Public privacy notice

Privacy and learning data

This notice explains the current data flows behind Landfield’s invite-only corporate language programmes. It describes operating practices, not a legal certification.

Effective 4 September 2026

Who operates Landfield

Landfield is operated by Sandor Kohan, an individual residing in the Netherlands and trading as Landfield. Landfield is not yet incorporated as a company.

For privacy questions or rights requests, email kohansandor@landfield.eu.

Company access and account data

Learners and programme owners join through a company invitation and role-based access. We process the account and identity information required to create an account, apply permissions, provide the programme, and protect access.

Account data can include a name, email address, password credential, company, role, learning profile, time zone, availability, and relevant sign-in information. Google sign-in can provide a name, email address, and profile image.

Learning and session data

Depending on how the service is used, learning data can include goals, session notes, tutor feedback, tasks, writing submissions, learning plans, skill indicators, progress information, and messages.

Live video and audio are used to deliver tutor sessions. Recording, transcription, and AI-supported analysis occur only after both participants consent within the required flow. Only consented session material enters that processing pipeline.

AI-supported processing

Landfield uses Anthropic to support structured analysis, summaries, preparation, and learning feedback. The tutor remains responsible for teaching decisions, and this support is not used to make legal or similarly significant automated decisions about an employee.

Email addresses and phone numbers are redacted before consented material is sent to Anthropic. This is a targeted safeguard and is not a claim that every name or possible personal detail is removed from workplace conversation.

Deepgram can be used for transcription and Microsoft Azure Speech can be used for pronunciation assessment when the relevant feature and consent apply.

What the company can see

Authorized HR and L&D programme owners can see participation, attendance, general progress, and agreed goals for the company programme.

Full recordings and transcripts, private tutor conversations, private messages and tutor notes, and itemized individual mistakes stay outside normal HR reporting.

Service providers and international handling

We use service providers to run the platform, including Amazon Web Services, LiveKit, Anthropic, Deepgram, Microsoft Azure, Twilio SendGrid, Google, and Stripe where the corresponding function is used.

Our core infrastructure is hosted in AWS Frankfurt, Germany. Some processors may handle personal data outside the EU or EEA. Where that occurs, Landfield relies on the transfer and contractual safeguards applicable to that provider and processing activity.

Security

Passwords are stored as salted hashes. Two-factor authentication secrets are encrypted. HTTPS protects information in transit, and authentication and role controls limit platform access.

No online service can promise absolute security. Landfield applies technical and organizational safeguards appropriate to the current service and reviews them as the platform changes.

Retention and deletion

We retain personal data for as long as needed to provide the active programme, protect the service, meet contractual needs, and satisfy legal record-keeping duties. Different records can have different retention periods.

To ask for account deletion, follow the verified contact process on the data deletion page. Some billing, tax, dispute, or security records may need to be retained where the law requires it.

Your privacy choices and rights

Depending on the applicable law and circumstances, you may ask to access, correct, erase, restrict, object to processing of, or receive a portable copy of personal data. You can withdraw consent for future consent-based processing.

You may also raise a concern with the competent data protection authority. We may need to verify identity and assess legal exceptions before completing a request.

Changes and contact

We may update this notice when the service, provider set, or processing changes. The effective date at the top shows the current published version.

Contact kohansandor@landfield.eu with a privacy question or request.