Datenschutzerklärung

Privacy Policy

Last updated: 11 November 2026

1. Introduction

This Privacy Policy explains how personal data is processed when you visit this website, submit an enquiry or a consultation request, subscribe to occasional emails or contact me.

I process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Austrian Data Protection Act (DSG) and, where applicable, the Austrian Telecommunications Act 2021 (TKG 2021). This policy applies to this website and all of its pages.

2. Controller

Name

Anastasia Leksikova (Einzelunternehmen)

Address

Gersthofer Straße 111/30, 1180 Vienna, Austria

Email

anastasia.business.consulting@gmail.com

For questions about this policy or requests concerning your personal data, please use the email address above. Full business details are in the Impressum.

3. What is active now, and what is only planned

ActiveServices currently used on this website:

• Website hosting and platform services by Wix (including Wix Forms, the Wix contact list and Wix email subscription features for the enquiry form, the consultation request form and the optional email subscription)
• The Inter typeface, hosted on this website itself (no connection to Google or other third parties)
• A privacy-choice banner that stores your choice in your browser
• Links to LinkedIn and Instagram (external links only)

Planned, not installedGoogle Analytics 4, Google Ads tracking, Google Tag Manager, Meta Pixel and Microsoft Clarity are not installed and collect no visitor data at the moment. They are described in section 13 only so that you know what may be added later.

4. Categories of personal data

Depending on how you use the website, I may process:

• Contact details, such as your name, email address, phone or WhatsApp number and anything else you choose to write.
• Business information, such as your company name, website and the project or challenge you describe.
• Communication records, such as emails, appointment details and correspondence.
• Technical information, such as IP address, browser and device information, access times and requested pages.
• Details of a consultation request, such as the topic you would like to discuss and, if a consultation is arranged, scheduling and invoicing details.
• Email subscription records, if you opt in: your email address, the form you used, the date and time of your opt-in, its confirmation status and any later withdrawal.
• Contract and invoicing information, if we work together.

Please do not submit sensitive information, such as health data or other special-category data, through the enquiry form.

5. Website hosting and technical operation (Wix)

This website is hosted on the Wix platform. Wix Ltd. and its group companies and subprocessors process technical data needed to deliver the pages, keep the site secure and available, and measure the platform's performance. This can include IP address, browser information, requested URLs, access times and error logs.

When you open the site, Wix sets the technical storage needed to run the platform. At the time of writing this is one session cookie (client-session-bind) and local storage entries beginning with wix-visitor and wixSiteScript. Wix's own analytics and performance scripts are switched off by default and run only if you consent to analytics: the privacy banner on this site controls Wix's consent settings, so rejecting optional technologies also keeps these scripts off. If you accept analytics, Wix may additionally set analytics cookies (for example bSession) and send usage data to Wix.

Purpose: delivery, operation, security and troubleshooting of the website. Legal basis: Article 6(1)(f) GDPR (legitimate interest in running a secure and functional website). Storage that is strictly necessary for the service you request does not require consent under Section 165(3) TKG 2021.

Retention: server and platform logs are kept by Wix. I have no access to set their period; Wix keeps data for as long as necessary for its stated purposes and as required by law. See the Wix privacy policy: wix.com/about/privacy-policy.

6. Typeface (Inter)

The typeface used on this website (Inter, an open-source font under the SIL Open Font License) is stored on the same servers as the website itself. Your browser therefore does not connect to Google or any other third party to load it, and no data is transmitted to a third party for this purpose. The font file is delivered together with the website; as with every page request, the hosting provider (Wix) processes technical connection data such as your IP address, as described in section 5.

7. Project enquiry form

You can contact me through the enquiry form. It is available on the homepage and on the Contact page. It asks for your name, business email address and phone or WhatsApp number (all required) and, optionally, your business or website, the area you need help with and a description of your project, question or challenge. I use this information to review your enquiry, reply to you by email or phone and discuss possible next steps, including a free introductory call.

The phone or WhatsApp number is required so that I can reach you about your enquiry; without it the form cannot be submitted. If I reply to you through WhatsApp, WhatsApp's own terms and privacy notice apply to that conversation. I do not use your number for promotional messages.

Legal basis: Article 6(1)(b) GDPR for steps taken at your request before a contract, and Article 6(1)(f) GDPR for general business enquiries. Fields marked as required are needed to submit the form; without them I cannot respond.

Where it is stored: your submission is stored in Wix (form submissions and the Wix contact list) and is available to me through my Wix account. Spam protection uses a hidden form field and a minimum fill-in time on this site. No third-party captcha service is used.

Submitting an enquiry does not subscribe you to marketing emails. Subscription is a separate, optional choice (see section 7b).

7a. Consultation request form

You can request a paid one-to-one consultation through a separate consultation request form. It asks for your name, business email address and phone or WhatsApp number (all required) and, optionally, what you would like to discuss. I use this information to review your request, reply to you by email, and, if we go ahead, issue an invoice and arrange the session.

Submitting the form is a request, not a confirmed booking, and it does not create a payment obligation. Legal basis: Article 6(1)(b) GDPR for steps taken at your request before a contract. Where it is stored: in Wix, in the same way as enquiries (form submissions and the Wix contact list). The same notes on phone and WhatsApp as in section 7 apply.

7b. Optional email subscription

The enquiry form and the consultation request form each contain an optional checkbox. It is unticked by default, is not needed to send a form and is separate from this Privacy Policy. If you tick it, you ask to receive occasional emails from me with practical ideas on attracting more customers, improving sales and growing a business.

