This privacy policy explains how isaeva - coaching (Daria Isaeva) collects, uses, and protects personal data when you visit this website, register for the Transformation 360° program, or work with us as a client. Compliant with the Swiss Federal Act on Data Protection (revFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).
The data controller responsible for the processing of personal data on this website is:
isaeva - coaching
Daria Isaeva
Stämpbachpark 2
3067 Boll, Switzerland
Email: isaeva.daria.coaching@gmail.com
This policy serves the disclosure obligations under both the Swiss Federal Act on Data Protection (revFADP) and the EU General Data Protection Regulation (GDPR). For consistency, we use the GDPR terminology throughout (e.g., "processing" instead of the Swiss "Bearbeiten"), while the legal meaning under Swiss law is determined by the revFADP.
Under Swiss law, processing is permitted when carried out in good faith, in proportion to its purpose, and for a clearly recognisable purpose (Art. 6 revFADP). Under the GDPR, where applicable, we rely on the following legal bases:
When you fill out the application form:
When you book a discovery call via TidyCal, that platform collects your name, email, and chosen time slot directly. See section 7.
When you become a client, additional data is processed in the course of delivering coaching services (see section 5).
When you visit this website, the hosting provider may automatically log technical data:
This data is used solely for security, troubleshooting, and basic aggregate statistics. It is not used to identify individual visitors. Server log files are typically retained for a maximum of 30 days.
We process personal data only for the following clearly defined purposes:
We do not use your data for automated decision-making, profiling, or behavioural advertising.
If you become a client, we process your data in the course of delivering coaching services. This includes:
The categories, scope, and necessity of processing are determined by the underlying coaching agreement. Sensitive personal information you share during coaching sessions is treated with strict confidentiality and is not disclosed to third parties without your explicit consent, except where required by law or to protect vital interests.
Legal basis: Contractual necessity (Art. 6(1)(b) GDPR / Art. 6 revFADP).
Coaching sessions are typically conducted via video conferencing. We use the following platforms:
Zoom Video Communications, Inc. (San Jose, USA). When you join a Zoom session, the platform processes your name, email (if you log in with an account), IP address, device and browser information, audio and video streams during the session, and any chat messages. Zoom may also process metadata about the session itself (start time, duration, participants).
Some sessions may be recorded and stored in Zoom Cloud if you and the coach agree in advance. Recordings are used only for the agreed purpose (typically client reference or coach reflection) and are deleted when no longer needed. Recording only takes place with your explicit prior consent at the start of the session.
Zoom is certified under the EU-US and Swiss-US Data Privacy Frameworks. See Zoom's privacy policy.
Microsoft Ireland Operations Limited (Dublin) and Microsoft Corporation (USA). Similar data is processed: name, email, IP address, device and browser data, audio and video during sessions, chat messages, and session metadata. Microsoft Teams meetings are not recorded by default; recording, if any, follows the same consent rule as for Zoom.
Microsoft is certified under the EU-US and Swiss-US Data Privacy Frameworks. See Microsoft's privacy statement.
The following service providers process personal data on our behalf or independently. Each has its own privacy policy.
TidyCal, operated by SureSwift Capital Inc. (USA). When you book a discovery call, your name, email, and chosen time are processed by TidyCal. See tidycal.com/privacy-policy.
Google Ireland Limited (Dublin) / Google LLC (USA). Email correspondence with us is processed via Gmail. Google acts as a processor for email storage and delivery. See policies.google.com/privacy.
Meta Platforms Ireland Limited (Dublin). If you choose to communicate via WhatsApp during the coaching engagement, Meta processes your phone number, messages, and metadata. WhatsApp use is optional and based on your initiative. See whatsapp.com/legal/privacy-policy.
Web fonts (Fraunces, Inter, JetBrains Mono) are loaded from Google Fonts. When fonts are loaded, your IP address is briefly transmitted to Google. See policies.google.com/privacy.
This site is hosted by [hosting provider name and country — e.g. Netlify, Inc., USA]. The hosting provider processes server logs as described in section 3.2 to deliver the website and protect against abuse.
Invoices are issued in your name. Payment is handled directly between your bank and ours via bank transfer or Twint. No third-party payment processor is involved on this website. We do not collect, store, or have access to your banking or card details.
Some of the service providers listed above (Google, Microsoft, Zoom, TidyCal/SureSwift, Meta) are based in or transfer data to the United States. For these transfers we rely on the following safeguards:
This dual protection ensures that should the DPF be revised or invalidated, the SCCs remain in place as a reliable fallback. The current list of DPF-certified companies is available at dataprivacyframework.gov.
This website uses only essential cookies required for basic functionality. No analytics, advertising, social media, or behavioural tracking cookies are set.
If non-essential cookies are added in future (such as Google Analytics or similar), this section will be updated and a cookie consent banner will be implemented before any non-essential cookies are placed. Your consent will be required and freely withdrawable at any time.
We keep personal data only as long as necessary for the purposes set out above, and in accordance with Swiss law:
Where multiple retention periods apply to the same data, the longest applies. Once retention is no longer required, data is deleted promptly.
Under the Swiss revFADP and the GDPR, you have the following rights regarding your personal data:
To exercise any of these rights, contact us using the details in section 14. We will respond within 30 days.
This website is served over HTTPS with TLS encryption to protect data in transit. Reasonable technical and organisational measures are taken to protect personal data against loss, misuse, and unauthorised access, alteration, or disclosure. Access to client records is restricted to the coach.
No method of transmission or storage is 100% secure, but we maintain appropriate safeguards in line with the state of the art.
This privacy policy may be updated from time to time to reflect changes in our practices, legal requirements, or third-party services. The "last updated" date below indicates the most recent revision. Material changes will be communicated through the website.
For any questions about this privacy policy or to exercise your rights:
isaeva - coaching
Daria Isaeva
Email: isaeva.daria.coaching@gmail.com