Privacy Policy

Last Updated: 29/10/2025

1. Data Protection at a Glance

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website or inquire about my services. Personal data is any data that can be used to personally identify you.

Data Collection on this Website

Who is responsible for data collection on this website? Data processing on this website is carried out by the website operator: Anna Korlath (see the section "Information about the Data Controller").

How do I collect your data?

• Directly: Data that you provide to me (e.g., via the service inquiry form or the newsletter subscription).

• Automatically: Technical data that is automatically recorded by my IT systems when you visit the website (e.g., browser, operating system, IP address).

What do I use your data for?

• To respond to service inquiries and initiate contracts.

• To send my newsletter (with your consent).

• To ensure the technically flawless provision and optimization of the website.

• To provide contractual services, using AI features from Google Workspace.

What rights do you have regarding your data? You have the right at any time to receive free information about the origin, recipient, and purpose of your stored personal data, as well as the right to request the rectification or erasure of this data. If you have given consent to data processing (e.g., for the newsletter), you can revoke this consent at any time for the future. You also have the right to lodge a complaint with the competent supervisory authority.

2. General Information and Mandatory Disclosures

Data Protection

I take the protection of your personal data very seriously. I treat your personal data confidentially and in accordance with statutory data protection regulations and this Privacy Policy.

Information about the Data Controller

The controller responsible for data processing on this website is:

Anna Korlath 

Address: Via Alcide de Gasperi 13, 20092 Cinisello Balsamo, MI, Italy 

Email: anna@korlath.at

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data Retention Period

Unless a more specific storage period is mentioned within this Privacy Policy, your personal data will remain with me until the purpose for the data processing ceases to apply. If you assert a legitimate request for erasure or revoke consent to data processing, your data will be erased, provided I have no other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, erasure will occur after these reasons cease to exist.

Legal Bases for Data Processing

• Consent (Art. 6 para. 1 lit. a GDPR): If you have given me explicit consent (e.g., for the newsletter). Consent can be revoked at any time.

• Performance of a Contract and Pre-Contractual Measures (Art. 6 para. 1 lit. b GDPR): If the data is necessary for the performance of a contract or for taking steps prior to entering into a contract (e.g., responding to your service inquiry).

• Legal Obligation (Art. 6 para. 1 lit. c GDPR): If the processing is necessary for compliance with a legal obligation (e.g., retention of invoices).

• Legitimate Interest (Art. 6 para. 1 lit. f GDPR): If the processing is necessary for the purposes of the legitimate interests pursued by me or by a third party, except where such interests are overridden by your interests, fundamental rights, and freedoms (e.g., technical security of the website, direct marketing to existing customers).

Information on Data Transfer to Third Countries (Google Workspace and Microsoft OneDrive)

I use services from Google and Microsoft, whose server locations may be outside the European Union (EU) or the European Economic Area (EEA) (so-called third countries, e.g., the USA).

When transferring personal data to a third country, I ensure that appropriate safeguards (e.g., the Standard Contractual Clauses of the EU Commission (SCCs)) are in place to guarantee an adequate level of data protection.

Right to Withdraw Consent and Right to Object

• Withdrawal of Consent: You can revoke any consent you have already given (e.g., for the newsletter) at any time. The lawfulness of the data processing carried out before the withdrawal remains unaffected.

• Right to Object to Data Collection in Special Cases (Art. 21 GDPR): If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time to the processing of your personal data.

• Right to Object to Direct Marketing: You have the right to object at any time to the processing of your personal data for the purpose of direct marketing.

Your Rights as a Data Subject

You have the right at any time to:

• Information about your stored data.

• Rectification of inaccurate data.

• Erasure of your data.

• Restriction of the processing of your data.

• Data Portability (receiving the data in a common format).

• Complaint to the competent supervisory authority.

3. Data Collection and Processing on this Website

Server Log Files

The website provider automatically collects and stores information in so-called server log files. This serves the technical error detection and security of the website.

• Data Collected: Browser type, operating system, referrer URL, host name, time of server request, IP address.

