Last updated: 30 October 2026
Your privacy matters to me. This policy explains how I collect, use, store, and protect personal data when you visit anjakopaclautar.com, contact me, subscribe to my communications, or participate in my services.
It also explains your rights under the General Data Protection Regulation (GDPR) and applicable Slovenian data protection legislation.
1. Data Controller
The controller responsible for processing your personal data is:
Utelešeni coaching in svetovanje, Anja Kopač Lautar, s.p.
Tavčarjeva ulica 8, 4226 Žiri, Slovenia
Business Registration Number: 7487061000
Tax Identification Number: 78847753
Email: info@anjakopaclautar.com
Hereafter referred to as the “Controller”, “I”, or “me”.
2. Personal Data I Collect and Why
I process personal data for specified purposes and on appropriate legal grounds under the GDPR.
Enquiries and Communication
When you contact me by email, through a contact form, or through another communication channel, I may collect your name, email address, telephone number, message content, and other information you choose to provide.
Purpose: To respond to enquiries, provide information, prepare offers, and communicate about potential or existing cooperation.
Legal basis: Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or contract performance; otherwise, Article 6(1)(f), my legitimate interest in responding to enquiries and managing professional communications.
Appointment Bookings
When you book a consultation, coaching session, or other appointment, I may process your name, email address, scheduling information, and additional information you provide.
I use TidyCal for appointment scheduling.
Purpose: To organise appointments, send confirmations, and facilitate communication about scheduled sessions.
Legal basis: Article 6(1)(b) GDPR.
Coaching, Memberships, Workshops and Programmes
When you participate in individual coaching, Embodied Archetypes membership, workshops, or other programmes, I may process personal data necessary to organise, deliver, and administer the service.
This may include contact information, enrolment and attendance details, contractual arrangements, and information you voluntarily share during participation.
Purpose: To provide agreed services and communicate with participants.
Legal basis: Article 6(1)(b) GDPR.
Sensitive personal data
Embodiment coaching and related practices may involve discussions of personal experiences, emotions, physical sensations, and other sensitive matters.
You are not generally required to provide medical information or other special categories of personal data, unless specifically necessary for a particular service and appropriately arranged.
Where processing of special-category data is necessary, I ensure that an appropriate legal basis under Article 6 GDPR and a valid condition under Article 9 GDPR apply, such as explicit consent where appropriate.
Voluntary disclosure alone does not automatically constitute consent to further processing of special-category personal data.
Payments and Invoicing
For purchases and payments, I may process your name, contact and billing details, purchased services, transaction amounts, payment status, and information required by tax and accounting legislation.
Online payments are processed through Stripe.
I do not normally receive or store your full payment card details.
Purpose: To process payments, manage subscriptions, issue invoices, and comply with legal obligations.
Legal basis: Article 6(1)(b) GDPR for contract performance and Article 6(1)(c) for compliance with legal obligations.
Newsletters and Email Communications
If you subscribe to my newsletter, Clear and Moving, or other email communications, I process your email address and, where provided, your name.
I use MailerLite to manage mailing lists and send email communications.
Purpose: To send newsletters, invitations, updates, and information about my work and services.
Legal basis: Article 6(1)(a) GDPR, your consent, or another lawful basis where specifically permitted under applicable electronic marketing legislation.
You may unsubscribe at any time using the link in an email or by contacting info@anjakopaclautar.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Online Meetings via Zoom
I may use Zoom for online coaching sessions, workshops, and group meetings.
Depending on your participation, personal data may include your display name, email address, technical connection information, and audio, video, or chat information you choose to share.
Purpose: To organise and deliver online sessions.
Legal basis: Article 6(1)(b) GDPR.
Where a session is recorded, participants will be informed in advance about the recording, its purpose, intended use, and applicable legal basis. Consent will be obtained where required.
WhatsApp Communication and Groups
Certain programmes may include optional participation in WhatsApp groups or individual communication through WhatsApp.
When joining a group, your phone number, profile name, profile picture, and messages may be visible to other members according to your WhatsApp settings.
Purpose: To facilitate communication, peer connection, and community interaction.
Legal basis: Article 6(1)(a) GDPR where processing is based on consent, or Article 6(1)(b) where a particular communication activity is necessary to deliver an agreed service.
Participation in WhatsApp groups is voluntary.
Website Operation and Security
When you visit the website, certain technical information may be processed automatically, such as your IP address, browser and device information, access times, requested pages, and server logs.
Purpose: To maintain website security and functionality, prevent misuse, and diagnose technical issues.
Legal basis: Article 6(1)(f) GDPR, my legitimate interest in operating and protecting the website.
