Privacy Notice

We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. Therefore, we would like to inform you here about which personal data we collect during your visit to our website and for which purposes this data is used.

This privacy notice applies to the internet services of Cosmic Sports GmbH, which can be accessed under the domain cosmicsports.com and its various subdomains (“our website”).

Who is responsible and how can I contact you?

Responsible for the processing of personal data under the EU General Data Protection Regulation (GDPR):
Cosmic Sports GmbH
Leyher Straße 47
90763 Fürth
Phone: +49 (0) 911 / 310755-0
Email: info@cosmicsports.de

Data Protection Officer:
Datenschutz Pöllinger GmbH
Dresdner Straße 38
92318 Neumarkt
Phone: 09181 – 2705770
Email: datenschutz@datenschutz-poellinger.de

What is this about?

This privacy notice meets the legal requirements for transparency in the processing of personal data. Personal data refers to all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address, or user behavior when visiting a website. Information that cannot be linked to you (or only with disproportionate effort), such as anonymized data, does not constitute personal data. The processing of personal data (e.g., collection, querying, use, storage, or transfer) always requires a legal basis and a defined purpose.

Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Regardless of this, we may store your personal data in individual cases for the assertion, exercise, or defense of legal claims and where statutory retention obligations apply.

Who receives my data?

We only pass on your personal data processed on our website to third parties if this is necessary to fulfill the purposes and is covered by the legal basis (e.g., consent or protection of legitimate interests) in individual cases. In addition, we may pass personal data to third parties in individual cases if this serves the assertion, exercise, or defense of legal claims. Possible recipients could include law enforcement authorities, lawyers, auditors, courts, etc.

If we use service providers for the operation of our website who process personal data on our behalf in accordance with Article 28 GDPR (data processing agreement), they may be recipients of your personal data. Further information on the use of processors and web services is provided in the overview of individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your device and stored there during your visit to our website. Alternatively, information can also be stored in your browser’s local storage. Some features of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies allow us to perform various analyses, so that we can, for example, recognize the browser you use during a subsequent visit to our website and transmit various information to us (non-essential cookies). Using cookies, we can, among other things, make our website more user-friendly and efficient by tracking your usage of our site and determining your preferred settings (e.g., country and language preferences). If third parties process information via cookies, they collect the information directly through your browser. Cookies do not harm your device. They cannot execute programs or contain viruses.

We inform you about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or consent manager of this website.

What rights do I have?

Under the conditions set out in the applicable provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:

  • Right to access according to Art. 15 GDPR regarding the data stored about you, including detailed information on the processing and a copy of your data.
  • Right to rectification according to Art. 16 GDPR of inaccurate or incomplete data stored by us.
  • Right to erasure according to Art. 17 GDPR of your stored data, provided the processing is not required for the exercise of the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.
  • Right to restriction of processing according to Art. 18 GDPR if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, and you reject its erasure because you need it for the assertion, exercise, or defense of legal claims, or you have raised an objection to the processing according to Art. 21 GDPR.
  • Right to data portability according to Art. 20 GDPR, where you have provided us with personal data based on consent according to Art. 6(1)(a) GDPR and § 25(1) TTDSG, or based on a contract under Art. 6(1)(b) GDPR, and these have been processed by us using automated methods. You will receive your data in a structured, commonly used, and machine-readable format or we will transmit the data directly to another controller, provided this is technically feasible.
  • Right to object according to Art. 21 GDPR against the processing of your personal data, where such processing is based on Art. 6(1)(e) or (f) GDPR, and reasons exist that arise from your particular situation or the objection is directed against direct marketing. The right to object does not exist if overriding legitimate and compelling reasons for the processing can be demonstrated or the processing is necessary for the assertion, exercise, or defense of legal claims. If the right to object does not apply to individual processing operations, this will be indicated there.
  • Right to withdraw consent according to Art. 7(3) GDPR, with effect for the future.
  • Right to lodge a complaint according to Art. 77 GDPR with a supervisory authority if you believe that the processing of your personal data violates the GDPR. In general, you can contact the supervisory authority of your habitual residence, your workplace, or the location of our company headquarters.

