Privacy policy
Last updated: 30 October 2026
The data controller is Karen D'Ekenaike, a private individual, Via Giuseppe di Vittorio 102D, 25015 Desenzano del Garda (BS), Italy.
Contact for anything about your data: karen@phoenixbykaren.com.
The contact form on the English and executive communication page.
When you send the form, I receive what you type in these fields: name, company, role, who the coaching is for, what is coming up for them, and your preferred contact. Name and preferred contact are required, the rest is optional. I use them only to reply to you and to talk about working together. The legal basis is the steps you ask me to take before a contract (GDPR art. 6(1)(b)). Please do not include health details or anything more sensitive than you need to share.
The contact form on the About Karen page.
When you write to me here I receive your name and email address and, if you add them, what you are interested in and your message. Name and email are required, the rest is optional. I use them only to reply and to talk about working together. The legal basis is the steps you ask me to take before a contract (GDPR art. 6(1)(b)).
Messages from both forms arrive at karen@phoenixbykaren.com.
To protect the forms from spam and abuse, the server keeps a salted hash of your IP address. It is deleted at the first form submission after 10 minutes have passed, and the key behind it changes every 24 hours. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
When you visit the site, the hosting server records standard technical logs, including your IP address, the page requested and the time, to keep the site secure and working. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Website statistics.
With your consent, I use Google Analytics 4 to see which pages are visited and which buttons are used. This sets cookies and sends usage data to Google. The legal basis is your consent (art. 6(1)(a)). Without your consent, Google Analytics is not loaded and no request goes to Google.
Your cookie choice.
The site stores your Accept or Reject choice and its date in your browser's local storage, so it does not ask you again for six months. This is needed to respect your choice and does not require consent.
| Name | Who | What it does | How long | Needs consent |
|---|---|---|---|---|
| pbk_consent (local storage) | This site | Remembers your choice | 6 months | No |
| _ga, _ga_* | Google Analytics 4 | Tells visitors apart and measures visits | 2 years | Yes |
Advertising storage and ad personalisation stay off. You can change your choice at any time with "Cookie settings" in the footer.
Who receives your data
- Google Ireland Limited and Google LLC, for Google Analytics, only if you accept. Data may be processed outside the European Economic Area, including in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, covered by the European Commission adequacy decision of 10 July 2023, and Google uses the Standard Contractual Clauses for transfers not covered by an adequacy decision.
- The hosting provider, Hostinger, which also keeps the server logs described above and delivers the messages sent through the forms.
I do not sell your data.
How long I keep your data
- Form messages: 12 months after our last contact.
- Analytics data: 2 months, the retention period set in Google Analytics.
- Cookie choice: 6 months, then the site asks again.
- Server logs: for the period set by the hosting provider.
Your rights
You can ask me to access, correct or delete your data, to limit or object to its use, and to receive it in a portable format. If you gave consent, you can withdraw it at any time, and this does not affect what happened before. Write to the contact above.
You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
If this policy changes, the date at the top changes too.