Privacy Policy

This Privacy Policy informs you in accordance with Art. 13/14 GDPR (EU 2016/679), Art. 19 ff. nFADP (Swiss Federal Act on Data Protection, revised version in force since 1 September 2023) about the processing of personal data in connection with the use of this website and the coaching services of MagicMindCoaching.

1. Data Controller

Company: MagicMindCoaching
Owner: Assia Kassabova
Address: Rotbuchstrasse 22, Zürich 8037, Switzerland
Email: assia@magicmindcoaching.com
Phone: +41764229171
Website: magicmindcoaching.com

2. Principles of Data Processing

MagicMindCoaching processes personal data in accordance with the following principles (Art. 5 GDPR / Art. 6 nFADP):

•       Lawfulness, fairness and transparency

•       Purpose limitation: data is only collected for specified, explicit purposes

•       Data minimisation: only data necessary for the respective purpose is processed

•       Accuracy: data is kept accurate and updated where necessary

•       Storage limitation: data is retained only as long as necessary

•       Integrity and confidentiality: appropriate technical and organisational security measures

3. What Data is Collected?

3.1 Contact Details

In the context of enquiries and appointment scheduling, only the following data is collected:

  • Name (first and last name)

  • Email address

  • Phone number (optional, if provided)

  • Content of the enquiry or message

  • Appointment Date and Time

This data is processed on the basis of Art. 6(1)(b) GDPR (contract initiation / performance) and Art. 31(2)(a) nFADP.

3.2 Website Usage Data (Squarespace Hosting)

This website is hosted by Squarespace, LLC (225 Varick Street, New York, NY 10014, USA). Squarespace automatically processes the following technical data:

  • IP address (anonymised or full, depending on configuration)

  • Date and time of access

  • Pages visited / URL

  • Browser type and operating system

  • Referrer URL (previously visited page)

This data is processed by Squarespace on servers in the USA. Squarespace is certified under the EU-US Data Privacy Framework. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure operation of the website). Further information: https://www.squarespace.com/privacy

3.3 Session Notes

During coaching sessions, notes may be taken by the coach. These are stored exclusively:

  • in the coach's private, physical notebook, or

  • digitally in a Swiss-hosted, encrypted cloud service (ProtonMail / Proton Drive, servers in Switzerland)

Session notes are not shared with third parties. They do not contain medical or therapeutic diagnoses.

3.4 Video Calls and Scheduling

Coaching sessions may take place via the following platforms:

  • Google Meet (Alphabet Inc., USA) — only by explicit prior agreement

  • Proton Meet (Proton AG, Switzerland) — preferred option

  • Infomaniak Meet (Infomaniak Network SA, Switzerland)

When using Google Meet, data is processed in the USA. Google is certified under the EU-US Data Privacy Framework. MagicMindCoaching recommends using Swiss alternatives where possible.

Sessions are NOT recorded unless the client has given prior, explicit, written consent (Art. 6(1)(a) GDPR / Art. 31 nFADP).

3.5 Payment Data

Payments are processed exclusively via:

  • TWINT (Twint AG, Switzerland) — no payment data is stored by MagicMindCoaching

  • Direct bank transfer — MagicMindCoaching receives only confirmation of receipt of payment

Credit card or other payment data is not stored or processed by MagicMindCoaching.

3.6 Contact Form Data

The following data is collected and submitted via the Contact Form (https://www.magicmindcoaching.com/contact)

  • First and last name

  • Email address

  • Phone number (optional, if provided)

  • The content of your message

  • Date and time of submission

  • IP address (collected automatically by Squarespace for spam protection)

No further data is collected via the contact form. The Client is not required to create an account or provide any information beyond the above and can get in touch with MagicMindCoaching without using the Contact form. Contact form submissions are used exclusively to: Respond to your enquiry, Schedule an initial consultation if requested, Initiate a coaching relationship if both parties choose to proceed. Submitted contact form data is stored within the Squarespace account (accessible only to MagicMindCoaching) and correspondence is immediately transferred to the coach's ProtonMail inbox (Proton AG, Switzerland). Data is not exported to any CRM or third-party marketing system.

4. Legal Bases (GDPR / nFADP)

  • Art. 6(1)(a) GDPR / Art. 31 nFADP: Consent (e.g. session recording)

  • Art. 6(1)(b) GDPR / Art. 31 nFADP: Contract performance and pre-contractual measures (e.g. booking, payment)

  • Art. 6(1)(c) GDPR / Art. 31 nFADP: Legal obligation (e.g. retention requirements under Swiss CO)

  • Art. 6(1)(f) GDPR / Art. 31 nFADP: Legitimate interests (e.g. website security)

5. Retention Periods

  • Contact enquiries: 2 years after the end of correspondence

  • Coaching contracts and invoices: 10 years (statutory retention under Swiss CO Art. 958f)

  • Session notes: 2 years after the end of the coaching relationship, then deleted / physically destroyed

  • Website logs: in accordance with Squarespace policies (typically 30 days)

6. Disclosure to Third Parties

Personal data is not shared with third parties, except:

  • Hosting provider (Squarespace) —Email Address and information sent via the Contact form

  • Payment service provider (TWINT) — for payment processing only

  • Authorities — where legally required

No disclosure to other third parties, in particular for marketing purposes, takes place.

7. International Data Transfers

The following transfers of data to third countries (in particular the USA) may occur:

  • Squarespace (USA): EU-US Data Privacy Framework certified; Standard Contractual Clauses (SCC) pursuant to Art. 46 GDPR

  • Google Meet (USA): EU-US Data Privacy Framework certified; SCC pursuant to Art. 46 GDPR; only by explicit agreement

For clients in Switzerland: MagicMindCoaching implements appropriate safeguards in accordance with Art. 16 nFADP for third-country transfers. No personal coaching data is subject to international data transfer.

8. Your Rights (GDPR / nFADP)

You have the following rights regarding your personal data:

  • Right of access (Art. 15 GDPR / Art. 25 nFADP)

  • Right to rectification (Art. 16 GDPR / Art. 32 nFADP)

  • Right to erasure / 'right to be forgotten' (Art. 17 GDPR / Art. 32 nFADP)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to object (Art. 21 GDPR / Art. 32 nFADP)

  • Right to withdraw consent at any time (Art. 7(3) GDPR)

To exercise these rights, please contact: assia@magicmindcoaching.com

You also have the right to lodge a complaint with the competent supervisory authority:

  • Switzerland: Federal Data Protection and Information Commissioner (FDPIC), www.edoeb.admin.ch

  • EU/EEA: The national data protection authority of your country of residence

9. No Profiling / No Automated Decision-Making

MagicMindCoaching does not carry out profiling within the meaning of Art. 22 GDPR / Art. 21 nFADP and does not make automated decisions using Artificial Intelligence or Statistical Analysis with legal, psychological or similarly significant effects.

10. Cookies

The website may set technically necessary cookies (e.g. for session management by Squarespace). Third-party marketing or tracking cookies are not used where technically avoidable. Please refer to the Squarespace cookie policy for further information.

11. Data Security

MagicMindCoaching implements appropriate technical and organisational measures to protect your data, including:

  • HTTPS / TLS encryption for the website

  • Use of end-to-end encrypted communication (ProtonMail)

  • Digital notes stored exclusively in Swiss, privacy-compliant cloud services

  • Physical notebooks kept secure and disposed of properly

12. Amendments

MagicMindCoaching reserves the right to update this Privacy Policy as necessary. The current version is available on the website. Significant changes will be communicated by email where a contractual relationship exists.

Last updated: Mon 8th June 2026