Privacy Policy

Please read this Privacy Policy carefully before using this website

Last updated: 3 May 2026

This Privacy Policy explains how Irina Kisielowa (“we”, “us”) processes personal data in connection with the website kisielowa.com and related enquiries, consultations, courses, workshops, translation, editorial and cultural coaching services.

This Privacy Policy is intended to meet the information requirements of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), the Austrian Data Protection Act (“DSG”) and, for cookies and similar technologies, the Austrian Telecommunications Act 2021 (“TKG 2021”).

This document is a general website privacy notice. It does not replace any separate agreement, consent notice or privacy information that may be provided for a specific service, booking, payment, newsletter, online meeting, research cooperation or institutional engagement.

1. Controller

The controller responsible for the processing of personal data described in this Privacy Policy is:

Irina Kisielowa

Vienna, Austria

Website: https://kisielowa.com/

Email: irina@kisielowa.com

If additional legal notice or imprint information is required for a specific service, it is provided on the website or in the relevant contractual communication.

2. Personal data we process

Depending on how you use the website or contact us, we may process the following categories of personal data:

Technical and usage data: IP address, date and time of access, browser type and version, operating system, device information, pages visited, referrer URL, language settings, error logs, security logs and similar technical identifiers.
Contact data: name, email address, telephone number, organisation, role, country and the content of your message.
Service and booking data: information about requested consultations, lessons, workshops, translation or editorial projects, preferred dates, professional context, language level, learning goals, project files or materials that you voluntarily provide.
Contract and payment data: billing details, invoice data, VAT-relevant information, payment status and transaction references. Payment card or payment account data may be processed by external payment providers and is normally not stored by us.
Communication data: emails, messages, meeting arrangements, feedback and related correspondence.
Newsletter or marketing data, if applicable: email address, subscription status, consent record, opening or click statistics where such tracking is used with a valid legal basis.
Cookie and consent data: information about your cookie choices, consent status and similar settings.
Public or voluntarily submitted content: testimonials, comments, professional references or other content you provide for publication, where applicable.

We do not intentionally collect special categories of personal data under Art. 9 GDPR unless you voluntarily provide such information and it is necessary for a specific request or service. Please avoid sending sensitive information unless it is necessary for your enquiry.

3. Purposes and legal bases

We process personal data only where there is a legal basis under Art. 6 GDPR.

Website operation and security

We process technical and usage data to provide the website, maintain security, prevent misuse, troubleshoot errors, ensure availability and protect our legitimate interests in operating a secure and functional website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interests in website operation, IT security and fraud prevention). Where cookies or terminal access are technically necessary, they may also be used without consent under Section 165(3) TKG 2021.

Contact requests and pre-contractual communication

If you contact us by email, contact form, social media link or other communication channel, we process the data you provide to respond to your request and to take pre-contractual steps at your request.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures or contract performance) and, where applicable, Art. 6(1)(f) GDPR (legitimate interest in responding to professional enquiries).

Consultations, lessons, workshops, translation and editorial services

We process service, communication and project data to prepare, perform and document agreed services.

Legal basis: Art. 6(1)(b) GDPR (contract performance or pre-contractual measures). Where processing is required by law, for example for tax or accounting purposes, the legal basis is Art. 6(1)(c) GDPR.

Billing, accounting and legal administration

We process contract, invoice and payment-related data for invoicing, bookkeeping, tax compliance, legal documentation and the establishment, exercise or defence of legal claims.

Legal basis: Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligations) and Art. 6(1)(f) GDPR (legitimate interest in legal administration and claim management).

If you subscribe to a newsletter or expressly ask to receive updates, we process your contact data for that purpose. You may unsubscribe at any time.

Legal basis: Art. 6(1)(a) GDPR (consent) where consent is required. In limited cases involving existing customers and similar services, direct marketing may also be based on legitimate interests, subject to your right to object and applicable Austrian and EU rules on electronic communication.

Analytics, tag management and marketing technologies

The website may use analytics, tag management or similar services to understand website use, improve content and measure the performance of online communication. Technologies that are not technically necessary are used only if you have given valid consent through the relevant consent mechanism, where required.

Legal basis: Art. 6(1)(a) GDPR (consent) together with Section 165(3) TKG 2021 for non-essential cookies or similar technologies. You may withdraw consent at any time with effect for the future.

Testimonials, references and public content

If you provide a testimonial, reference, image, professional title or similar content for publication, we process and publish it only where we have a suitable legal basis.

Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR where publication is part of an agreed arrangement.

4. Cookies and similar technologies

Cookies and similar technologies may store information on your device or access information stored on your device.

Technically necessary cookies may be used to make the website function, maintain security, remember essential settings, prevent misuse, manage consent preferences or provide a service expressly requested by you. These do not require prior consent under Section 165(3) TKG 2021.

Non-essential cookies and similar technologies, including analytics, advertising, social media tracking or comparable tools, are used only with your prior consent where required. No non-essential cookies should be set before such consent is obtained.

You can withdraw or change your consent at any time through the website’s consent settings, where available, or by adjusting your browser settings. Browser settings may also allow you to delete cookies or block future cookies. Blocking cookies may affect some website functions.

The website may use third-party infrastructure and services, including hosting, CDN, security, tag management, fonts, analytics, booking, payment, newsletter, video-conferencing or social media services. The precise cookies and technologies may change over time and should be disclosed in the consent tool or cookie information available on the website.

5. Recipients and processors

We may share personal data with recipients only where this is necessary and legally permitted. Recipients may include:

hosting, website platform, CDN, security and anti-abuse providers;
email, communication, booking, calendar and video-conferencing providers;
newsletter or customer communication providers, where used;
payment service providers, banks and accounting providers;
tax advisors, legal advisors and other professional advisors;
public authorities, courts or administrative bodies where legally required;
cooperation partners or institutions where this is necessary for a service requested by you.

Where service providers process personal data on our behalf, we use processors within the meaning of Art. 28 GDPR where required and take reasonable steps to ensure appropriate contractual, technical and organisational safeguards.

6. International transfers

Some service providers or cooperation partners may process personal data outside the European Economic Area (“EEA”). Where personal data is transferred outside the EEA, we use a valid transfer mechanism under Chapter V GDPR, such as:

an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for certified US organisations where applicable;
Standard Contractual Clauses approved by the European Commission;
additional safeguards where required; or
a specific derogation under Art. 49 GDPR in exceptional cases.

International transfers are assessed in light of the nature of the service, the recipient, the country of destination and the safeguards available.

7. Storage periods

We keep personal data only for as long as necessary for the purposes described above or as required by law.

Typical storage periods are:

website and security logs: for a limited period necessary for security, troubleshooting and abuse prevention, unless longer storage is required for a specific incident;
contact enquiries that do not lead to a contract: generally up to 12 months after the last communication, unless a longer period is justified by the context;
contractual, billing and accounting records: generally for the statutory retention periods under Austrian tax and accounting rules, commonly seven years, and longer where necessary for legal claims;
project and service materials: for the duration necessary to perform the service and document the relationship, unless a different retention period is agreed;
newsletter data: until you unsubscribe or withdraw consent, unless limited data must be retained to document the unsubscribe or consent status;
consent records: for as long as necessary to demonstrate compliance.

Where legal claims may arise, data may be retained for the applicable limitation periods.

8. Your rights

Under the GDPR, you may have the right to access, rectify, erase or restrict the processing of your personal data, the right to data portability, the right to object to processing, and the right not to be subject to certain automated decisions. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

To exercise your rights, contact us at irina@kisielowa.com. We may need to verify your identity before responding.

You also have the right to lodge a complaint with the Austrian Data Protection Authority:

Österreichische Datenschutzbehörde

Barichgasse 40-42

1030 Vienna, Austria

Website: https://www.dsb.gv.at/

Email: dsb@dsb.gv.at

9. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No website or electronic communication system can be guaranteed to be completely secure. If a personal data breach occurs, we will handle it in accordance with GDPR requirements, including notification to the supervisory authority and affected individuals where legally required.

The website may contain links to third-party websites or social media profiles. If you follow such links, the respective provider is responsible for its own processing of personal data. Please review the privacy information of the relevant third-party provider.

If social media links or embedded third-party content are used, the third-party provider may process data according to its own terms and privacy policy. Non-essential tracking through such services should occur only with your consent where required.

11. Children

The website and services are intended primarily for adults and professionals. We do not knowingly collect personal data from children for general website use. If services are requested for a minor, the involvement or consent of a parent or legal guardian may be required.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical or organisational changes. The version published on the website applies from the date stated above. Material changes will be communicated in an appropriate manner where required.

13. Contact

If you have questions about this Privacy Policy or the processing of your personal data, please contact: