Legal Notice & Privacy Policy

Legal Notice

Information pursuant to § 5 German Digital Services Act (DDG)

Karen Julia Korfmacher
313 Sunset Dr
Encinitas, CA 92024
USA

Phone: +49 151 413 440 50 / +1 442 320 2799
Email: karenjulia@korfmacher.cc
Website: www.karenjuliakorfmacher.com

VAT identification number: DE416560096

Professional title and professional regulations

Karen Julia Korfmacher is admitted to the bar in Germany. The statutory professional title “Rechtsanwältin” (attorney at law) was granted in the Federal Republic of Germany.

Competent bar association:

Rechtsanwaltskammer Düsseldorf
Freiligrathstraße 25
40479 Düsseldorf
Germany

www.rak-dus.de

The professional rules applicable to attorneys admitted in Germany include in particular:

• Federal Lawyers' Act (BRAO)
• Professional Code of Conduct for Lawyers (BORA)
• Lawyers' Remuneration Act (RVG)
• Specialist Lawyers' Regulations (FAO), where applicable
• Code of Conduct for European Lawyers, where applicable

The professional rules are available via the German Federal Bar: www.brak.de

Professional liability insurance

ERGO Versicherung AG
ERGO-Platz 1
40477 Düsseldorf
Germany

The professional liability insurance meets the requirements of § 51 BRAO.

Geographical scope of coverage: Federal Republic of Germany

Responsible for the content

Responsible for the content of this website, where legally required:

Karen Julia Korfmacher
313 Sunset Dr
Encinitas, CA 92024
USA

Note on the nature of the services

This website provides information about coaching, strategic sparring, mediation, professional development, collaboration, leadership, people & change as well as related development and reflection processes.

The content of this website does not constitute legal advice, tax advice, medical advice, psychotherapy or any other form of medical treatment. Coaching, sparring and mediation do not replace psychotherapy, medical treatment, legal advice or tax advice. If another form of support appears more appropriate, this will be addressed transparently.

Where the legal qualification is mentioned on this website, this serves to transparently present the professional background. No legal advice is offered via this website unless expressly agreed separately.

Consumer dispute resolution

I am neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration body.

Liability for content

The content of this website has been created with the greatest possible care. However, no guarantee can be given for the accuracy, completeness and timeliness of the content. Statutory obligations to remove or block the use of information under general laws remain unaffected.

Liability for external links

This website contains links to external third-party websites. I have no influence over their content. The respective provider or operator of the linked pages is always responsible for their content. At the time of linking, no unlawful content was identifiable. Permanent monitoring of the content of external links is not reasonable without concrete indications of a legal violation. If such violations become known, the links concerned will be removed.

Copyright

The content, texts, images, graphics and other materials created for this website are subject to copyright and other protective rights. Any reproduction, editing, distribution or other use beyond the limits of copyright law requires the prior written consent of the respective rights holder.

Where content on this website was not created by me, the rights of third parties are respected. If you nevertheless become aware of a possible infringement, please let me know. Content concerned will be removed once an infringement becomes known.

Privacy Policy

1. General information

The protection of personal data is important to me. This Privacy Policy explains which personal data are processed when you visit this website and when you contact me, for which purposes this takes place, and which rights data subjects have.

Personal data are all information relating to an identified or identifiable natural person. This includes, for example, name, email address, telephone number, IP address, information about the professional situation or the content of an inquiry.

This Privacy Policy applies to the website www.karenjuliakorfmacher.com including its German and English language subpages.

2. Controller

The controller responsible for data processing on this website is:

Karen Julia Korfmacher
313 Sunset Dr
Encinitas, CA 92024
USA

Phone: +49 151 413 440 50 / +1 442 320 2799
Email: karenjulia@korfmacher.cc

3. Processing outside the EU / EEA

The controller is based in the USA. If you visit this website or contact me from the European Union, the European Economic Area or Switzerland, personal data may therefore also be processed in the USA.

Under data protection law, the USA is not in every constellation regarded as a country with a level of data protection equivalent to that of the EU. Where service providers based in the USA or processing data in the USA are used, this takes place — where required — on the basis of appropriate safeguards, in particular standard contractual clauses, an adequacy decision, certification under the EU-U.S. Data Privacy Framework, or on the basis of statutory exceptions.

