Privacy Policy

1. At a Glance: General Notes

The following information provides a simple overview of what happens with your personal data when you visit this website. Personal data are all data that can identify you personally. For detailed information on data protection, please refer to the full privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?
Data processing on this website is performed by the website operator. You can find their contact details in the section “Controller Details” below.

How do we collect your data?
We collect data that you provide voluntarily, for example by filling in a contact form. Other data is collected automatically or with your consent when visiting the website via our IT systems. These are mainly technical data (e.g. web browser, operating system, time of page visit). Collection of such data begins automatically as soon as you enter the website.

What do we use your data for?
Part of the data is collected to ensure the website is provided error-free. Other data may be used to analyze your user behavior. If contracts are concluded or initiated via the website, the transmitted data will also be used for contractual offers, orders, or other inquiries.

What rights do you have regarding your data?
You have the right at any time to receive free information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you consented to data processing, you may withdraw your consent at any time with future effect. Furthermore, you have the right under certain circumstances to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority. You can contact us at any time regarding all of the above and for further questions about data protection.

Analysis Tools and Third‑Party Tools

Your browsing behavior on this website may be statistically evaluated. This is done primarily with so-called analysis programs. Detailed information on these programs is provided in the following privacy policy.

2. Hosting

We host our website's content with the following provider:

WIX
Provider: Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv 6350671, Israel (“WIX”).

WIX is a website-building and hosting tool. When you visit our website, WIX analyzes user behavior, visitor sources, visitor region, and visitor numbers. WIX stores cookies in your browser that are necessary for website functionality and security (necessary cookies). The data collected via WIX may be stored on servers worldwide, including servers in the USA.

For details, see WIX’s privacy policy.
Data transmission to the USA and other third countries is based on the EU Commission’s Standard Contractual Clauses or equivalent safeguards under GDPR Art. 46.

The use of WIX is based on GDPR Art. 6(1)(f), as we have a legitimate interest in reliable website operation. If consent is obtained, processing is based on Art. 6(1)(a) and §25 TDDDG and may include cookies or access to device information. Consent may be withdrawn at any time.

WIX is certified under the EU‑US Data Privacy Framework (DPF). This ensures compliance with EU privacy standards. More information is available from WIX.

We have a data processing agreement (DPA) with WIX, ensuring personal data is processed only according to our instructions and in compliance with GDPR.

3. General Information and Mandatory Legal Information

We take the protection of your personal data very seriously and treat it confidentially in accordance with legal data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data are data that can personally identify you. This privacy policy explains which data we collect and why. It also explains how and for what purpose this happens.

Please note that data transmission over the Internet (e.g. via email) may have security vulnerabilities. Full protection against access by third parties cannot be guaranteed.

Controller Details

Controller for data processing on this website:
Julian van Höfen
Schulstraße 4,
29479 Jameln, Germany
Email: info@living-empathy.net
The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (such as names, email addresses).

Data Retention Period

Unless specifically noted otherwise, your personal data will be retained until the purpose for data processing no longer applies. If you request deletion or withdraw consent, your data will be deleted, unless we have legally permissible reasons to retain it (e.g. statutory retention periods). In such cases, the data will be deleted once those reasons no longer apply.

Legal Basis for Data Processing

With your consent: GDPR Art. 6(1)(a) and Art. 9(2)(a) (for special categories of data).
If transfers to third countries are permitted by your explicit consent: GDPR Art. 49(1)(a).
If cookies or device access are included in consent: §25 TDDDG.
For contract execution or pre-contractual measures: Art. 6(1)(b).
For compliance with legal obligations: Art. 6(1)(c).
For our legitimate interests: Art. 6(1)(f).

You will be informed of the specific legal basis for each processing activity in the following sections.

Recipient of Personal Data

We work with various external processors as part of our business operations. Personal data is only shared with external parties if required for contract execution, legally obligated, based on our legitimate interests (Art. 6(1)(f)), or another legal basis permitting the transfer. For processors, data is shared only on the basis of valid data processing agreements. In case of joint processing, a joint processing agreement is executed.

Revocation of Consent

Many processes require explicit consent. You can withdraw your consent at any time. The legality of data processing carried out before the withdrawal remains unaffected.

Right to Object

If data processing is based on Art. 6(1)(e) or (f), you can object at any time for reasons relating to your particular situation; this also applies to profiling based on these provisions. After objection, we will no longer process your data unless we can demonstrate compelling legitimate reasons or if the data is required for legal claims.
If your personal data is processed for direct marketing, you have the right to object at any time; after your objection, your data will no longer be used for this purpose.

Right to Lodge a Complaint

You have the right to file a complaint with a supervisory authority in case of GDPR violations, especially in the Member State of your habitual residence, place of work, or of the alleged infringement, without prejudice to other administrative or judicial remedies.

