Privacy Policy

Carine Landau (“we”, “us”) takes the protection of your personal data seriously. This Privacy Policy explains what personal data we collect when you visit this website, how and why we process it, and what rights you have under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and the German Federal Data Protection Act (BDSG).

The data controller responsible for the processing described in this policy is:

Carine Landau
Mendelssohnstraße 41
60325 Frankfurt am Main, Germany
Phone: +49 (0)151 40752861
Email: contact@carinelandau.com

Given the size and nature of our business, we are not required under Art. 37 GDPR to appoint a data protection officer. For any questions regarding data protection, please contact the data controller directly using the details above.

This website is operated by a third-party hosting provider. Each time you access this website, our hosting provider’s server automatically collects and temporarily stores information transmitted by your browser, including your IP address, the date and time of access, the browser type and version, the operating system used, the referring URL, and the file requested. This data is processed on the basis of Art. 6(1)(f) GDPR, our legitimate interest in ensuring the technical stability, security, and proper functioning of the website. Log file data is automatically deleted after a short period, typically within 30 days, unless retention is required to investigate a security incident.

We use cookies and similar technologies to operate this website and, where you consent, to analyse how it is used. A consent management tool is used to obtain your consent before any cookies that are not strictly necessary are set, in accordance with Art. 6(1)(a) GDPR and Section 25 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). Cookies that are strictly necessary for the operation of the website are set on the basis of Art. 6(1)(f) GDPR. You can view, change, or withdraw your cookie consent at any time via the cookie settings available on this website.

If you contact us using the contact form on this website, the information you provide (such as your name, email address, phone number, and message) is stored and processed in order to respond to your enquiry. The legal basis for this processing is Art. 6(1)(b) GDPR, where your enquiry relates to a (pre-)contractual matter, or Art. 6(1)(f) GDPR, our legitimate interest in responding to enquiries directed to us. We retain this data only for as long as necessary to handle your enquiry and any related follow-up, unless a longer retention period is required by law.

Where we offer the option to subscribe to email updates or a newsletter, your email address is processed on the basis of your consent, Art. 6(1)(a) GDPR, using a double opt-in procedure to confirm your subscription. You may withdraw your consent and unsubscribe at any time using the link provided in every email or by contacting us directly; withdrawal does not affect the lawfulness of processing carried out before it.

We only share personal data with service providers who support the operation of this website (for example, hosting, email, and form-processing services) and who are contractually bound under Art. 28 GDPR to process data solely on our instructions and subject to appropriate technical and organisational security measures. We do not sell personal data to third parties. Where a service provider is located outside the European Union or European Economic Area, in particular in the United States, we ensure an adequate level of protection through the EU-U.S. Data Privacy Framework, where the recipient is certified, or through the European Commission’s Standard Contractual Clauses.

Unless a specific retention period is stated elsewhere in this policy, we retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required to comply with applicable statutory retention obligations, after which it is deleted or anonymised.

Under the GDPR, you have the right to request access to your personal data (Art. 15), rectification of inaccurate data (Art. 16), erasure of your data (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing carried out on the basis of legitimate interest (Art. 21). Where processing is based on your consent, you have the right to withdraw that consent at any time, with effect for the future, without affecting the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular the authority responsible for our registered office:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Wilhelmstraße 7
65185 Wiesbaden, Germany
Phone: +49 611 1408-0
Email: poststelle@datenschutz.hessen.de

We use appropriate technical and organisational measures, including SSL/TLS encryption for data transmitted through this website, to protect your personal data against unauthorised access, loss, misuse, or alteration.

We do not use fully automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Art. 22 GDPR.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or to comply with legal requirements. The current version is always available on this page. Last updated: August 2026.