Privacy Policy

Get in Touch

Last updated: October 2026

  1. Data Controller

The person responsible for processing personal data on this website is:

Eva Lang
Ganghoferstraße 46
80339 Munich
Germany

Phone: +49 1577 778 2207
Email: info@eva-lang.de

  1. General Information

I take the protection of your personal data seriously and process personal information in accordance with applicable data protection laws, particularly the European Union’s General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

This Privacy Policy explains what personal data I collect, why I process it, how long I retain it and what rights you have.

  1. Data Protection Contact

For questions concerning data protection or to exercise your privacy rights, please contact:

Eva Lang
Email: info@eva-lang.de

  1. Website Access and Server Logs

When you visit my website, the hosting provider may automatically process technical information, including your IP address, date and time of access, pages requested, browser, operating system and referring website.

This information is used to operate the website, maintain security and diagnose technical problems.

The legal basis is Article 6(1)(f) GDPR, based on my legitimate interest in providing a secure and reliable website.

Hosting provider: IONOS SE

Log retention period: 2 weeks

  1. Contact Forms and Business Inquiries

When you contact me through my website, by email or by telephone, I process the information you provide, which may include your name, email address, company, telephone number and message.

I use this information to respond to your inquiry, discuss potential cooperation, prepare proposals and manage business relationships.

The legal basis is Article 6(1)(b) GDPR where processing is necessary for pre-contractual steps or contractual obligations. In other cases, processing may be based on my legitimate interest in handling inquiries and business communications under Article 6(1)(f) GDPR.

Required form fields are necessary to respond to your inquiry. Other information is voluntary.

Your data is retained only as long as necessary for these purposes or as required by law.

Retention period for inquiries that do not lead to a business relationship: 1 year.

  1. Business Relationships and Marketing

I process business contact information to maintain customer relationships, develop commercial opportunities, arrange meetings and communicate about my consulting services.

Where applicable, processing is based on Article 6(1)(b) or Article 6(1)(f) GDPR.

If you have expressly subscribed to marketing communications, I may send you information about my services, news, offers and events.

The legal basis for consent-based email marketing is Article 6(1)(a) GDPR.

You can withdraw your consent at any time, for example by emailing info@eva-lang.de or using an unsubscribe link.

In limited circumstances, marketing emails may also be sent to existing customers where permitted by Section 7(3) of the German Unfair Competition Act (UWG).

Where necessary, I retain evidence of your marketing consent.

Email marketing or CRM provider: mailchimp

 

  1. Cookies and Consent Management — Surecookie

This website uses Surecookie, a consent management solution provided by Surecookie B.V., Netherlands.

Surecookie helps manage cookie preferences, record consent decisions and control optional website technologies.

Information about your consent preferences and technical settings may be stored or processed.

The legal basis is Article 6(1)(c) GDPR where necessary to comply with legal obligations and, where applicable, Article 6(1)(f) GDPR for reliable consent management.

Access to or storage of strictly necessary information on your device is governed by Section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG).

Optional cookies and comparable technologies requiring consent are used only in accordance with applicable consent requirements.

You can change or withdraw your cookie preferences through the website’s cookie settings.

More information: https://surecookie.io/legal/

  1. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited.

Google Analytics helps me understand how visitors use the website and improve its content, usability and marketing effectiveness.

Depending on the configuration and consent settings, processed information may include page views, interactions, approximate geographic location, browser and device information, traffic sources and online identifiers.

Where consent is required, the legal basis for processing personal data is Article 6(1)(a) GDPR and, for storing or accessing information on your device, Section 25(1) TDDDG.

Consent preferences are managed through Surecookie. You may withdraw your consent through the website’s cookie settings.

Data may be processed outside the European Economic Area. Where required, appropriate legal safeguards are applied.

Analytics data retention: 1 year

More information: https://policies.google.com/privacy

  1. Communication via WhatsApp, Signal and Telegram

I may communicate with clients, business partners and interested parties through WhatsApp, Signal and Telegram.

Depending on the service and your communication preferences, personal data such as telephone numbers, usernames, message content, attachments and communication metadata may be processed.

The purpose is to respond to inquiries, maintain business communication and prepare or deliver consulting services.

The legal basis is Article 6(1)(b) GDPR where processing relates to contractual or pre-contractual activities. Otherwise, Article 6(1)(f) GDPR may apply.

The messaging providers may independently process personal data, including through international data transfers.

