How We Handle Your Data
General Data Privacy Regulation
Last updated: 26.02.2026
1. Introduction
Welcome to Lane Change Sustainability Consulting (“we”, “us”, or “our”).
We respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit lane-change.com, use our services, or otherwise interact with us.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable national data protection laws within the European Union.
2. Data Controller
Lane Change Sustainability Consulting
Patrick Lehmanski
Västra Varvsgatan 16E
211 15 Malmö, Sweden
Email: info@lane-change.com
Phone: 0049 151 403 321 51
If you have questions about this Privacy Policy or how we handle personal data, you can contact us at any time using the details above.
3. Scope
This Privacy Policy applies to:
– Visitors of our website;
– Users of our products or services;
– Customers and prospective customers;
– Individuals communicating with us via email, forms, or other channels.
4. Personal Data We Collect
4.1 Data you provide to us
Depending on your interaction with us, we may collect:
– Name;
– Email address;
– Phone number;
– Company name;
– Billing or contractual details;
– Communication content;
– Any other information you choose to provide.
4.2 Data collected automatically
When you access our website, certain information may be collected automatically, such as:
– IP address;
– Device and browser information;
– Operating system;
– Referring pages;
– Pages visited and interaction data;
– Date and time of access.
4.3 Cookies and similar technologies
We use cookies and comparable technologies to operate and improve our website. Details are provided in Section 11.
5. Why We Process Personal Data (Purpose & Legal Basis)
We only process personal data when a lawful basis under Article 6 GDPR applies.
We process personal data to operate, maintain, and secure our website based on our legitimate interest (Art. 6(1)(f) GDPR). When you contact us or submit inquiries, we process your data in order to respond and take pre-contractual steps or perform a contract (Art. 6(1)(b) GDPR). If you become a customer, we process personal data to provide our services and fulfill contractual obligations (Art. 6(1)(b) GDPR).
We may also process data for customer administration and support based on our legitimate interest in operating our business efficiently (Art. 6(1)(f) GDPR). Where required, we process data to comply with legal obligations such as tax, accounting, or regulatory requirements (Art. 6(1)(c) GDPR).
If we use analytics or similar tools to improve our products and services, processing is based either on your consent or our legitimate interest, depending on applicable law and configuration (Art. 6(1)(a) and/or Art. 6(1)(f) GDPR). Marketing communications are only sent where permitted by law, typically based on your consent (Art. 6(1)(a) GDPR).
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
6. How We Share Personal Data
We do not sell personal data.
We may share data with carefully selected third parties where necessary to operate our business, including:
– Cloud hosting and infrastructure providers;
– Analytics and performance tools;
– Payment and billing providers (if applicable);
– Communication and email service providers;
– Professional advisors (legal, accounting, compliance);
– Authorities where required by law.
All third-party processors are contractually required to process personal data only on our instructions and in compliance with GDPR (Article 28 GDPR).
7. International Data Transfers
Some of our service providers may process data outside the European Economic Area (EEA).
Whenever data is transferred internationally, we ensure appropriate safeguards, such as:
– EU Standard Contractual Clauses (SCCs);
– Adequacy decisions issued by the European Commission;
– Other lawful transfer mechanisms under GDPR.
8. Data Retention
We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including:
– Providing services and maintaining customer relationships;
– Meeting legal, tax, or accounting obligations;
– Resolving disputes and enforcing agreements.
When personal data is no longer required, it is securely deleted or anonymized.
9. Your Rights Under GDPR
Subject to applicable law, you have the following rights:
– Right of access (Art. 15 GDPR);
– Right to rectification (Art. 16 GDPR);
– Right to erasure (Art. 17 GDPR);
– Right to restriction of processing (Art. 18 GDPR);
– Right to data portability (Art. 20 GDPR);
– Right to object (Art. 21 GDPR);
– Right to withdraw consent at any time;
– Right to lodge a complaint with a supervisory authority.
To exercise your rights, contact us at info@lane-change.com.
10. Security
We apply appropriate technical and organizational measures designed to protect personal data, including:
– Encrypted data transmission (HTTPS/TLS);
– Access controls and authentication measures;
– Secure infrastructure and hosting;
– Principle of least privilege;
– Monitoring and regular security updates.
While no system can guarantee absolute security, we continuously work to protect personal data using industry-standard practices.
11. Cookies and Tracking Technologies
We might use cookies and similar technologies to:
– Ensure website functionality;
– Improve usability and performance;
– Understand how our website is used;
– Support analytics and product improvement;
– Enable marketing features where applicable.
Where legally required, non-essential cookies are only activated after your consent via a cookie banner or consent manager.
You can manage cookie preferences through your browser settings or consent choices.
12. Third-Party Services and Integrations
Our website or services may include links or integrations with third-party platforms. These providers operate independently and may process data according to their own privacy policies.
We encourage you to review the privacy policies of any third-party services you use.
13. Automated Decision-Making
We do not engage in automated decision-making or profiling that produces legal or similarly significant effects under Article 22 GDPR.
14. Children’s Privacy
Our services are not directed to children under the age of 16, and we do not knowingly collect personal data from children.
15. Business Transfers
In the event of a merger, acquisition, financing, reorganization, or sale of assets, personal data may be transferred as part of the transaction, subject to appropriate confidentiality and data protection safeguards.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical, or business developments. The latest version will always be available on this page with an updated “Last updated” date.
17. Contact
If you have any questions about this Privacy Policy or our data practices, please text us at info@lane-change.com.
Thank you for taking the time to read this policy.
We appreciate users who engage with our services responsibly and respect the privacy and data protection standards that help keep the internet trustworthy for everyone.
