Additional privacy information for Storytelling With Love services
Last updated: 2 October 2026
1. Controller
The controller responsible for the processing of personal data described in this Privacy Policy is Lisa Camilla La Colla, Storytelling With Love, Heiligenstadter Strasse 81/87, 1190 Vienna, Austria.
Email: lisa@storytellingwithlove.com
Telephone: +39 348 112 5893
2. Scope and legal bases
This Privacy Policy explains how Storytelling With Love processes personal data when you visit the website, contact us, subscribe to communications, book or purchase a service, attend a workshop, submit writing materials, use a digital resource or otherwise interact with Storytelling With Love.
Depending on the processing activity, the principal legal bases are Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (steps requested before entering into a contract and performance of a contract), Article 6(1)(c) GDPR (legal obligations) and Article 6(1)(f) GDPR (legitimate interests, in particular secure website operation, efficient communication and the establishment, exercise or defence of legal claims). Where special-category data under Article 9 GDPR are genuinely required, an additional legal basis under Article 9 GDPR is used before such processing takes place.
3. Website operation, infrastructure and server data
The main website is published using Sites in ChatGPT and is delivered through Cloudflare infrastructure. Podia continues to be used for the functions described below; it is not the host of this main website. When you access the website, technical connection and security data may be processed, including your IP address, date and time of access, requested URL, referrer information, browser and device information, and information required to deliver the page and protect the website against misuse or attacks.
This processing is necessary for the secure and reliable operation of the website and is based on Article 6(1)(f) GDPR. Technical logs are retained only for as long as reasonably necessary for operation, troubleshooting and security, unless a longer period is required to investigate a specific incident or comply with law.
4. Contact form and email
If you contact Storytelling With Love through the website contact form, FormSubmit is used to transmit the information you enter, such as your name, email address and message. Email communication is managed through Register.it. We process the information to answer your enquiry, take requested pre-contractual steps or perform a contract, as applicable, under Article 6(1)(b) GDPR. General correspondence that is not connected with a contract may also be processed on the basis of the legitimate interest in responding to enquiries under Article 6(1)(f) GDPR.
FormSubmit is also used for the online withdrawal form, to deliver your name, email address, contract identification, withdrawal declaration, reference and website receipt timestamp to Storytelling With Love and send an acknowledgement to your email address. Processing withdrawal declarations serves contract administration and applicable legal obligations under Articles 6(1)(b) and 6(1)(c) GDPR. FormSubmit’s security check may process technical data to prevent abuse. FormSubmit states that form submissions are retained in its archive for 30 days; received correspondence is handled under the retention principles below.
Please do not send confidential manuscripts, identification documents or sensitive personal information through the general public contact form unless this is genuinely necessary. Messages are retained for as long as needed to handle the enquiry and any resulting business relationship, subject to statutory retention duties and the need to establish, exercise or defend legal claims.
Storytelling With Love does not operate a recruitment or job-application process through this website. Any job-application section in the generated template above does not describe an activity offered by Storytelling With Love.
5. Bookings through TidyCal
Some one-to-one appointments, including the Power Call, are booked through TidyCal. When you follow a booking link, you leave the Storytelling With Love website and provide booking information to the TidyCal service. The data may include your name, email address, selected appointment, time-zone information and answers to booking questions.
Booking data are processed to arrange and perform the requested service under Article 6(1)(b) GDPR. TidyCal processes data in accordance with its own service and privacy terms and may use additional technical service providers. Only information reasonably necessary for the booking and preparation of the service should be submitted.
6. Payments through Stripe
Online payments and certain event or service bookings are processed through Stripe. Stripe may process payment credentials, transaction details, billing details, contact information, device information and fraud-prevention data. Storytelling With Love normally receives the booking, billing and transaction information necessary to confirm the purchase, provide the service, handle support and comply with accounting and tax obligations, but does not receive full payment-card credentials.
The processing necessary to conclude and perform the purchase is based on Article 6(1)(b) GDPR. Processing required for accounting, tax and other statutory duties is based on Article 6(1)(c) GDPR.
7. Coaching, mentoring, editorial work and client materials
For coaching, mentoring, rewriting and editorial services, Storytelling With Love may process your name, contact and booking information, questionnaires, correspondence, writing goals, manuscripts, synopses, outlines, character materials, notes, exercises, feedback and other content you choose to submit. These data are processed to prepare for and provide the service under Article 6(1)(b) GDPR.
Autobiographical or other client materials may contain special categories of personal data within the meaning of Article 9 GDPR. Where you choose to provide special-category data concerning yourself and those data are necessary for the coaching, mentoring or editorial service you have requested, Storytelling With Love processes those data only on the basis of your explicit consent under Article 9(2)(a) GDPR. You may withdraw that consent for future processing at any time. Please do not provide special-category personal data concerning identifiable third parties unless such information is genuinely necessary for the requested work and you are entitled to provide it.
Client manuscripts and working materials are held on Lisa’s computer and are normally kept for six months after the relevant coaching or editorial engagement ends and are then deleted, unless the client requests earlier deletion where legally possible, a different retention period is agreed, or limited retention is necessary to comply with law or to establish, exercise or defend legal claims.
