Datenschutzerklärung
Privacy Policy
1. Introduction
This Privacy Policy explains how personal data is processed when you visit this website, submit an enquiry, contact me or use the online booking link.
I process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021). This policy applies to this website and all of its pages.
2. Controller
- Name
- Anastasia Leksikova (Einzelunternehmen)
- Address
- Gersthofer Straße 111/30, 1180 Vienna, Austria
For questions about this policy or requests concerning your personal data, please use the email address above. Full business details are in the Impressum.
3. What is active now, and what is only planned
ActiveServices currently used on this website:
- Website hosting and platform services by Wix (including Wix Forms and the Wix contact list for the enquiry form)
- The Inter typeface, loaded from Google Fonts
- A link to Calendly for booking (an external link, not an embedded widget)
- A privacy-choice banner that stores your choice in your browser
- Links to LinkedIn and Instagram (external links only)
Planned, not installedGoogle Analytics 4, Google Ads tracking, Google Tag Manager, Meta Pixel and Microsoft Clarity are not installed and collect no visitor data at the moment. They are described in section 13 only so that you know what may be added later.
4. Categories of personal data
Depending on how you use the website, I may process:
- Contact details, such as your name, email address and anything else you choose to write.
- Business information, such as your company name, website and the project or challenge you describe.
- Communication records, such as emails, appointment details and correspondence.
- Technical information, such as IP address, browser and device information, access times and requested pages.
- Booking details submitted through Calendly.
- Contract and invoicing information, if we work together.
Please do not submit sensitive information, such as health data or other special-category data, through the enquiry form.
5. Website hosting and technical operation (Wix)
This website is hosted on the Wix platform. Wix Ltd. and its group companies and subprocessors process technical data needed to deliver the pages, keep the site secure and available, and measure the platform's performance. This can include IP address, browser information, requested URLs, access times and error logs.
When you open the site, Wix sets the technical storage needed to run the platform. At the time of writing this is one session cookie (client-session-bind) and local storage entries beginning with wix-visitor and wixSiteScript. Wix's own analytics and performance scripts are switched off by default and run only if you consent to analytics: the privacy banner on this site controls Wix's consent settings, so rejecting optional technologies also keeps these scripts off. If you accept analytics, Wix may additionally set analytics cookies (for example bSession) and send usage data to Wix.
Purpose: delivery, operation, security and troubleshooting of the website. Legal basis: Article 6(1)(f) GDPR (legitimate interest in running a secure and functional website). Storage that is strictly necessary for the service you request does not require consent under Section 165(3) TKG 2021.
Retention: server and platform logs are kept by Wix. I have no access to set their period; Wix keeps data for as long as necessary for its stated purposes and as required by law. See the Wix privacy policy: wix.com/about/privacy-policy.
6. Google Fonts
The typeface used on this website (Inter) is currently loaded from Google Fonts, a service of Google Ireland Limited. When your browser loads the font, it connects to Google servers and your IP address and basic browser data are transmitted to Google. This happens when a page is opened and does not depend on your privacy choice.
Purpose: consistent display of the website. Legal basis: Article 6(1)(f) GDPR. Retention: determined by Google; I do not store this data. Google privacy policy: policies.google.com/privacy.
7. Project enquiry form
You can contact me through the enquiry form. It asks for your name, email address, the area you need help with and a description of your project, question or challenge. I use this information to review your enquiry, reply to you and discuss possible next steps.
Legal basis: Article 6(1)(b) GDPR for steps taken at your request before a contract, and Article 6(1)(f) GDPR for general business enquiries. Fields marked as required are needed to submit the form; without them I cannot respond.
Where it is stored: your submission is stored in Wix (form submissions and the Wix contact list) and is available to me through my Wix account. Spam protection uses a hidden form field and a minimum fill-in time on this site. No third-party captcha service is used.
Submitting an enquiry does not subscribe you to marketing emails.
8. Email communication
If you write to me by email, or we continue talking after a form enquiry, I process your email address, name, message content and any attachments to reply and manage the conversation. My email address is a Gmail address, so email is handled by Google (Gmail), as described in the Google privacy policy.
Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual communication, otherwise Article 6(1)(f) GDPR.
9. Booking through Calendly
This website links to Calendly, a scheduling service operated by Calendly LLC. The link opens in a new tab; Calendly is not embedded in this website and no Calendly content loads until you click the link. Once you are on Calendly, its own privacy notice and cookies apply: calendly.com/legal/privacy-notice.
Calendly may process your name, email address, the appointment you choose, your time zone, answers to scheduling questions and technical data. I use this to organise the consultation. Legal basis: Article 6(1)(b) GDPR.
Payment is not processed on this website. If payment for a paid consultation is arranged through the booking process, the payment provider's own privacy notice applies, and this policy will be updated when that integration is in use.
