Privacy Policy

The Schmidts Institute
Last Updated: 23 July, 2026

Privacy Policy

At The Schmidts Institute, protecting your privacy and maintaining the confidentiality of your personal information are central to the counseling relationship.

This Privacy Policy explains how your personal information is collected, used, stored, and protected when you visit my website, contact me, or receive counseling services.

The Schmidts Institute is committed to handling your personal information responsibly and in accordance with the General Data Protection Regulation (GDPR/AVG) and applicable Dutch privacy legislation.

Data Controller

The data controller responsible for your personal information is:

The Schmidts Institute
Andrew Kaufman, LSW
The Hague, The Netherlands

Email: info@theschmidtsinstitute.com

Information Collected

Depending on how you interact with the practice, I may collect:

Contact Information

• Name

• Email address

• Telephone number

• Preferred method of communication

Appointment Information

• Appointment requests

• Scheduling information

• Attendance records

Counseling Information

If you become a client, I may collect information necessary to provide counseling services, including:

• Intake forms

• Informed consent documentation

• Counseling notes

• Relevant personal, medical, or psychosocial history that you choose to share

• Emergency contact information

• Session dates and treatment records

Health information is considered a special category of personal data under the GDPR and is handled with additional safeguards.

Why I Collect Your Information

Your information is used to:

• Respond to inquiries

• Schedule appointments

• Provide counseling services

• Maintain clinical records

• Communicate regarding appointments and administrative matters

• Issue invoices

• Meet legal, ethical, and professional obligations

• Improve the quality of our services

I collect only the information necessary to provide safe, ethical, and professional counseling services.

Legal Basis for Processing

Your personal information is processed under one or more of the following legal bases:

• Your consent

• Performance of a contract for counseling services

• Compliance with legal obligations

• Legitimate interests in operating a professional counseling practice

Where health information is processed, it is done only where permitted under the GDPR and applicable Dutch law.

How I Store and Protect Your Information

I use a combination of secure digital systems to manage different aspects of our practice.

Website

The website is hosted through Squarespace.

If you submit a contact form through our website, the information you provide is transmitted securely to me.

Professional Email

Professional communications are managed through Google Workspace.

Please note that standard email is not always the most secure method for sharing sensitive personal information. Whenever possible, sensitive documents will be exchanged using secure platforms.

Secure Document Exchange & Clinical Records and Telehealth

Client intake forms, consent documents, and other confidential files are securely shared using Carepatron, an electronic health record (EHR) platform.

Clinical records, counseling notes, appointment documentation, and telehealth sessions are managed through Carepatron, an electronic health record (EHR) platform.

Only information necessary for providing counseling services is maintained within this system.

Appointment Scheduling

Appointments may be scheduled through Carepatron.

Scheduling systems are used only to arrange appointments and manage availability. Sensitive clinical information should not be submitted through scheduling platforms.

Accounting and Invoicing

Invoices and financial records are managed using Carepatron.

Invoices include only the information necessary for accounting and legal purposes.

Banking

Payments are accepted via direct bank transfer to my bunq Business account.

I do not store your banking credentials or payment card information.

Third-Party Service Providers

To operate the practice efficiently, we work with carefully selected service providers that assist with:

• Website hosting

• Secure communications

• Appointment scheduling

• Electronic health records

• Accounting

• Business email

• Banking

Where required, appropriate contractual and data protection measures are in place with these providers.

Sharing Your Information

Your personal information will never be sold.

Information will only be shared:

• With your explicit consent

• When required by law

• To comply with a legal obligation

• Where there is a serious and immediate risk to your safety or the safety of another person

Where consultation with another healthcare professional is appropriate, this will normally occur only with your knowledge and consent unless otherwise required by law.

Data Retention

Personal information is retained only for as long as necessary to provide counseling services and to comply with applicable legal, ethical, and professional obligations.

When records are no longer required, they are securely deleted or destroyed.

Your Rights Under GDPR

You have the right to:

• Request access to your personal information

• Request correction of inaccurate information

• Request deletion of information where legally permitted

• Restrict or object to certain processing activities

• Receive a copy of your personal information

• Withdraw consent where consent is the legal basis for processing

• Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)

Please note that certain information may need to be retained where required by law or professional obligations.

Cookies

My website may use cookies to improve website functionality and understand visitor activity.

Where legally required, you will be asked for your consent before non-essential cookies are placed on your device.

You may manage cookie preferences through your browser settings.

Confidentiality

Confidentiality is one of the foundations of counseling.

Information shared during counseling sessions is treated as confidential except where disclosure is required by law or where there is a serious and immediate risk of harm to yourself or another person.

The limits of confidentiality will be discussed as part of the informed consent process before counseling begins.

International Clients

The Schmidts Institute primarily serves members of the international community living in the Netherlands and clients located in other countries.

Where personal information is transferred internationally, appropriate safeguards will be used in accordance with applicable data protection laws.

Contact

If you have questions about this Privacy Policy or how your personal information is handled, please contact:

Andrew Kaufman, LSW
Founder | The Schmidts Institute

📧 info@theschmidtsinstitute.com

Updates to This Privacy Policy

This Privacy Policy may be updated periodically to reflect changes in legal requirements, technology, or practice operations.

The most current version will always be available on this website.