Privacy Policy

The Schmidts Institute
Last Updated: 19 August 2026

Introduction

At The Schmidts Institute, protecting your privacy and maintaining the confidentiality of your personal information are central to the counseling relationship. This Privacy Policy explains how your personal information is collected, used, stored, and protected when you visit this website, contact me, or receive counseling services. The Schmidts Institute is committed to handling personal information responsibly and in accordance with the General Data Protection Regulation (GDPR/AVG) and applicable Dutch privacy legislation. The Schmidts Institute is a private counseling practice founded by Andrew Kaufman, LSW.

Data Controller

The data controller responsible for your personal information is:

The Schmidts Institute
Andrew Kaufman, LSW
The Hague, The NetherlandsEmail: info@theschmidtsinstitute.com

Information I May Collect

Depending on how you interact with the practice, I may collect the following information.

Contact Information

Name, Email address, Telephone number, Preferred method of communication

Appointment Information

Appointment requests, Scheduling information, Attendance records, Appointment history

Counseling Information

If you become a client, I may collect information necessary to provide counseling services, including: Intake and assessment information; Informed consent documentation; Counseling notes; Relevant personal, medical, or psychosocial information that you choose to share; Emergency contact information; Session dates and related records. Health information is considered special category personal data under the GDPR and is therefore subject to additional protections. I collect only information that is reasonably necessary for providing counseling services, managing the practice, and meeting applicable legal and professional obligations.

How Your Information Is Used

Your information may be used to: Respond to inquiries; Schedule and manage appointments; Provide counseling services; Maintain appropriate client records; Communicate regarding appointments and administrative matters; Prepare invoices and maintain financial records; Meet legal, regulatory, ethical, and professional obligations; Address complaints or concerns; Maintain and improve the quality and security of the practice. Your information will not be used for purposes unrelated to the operation of the practice without an appropriate legal basis.

Legal Basis for Processing

Personal information is processed on one or more of the following legal bases, depending on the circumstances: Your consent; Performance of a contract or steps taken at your request before entering into a contract; Compliance with legal obligations; Legitimate interests in operating and administering a professional counseling practice; Where applicable, another legal basis permitted under the GDPR or Dutch law; Where special category information, including health information, is processed, an additional legal basis under applicable data-protection law is required.

NFG Membership and Professional Standards

The Schmidts Institute is a member of the Nederlandse Federatie Gezondheidszorg (NFG). As part of this professional affiliation, the practice follows applicable NFG requirements concerning professional conduct, client care, complaints, and confidentiality. NFG membership does not mean that The Schmidts Institute is a BIG-registered psychology or psychotherapy practice. Andrew Kaufman's professional social work license is held in Illinois, USA.

Complaints and the Wkkgz

The Schmidts Institute participates in the complaints and disputes arrangements provided through the NFG in accordance with the Dutch Wet kwaliteit, klachten en geschillen zorg (Wkkgz). If you have a concern about your experience or the services you receive, I encourage you to raise the concern with me first. I will make every reasonable effort to listen to your concern and resolve it directly. If your concern cannot be resolved directly, you may make use of the formal complaints procedure available through the NFG. Information about the NFG complaints procedure and how to access it can be provided to you by The Schmidts Institute or obtained directly through the NFG. The Wkkgz complaints process is separate from your rights under the GDPR. If your concern relates specifically to the processing or protection of your personal data, you may also exercise your GDPR rights or submit a privacy complaint to the Autoriteit Persoonsgegevens.

Confidentiality

Confidentiality is one of the foundations of counseling. Information you share during counseling is treated as confidential and is not disclosed to third parties except where there is an appropriate legal or professional basis for doing so. This may include circumstances where: You have provided permission to share information; Disclosure is required or permitted by law; Disclosure is necessary to meet a legal or professional obligation; orThere is a serious concern regarding the safety of you or another person and disclosure is permitted or required under applicable law. The limits of confidentiality will be discussed as part of the informed consent process before counseling begins.

How I Store and Protect Your Information

I use secure digital systems to manage different aspects of the practice.