10. Cookies and similar technologies
Strictly necessary. The site stores your privacy choice in your browser's local storage (entry consent_v1). It records whether you accepted analytics and marketing, and the date, and is kept for up to 180 days or until you clear your browser data. The Wix platform storage described in section 5 (session cookie and visitor entries) is also used to run the hosting service.
Analytics and marketing. No optional analytics or marketing technologies are installed at the moment. If I add any, they will load only after you give the relevant consent.
11. Privacy choices and consent
When you first visit, a banner lets you reject all optional technologies, accept all, or choose between analytics and marketing separately. Rejecting is as easy as accepting, and you can use the whole website either way. Your choice is also passed on to the consent settings of the Wix platform that hosts this site. You can change or withdraw your choice at any time with Cookie settings in the footer of every page. Withdrawing consent does not affect processing carried out before withdrawal.
The legal basis for consent-based processing is Article 6(1)(a) GDPR and Section 165(3) TKG 2021.
12. Social media links
This website links to LinkedIn and Instagram. These are plain external links, not embedded plugins. When you click one, you leave this website and the privacy policy of that platform applies. No data is sent to those platforms merely by visiting this website.
13. Planned analytics and marketing tools (not installed)
Not activeI may add the following tools in the future. None of them is installed or collects data today. Before any of them is switched on, I will check its configuration, provider, data processing, cookie settings and consent requirements, and update this policy first. All of them would load only after your consent.
- Google Analytics 4, to understand how visitors use the website (Google Ireland Limited).
- Google Ads conversion tracking, to measure advertising results (Google Ireland Limited).
- Google Tag Manager, to manage the tags above (Google Ireland Limited).
- Meta Pixel, to measure advertising on Facebook and Instagram (Meta Platforms Ireland Limited).
- Microsoft Clarity, to analyse clicks, scrolling and sessions (Microsoft Ireland Operations Limited).
14. Recipients and processors
Personal data is shared only where needed for the purposes in this policy. Current recipients are Wix (hosting, forms and contact list), Google (Google Fonts, and Gmail for email), Calendly (if you use the booking link) and professional advisers where needed for accounting or legal obligations. Where a provider acts as my processor, data processing terms under Article 28 GDPR apply. I do not pass your data to unrelated third parties.
15. International data transfers
Some of these providers or their subprocessors process data outside the EU/EEA, including in the United States and Israel. Where this happens, the transfer relies on a lawful mechanism under Chapter V GDPR, such as an adequacy decision (including the EU-U.S. Data Privacy Framework for certified recipients) or the European Commission's Standard Contractual Clauses. You can ask me for more information using the contact details above.
16. Data retention
I keep personal data only as long as it is needed for the purposes it was collected for, or as long as the law requires. Deletion of enquiries and correspondence is done by me manually; it is not automatic.
| Data | How long |
|---|---|
| Hosting and platform logs (Wix) | Set by Wix, as long as necessary for its purposes and legal duties. |
| Privacy choice (browser) | Up to 180 days, or until you clear your browser data. |
| Enquiries from the form (Wix submissions and contact list) | While your enquiry is being answered and followed up. If no collaboration follows, I delete the data once it is no longer needed for that purpose, or earlier if you ask. If we work together, it becomes part of the client records below. |
| Email correspondence | Same criteria as enquiries. For client work, see client records. |
| Client and contract records | For the duration of the work, and afterwards as long as legal retention duties or limitation periods for possible claims require. |
| Booking records (Calendly) | Kept by Calendly under its terms and my account settings. I remove bookings that are no longer needed. |
| Accounting and invoicing records | For the statutory retention period under Austrian law (generally seven years). |
| Analytics and marketing data | None is collected at the moment. |
17. Data security
I use appropriate technical and organisational measures to protect personal data, such as restricted access, secure account login, encrypted transmission (HTTPS) and careful management of third-party service access. No method of transmission or storage over the internet can be guaranteed to be completely secure.
18. Your rights
Subject to the conditions of applicable law, you have the right to:
- access your personal data (Article 15 GDPR)
- have inaccurate data corrected (Article 16)
- have your data deleted (Article 17)
- restrict processing (Article 18)
- data portability (Article 20)
- object to processing based on legitimate interests (Article 21)
- withdraw consent at any time (Article 7(3))
To exercise your rights, write to anastasia.business.consulting@gmail.com. I will respond within the time limits set by law.
19. Automated decision-making
I do not use personal data collected through this website for decisions based solely on automated processing that have legal or similarly significant effects on you (Article 22 GDPR).
20. Right to lodge a complaint
If you believe the processing of your personal data infringes data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at. You may also contact another competent authority.
21. Changes to this policy
I update this policy when the website, the services used or legal requirements change. The current version is always on this page with its revision date. Where required, I will ask for your consent again before any new consent-based processing starts.