How is my data processed in detail?

Below, we inform you about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage duration. No automated decision-making, including profiling, takes place.

Provision of the Website

Type and Scope of Processing
When accessing and using our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

  • IP address of the requesting device
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access occurs (Referrer-URL)
  • Browser used and, if applicable, the operating system of your device, as well as the name of your access provider.

Our website is not hosted by us directly but by a service provider who processes data on our behalf as per Art. 28 GDPR for the aforementioned purposes.

Purpose and Legal Basis
The processing is done to safeguard our legitimate interests in displaying our website and ensuring its security and stability, based on Art. 6(1)(f) GDPR. The collection of data and its storage in log files is necessary for the operation of the website. There is no right to object to this processing due to the exception under Art. 21(1) GDPR. If further storage of the log files is legally required, processing is based on Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data, but the access to our website is technically impossible without providing this data.

Storage Duration
The above data will be stored for the duration of the website display and, for technical reasons, for a maximum of 7 days thereafter.

Registration of a User Account

Type and Scope of Processing
For the use of certain areas of our website, you have the option to register a user account. The information collected during registration through the mandatory fields is required to provide access to the user account. Additionally, you can voluntarily provide further information for additional (convenience) features.

The transfer of your personal data for the registration of a user account occurs exclusively in accordance with this privacy notice.

Purpose and Legal Basis
We process your data to provide a user account for the fulfillment of a contract with you as per Art. 6(1)(b) GDPR. There is a contractual obligation to provide your data, as this information is necessary to identify you and fulfill the contract on our side. There is no statutory obligation to provide the data. Without providing this information, registration for a user account and the conclusion of a contract are not possible.

Additionally, the processing of voluntarily provided information is for the purpose of providing additional (convenience) features based on your consent as per Art. 6(1)(a) GDPR. By disabling the features or deleting voluntary information from your account, you can withdraw your consent at any time, with effect for the future as per Art. 7(3) GDPR.

Storage Duration
We store your personal data for the duration of the contractual relationship in the context of providing the user account. After the contract ends or the user account is deleted, your data will only be stored if there are statutory retention obligations (e.g., tax and commercial law). Additional information you provided based on your consent will be stored only until you withdraw your consent by disabling the features or deleting the data, but no longer than until the end of the contract for which the user account was provided.

 

CookiePro

Type and Scope of Processing
We have integrated CookiePro on our website. CookiePro is a consent solution provided by OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, that allows us to obtain and document consent for the storage of cookies. CookiePro uses cookies or other web technologies to recognize users and store the granted or withdrawn consent.

Purpose and Legal Basis
The use of this service is based on the legal requirement to obtain consent for the use of cookies, in accordance with Art. 6(1)(c) GDPR.

Storage Duration
The specific duration for the storage of processed data is not within our control but is determined by OneTrust Technology Ltd. Further information can be found in the privacy notice for CookiePro: CookiePro Privacy Policy.

 

Google Fonts

Type and Scope of Processing
We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offering. To access these fonts, a connection to servers of Google Ireland Limited is made, during which your IP address is transmitted.

Purpose and Legal Basis
The use of Google Fonts is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDDG.

We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA is based on Art. 45(1) GDPR under the European Commission’s adequacy decision. The involved U.S. companies and/or their U.S. subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where no adequacy decision by the European Commission exists (including U.S. companies not certified under EU-U.S. DPF), we have established other appropriate safeguards with the data recipients, in line with Art. 44 ff. GDPR. These include, unless otherwise specified, standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at: EU Standard Contractual Clauses.

We will also obtain your consent prior to such third-country transfers as per Art. 49(1)(a) GDPR, which you provide via the consent manager (or other forms, registrations, etc.). Please note that third-country transfers may involve unknown risks (e.g., data processing by security authorities of the third country, the extent and consequences of which we do not know, over which we have no control, and about which you may not be informed).

