Privacy Policy - Hanna Kabula - Executive Coach & Leadership Adviser

Effective Date: 20.07.2026

1. Introduction

Welcome to the website of Hanna Kabula (“I”, “me”, or “my”).

Your privacy is important to me. This Privacy Policy explains how I collect, use, store, disclose, and protect your personal data when you visit this website, contact me, book coaching sessions, or use my executive coaching services.

I am committed to processing personal data fairly, lawfully, and transparently in accordance with:

Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
applicable Icelandic data protection legislation;
other applicable data protection laws.

By accessing or using this website, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

The Data Controller responsible for the processing of your personal data is:

Hanna Kabula
Executive Coach
Iceland

Email: my.coach.hanna@gmail.com

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact me using the email address above.

3. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through:

this website;
contact forms;
email correspondence;
appointment booking systems (such as Calendly);
online coaching sessions;
newsletters (if applicable);
professional enquiries;
prospective and existing coaching clients.

This Privacy Policy does not apply to third-party websites or services that may be linked from this website. I encourage you to review the privacy policies of those third-party websites before providing any personal information.

4. Personal Data I Collect

Depending on how you interact with my website and services, I may collect the following categories of personal data.

Information You Provide

You may voluntarily provide:

full name;
email address;
telephone number (if provided);
company name;
job title;
country of residence;
information submitted through contact forms;
information shared when booking coaching sessions;
invoicing information where required;
any other information you choose to provide.

Providing personal data is voluntary. However, without certain information I may be unable to respond to your enquiry or provide coaching services.

Information Collected Automatically

When you visit this website, certain information may be collected automatically, including:

IP address;
browser type and version;
operating system;
device information;
language settings;
pages visited;
date and time of your visit;
referring website;
website usage statistics;
cookies and similar technologies.

This information helps me maintain the security of the website, understand how visitors use it, and improve its functionality and user experience.

5. Special Categories of Personal Data

Executive coaching does not normally require the processing of special categories of personal data under Article 9 of the GDPR.

If you voluntarily choose to disclose sensitive personal information during coaching conversations, such information will only be processed where necessary for the provision of coaching services and in accordance with applicable law.

I do not intentionally request or collect sensitive personal data unless it is directly relevant to our coaching relationship and you have chosen to provide it.

6. Purpose of Processing

I process your personal data only for legitimate, specified, and lawful purposes.

Depending on your interaction with my website and services, I may process your personal data to:

respond to your enquiries and requests;
arrange and schedule coaching sessions;
provide executive coaching services;
communicate regarding appointments and coaching engagements;
manage client relationships;
issue invoices and process payments;
maintain professional and business records;
comply with legal, tax, and regulatory obligations;
improve the functionality, security, and performance of this website;
analyse website usage and visitor behaviour;
prevent fraud, misuse, or unauthorised access;
protect my legal rights and legitimate business interests.

Your personal data will not be processed for purposes that are incompatible with those described in this Privacy Policy.

7. Legal Basis for Processing

I process personal data in accordance with Article 6 of the General Data Protection Regulation (GDPR).

Depending on the circumstances, processing is based on one or more of the following legal grounds.

Performance of a Contract

Processing is necessary to provide coaching services, communicate before coaching begins, arrange appointments, and fulfil contractual obligations.

Consent

Where required by law, I process personal data based on your consent, for example when you submit a contact form or subscribe to communications.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Legitimate Interests

I may process personal data where necessary for my legitimate interests, provided those interests do not override your rights and freedoms.

These legitimate interests include:

operating and improving my coaching practice;
maintaining professional records;
responding to enquiries;
protecting website security;
communicating with prospective and existing clients;
developing educational and professional content.

Legal Obligation

I may process personal data where necessary to comply with legal obligations, including accounting, taxation, regulatory, or other applicable legal requirements.

8. Professional Confidentiality

Confidentiality is one of the fundamental principles of my coaching practice.

As an Executive Coach, I am committed to creating a professional, respectful, and confidential environment in which clients can think openly and explore important leadership and business challenges.

My coaching practice is guided by the ethical principles and professional standards of the Association for Coaching (AC).

Information shared during coaching sessions is treated as confidential and will not be disclosed to third parties except where:

disclosure is required by applicable law;
disclosure is necessary to prevent a serious and imminent risk of harm;
you have provided your prior written consent.

This Privacy Policy does not replace the confidentiality provisions contained in the individual Coaching Agreement, which governs the coaching relationship between you and me.

7. Use of AI and Digital Tools

To support my professional practice, I may use trusted digital tools, including artificial intelligence technologies, for administrative tasks, language editing, document preparation, scheduling, and educational content creation.

Confidential client information is not intentionally disclosed in a manner that would compromise confidentiality or violate applicable data protection laws.

Where appropriate, personal information is minimised or anonymised before being processed through digital tools.

Professional judgment and ethical responsibility always remain central to my coaching practice.

8. Sharing Personal Data

I do not sell, rent, or trade your personal data.

Where necessary, personal data may be shared with trusted service providers that support my business, such as:

appointment scheduling providers;
video conferencing platforms;
website hosting providers;
payment processors;
accounting services;
website analytics providers.

These providers process personal data only where appropriate contractual and security safeguards are in place.

9. International Data Transfers

Some service providers may process personal data outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards are implemented in accordance with the GDPR to ensure an adequate level of protection.

10. Data Retention

Personal data is retained only for as long as necessary to:

provide coaching services;
fulfil legal and accounting obligations;
resolve disputes;
protect legitimate business interests.

When personal data is no longer required, it is securely deleted or anonymised.

11. Your Rights

Under the GDPR, you may have the right to:

access your personal data;
request correction of inaccurate information;
request deletion of your personal data;
restrict processing;
object to processing;
withdraw consent where applicable;
request data portability;
lodge a complaint with the relevant Data Protection Authority.

12. Cookies

This website uses cookies and similar technologies to improve functionality, analyse website traffic, and enhance user experience.

Further information is available in the separate Cookie Policy.

13. Data Security

I take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, disclosure, or alteration.

While reasonable efforts are made to protect your information, no method of electronic transmission or storage can be guaranteed to be completely secure.