Client manuscripts and client information are not submitted to AI tools, including for analysis, rewriting or training, as part of the Storytelling With Love service.
8. Zoom sessions and recordings
Online coaching and workshops may take place through Zoom. Zoom may process display names, account information, IP and device information, connection data and, depending on the features used, audio, video, screen-sharing and chat content. This processing is necessary to provide the booked online service under Article 6(1)(b) GDPR.
Sessions are not recorded by default. If a client wants a recording, the client makes the recording themselves and saves it directly on their own computer, with the participants’ prior agreement. Storytelling With Love does not create, store or send session recordings. Declining to record does not affect access to the coaching service. Recording permission is separate from booking and may be refused or withdrawn for future recording. Zoom continues to process the data needed to operate the meeting; local recording does not mean the meeting involves no processing by Zoom.
9. Workshops and in-person events
For in-person workshops and literary events, Storytelling With Love processes registration, payment and contact information to organise and perform the event under Article 6(1)(b) GDPR.
Photographs may be taken at some workshops or in-person events. Identifiable photographs of participants are published for promotional, editorial or social-media purposes only with the participant's prior written consent. Consent is voluntary and is not a condition of participation in the event. Consent may be withdrawn at any time for future use of the photograph.
If you voluntarily submit a text for possible publication in a Storytelling With Love magazine or other editorial format, the submission is processed to review and communicate about that publication opportunity. Copyright remains with the author unless a separate publication or licence agreement states otherwise.
10. Newsletter, Writing Warm-up and Podia
Podia is used for newsletter-related functions and for the delivery of certain writing resources and digital products. Depending on the action you take, we may process your name, email address, subscription status, purchase or access information and information needed to deliver the requested resource.
Where you subscribe to marketing communications, the legal basis is your consent under Article 6(1)(a) GDPR together with the applicable Austrian rules on electronic marketing communications. You may unsubscribe at any time through the unsubscribe mechanism in the message or by emailing lisa@storytellingwithlove.com. Withdrawal of consent does not affect processing that was lawful before withdrawal.
Delivery of a requested resource and consent to receive future marketing communications are treated as separate purposes. The signup wording shown before submission determines what you are requesting and, where marketing consent is requested, identifies this clearly.
Subscription information is retained while the subscription remains active. Limited evidence of consent, withdrawal or an unsubscribe request may be retained for as long as reasonably necessary to demonstrate compliance and ensure that the marketing preference is respected.
11. Substack
The website contains links to Storytelling With Love content on Substack. When you follow a Substack link, you move to a separate platform. If you subscribe, comment or otherwise interact there, Substack processes personal data under its own privacy terms. Storytelling With Love processes any information made available through that relationship only to the extent necessary for communication, publication or subscription management.
12. Cookies and consent settings
The website may use technically necessary storage and similar technologies for security, basic functionality and consent management. Technologies that are not strictly necessary, including analytics, advertising or comparable tracking technologies, are activated only where the legally required consent has been obtained.
You can review or change available cookie and consent choices through the Cookies control provided on the website. Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing that took place before withdrawal.
13. External links and social-media profiles
The website links to third-party platforms, including booking, payment, newsletter and social-media services. A normal external link does not by itself mean that Storytelling With Love controls the subsequent processing performed by the third-party platform. When you follow such a link, the relevant platform's own privacy information applies to its processing.
14. Service providers and international transfers
Storytelling With Love uses service providers where necessary for website delivery, security, email, forms, bookings, online meetings, digital-resource delivery, newsletters and payments. Where a provider acts as a processor, it is engaged in accordance with the requirements of Article 28 GDPR where applicable.
Some providers may process personal data outside the European Economic Area. Where this occurs, transfers are made only where a lawful transfer mechanism under Chapter V GDPR applies, such as an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, or appropriate safeguards such as the European Commission's Standard Contractual Clauses. Information about the safeguards relevant to your data can be requested using the controller's contact details above.
15. Retention
Personal data are kept only for as long as necessary for the purpose for which they were collected and for applicable legal obligations. In particular, client manuscripts are normally deleted six months after the end of the relevant engagement; newsletter data are kept until unsubscribe subject to limited compliance records; session recordings are made and stored by the client, not by Storytelling With Love; and accounting and tax documents are generally retained for seven years from the end of the relevant calendar year, or longer where legally required.
Contract and correspondence records may be retained for an appropriate period after completion where this is necessary to comply with law or to establish, exercise or defend legal claims. This does not mean that all underlying creative materials are kept for the same period.
16. Your rights
Subject to the conditions of the GDPR, you may have the right to access your personal data, correct inaccurate data, request erasure, request restriction of processing, receive data portability, object to processing based on legitimate interests, and withdraw consent with effect for the future.
Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. You may object to direct marketing at any time.
To exercise your rights, contact lisa@storytellingwithlove.com. You also have the right to lodge a complaint with a competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Datenschutzbehörde), www.dsb.gv.at.
17. Automated decision-making
Storytelling With Love does not use solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.
18. Changes to this Privacy Policy
This Privacy Policy may be updated when services, providers or legal requirements change. The version published on this page and its stated update date are the current version. Material changes affecting an ongoing contractual relationship will be communicated where legally required.