4. Legal bases for processing

Personal data are only processed where there is a legal basis for doing so. Depending on the processing operation, the following legal bases may in particular apply:

• Art. 6(1)(a) GDPR: consent
• Art. 6(1)(b) GDPR: processing for pre-contractual measures or performance of a contract
• Art. 6(1)(c) GDPR: processing to comply with legal obligations
• Art. 6(1)(f) GDPR: processing to protect legitimate interests

Where special categories of personal data within the meaning of Art. 9 GDPR are concerned, processing only takes place if explicit consent has been given or another legal basis exists.

Please do not transmit particularly sensitive information via contact forms, email or booking tools unless this is necessary for the respective inquiry.

5. Visiting the website and server log files

When this website is accessed, information transmitted by your browser to the server is processed automatically as part of the technical operation of the website. This may include in particular:

• page or file accessed
• date and time of access
• browser and browser version used
• operating system used
• referrer URL
• IP address
• amount of data transferred
• access status / HTTP status code

These data are processed in order to provide the website technically, to ensure stability and security, to analyze errors and to enable correct display of the website.

The legal basis is Art. 6(1)(f) GDPR. The legitimate interest lies in the secure, stable and functional provision of the website.

Server log files are stored only for as long as necessary for the purposes described and are subsequently deleted or anonymized, unless longer storage is required for security reasons or for the pursuit of legal claims.

6. Hosting and technical operation of the website

This website is provided via the managed hosting infrastructure of Lovable. According to information from the technical service provider, server-side execution takes place via Cloudflare Workers; static content such as images and PDF files is provided via Lovable's asset infrastructure.

When the website is accessed, technically necessary access data may be processed, in particular IP address, time of access, page accessed, browser and device information as well as technical status information. Processing takes place in order to provide the website securely, stably and functionally.

According to the current technical setup, the website itself does not store its own server logs, does not operate its own database, user accounts or authentication functions. Any technical access or edge logs are processed at infrastructure level by Lovable or Cloudflare respectively.

Where external service providers process personal data on my behalf, this takes place on the basis of a data processing agreement within the meaning of Art. 28 GDPR, where such an agreement is required.

7. Cookies and comparable technologies

According to the current technical setup, this website does not use analytics or marketing cookies, tracking pixels or non-essential cookies. Services such as Google Analytics, Google Tag Manager, Meta Pixel or comparable marketing tracking technologies are not used.

Where technically necessary cookies or comparable technologies are used, these serve exclusively the provision, security and functionality of the website.

Should cookies or comparable technologies that are not strictly necessary be used in the future, this will only take place on the basis of consent where such consent is legally required. The legal basis for access to information on your device is § 25 TDDDG; further processing of personal data takes place on the basis of the GDPR.

8. Contact by email, telephone or contact form

If you contact me by email, telephone, contact form or via other communication channels, I process the personal data you transmit. This may include:

• name
• email address
• telephone number
• professional context
• concern or message
• other information you provide voluntarily

Processing takes place in order to handle your inquiry, to communicate with you and, where applicable, to prepare or carry out a collaboration.

The legal basis is Art. 6(1)(b) GDPR where the contact relates to pre-contractual measures or an existing contractual relationship. In other cases, processing is based on my legitimate interest in handling inquiries pursuant to Art. 6(1)(f) GDPR. If you have given explicit consent, Art. 6(1)(a) GDPR is the legal basis.

Your data will be deleted as soon as the inquiry has been conclusively handled and no statutory retention obligations or legitimate interests in further storage exist.

9. Chemistry Call, appointment booking and Calendly

For booking Chemistry Calls, Focus Sessions, Focus Series, Ongoing Process Coaching, Conflict & Mediation Intake or other conversations, the external service Calendly may be linked on this website.

The provider is:

Calendly LLC
271 17th St NW
10th Floor
Atlanta, GA 30363
USA

If you book an appointment via Calendly, you will be redirected to Calendly's website. There, the following data in particular may be processed:

• name
• email address
• selected appointment
• time zone
• answers to booking questions
• technical data such as IP address, browser data and usage data
• where applicable, telephone number or other voluntary information

Processing takes place for scheduling and for preparing the collaboration. The legal basis is Art. 6(1)(b) GDPR where the booking serves the preparation or performance of a collaboration. Otherwise, processing may be based on Art. 6(1)(f) GDPR; my legitimate interest lies in efficient appointment organization.

Calendly processes personal data partly in the USA. Where required, Calendly relies on appropriate data protection safeguards, in particular standard contractual clauses and/or certification under the EU-U.S. Data Privacy Framework.