For sensitive or confidential information, an alternative communication channel can be arranged.

Provider privacy information:

WhatsApp: https://www.whatsapp.com/legal/privacy-policy-eea

Signal: https://signal.org/legal/

Telegram: https://telegram.org/privacy

 

 

  1. Appointment Scheduling — Calendly

I may use Calendly, provided by Calendly LLC, USA, to arrange online appointments.

When you schedule a meeting, personal data such as your name, email address, appointment details and any additional information you provide may be processed.

The purpose is to organise and conduct business meetings, consultations and coaching sessions.

The legal basis is Article 6(1)(b) GDPR where the appointment relates to a contract or pre-contractual activities. In other cases, Article 6(1)(f) GDPR may apply.

Calendly may process personal data outside the European Economic Area, subject to applicable data protection requirements.

If Calendly is embedded directly into the website, content requiring prior consent will only be loaded after the necessary consent has been obtained.

More information: https://calendly.com/privacy

  1. LinkedIn

I use LinkedIn for professional networking, business development, communication and presenting my consulting services.

For users in the European Economic Area, LinkedIn is operated by LinkedIn Ireland Unlimited Company.

When you interact with my LinkedIn profile or communicate with me through LinkedIn, information such as your profile details, professional contact information, messages and interactions may be processed.

My processing is based on Article 6(1)(f) GDPR for professional networking and business communication, or Article 6(1)(b) GDPR where applicable.

LinkedIn also processes personal data under its own responsibility.

A standard link from my website to LinkedIn does not, by itself, establish a connection to LinkedIn. Additional processing may occur when you visit the platform.

More information: https://www.linkedin.com/legal/privacy-policy

  1. Online Meetings — Zoom and Microsoft Teams

I use Zoom and Microsoft Teams for online meetings, consultations, coaching sessions and business collaboration.

Depending on how you participate, the following information may be processed:

  • Name and contact details
  • Meeting date, time and duration
  • Technical connection information
  • Audio and video data, when enabled
  • Chat messages and shared meeting content

The legal basis is Article 6(1)(b) GDPR where processing is necessary for contractual or pre-contractual purposes. Otherwise, Article 6(1)(f) GDPR may apply.

Meetings are not routinely recorded. If a recording is planned, participants will be informed in advance and an appropriate legal basis will be established.

The providers may process data outside the European Economic Area, subject to applicable safeguards.

More information:

Zoom: https://www.zoom.com/en/trust/privacy/privacy-statement/

Microsoft Teams: https://privacy.microsoft.com/privacystatement

  1. Service Providers and International Data Transfers

I may use external service providers for website hosting, email communication, appointment scheduling, analytics, customer relationship management, online meetings and related business operations.

Personal data is shared only where necessary and where a valid legal basis exists.

Where providers process personal data on my behalf, appropriate data processing agreements are concluded where required.

Transfers of personal data outside the European Economic Area take place only in accordance with applicable data protection requirements, including adequacy decisions or appropriate safeguards where necessary.

[INSERT ANY ADDITIONAL PROVIDER-SPECIFIC INFORMATION.]

  1. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy, unless statutory retention obligations or other lawful reasons require longer storage.

Marketing data processed on the basis of consent is generally retained until consent is withdrawn or the purpose ceases to apply, subject to any lawful need to retain limited records.

  1. Your Rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

  • Access to your personal data (Article 15)
  • Rectification of inaccurate data (Article 16)
  • Erasure of personal data (Article 17)
  • Restriction of processing (Article 18)
  • Data portability (Article 20)
  • Objection to certain processing activities (Article 21)
  • Withdrawal of consent at any time (Article 7(3))

You may object to the processing of your personal data for direct marketing at any time.

To exercise your rights, please contact info@eva-lang.de.

  1. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that your personal data is being processed unlawfully.

The supervisory authority generally responsible for my private-sector business activities in Bavaria is:

Bavarian Data Protection Authority (BayLDA)

https://www.lda.bayern.de

  1. Data Security

I use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and disclosure.

Website communications are protected using HTTPS/TLS encryption where implemented.

  1. Automated Decision-Making

I do not use automated decision-making, including profiling, within the meaning of Article 22 GDPR in connection with the processing described in this policy.

  1. Changes to This Privacy Policy

I may update this Privacy Policy to reflect changes in legal requirements, website functionality or my data processing activities.

The current version is available on this website.

Scroll to Top