Effective as of October 1, 2026.

1. Controller

The controller responsible for the processing of personal data on this website is:

TRUSTED GROWTH CONSULTING AND SERVICES – FZCO (Trusted Growth Group)
IFZA — Dubai Silicon Oasis
Dubai, United Arab Emirates
License number: 77311
Email: privacy@lana-business-mentor.com

Content and services of the website: Lana Schneider.

2. Applicable law and general information

We process personal data in accordance with the laws of the United Arab Emirates, in particular Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL). For visitors from the European Union and the European Economic Area, the EU General Data Protection Regulation (GDPR) additionally applies.

We process personal data only to the extent necessary to operate the website and provide our services: with your consent (Art. 6(1)(a) GDPR), for the performance of a contract or pre-contractual measures (lit. b), for compliance with a legal obligation (lit. c), or on the basis of a legitimate interest (lit. f).

3. Hosting and server log files

The website is hosted by Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany) on a server located in the European Union. With every visit, the server automatically stores information transmitted by your browser: IP address, date and time of the request, the page requested, referrer URL, browser type and version, and operating system. This data is required for the secure and stable operation of the website, is not combined with other sources, and is automatically deleted after a short period. Legal basis: Art. 6(1)(f) GDPR.

4. Cookies and consent

On your first visit you see a banner where you can allow or decline optional cookies. Without your consent, only technically necessary cookies are set:

  • pll_language — remembers the selected site language (retention period 1 year);
  • cmplz_* — store your cookie decision (retention period up to 1 year).

The legal basis for necessary cookies is Art. 6(1)(f) GDPR; for all others it is your consent (Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time via the “Cookie settings” button in the corner of the screen.

5. Google Analytics

Only with your consent do we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It helps us understand which pages are useful to visitors. For this purpose, cookies are set (e.g. _ga, _ga_*, retention period up to 2 years) and data about your use of the website is processed: pages viewed, time of visit, device and browser type, and approximate location. IP addresses are not stored in Google Analytics 4.

Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-U.S. Data Privacy Framework, based on the European Commission's adequacy decision. Google Analytics is not loaded until you have given your consent. Legal basis: Art. 6(1)(a) GDPR; consent can be withdrawn at any time via “Cookie settings”. More information: policies.google.com/privacy.

6. Contact form and CRM

If you submit a request via the contact form, we process the data you provide: name, email, answers to the form questions, your preferred contact channel, your handle or number for that channel, and a link to your website or profile if you provide one. This data is used solely to process your request and to follow up with you.

Your request is forwarded to us by email and stored in our CRM system Bitrix24 (a cloud service, portal in the bitrix24.de zone, data stored in the EU), where we manage communication with clients. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and lit. f (legitimate interest in efficiently processing requests). Data is deleted once it is no longer needed to process the request, unless statutory retention periods apply.

We are also notified of new requests via Telegram (name, chosen format and contact channel). To protect against automated spam, the form contains invisible check fields; for rejected submissions we store the IP address, browser identifier and time in a log that keeps only the last 50 entries. Legal basis: Art. 6(1)(f) GDPR.

7. Contact by email and messaging apps

If you contact us by email, Instagram, WhatsApp, or Telegram, we use your data only to respond to your request. When using messaging apps and social networks, the respective platforms' own data processing terms also apply.

8. Online booking and payment

On the booking page you can choose an available time for an Individual Session. We process the selected time, your time zone and the language of the page. The time slot is reserved for 30 minutes; to prevent misuse, we temporarily store your IP address for this purpose (Art. 6(1)(f) GDPR).

Payment is processed by the payment service provider Stripe (Stripe, Inc. and its affiliates). On Stripe’s payment page you enter your name, email address, billing address and payment details directly with Stripe; we do not receive full card or account details. Stripe issues the invoice on our behalf and may process data for fraud prevention. Data may be transferred to the USA; Stripe, Inc. is certified under the EU-U.S. Data Privacy Framework. More information: stripe.com/privacy.

After successful payment you receive a confirmation email with a calendar file. The appointment is entered in our calendar and stored in Bitrix24 (see section 6); we are also notified via Telegram. The session takes place online via Zoom (Zoom Communications, Inc., USA); you receive the link by email, and Zoom’s privacy policy applies when you join. Legal basis: Art. 6(1)(b) GDPR (performance of a contract) and lit. c for statutory retention obligations. We keep booking and payment data for as long as tax and commercial law require.

9. Labelling of AI-generated images

Some portraits on this website were created with artificial intelligence. For visitors from the EU, we label them in accordance with Art. 50 of the EU AI Act. To determine whether the label is shown, our server checks your IP address against a locally stored country database on each page view. The IP address is neither stored nor transmitted to third parties. Legal basis: Art. 6(1)(c) and (f) GDPR. Country data: IP Geolocation by DB-IP (licence CC BY 4.0).

10. Fonts

The web fonts used on this website are stored locally on our server. No connection to Google's servers is established when you view the pages.

11. Interactive map

An interactive map is used on the “About me” page. All files required for it are loaded from our own server: no data is passed to third parties and no cookies are set.

12. Links to social networks

The website contains ordinary links to Instagram and LinkedIn. There are no embedded social media plugins: data is only transmitted to these platforms once you click on the link.

13. Recipients and data transfers

We do not sell your data and share it only with the service providers listed above, who process it on our behalf, or where required by law. Since the controller is based in the UAE, data of visitors from the EU is also processed in the UAE; we comply with the GDPR requirements for transfers of data to third countries in doing so.

14. Your rights

Provided the relevant legal requirements are met, you have the following rights:

  • the right to access information about your data (Art. 15 GDPR);
  • the right to rectification (Art. 16 GDPR);
  • the right to erasure (Art. 17 GDPR);
  • the right to restriction of processing (Art. 18 GDPR);
  • the right to data portability (Art. 20 GDPR);
  • the right to object to processing (Art. 21 GDPR);
  • the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR);
  • the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), in particular in the EU member state of your residence.

The UAE PDPL grants you comparable rights. To exercise your rights, please write to privacy@lana-business-mentor.com.

15. Automated decision-making

We do not use fully automated decision-making or profiling within the meaning of Art. 22 GDPR.

16. Changes to this policy

We may update this privacy policy to reflect applicable law and changes to our services. The current version is always available on this page.