request (Art. 6.1.b).
  • Keeping the site secure and working properly, including preventing abuse and automated submissions. Legal basis: the controller’s legitimate interest (Art. 6.1.f).
  • Anonymous statistics about site use, only if you accept statistics cookies. Legal basis: consent (Art. 6.1.a).
  • Complying with legal obligations, where applicable (Art. 6.1.c).

Providing the form data is optional, but without it we cannot reply to your request.

4. Who receives the data

Your data is never sold or published. It may be processed, as data processors or independent providers, by:

  • Hostinger International Ltd and its group companies, which host the site and the form messages (servers in the European Union);
  • the email service provider used by the controller;
  • Google Ireland Ltd, for protecting the form with reCAPTCHA and, only with your consent, for Google Analytics statistics;
  • WhatsApp (Meta), if you choose to write via WhatsApp. WhatsApp’s own privacy notice applies in that case.

Some of these providers may process data outside the European Economic Area (in particular in the United States). Transfers rely on the EU-US Data Privacy Framework or on the Standard Contractual Clauses approved by the European Commission.

5. How long data is kept

  • Contact requests: for as long as needed to reply to you and, if no professional relationship follows, for up to 12 months.
  • Browsing data (server logs): for a limited period, generally no longer than 12 months.
  • Cookies: for the duration shown in the cookie table.
  • If a professional relationship begins, data is handled under the relevant notice and legal obligations.

6. Your rights

At any time you may request access to your data, rectification, erasure, restriction of processing and portability, and you may object to processing (Arts. 15-22 GDPR). You may also withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal. To exercise your rights, write to [email protected].

You have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with your local supervisory authority.

7. Cookies

Information about cookies and similar tools, and how to manage them, is in the Cookie Policy.

8. Changes to this policy

This policy may be updated. The date at the top shows the latest version.