Last updated: 2 October 2026
This policy explains how personal data is handled when you visit agatakawa.com, contact me, enquire about concerts, recordings or violin lessons, subscribe to my newsletter, or leave a Journal comment.
1. Who is responsible for your data.
The data controller is Agata Kawa-Cajler, based in Stockholm, Sweden. For questions about your personal data or to exercise your rights, email
contact@agatakawa.com.
2. Contact, enquiries and bookings.
When you send a message, I receive the details you provide: your name, email address, optional phone number and message. Please only include information needed for your enquiry and avoid sending sensitive personal information through the website.
I use these details to answer you, discuss concert engagements, collaborations, lessons or CD enquiries, and organise any service you request. The legal basis is taking steps at your request before entering into a contract or performing a contract (Article 6(1)(b) GDPR). For general correspondence, the basis is my legitimate interest in responding to enquiries and maintaining professional relationships (Article 6(1)(f)).
Website form submissions are stored in WordPress through Elementor and sent by email. Submission records may also include the date, time, page URL, IP address and browser information, used to administer submissions and help prevent misuse.
Where Journal comments are enabled, WordPress collects your comment and the identity/contact fields shown in the form, together with technical information such as your IP address and browser details. The purpose is to publish and moderate discussion and prevent misuse, based on my legitimate interest (Article 6(1)(f)). Your displayed name, comment and any public website link can be visible to other visitors; your email address is not published. Please avoid including private or sensitive information in a public comment.
3. Newsletter.
If you subscribe to Notes on playing, I use your email address to send the occasional newsletter about music, performing, teaching and artistic projects. The basis is your consent (Article 6(1)(a) GDPR). Subscription requests are currently collected through the website and sent to me by email.
You can withdraw consent at any time by emailing
contact@agatakawa.com and asking to unsubscribe, or by using an unsubscribe link where provided. Withdrawal does not affect the lawfulness of earlier processing. Sending a contact enquiry does not by itself subscribe you to the newsletter.
4. Website operation and downloads.
Hosting and email services process technical information needed to deliver and secure the website, such as IP addresses, request times, requested files and browser information. This supports my legitimate interest in operating a reliable and secure website (Article 6(1)(f)).
Opening or downloading a publicly available PDF does not require newsletter registration. The server may record the file request as part of its technical logs.
5. External services and cookies.
The website uses WordPress and Elementor. Technical cookies may be used for authorised administrator login and security. These are separate from subscribing to the newsletter.
The site currently loads fonts from Google Fonts. Your browser connects to Google to retrieve them, which can disclose your IP address and technical request information. See
Google’s privacy policy.
Links and video features may take you to services such as YouTube, Spotify, Apple Music, Instagram, Facebook or LinkedIn. When you open an external service or activate its media, that provider processes data under its own privacy policy and may use cookies or similar technologies. You can choose whether to open those services and manage their privacy settings directly.
Non-essential cookies, if introduced on this website, require prior consent and a way to withdraw it. Browser settings can also be used to remove or block cookies; this may affect some features.
Journal pages also load profile images through Gravatar, an Automattic service. Loading an avatar connects your browser to Gravatar. When an email address is used to match an avatar, a hash of that address may be supplied to the service. See
Automattic’s privacy policy. If the comment form offers to remember your details, selecting that option stores a convenience cookie in your browser.
6. Who can receive data.
Access is limited to Agata and service providers supporting website hosting, maintenance and email delivery where needed for those functions. Data may also be disclosed where a legal obligation requires it. External platforms you choose to use act under their own terms and privacy policies.
Some external providers operate outside the EU/EEA. Transfers by providers supporting this website must meet GDPR requirements, for example through an applicable adequacy decision or appropriate contractual safeguards. Contact me for information about the providers handling your particular enquiry and any relevant transfer arrangements.
7. How long is data kept.
Enquiries and correspondence are kept while needed to deal with your request and any resulting professional relationship. Contract-related records may need to be retained for applicable accounting obligations or legal claims. Newsletter details are retained while you wish to receive the newsletter; limited records of consent or withdrawal may be retained where needed to demonstrate compliance. Published comments may remain while relevant to the discussion; you can contact me to request their removal, subject to any lawful retention needs. Technical logs and backups follow the retention arrangements of the relevant service provider. Data should be deleted or anonymised when it is no longer needed for its purpose.
8. Your rights.
Subject to the conditions in the GDPR, you can request access, correction, erasure, restriction of processing and data portability. You can object to processing based on legitimate interests and always object to direct marketing. You can withdraw consent at any time.
To make a request, email
contact@agatakawa.com. Providing enquiry or subscription details is voluntary, but without the necessary contact information I may be unable to reply or send the newsletter.
You can also complain to the Swedish Authority for Privacy Protection,
Integritetsskyddsmyndigheten (IMY), or your local data protection authority. This website does not use solely automated decisions producing legal or similarly significant effects.
9. Changes to this policy.
This policy will be updated when the website or its data processing changes. The date above identifies the latest version.
