Privacy policy

This page briefly explains how OCD Klinikken processes personal data in connection with this website and ordinary digital contact. It is provided for information only and does not replace individual legal advice. Final wording may be adjusted after internal and external review.

Data controller

The data controller for processing personal data related to this website is OCD Klinikken. You can reach us via Contact.

Purposes and types of data

Contact via the website

When you use the contact form, we process the information you submit (typically name, email and message) so we can respond. Processing is carried out on a lawful basis under applicable data protection law (the specific basis is documented internally and may be refined with legal counsel).

Newsletter

When you subscribe to the newsletter, we process your email address, language choice and consent record so we can send professional knowledge, articles, information about courses and talks, and news about the clinic’s services. Processing is based on your consent, and the subscription only becomes active after you confirm it through a link in an email.

Your email address and necessary mail data are stored in encrypted form in our newsletter system. We record information including the consent-text version, time, language, source and subscription, delivery or unsubscribe status. Cloudflare temporarily processes mail and delivery data in order to send the message and return delivery events. Our delivery register keeps only a pseudonymised message ID, limited status codes and timestamps—not the recipient, subject or full SMTP response. We do not store an IP address or browser identifier as part of the consent record, and we do not use newsletter open or click tracking.

When unsubscribing, you may voluntarily select a fixed reason. The choice is recorded only as an anonymous monthly aggregate and is not linked to your email address or subscriber profile.

You can withdraw your consent at any time using the unsubscribe link in a newsletter. We may then keep a limited suppression record where necessary to honour the withdrawal and prevent further sending. Final retention periods and legal wording will be reviewed before public launch.

Operation and security

We may process technical and security-related data needed to operate and protect the website and systems (for example server or infrastructure logs where required).

Cookies and browser storage

Necessary features and your local consent choice use browser storage. With your prior choice, we may also use Google Analytics for aggregate analytics and Google Ads and Microsoft Advertising for general advertising measurement on eligible public pages. The accepted services are delivered technically through Google Tag Manager.

The measurement services and Tag Manager do not load before at least one relevant consent is granted. If you reject them, the website sends no analytics, advertising or cookieless consent-mode data to Google or Microsoft. We do not use remarketing, personalised health audiences, profiling, Enhanced Conversions, Customer Match, UET Insights, Microsoft Clarity, form content, email addresses or clinical user IDs in measurement.

See Cookies for purposes, choices, duration and how to change or withdraw your consent.

Booking

When you actively open the booking system on our booking page, your browser connects to EasyPractice. The information you enter in the booking system may include your name, contact details, chosen psychologist, appointment type and time. The information is processed to create and manage your booking.

EasyPractice does not load during an ordinary visit to the booking page, but only after you select View available times and book. See the EasyPractice privacy statement and cookie policy for information about the provider’s processing and browser technologies.

Online video consultations

Online consultations take place via Whereby. On our technical waiting-room pages, Whereby only loads after you actively choose to open the video room. Your browser then connects directly to Whereby, which may process the name entered in the waiting room, technical connection data and camera and audio streams in order to provide the consultation.

See the Whereby privacy policy and Whereby cookie policy for information about its processing and browser technologies.

Course enrolment and private courses

The course presentation is hosted on this website. When you choose to enrol or open My courses, you continue to OCD Klinikken’s separate course portal at kurser.ocdklinikken.dk, which is operated using LearnWorlds.

The course portal may process the account, contact, billing and payment details you provide, along with information you submit as part of a course. This information is used to complete enrolment and payment, give you access to your course, and provide the agreed course activities and feedback.

Please see the course portal’s privacy policy, cookie policy and terms before enrolling.

Recipients and transfers

Personal data is not shared with unrelated third parties for marketing purposes. Cloudflare for the website, database and transactional email, EasyPractice for booking and talk registration, Whereby for video consultations, LearnWorlds and the selected payment provider for the course portal, or other processors may be used as needed and under appropriate agreements where required.

If you consent to analytics or advertising measurement, Google and Microsoft may receive limited technical information about use of eligible public pages and generic measurement events. The providers may process information outside the EU/EEA under applicable transfer safeguards. The final production configuration, roles and transfer information will be reviewed before activation.

A later provider for newsletter campaign sends will only be added after a separate assessment and update to this information.

Retention

Data is kept only as long as necessary for the purpose for which it was collected (for example until your enquiry is resolved or according to internal retention rules).

Your rights

Under the GDPR you generally have the right of access, rectification, erasure, restriction of processing, data portability (where applicable) and the right to object to certain processing. You may also lodge a complaint with your supervisory authority.

To exercise your rights or ask questions, please use Contact.

Updates

We may update this policy when the website, operations or legislation change. Material changes should be clearly indicated on the site.