
Cosmiconfluence
Sapere aude
Privacy Policy
PRIVACY POLICY
Effective date: 01/2026
1. Controller
The controller (within the meaning of the GDPR) responsible for data processing is:
Dip.-Psychologist Mohamad Zahed Banihashemi
Ellerstraße 204
40227 Düsseldorf
Germany
Email: info@cosmiconfluence.de
2. General information on data processing
Protecting your personal data is our highest priority. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Policy informs you about which data we collect, the purposes for which it is processed, and which rights you have as a data subject.
As a general principle, we follow the principle of data minimization: we collect and process only the personal data that is strictly necessary for the respective service.
3. Hosting and operation of the website
This website is operated via Wix.com Ltd. Wix processes personal data on behalf of the website operator and in accordance with applicable data protection laws.
In doing so, data may be processed outside the European Union. Wix provides appropriate safeguards to ensure compliance with the European level of data protection (e.g., through Standard Contractual Clauses).
4. Services and functions on the website
a) Forms
Using forms is voluntary. The data you enter is used exclusively to process your request or to provide the respective service.
b) Payment processing
For payment processing, only the payment services provided by Wix are used (e.g., Wix Payments, integrated payment providers such as PayPal).
Personal data required for the payment process (e.g., name, billing address) is processed exclusively by the respective payment service providers and is not stored or further processed by us.
c) Community functions
When using community, forum, or chat functions, usernames, posts, and technical usage data may be stored insofar as this is necessary for the respective service.
d) Social media login
When using social media logins (e.g., Facebook, Instagram), the privacy policies of the respective platform operators also apply.
5. Resonance Analysis (AI-assisted evaluation)
As part of the Resonance Analysis service, we process personal data to create an individualized reflection and development report.
a) Data processed
Within the Resonance Analysis, only the following data is collected and processed:
-
Email address (for delivery of the result)
-
Country
-
Age
-
Gender
-
Relationship status
-
Responses to thematically structured self-report questions
No names, postal addresses, or other personal identifiers are collected or stored.
b) Identification of participants
Participants are identified exclusively via the email address provided. This serves solely to deliver the analysis result and to enable communication within the scope of the respective service.
c) Purpose of processing
The data is used exclusively for:
-
Carrying out the Resonance Analysis
-
Creating an individual baseline or reflection report
-
Delivering the result to the email address provided
d) Use of AI systems
The evaluation is carried out using an AI-assisted system that analyzes structured self-reports and prepares them in the form of a report.
Processing and evaluation are not carried out automatically on the website. The analysis is performed in an external processing step separate from the website. The result is reviewed before being sent to the email address provided. There is no fully automated decision-making within the meaning of Art. 22 GDPR.
The results:
-
serve self-reflection and personal development,
-
do not constitute a medical, therapeutic, or diagnostic assessment,
-
do not replace psychological or medical treatment.
6. Scope applicable to all programs
For all COSMICONFLUENCE offerings (including Resonance Analysis, Phoenix programs, and Family programs), the following applies uniformly:
-
No names or postal addresses are collected or stored.
-
Processing is limited to:
-
Email address
-
Country
-
Age
-
Gender
-
Relationship status
-
program-specific self-reports
-
7. Research and further development
The collected data may be used in anonymized and aggregated form for research and development purposes, in particular for the further development of methods of self-reflection and self-exploration. Any attribution to individual persons is excluded.
8. Legal bases for processing
Personal data is processed on the basis of:
-
Art. 6(1)(a) GDPR (consent)
-
Art. 6(1)(b) GDPR (performance of a contract)
-
Art. 6(1)(f) GDPR (legitimate interest in operation, security, and further development)
9. Storage period
Personal data is stored only for as long as necessary for the respective purposes or as long as statutory retention obligations exist. After that, the data is deleted or anonymized.
10. Rights of data subjects
You have the right at any time to:
-
access your stored data,
-
correct inaccurate data,
-
delete your data,
-
restrict processing,
-
object to processing,
-
withdraw your consent with effect for the future.
To exercise your rights, an informal message to the contact address listed above is sufficient.
11. Data security
We use technical and organizational security measures to protect your data against loss, manipulation, or unauthorized access. These include encryption technologies and secured server infrastructures.
12. Changes to this Privacy Policy
This Privacy Policy is reviewed regularly and updated as needed. The current version is available on this website.
13. Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates the GDPR.
The competent authority is, in particular, the supervisory authority of your habitual residence, your place of work, or the place of the alleged infringement.