Further information can be found in Calendly's privacy notice: www.calendly.com/legal/privacy-notice

10. Online sessions via Microsoft Teams or comparable services

Coaching, sparring, pre-mediation conversations or other conversations may take place online, in particular via Microsoft Teams or comparable video conferencing services.

When using a video conferencing service, the following data in particular may be processed:

• name and contact details
• meeting metadata, for example date, time, duration and participants
• technical data, for example IP address and device information
• audio and video data, where camera or microphone are activated
• chat content, where the chat function is used

Online sessions are not recorded without explicit prior consent.

Processing takes place in order to deliver the agreed service. The legal basis is Art. 6(1)(b) GDPR. Where technical data are processed for stable and secure delivery, processing may additionally be based on Art. 6(1)(f) GDPR.

When using Microsoft Teams, the provider is regularly Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, or Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA.

Further information can be found in Microsoft's privacy notice: privacy.microsoft.com

11. Reflection Guide and Forms

A form for requesting a Reflection Guide may be displayed on this website. According to the current technical setup, this form opens a pre-filled email in your own email program when submitted.

The website does not automatically transmit the entered data to me, does not store it in a database and does not automatically pass it on to third parties. Transmission only takes place if you send the pre-filled email yourself from your email program.

The following information may be included in the pre-filled email:

• name
• email address
• topic of the request
• professional or personal context, where voluntarily provided
• language or page from which the form was used

The processing takes place to handle your request and provide the requested material once you send the email. The legal basis is Art. 6(1)(b) GDPR where the request serves pre-contractual measures. Otherwise, processing is based on my legitimate interest in handling inquiries pursuant to Art. 6(1)(f) GDPR.

If you do not wish to use the pre-filled email, you may contact me directly by email instead: karenjulia@korfmacher.cc.

If the form is changed in the future so that information is automatically transmitted through the website, stored or sent via an external email service, this Privacy Policy will be updated accordingly.

12. Download of PDF files and LINC information

PDF files, information brochures or other materials may be made available for download on this website, for example information about the LINC Personality Profiler.

When such files are accessed or downloaded, access data — in particular IP address, date and time of access, browser information and the requested file — may be processed in server log files.

Processing takes place for the technical provision of the download, for the security of the website and for error analysis. The legal basis is Art. 6(1)(f) GDPR.

13. LINC Personality Profiler

Within a collaboration, the LINC Personality Profiler may be used as an optional tool. It is only used after prior agreement and not automatically through visiting this website.

If you decide to use LINC within a collaboration, the processing of personal data in connection with the LINC Personality Profiler takes place on the basis of a separate agreement, your consent, or in order to deliver the agreed service.

The provider of the LINC Personality Profiler is:

LINC GmbH
Lüneburg, Germany
linc-international.com

Further information on data protection at LINC can be found on LINC's website.

14. Contract performance, coaching, sparring and mediation

If a collaboration comes about, I process personal data required for the preparation, delivery and invoicing of the respective service. This may include:

• name and contact details
• invoicing address and payment data
• booked services and appointments
• communication content
• professional context and concerns
• notes for preparing and delivering the collaboration
• information you provide voluntarily during the process

Processing takes place in order to perform the contractual relationship and to fulfill pre-contractual measures. The legal basis is Art. 6(1)(b) GDPR. Where statutory retention obligations exist, in particular tax or commercial law obligations, Art. 6(1)(c) GDPR is the legal basis. Where further processing is required to protect legitimate interests, for example for documentation, quality assurance or legal defense, this takes place on the basis of Art. 6(1)(f) GDPR.

Please share particularly sensitive data only where necessary for the respective concern. Where special categories of personal data within the meaning of Art. 9 GDPR are processed in individual cases, this only takes place on an appropriate legal basis, in particular on the basis of your explicit consent or where necessary for the establishment, exercise or defense of legal claims.

15. Invoicing and tax retention

For invoicing and tax documentation, personal data are processed, in particular name, address, invoicing data, service data and payment information.

Processing takes place in order to perform the contract and to comply with legal obligations. The legal bases are Art. 6(1)(b) and (c) GDPR.

Invoicing and accounting data are stored in accordance with statutory retention obligations and subsequently deleted, unless another legal basis for storage exists.

