Last Updated: 28.01.2025
Privacy Statement of MyMind and MyMind at Work
MyMind ("we", "us" or "our") is committed to protecting and respecting your privacy. This Privacy Statement outlines your privacy rights and sets out how we, as a Data Controller, collect, use, process, and disclose your personal data relating to your interactions with our websites https://app.mymind.org/ and https://app.mymindatwork.ie/ (the "Sites").
This Privacy Statement details how we collect and process personal data about:
- Visitors to our Sites;
- Clients who use our services;
- Corporate clients and their employees who use MyMind at Work services;
- Individuals we communicate or interact with in the course of our business;
- Individuals whose personal data is provided to us in connection with the provision of our services, e.g., clients' next of kin.
1. Information We Collect
"Personal data" under Data Protection Law (including the EU General Data Protection Regulation 2016/679 (GDPR), the EU Privacy and Electronic Communications Directive 2002/58/EC, and all national implementing legislation) means any information about an individual from which that person can be identified. You can use our Sites without being required to provide personal data to us. We only collect personal data about you on the Sites which you voluntarily provide, such as by emailing us, using our online forms, booking appointments, or accessing services.
We collect and process the following types of personal data about you:
- Identity Data: Name, username or similar identifier, civil status, title, date of birth, and gender.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Bank account and payment card details.
- Transaction Data: Details about payments to and from you and other details of services you have purchased from us.
- Technical Data: Internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system, and platform.
- Profile Data: Username and password, purchases or orders made by you, interests, preferences, feedback, and survey responses.
- Usage Data: Information about how you use our Sites and services.
- Marketing and Communications Data: Preferences for receiving marketing from us and our third parties and your communication preferences.
- Sensitive Personal Data: Includes data about race, ethnicity, religious or philosophical beliefs, sex life, sexual orientation, health data, and mental health details provided when booking appointments. This data is used exclusively to provide mental health care services.
If you do not provide the requested information, we may be unable to deliver our services to you or respond to your inquiries.
2. Purposes for Which Data is Collected and Processed
MyMind processes the types of data listed above for the following purposes:
| Purpose(s) for Processing | Legal Basis for Processing |
|---|---|
| For technical and operational reasons related to maintaining and operating our Sites. | Legitimate interests in managing our business and providing services, balanced against user rights. |
| Communicating with clients or corporate representatives. | Legitimate interests, as above. |
| Registering and creating user accounts. | Legitimate interests, as above. |
| Scheduling and managing appointments requested by clients. | Necessary to perform our contract with you. |
| Sharing data with volunteers or external professionals to arrange appointments. | Necessary to perform our contract with you. |
| Marketing services to users. | Consent, which may be withdrawn at any time. |
From time to time, we may use client information for new purposes not previously disclosed. In such cases, we will notify you and provide an option to opt out before processing your data for these new purposes.
3. Recipients of Data
We may disclose your personal data to third parties who provide services to us, such as:
- Internet service providers who record data on our behalf and are bound by confidentiality provisions;
- Volunteers (e.g., psychotherapists, psychologists, psychiatrists) arranging appointments on your request;
- Prospective buyers or sellers if we sell or buy business assets;
- Legal authorities or fraud prevention organisations, if required.
Personal data shared with mental health professionals during sessions is managed by them as independent data controllers. Such data is subject to their professional obligations.
We do not transfer your personal data outside the European Economic Area (EEA) unless necessary and safeguarded by appropriate measures. For more information on such safeguards, please contact us.
4. Your Rights
Under GDPR, you have rights to:
- Access: Request copies of your personal data.
- Rectification: Correct inaccurate or incomplete personal data.
- Erasure: Request deletion of your personal data under certain conditions.
- Restriction: Halt processing of your personal data under specific circumstances.
- Objection: Object to processing based on legitimate interests.
- Data Portability: Request transfer of your personal data to another party or directly to you.
To exercise these rights, please contact us (see below). We may require proof of identity to verify your request. Requests will be addressed within one month unless extended due to complexity.
You also have the right to lodge complaints with the Irish Data Protection Commission:
- Email: info@dataprotection.ie
- Phone: (01) 765 01 00
- Address: Data Protection Commissioner, Canal House, Station Road, Portarlington, Co. Laois, R32 AP23
5. Security of Your Data
We use strict security measures, including EV SSL encryption, to safeguard your data. While we cannot guarantee absolute security, we continuously update our practices to mitigate risks. Your personal data will be retained as necessary to provide services, comply with legal requirements, or defend legal claims.
6. Changes to This Privacy Statement
We may update this Privacy Statement periodically. Material changes will be highlighted with prior notice on the Sites. Please review this statement regularly.
7. Contact Information
For privacy-related queries, please contact:
Data Protection Officer: Krystian Fikert
Email: hq@mymind.org
Address: 137 Rathmines Road Lower, Rathmines, Dublin 6, Ireland
Phone: (+353) 818 500 800