After you tick the box, you receive a confirmation email from Wix and you are subscribed only after you click the confirmation link (double opt-in). Until then your subscription status is pending and I do not send you marketing emails.

Data processed: your email address, your name if you gave it, the form you used, the date and time of your opt-in, its confirmation status and any withdrawal. Legal basis: your consent, Article 6(1)(a) GDPR and Section 174 TKG 2021. Your consent covers emails only. It does not cover WhatsApp, SMS or telephone contact.

Withdrawal: you can unsubscribe at any time using the link in every email or by writing to the email address in section 2. Withdrawal does not affect processing before it. I keep a record of the withdrawal so that I do not email you again. Subscriptions are managed with Wix's contact and email subscription features; no separate newsletter provider is used at the moment.

8. Email communication

If you write to me by email, or we continue talking after a form enquiry, I process your email address, name, message content and any attachments to reply and manage the conversation. My email address is a Gmail address, so email is handled by Google (Gmail), as described in the Google privacy policy.

Legal basis: Article 6(1)(b) GDPR for pre-contractual or contractual communication, otherwise Article 6(1)(f) GDPR.

9. Booking and payment for a consultation

A one-to-one consultation is requested through the consultation request form (section 7a). No booking is confirmed automatically, and payment is not processed on this website. After your request I reply by email, send an invoice and, once payment is received, send you a private link for scheduling the session. Payment is handled outside this website, against my invoice.

If I use a third-party scheduling tool for that link, its own privacy notice applies once you open it, and I will name the tool in this policy before it is used.

10. Cookies and similar technologies

Strictly necessary. The site stores your privacy choice in your browser's local storage (entry consent_v1). It records whether you accepted analytics and marketing, and the date, and is kept for up to 180 days or until you clear your browser data. The Wix platform storage described in section 5 (session cookie and visitor entries) is also used to run the hosting service.

Analytics and marketing. No optional analytics or marketing technologies are installed at the moment. If I add any, they will load only after you give the relevant consent.

11. Privacy choices and consent

When you first visit, a banner lets you reject all optional technologies, accept all, or choose between analytics and marketing separately. Rejecting is as easy as accepting, and you can use the whole website either way. Your choice is also passed on to the consent settings of the Wix platform that hosts this site. You can change or withdraw your choice at any time with Cookie settings in the footer of every page. Withdrawing consent does not affect processing carried out before withdrawal.

The legal basis for consent-based processing is Article 6(1)(a) GDPR and Section 165(3) TKG 2021.

12. Social media links

This website links to LinkedIn and Instagram. These are plain external links, not embedded plugins. When you click one, you leave this website and the privacy policy of that platform applies. No data is sent to those platforms merely by visiting this website.

13. Planned analytics and marketing tools (not installed)

Not activeI may add the following tools in the future. None of them is installed or collects data today. Before any of them is switched on, I will check its configuration, provider, data processing, cookie settings and consent requirements, and update this policy first. All of them would load only after your consent.

• Google Analytics 4, to understand how visitors use the website (Google Ireland Limited).
• Google Ads conversion tracking, to measure advertising results (Google Ireland Limited).
• Google Tag Manager, to manage the tags above (Google Ireland Limited).
• Meta Pixel, to measure advertising on Facebook and Instagram (Meta Platforms Ireland Limited).
• Microsoft Clarity, to analyse clicks, scrolling and sessions (Microsoft Ireland Operations Limited).

14. Recipients and processors

Personal data is shared only where needed for the purposes in this policy. Current recipients are Wix (hosting, forms and contact list), Google (Gmail for email), any scheduling or invoicing provider I use to arrange and bill a paid consultation (named in this policy before it is used) and professional advisers where needed for accounting or legal obligations. Where a provider acts as my processor, data processing terms under Article 28 GDPR apply. I do not pass your data to unrelated third parties.

15. International data transfers

Some of these providers or their subprocessors process data outside the EU/EEA, including in the United States and Israel. Where this happens, the transfer relies on a lawful mechanism under Chapter V GDPR, such as an adequacy decision (including the EU-U.S. Data Privacy Framework for certified recipients) or the European Commission's Standard Contractual Clauses. You can ask me for more information using the contact details above.

16. Data retention

I keep personal data only as long as it is needed for the purposes it was collected for, or as long as the law requires. Deletion of enquiries and correspondence is done by me manually; it is not automatic.

17. Data security

I use appropriate technical and organisational measures to protect personal data, such as restricted access, secure account login, encrypted transmission (HTTPS) and careful management of third-party service access. No method of transmission or storage over the internet can be guaranteed to be completely secure.

18. Your rights

Subject to the conditions of applicable law, you have the right to:

• access your personal data (Article 15 GDPR)
• have inaccurate data corrected (Article 16)
• have your data deleted (Article 17)
• restrict processing (Article 18)
• data portability (Article 20)
• object to processing based on legitimate interests (Article 21)
• withdraw consent at any time (Article 7(3))

To exercise your rights, write to anastasia.business.consulting@gmail.com. I will respond within the time limits set by law.

19. Automated decision-making

I do not use personal data collected through this website for decisions based solely on automated processing that have legal or similarly significant effects on you (Article 22 GDPR).

20. Right to lodge a complaint

If you believe the processing of your personal data infringes data protection law, you can lodge a complaint with a supervisory authority. In Austria this is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, www.dsb.gv.at. You may also contact another competent authority.

21. Changes to this policy

I update this policy when the website, the services used or legal requirements change. The current version is always on this page with its revision date. Where required, I will ask for your consent again before any new consent-based processing starts.