3. Cookies and Similar Technologies
This website uses cookies and similar technologies to support website functionality, manage visitor preferences, and, where appropriate consent has been given, for additional purposes.
Strictly Necessary Cookies
These enable essential website functions and services explicitly requested by visitors. Where they meet the applicable legal exemption, they do not require prior consent.
Statistics and Functional Cookies
Where used, these may support additional website features or provide information about website use. Unless covered by a legal exemption, they are used only with prior consent.
Marketing Cookies and Meta Pixel
I use Meta Pixel, a technology provided by Meta, to measure advertising effectiveness and understand visitors’ interactions with the website.
Where appropriate consent has been given, this may involve processing information about interactions with the website, device and browser information, and advertising-related identifiers.
Purpose: To measure advertising effectiveness, track conversions, and support advertising activities.
Legal basis: Article 6(1)(a) GDPR, your consent.
Meta may also process certain data as an independent controller under its applicable privacy terms.
Managing Cookie Consent
I use Complianz to manage cookie consent.
When you first visit the website, you can accept or reject non-essential cookies or customise your preferences.
You can change or withdraw your consent at any time through the Cookie Settings link in the website footer.
Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
Detailed Cookie Information
Detailed information about the cookies and similar technologies used on this website, including their providers, purposes, and duration, is available in the separate Cookie Policy published on the website.
The cookie inventory is maintained through Complianz and may change when website features or services are updated.
4. Sharing Personal Data with Service Providers
To operate my business and deliver services, I may use external service providers that process personal data on my behalf or act as independent controllers, depending on the processing activity.
These may include:
Website hosting and technical maintenance providers
MailerLite for newsletters and email communications
TidyCal for appointment scheduling
Stripe for online payments
Zoom for online meetings
WhatsApp / Meta for communication
Meta for advertising measurement through Meta Pixel
Accounting and other professional service providers
Where a provider processes personal data on my behalf, appropriate arrangements are established in accordance with Article 28 GDPR.
Information may also be disclosed where required by law or where necessary to establish, exercise, or defend legal claims.
I do not sell your personal data.
5. International Data Transfers
Some service providers may process personal data outside the European Economic Area (EEA), including in the United States.
Where international transfers take place, an appropriate transfer mechanism under Chapter V GDPR is used.
Depending on the recipient and circumstances, this may include:
An adequacy decision adopted by the European Commission
The EU–US Data Privacy Framework, where the applicable conditions are fulfilled
European Commission Standard Contractual Clauses and additional safeguards where necessary
Other lawful international transfer mechanisms
You may contact me at info@anjakopaclautar.com for information about applicable transfer safeguards and how to obtain relevant documentation.
6. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law.
Newsletter data: Until you unsubscribe or withdraw consent, unless limited retention is necessary to demonstrate compliance or maintain a suppression list.
Enquiries and correspondence: For as long as reasonably necessary to respond, manage potential cooperation, or address legal claims.
Coaching and programme records: For the duration of the contractual relationship and, where necessary, afterwards in accordance with applicable legal obligations and limitation periods.
Accounting and transaction records: For the periods required by tax and accounting legislation.
Technical logs: For as long as reasonably necessary to maintain security and troubleshoot technical issues.
Cookie consent information: For as long as necessary to manage preferences and demonstrate compliance.
When information is no longer required, it is deleted or anonymised unless continued retention is required by law.
7. Your Rights Under GDPR
Subject to applicable legal conditions, you have the right to:
Access your personal data
Request correction of inaccurate or incomplete data
Request erasure of personal data
Request restriction of processing
Object to processing
Request data portability
Withdraw consent where processing is based on consent
Where personal data is processed for direct marketing, you may object to that processing at any time.
To exercise your rights, contact:
I will respond within the legally required time limits, generally within one month.
You also have the right to lodge a complaint with the competent supervisory authority:
Information Commissioner of the Republic of Slovenia
Informacijski pooblaščenec Republike Slovenije
www.ip-rs.si
8. Providing Personal Data
Providing personal data is generally voluntary.
Certain information is necessary to respond to enquiries, arrange appointments, deliver contracted services, process payments, or meet legal requirements.
If you choose not to provide information necessary for a particular service, I may be unable to deliver that service or complete the transaction.
9. Automated Decision-Making
I do not carry out solely automated decision-making that produces legal or similarly significant effects concerning you within the meaning of Article 22 GDPR.
10. Data Security
I take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure.
These measures reflect the nature of the processing and relevant risks.
However, no internet-based transmission or storage system can guarantee absolute security.
11. Changes to This Policy
This policy may be updated to reflect changes in legislation, website functionality, technology providers, or business operations.
The latest version will be available on this website together with the date of its last update.
For questions about this policy or the processing of your personal data, contact: