Responsible body
The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations are:
Cosmic Sports GmbH
Geschäftsführer: Gerhard Schwarz
Leyher Straße 47
90763 Fürth
Deutschland
Telefon: +49 (0) 911 / 310755-0
E-Mail: info@cosmicsports.de
Data Protection Officer
You can contact our Data Protection Officer at:
Datenschutz Pöllinger GmbH
Gisela Pöllinger
Dresdner Straße 38
92318 Neumarkt
Deutschland
Telefon: 09181-2705770
E-Mail: datenschutz@datenschutz-poellinger.de
Hosting und Server-Logfiles
The servers for our website https://cosmicsports.de/ are operated by the provider netlogix GmbH & Co. KG in Germany. We have entered into a data processing agreement with the provider in accordance with Article 28 of the GDPR. The legal basis for using an external hosting provider is the fulfillment of a contract with our potential and existing customers pursuant to Article 6(1)(b) of the GDPR, as well as our legitimate interest in the secure and high-performance provision of our website pursuant to Article 6(1)(f) of the GDPR.
Each time our website is accessed, our system’s web server collects information about the device used. We collect the following data:
- Information about the browser type
- Operating system of the user’s device
- Date and time of access
- The previous website from which the user accessed our website (referrer)
We collect IP addresses only in anonymized form; therefore, we do not store any personal data within the meaning of the GDPR in our log files.
Contacting us
You can contact us via email, phone, contact form, or letter; this may involve the processing of personal data. We process your data to handle and process your inquiry. We will not disclose your data to third parties without your consent.
The legal basis for processing is our legitimate interest in effectively handling your inquiry pursuant to Art. 6(1)(f) GDPR.
When you contact us via email, we will store your email address as well as the information contained in the email. If you use the contact form, your IP address is also recorded in pseudonymized form in addition to the information provided in the contact form. If you contact us by mail, your return address and the contents of the letter will be stored. If you contact us by phone, we will collect personal data depending on the specific case.
We will store your data until you request its deletion or until the purpose of processing (handling your inquiry) has been fulfilled.
Social Media Profiles
We maintain online profiles on the following social networks (hereinafter referred to as “social media”) to communicate with customers, prospective customers, and the public, and to promote our services:
- Instagram (Meta Platforms, Inc.)
- Facebook (Meta Platforms, Inc.)
For information on the scope and purpose of data processing, please refer to the respective privacy policies of the networks:
- Instagram: (https://privacycenter.instagram.com/policy)
- Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
Processing is based on Article 6(1)(f) of the GDPR, as we have a legitimate interest in conducting modern public relations activities. Where consent is required, processing is based on Article 6(1)(a) of the GDPR.
If you submit additional data (e.g., personal messages) to the services, your consent is generally required for this. Please note that we have no influence over the data processing carried out by social media providers. If you have any questions or wish to exercise your data subject rights (e.g., access, erasure), please contact the respective platform operator directly.
Rights of data subjects
As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):
Right to access (Art. 15 GDPR)
You have the right to request information about what personal data is stored about you, for what purpose it is processed, from which recipients it was obtained or to whom it is disclosed, and how long it will be stored.
Right to rectification (Art. 16 GDPR)
You may request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.
Right to erasure („right to be forgotten“) (Art. 17 GDPR)
Under certain conditions, you may request the erasure of your personal data, e.g., if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request the restriction of the processing of your personal data, for example if you contest the accuracy of the data or if the processing is unlawful, but you prefer to have the processing restricted rather than erased.
Right to data portability (Art. 20 GDPR)
You may request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used, and machine-readable format—or that we transmit this data directly to another controller.
Right to object (Art. 21 GDPR)
You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task carried out in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.
Withdrawal of Consent (Art. 7 GDPR)
If you have given us your consent, you may withdraw it at any time without providing a reason, with effect for the future.
Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)
Without prejudice to other administrative or judicial remedies, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State where you reside, where you work, or where the alleged infringement occurred.
Google Adsense for Youtube
We use the “Google AdSense for YouTube” service on our website as part of the ‘YouTube’ service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google AdSense for YouTube is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect.
The data processed by Google AdSense for YouTube includes your IP address, device information, viewing behavior, and interaction data, and cookies are set to provide personalized advertising.
If you are logged into a Google account, Google AdSense for YouTube may link collected data to your user profile to display personalized advertising.
Google processes this data to display personalized advertising and to analyze user interactions with ads.
It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. We have entered a Data Processing Addendum with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens’ data in the US.
For more information about the privacy policy of Google AdSense for YouTube, please visit: https://policies.google.com/privacy
Google Fonts
We use the “Google Fonts” service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Fonts is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect.
The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.
The purpose of data processing is the optimized and uniform display of fonts on the website.
It cannot be ruled out that personal data may be transferred to non-EU countries (USA) where data protection standards are lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.
For more information on Google Fonts’ privacy policy, please visit: https://policies.google.com/privacy
For information on the cookies set, please visit: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices
Google Maps
We use the “Google Maps” service on our website to visually display geographic information and provide directions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Maps is your consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect.
The data processed by Google Maps includes your IP address, location data, device information, browser details, usage data, and cookies may be set.
If you are logged into a Google account, Google Maps data may be linked to a user profile.
The purpose of data processing is to display interactive maps and provide location-based services to users.
It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens’ data in the US.
For more information on Google Maps’ privacy policy, please visit: https://policies.google.com/privacy#infocollect
YouTube
We use the video service “YouTube” on our website. The service is provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of YouTube is your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect.
Google collects and processes your IP address, browser and operating system information, and location data; it also processes actions such as watching videos or creating playlists. Cookies are additionally set in the process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly DoubleClick).
If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes.
The purpose of data processing is to provide video content and integrate it into our website.
According to Google’s Privacy Policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as videos watched, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a retention period. Users can manually set this retention period to 3 months, 18 months, or choose to store the data indefinitely. Detailed information can be found at: https://policies.google.com/privacy?hl=de#inforetaining
It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
For more information about YouTube’s privacy policy, please visit: https://policies.google.com/privacy
For information about the cookies used, please visit: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://myaccount.google.com/data-and-privacy
CCM19 OnPremise / Download
We use the “CCM19” service on our website to manage users’ consent for cookies and tracking technologies. The provider is Papoo Software & Media GmbH (“Papoo”), Auguststr. 4, 53229 Bonn, Germany. CCM19 is hosted on our own servers, so no data is shared with third parties.
The legal basis for the use of CCM19 is the fulfillment of a legal obligation pursuant to Art. 6(1)(c) GDPR.
The data processed by CCM19 includes your IP address, browser information, device information, date and time of the visit, consent status, and cookies are set to manage your consent preferences.
The purpose of data processing is to manage user consent and comply with data protection regulations.
According to the official CCM19 documentation, the standard retention period for data processed by CCM19 is 365 days. You can find this information at: https://docs.ccm19.de/de/latest/privacy.html#dauer-der-speicherung
Date of last revision: 07.04.2026