• Legal Basis: Legitimate Interest (Art. 6 para. 1 lit. f GDPR) in the technically flawless display and optimization of the website.

Service Inquiry via Email or Form

If you contact me via email or use the service inquiry form, your inquiry, including all personal data arising therefrom (name, email address, project details), will be stored and processed for the purpose of handling your request.

• Legal Basis: Performance of a Contract or pre-contractual measures (Art. 6 para. 1 lit. b GDPR) or Legitimate Interest in the effective handling of inquiries (Art. 6 para. 1 lit. f GDPR).

Newsletter Data

If you wish to subscribe to my newsletter, I require your email address and information that allows me to verify that you are the owner of the email address provided and agree to receive the newsletter (Double-Opt-In procedure).

• Legal Basis: Consent (Art. 6 para. 1 lit. a GDPR). Consent can be revoked at any time.

• Data Retention Period: The data will be stored until you unsubscribe and subsequently deleted.

• Newsletter Service Provider Used: [Name of Email Service Provider (e.g., Mailchimp, Substack, ConvertKit)] Provider: [Provider's Address] Details on data processing can be found in the provider's privacy policy: [Link to Privacy Policy]

4. Use of AI Tools and Third-Party Services

Use of Google Workspace (incl. AI features) and Microsoft OneDrive

I use Google Workspace (Gmail, Google Docs, Google Meet) for internal and external communication and for document creation (quotes, contracts). I use Microsoft OneDrive for the secure storage of project data, files, and backup purposes.

Use of AI Tools in the Workflow: As part of my service, I use AI features from Google Workspace (e.g., Gemini) or other Google services during Discovery Calls and Project Implementation. These tools may be used for brainstorming, summarizing meeting notes, creating text drafts, or analyzing project information.

• Data Processed: Communication data, project details, and all data you provide to me during collaboration.

• Purpose: Efficient project handling, quality assurance, and optimization of the creative process.

• Legal Basis: Performance of a Contract (Art. 6 para. 1 lit. b GDPR) and my Legitimate Interest in using modern, efficiency-enhancing technologies (Art. 6 para. 1 lit. f GDPR).

• Processor Agreement: The necessary Data Processing Agreements (DPA) have been concluded with Google and Microsoft.

• Data Protection Information:

  • Google Workspace: https://policies.google.com/privacy and https://cloud.google.com/security/gdpr

  • Microsoft OneDrive: https://privacy.microsoft.com/de-de/privacystatement

Audio and Video Conferencing

I use online conference tools for discovery calls and coordination with clients.

• Tool Used: Google Meet (part of Google Workspace).

• Data Processed: Email address, conference metadata (duration, number of participants), technical data (IP address, device type). If you share content or if I record the session with your consent, this data will also be processed.

• Legal Basis: Performance of a Contract (Art. 6 para. 1 lit. b GDPR) or Legitimate Interest in efficient communication (Art. 6 para. 1 lit. f GDPR).

5. Hosting

I host the content of my website with the following provider:

Google Ireland Limited

 Provider: 

Google Ireland Limited

Gordon House, Barrow Street

Dublin 4

Ireland

Details can be found in the provider's privacy policy: https://policies.google.com/privacy?hl=en-US

• Legal Basis: Legitimate Interest (Art. 6 para. 1 lit. f GDPR) in a reliable display of the website.

• Processor Agreement: I have concluded a Data Processing Agreement (DPA) with the hosting provider.

6. Social Media Presences

This Privacy Policy applies to the following social media presences: https://www.linkedin.com/in/anna-korlath/ https://www.instagram.com/anna_korlath/

Data processing by social networks: When visiting my social media presences, the operator of the respective network can extensively analyze your user behaviour. Data may also be collected even if you are not logged in. I point out that I have no complete influence on these data processing operations.

Controller and Legal Basis: I maintain these profiles within the scope of my Legitimate Interest (Art. 6 para. 1 lit. f GDPR) in a comprehensive presence on the internet. I am jointly responsible with the platform operator for the data processing operations triggered by this visit. Details on data processing can be found directly in the privacy policies of the respective platform.