Right to Data Portability

You have the right to receive data we process automatically on the basis of your consent or contract in a commonly used, machine-readable format and have the right to transmit that data to another controller if technically feasible.

Right to Information, Correction, and Deletion

You have the right to free information on stored personal data, its origin, recipients, and purpose. You also have the right to correct or delete this data under applicable laws. You may contact us at any time regarding this.

Right to Restriction of Processing

You have the right to request restriction of your data processing in certain circumstances, including:

If you contest data accuracy and need time to verify.
If processing is illegal and you request restriction rather than deletion.
If we no longer need the data but you need it for legal claims.
If you have objected to processing pending resolution of priority.

Restricted data may only be processed with your consent, for legal claims, to protect rights of others, or for important public interest reasons.

SSL/TLS Encryption

This site uses SSL/TLS encryption for security and protection of confidential content such as orders or inquiries. The encrypted connection is indicated by “https://” and a lock symbol in your browser. When SSL/TLS is active, data you transmit cannot be read by third parties.

Objection to Marketing Emails

Any use of contact data published under the legal notice (Impressum) for sending unsolicited advertising and information material is hereby objected to. The site operator reserves the right to take legal action in case of unsolicited sending of advertisement, e.g. spam emails.

4. Data Collection on This Website: Cookies

Our site uses cookies—small data files that do no harm to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are deleted automatically at the end of your visit. Persistent cookies remain until you delete them manually or they expire.

Cookies may come from us (first-party cookies) or third parties (third-party cookies). Third-party cookies enable integration of services from third parties (e.g. payment). Cookies have different functions: many are technically necessary (e.g. shopping cart, video playback), others may be used for analyzing user behavior or marketing.

Necessary cookies are stored based on our legitimate interest under Art. 6(1)(f) GDPR, unless a different legal basis is stated. Without such cookies, essential website functions may not work. If consent is obtained, cookies are processed based on Art. 6(1)(a) GDPR and §25 TDDDG; consent can be withdrawn at any time.

You can set your browser to notify you about cookie usage, allow cookies individually, block them completely, or delete cookies when closing the browser. Note that disabling cookies may limit website functionality.

For details on which cookies and services are used, see the cookie details section of this privacy policy.

5. Newsletter

If you wish to receive the newsletter offered on this website, we need your email address and confirmation that you are the owner and agree to receive the newsletter. Additional data is collected only optionally. These data are used exclusively to send the requested information and are not passed on to third parties.

Processing of the data entered in the newsletter subscription form is based solely on your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time, for example via an “Unsubscribe” link in the newsletter. Consent withdrawal does not affect the lawfulness of processing prior to withdrawal.

Your newsletter data will be stored until you unsubscribe or the purpose ceases. We reserve the right to delete or block email addresses from our mailing list based on our legitimate interest (Art. 6(1)(f) GDPR). Data stored for other purposes remains unaffected.

After unsubscribing, your email may remain in a blacklist to prevent future mailings. Data in the blacklist is used solely for this purpose and not merged with other data. This serves your interest and ours in complying with legal requirements (our legitimate interest). Blacklist storage is indefinite but you may object if your interests override ours.

Newsletter to Existing Customers

If you order goods or services from us and provide your email address, we may use it to send a newsletter announcing similar goods or services, provided we inform you beforehand. In such cases, newsletters may include direct advertising only for our own similar products or services. You may unsubscribe at any time via a link in every newsletter. The legal basis for sending such newsletters is Art. 6(1)(f) GDPR in conjunction with §7(3) UWG.

After unsubscribing, your email may be blacklisted to prevent future mailings. Blacklist data is used solely for this purpose and not merged with other data. This serves your interest and ours in complying with legal requirements (legitimate interest).

6. Plugins and Tools: Vimeo

This website uses plugins from the video platform Vimeo. Provider: Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA.

If you visit a page containing a Vimeo video, a connection is established to Vimeo servers, informing Vimeo which page you visited. Vimeo also obtains your IP address. This applies even if you are not logged into Vimeo or do not have an account. Information collected by Vimeo is transferred to the Vimeo server in the USA.

If you are logged into your Vimeo account, your browsing behavior may be attributed to your personal profile. You can prevent this by logging out of Vimeo before visiting the page.

Vimeo uses cookies or similar tracking technologies (e.g. device fingerprinting) to recognize website visitors. Use of Vimeo is in our legitimate interest (Art. 6(1)(f) GDPR) for attractive presentation of our content. If consent is requested, processing is based on Art. 6(1)(a) GDPR and §25 TDDDG; consent may be withdrawn at any time.

Data transfers to the USA are based on Vimeo’s stated reliance on the EU Commission’s Standard Contractual Clauses and “legitimate business interests.” Details are available on Vimeo’s privacy policy. Vimeo is certified under the EU‑US Data Privacy Framework (DPF), and commits to European data protection standards.

Source: Based on a template from e‑recht24.de