16. External links and social media profiles

This website contains links to external pages and profiles, in particular:

• LinkedIn
• Instagram
• Linktree
• Google Reviews
• ProvenExpert
• Calendly
• LINC
• cooperation partners and memberships

When you click an external link, you leave this website. From that point onwards, the privacy provisions of the respective provider apply. Personal data — in particular IP address, technical data and usage data — may be processed by the respective provider.

According to the current setup, this website does not use social media plugins that transfer data to social networks when the website loads. External links only become active when you click them.

17. Google Reviews and ProvenExpert

This website may contain links to external review platforms such as Google Reviews and ProvenExpert. If you click these links, you will be redirected to the respective external platform. The privacy provisions of the respective provider apply there.

I have no full influence over which data are processed by Google, ProvenExpert or other external platforms. Please inform yourself with the respective provider about the nature, scope and purpose of the data processing.

18. Testimonials and client voices

Testimonials and client voices are published on this website. Publication only takes place where a corresponding release exists or where the presentation is anonymized or without naming the person.

For anonymized testimonials, no names are published. Depending on the individual case, role or context information may be used where this does not allow direct identification or where a corresponding release exists.

If a testimonial is published with a name, this only takes place on the basis of consent. The legal basis is Art. 6(1)(a) GDPR. Consent given can be withdrawn at any time with effect for the future.

19. Recipients of Personal Data

Personal data are only passed on to third parties where this is necessary for the respective processing, where a legal obligation exists, where consent has been given or where another legal basis permits this.

Recipients may in particular be:

• hosting and technical service providers
• appointment booking services such as Calendly
• communication services such as Microsoft Teams or comparable video conferencing services
• payment and accounting service providers
• tax or legal advisors, where necessary
• providers of tools such as LINC, where agreed within the collaboration
• public authorities, where a legal obligation exists

20. Transfers to third countries

In connection with the use of this website and the services offered, personal data may be processed outside the European Union and the European Economic Area, in particular in the USA.

This may concern in particular the following constellations:

• processing by the controller, who is based in the USA
• use of technical service providers based or with servers outside the EU/EEA
• use of Calendly
• use of Microsoft services
• access to external platforms such as LinkedIn, Instagram, Google Reviews, ProvenExpert or Linktree

Where personal data are transferred to a third country and no adequacy decision exists, the transfer takes place — where required — on the basis of appropriate safeguards, in particular standard contractual clauses, or on the basis of a statutory exception.

21. Storage periods

Personal data are stored only for as long as necessary for the respective purposes or as long as statutory retention obligations exist.

The specific storage period depends on the nature and purpose of the processing:

• Inquiries are generally deleted once they have been conclusively handled and no further storage is required.
• Contract and invoicing data are stored in accordance with statutory retention obligations.
• Communication data are deleted when they are no longer required for the respective relationship or purpose.
• Consents are documented for as long as necessary to demonstrate the consent.
• Server log files are stored only for as long as necessary for operation, security and error analysis.

22. Your rights

Within the statutory requirements, you have the following rights:

• right of access to the personal data processed about you pursuant to Art. 15 GDPR
• right to rectification of inaccurate data pursuant to Art. 16 GDPR
• right to erasure of personal data pursuant to Art. 17 GDPR
• right to restriction of processing pursuant to Art. 18 GDPR
• right to data portability pursuant to Art. 20 GDPR
• right to object to certain processing pursuant to Art. 21 GDPR
• right to withdraw consent given with effect for the future pursuant to Art. 7(3) GDPR
• right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR

If you have given consent, you may withdraw it at any time with effect for the future. The lawfulness of processing up to the withdrawal remains unaffected.

23. Right to object

Where personal data are processed on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time to the processing for reasons arising from your particular situation.

In the event of an objection, the personal data will no longer be processed unless there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you may object to this processing at any time. The personal data will then no longer be processed for these purposes.

24. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes data protection law.

You may in particular contact the data protection supervisory authority of your habitual residence, your place of work or the place of the alleged infringement.

25. Obligation to provide personal data

For purely informational use of this website, you do not need to actively provide any personal data.

If you wish to get in touch, book an appointment, request materials or begin a collaboration, certain data are required in order to handle your request or deliver the service. Without these data, handling, scheduling or collaboration may not be possible.

26. Automated decision-making

Automated decision-making including profiling within the meaning of Art. 22 GDPR does not take place.

27. Validity and changes to this Privacy Policy

This Privacy Policy is currently valid and dated August 2026.

Further development of the website, changes to the services used, or amended statutory or regulatory requirements may make it necessary to adapt this Privacy Policy. The current version is always available on this website.