Storage Duration
The specific storage duration of the processed data is not within our control but is determined by Google Ireland Limited. Further information can be found in the privacy notice for Google Fonts: Google Fonts Privacy Policy.

Google Maps

Type and Scope of Processing
We use the Google Maps service to create directions on our website. Google Maps is a service provided by Google Ireland Limited, which displays a map on our site.
When you access this content on our website, a connection is established with servers of Google Ireland Limited, located at Gordon House, Barrow Street, Dublin 4, Ireland, during which your IP address and, if applicable, browser data like your user-agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and Legal Basis
The use of Google Maps is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA occurs according to Art. 45(1) GDPR, based on the European Commission’s adequacy decision. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision by the European Commission exists (including U.S. companies not certified under EU-U.S. DPF), we have agreed with the data recipients on other suitable guarantees under Art. 44 ff. GDPR, which are, unless otherwise specified, standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses here: EU Standard Contractual Clauses.
Additionally, before transferring data to a third country, we obtain your consent under Art. 49(1)(a) GDPR, which you give via the consent manager (or other forms, registrations, etc.). Please be aware that third-country transfers may involve unknown risks (e.g., data processing by security authorities of the third country, whose scope and consequences we are unaware of and cannot influence, and of which you may not be informed).

Storage Duration
The specific storage duration of the processed data is not within our control but is determined by Google Ireland Limited. For more information, refer to the privacy policy for Google Maps: Google Maps Privacy Policy.

OneTrust Geolocation

Type and Scope of Processing
We have integrated OneTrust Geolocation on our website. OneTrust Geolocation is a consent solution provided by OneTrust Technology Ltd, 82 St John Street, London, EC1M 4JN, United Kingdom, which allows the consent for cookie storage to be obtained and documented. OneTrust Geolocation uses cookies or other web technologies to recognize users and store the consent granted or withdrawn.

Purpose and Legal Basis
The service is used to obtain the legally required consent for the use of cookies, as per Art. 6(1)(c) GDPR.

Storage Duration
The specific storage duration of the processed data is not within our control but is determined by OneTrust Technology Ltd. For more information, refer to the privacy policy for OneTrust Geolocation: OneTrust Geolocation Privacy Policy.

 

YouTube Video

Type and Scope of Processing
We have integrated YouTube Video on our website. YouTube Video is a component of the video platform YouTube, LLC, where users can upload, share content over the internet, and receive detailed statistics.
YouTube Video allows us to embed platform content into our website.
YouTube Video uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used to analyze the activity of the viewed content and generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the user’s profile.
When you access this content, a connection is established with servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and your IP address and, if applicable, browser data such as your user-agent are transmitted.

Purpose and Legal Basis
The use of the service is based on your consent according to Art. 6(1)(a) GDPR and § 25(1) TDDDG.
We intend to transfer personal data to third countries outside the European Economic Area, particularly the USA. The data transfer to the USA occurs according to Art. 45(1) GDPR, based on the European Commission’s adequacy decision. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).
In cases where no adequacy decision by the European Commission exists (including U.S. companies not certified under EU-U.S. DPF), we have agreed with the data recipients on other suitable guarantees under Art. 44 ff. GDPR, which are, unless otherwise specified, standard contractual clauses of the EU Commission pursuant to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses here: EU Standard Contractual Clauses.
Additionally, before transferring data to a third country, we obtain your consent under Art. 49(1)(a) GDPR, which you give via the consent manager (or other forms, registrations, etc.). Please be aware that third-country transfers may involve unknown risks (e.g., data processing by security authorities of the third country, whose scope and consequences we are unaware of and cannot influence, and of which you may not be informed).

Storage Duration
The specific storage duration of the processed data is not within our control but is determined by YouTube, LLC. For more information, refer to the privacy policy for YouTube Video: YouTube Privacy Policy.

Date of last revision: 21.02.2025

Back To Top