Website

The website is hosted through Squarespace. If you submit information through a website contact form, the information you provide is transmitted to the practice for the purpose of responding to your inquiry.

Professional Email

Professional communications are managed through Google Workspace. Standard email may not always be the most secure method for communicating sensitive information. Please avoid sending highly sensitive personal or health information by ordinary email unless specifically requested.

Client Records and Telehealth

Client intake forms, consent documents, counseling notes, appointment documentation, and telehealth services are managed through Carepatron, an electronic health record and practice-management platform.Only information reasonably necessary for providing counseling services and managing the client relationship is maintained in the system.

Appointment Scheduling

Appointments may be scheduled through Carepatron. Scheduling systems are intended for appointment management. Clients should not use scheduling forms to provide detailed or sensitive clinical information unless specifically requested.

Accounting and Invoicing

Financial and invoicing information is managed using the practice's accounting and administrative systems. Invoices contain only information reasonably necessary for accounting, payment, and legal purposes.

Banking

Payments are accepted by direct bank transfer to the practice's bunq Business account. The Schmidts Institute does not store your online banking credentials or payment-card information.

Third-Party Service Providers

The practice uses carefully selected service providers to operate the business and provide services. These may include providers for: Website hosting; Business email; Electronic health records; Telehealth Appointment scheduling; Accounting and invoicing; Banking and payment processing; Where required by applicable law, appropriate contractual and data-protection measures are maintained with relevant service providers. These providers may process personal information on behalf of The Schmidts Institute only as necessary to provide their services and in accordance with applicable data-protection requirements.

Sharing Your Information

Your personal information is not sold to third parties. Information may be shared only where there is an appropriate legal or professional basis, including: With your consent or at your direction; Where required or permitted by law; Where necessary to comply with a legal obligation; Where necessary to protect vital interests or address a serious safety concern; With service providers who process information on behalf of the practice; or Where otherwise permitted under applicable privacy and professional regulations. Where consultation with another professional is appropriate, this will normally take place with your knowledge and consent unless applicable law provides otherwise.

Data Retention

Personal information is retained only for as long as necessary to provide services and meet applicable legal, regulatory, professional, accounting, and administrative obligations.Certain client records may be required to be retained for a specified period under applicable Dutch law or professional requirements.When information is no longer required, it will be securely deleted or destroyed where reasonably possible.

Your Rights Under the GDPR

Subject to applicable legal limitations, you have rights regarding your personal information, including the right to: Request access to your personal information; Request correction of inaccurate information; Request deletion where legally permitted; Request restriction of certain processing; Object to certain processing activities; Request a copy of your personal information; Withdraw consent where consent is the legal basis for processing; and Lodge a complaint with the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority. Some information may need to be retained despite a request for deletion where retention is required by law or another applicable legal obligation. To exercise your privacy rights, contact: info@theschmidtsinstitute.com

Cookies

The website may use cookies and similar technologies to: Provide website functionality; Remember preferences; Understand website usage; and Support website performance and analytics. Where legally required, consent will be requested before non-essential cookies are placed on your device. You may also manage cookie preferences through your browser or the website's cookie-management tools.

International Clients

The Schmidts Institute primarily serves members of the international community living in the Netherlands and may also provide online counseling services to clients located outside the Netherlands where appropriate. Where personal information is transferred outside the European Economic Area (EEA), appropriate safeguards will be used as required by applicable data-protection law. Clients receiving services from outside the Netherlands should also be aware that the laws and professional requirements of their country or jurisdiction may apply to the provision of services.

Data Breaches and Security

Reasonable technical and organizational measures are used to protect personal information against unauthorized access, loss, alteration, disclosure, or destruction.If a personal-data breach occurs that is subject to notification requirements under applicable law, appropriate steps will be taken in accordance with those requirements.

Contact

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Andrew Kaufman, LSW
Founder | The Schmidts InstituteEmail: info@theschmidtsinstitute.com

Updates to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements, professional standards, technology, or the way the practice operates.The most current version will always be available on this website.

Last updated: 19 August 2026