Free downloads · Checking in on mental health & understanding your emotions
Yaëlle Halberstam — Clinical Therapy, Sexology & Couple Therapy
Privacy

Privacy policy

Last updated: 4 July 2026

Your privacy matters. This policy explains who processes your personal data when you use this website, for what purposes, on what legal basis, who it is shared with, and what rights you have. It follows Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

  • Controller: Yaëlle Halberstam
  • Tax ID (NIF / NIE): Y7736795T
  • Address: Carrer d’Aragó 290, Principal, 08009 Barcelona, Spain
  • Data contact: yaelle@yaellehalberstam.com

2. What data we process and how we obtain it

We only process data you voluntarily provide through the website:
  • Contact form: name, email, phone (optional), age (optional), language, how you found us, and the content of your message.
  • Newsletter: email and language.
  • Free guide downloads: email and language.
  • Retreat spot requests: name, email, phone and room preference.
  • Technical data: connection data strictly necessary to serve the site securely (e.g. IP address in server logs).

3. Special category data (health)

If you choose to share information relating to your physical or mental health in your message, this is considered special category data (Art. 9 GDPR), with reinforced protection. We only process it to the extent you choose to provide it, on the basis of your explicit consent and to respond to your request. Please do not include more sensitive information than necessary in a first contact.

4. Purposes and legal bases

  • Responding to your enquiries and requests — basis: pre-contractual measures or your consent (Art. 6(1)(b)/(a)); for health data, explicit consent (Art. 9(2)(a)).
  • Sending the newsletter — basis: your consent (Art. 6(1)(a)), withdrawable at any time.
  • Sending the guides you request — basis: your consent (Art. 6(1)(a)).
  • Managing retreat bookings — basis: performance of a contract or pre-contractual measures (Art. 6(1)(b)).
  • Complying with legal obligations and, where relevant, handling or defending claims — basis: legal obligation and legitimate interest (Art. 6(1)(c)/(f)).

5. Retention periods

We keep your data for as long as the relationship or the matter lasts and, afterwards, for the periods legally required to address any liabilities. Newsletter data is kept until you unsubscribe. When no longer necessary, data is securely deleted or anonymised.

6. Recipients and processors

We do not sell your data. It is only shared with providers who serve us as processors, bound by contract and by our instructions:
  • Vercel Inc. — website hosting.
  • Supabase — database and storage of the messages received.
  • Brevo (Sendinblue SAS, France) — email delivery and newsletter management.
  • Google — practice map (Google Maps) and embedded videos (YouTube in no-cookie mode).
We may also disclose data where legally required.

7. International transfers

Some providers (for example, Vercel or Google) may process data outside the European Economic Area. In such cases, the transfer relies on appropriate safeguards under the GDPR, such as the European Commission’s Standard Contractual Clauses or applicable adequacy decisions.

8. Commercial communications

We will only send you electronic communications if you have given your consent (Art. 21 LSSI-CE). You can unsubscribe at any time via the link in every email or by contacting us.

9. Your rights

You may exercise your rights at any time to:
  • Access, rectification and erasure.
  • Restriction of and objection to processing.
  • Data portability.
  • Withdraw consent given, without retroactive effect.
To exercise them, write to yaelle@yaellehalberstam.com stating the right you wish to exercise. If you believe your request has not been handled properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

10. Security

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted connections (HTTPS) and restricted access.

11. Minors

The website and services are aimed at adults. We do not knowingly collect data from minors. If you are a parent or guardian and believe a minor has provided us with data, contact us and we will delete it.

12. Cookies

This site uses only technical cookies necessary for its operation (for example, to remember your language or maintain the private-area session). We do not use third-party analytics or advertising cookies. Embedded Google Maps and YouTube content may set their own cookies when you interact with them; for videos we use “no-cookie” mode. You can manage cookies from your browser settings.

13. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The current version will be published on this page with its update date.