Privacy policy
1. Responsible party
Cosmos Arcade HMH GmbH
Hamburger Str. 39
22083 Hamburg
Phone: 040 23835605
Email: info@cosmosarcade.com
2. General information on data processing
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations as well as this privacy policy. The use of our website is generally possible without providing personal data.
We would like to point out that data transmission over the Internet (e.g., when communicating via email) may have security gaps. A complete protection of data against access by third parties is not possible.
3. Legal basis for data processing
The processing of personal data is based on the General Data Protection Regulation (GDPR). In particular, we rely on the following legal bases:
- Art. 6 Abs. 1 lit. a DSGVO – Consent of the data subject
- Art. 6 Abs. 1 lit. b DSGVO – Fulfillment of a contract or pre-contractual measures
- Art. 6 Abs. 1 lit. c DSGVO – Fulfillment of a legal obligation
- Art. 6 Abs. 1 lit. f DSGVO – Protection of legitimate interests
4. SSL/TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
5. Cookies
Our website uses cookies. Cookies are small text files that are stored on your device and saved by your browser. They do not cause any harm and do not contain viruses.
5.1 Necessary cookies
These cookies are absolutely essential for the operation of the website. This includes, for example, cookies for language selection and the cookie settings themselves.
| Cookie | Purpose | Duration |
|---|---|---|
| lang | Stores the selected language | 1 year |
| cookies_accepted | Stores the cookie settings | Permanent |
5.2 Analysis cookies
Analyse-Cookies werden nur mit Ihrer ausdrücklichen Einwilligung gesetzt. Sie helfen uns, das Nutzungsverhalten auf unserer Webseite zu verstehen und unser Angebot zu verbessern.
5.3 Web-Analyse mit Matomo (selbst gehostet)
Mit Ihrer Einwilligung verwenden wir Matomo, eine Open-Source-Software zur statistischen Auswertung der Besucherzugriffe. Matomo wird auf unseren eigenen Servern (analytics.elbparty.com, Standort Deutschland) betrieben. Es findet keine Übermittlung von Daten an Dritte wie Google statt.
Rechtsgrundlage: Art. 6 Abs. 1 lit. a DSGVO (Einwilligung) sowie § 25 Abs. 1 TTDSG.
Verarbeitete Daten: Zwei IP-Bytes (anonymisiert), aufgerufene Seiten, Zeitpunkt des Zugriffs, Referrer, Browser, Betriebssystem, Bildschirmauflösung, ungefährer Standort (aus anonymisierter IP), Verweildauer und Klick-Pfad. Eine personenbezogene Identifizierung erfolgt nicht.
Speicherdauer: Die Besuchs-ID wird bis zu 13 Monate in Cookies (_pk_id) gespeichert, die Sitzungs-Cookies (_pk_ses) für 30 Minuten. Aggregierte Statistiken werden nach 24 Monaten gelöscht.
Widerruf der Einwilligung: Sie können Ihre Einwilligung jederzeit über den Cookie-Banner zurückziehen.
Auftragsverarbeitung: Da Matomo selbst gehostet wird, findet keine Datenweitergabe an einen externen Dienstleister statt – ein Auftragsverarbeitungsvertrag ist daher nicht erforderlich.
6. Server log files
The provider of the pages automatically collects and stores information in so-called server log files that your browser transmits to us automatically. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
This data is not merged with other data sources. The collection of this data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website.
7. Contact form and inquiries
If you send us inquiries via the contact form, your information from the inquiry form including the contact details you provided there (name, email address, phone number, message) will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided that your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest (Art. 6 para. 1 lit. f GDPR).
8. Google Maps
We use the map service Google Maps from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland on our website. The integration is for displaying our locations. When accessing the pages with Google Maps integration, your IP address is transmitted to Google and a cookie is set. More information on data processing by Google can be found in Google's privacy policy: https://policies.google.com/privacy.
The use of Google Maps is in the interest of an appealing presentation of our online offerings and an easy findability of the locations we specify. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
9. Social Media
Our website contains links to our social media profiles (Instagram, Facebook, TikTok). These are simple links and not social media plugins. By clicking on the links, you will be redirected to the respective platform. Only then will data be transmitted to the respective operator.
10. Rights of the data subject
You have the following rights regarding your personal data:
- Right to access (Art. 15 DSGVO) – You can request information about your personal data processed by us.
- Right to rectification (Art. 16 DSGVO) – You can request the correction of inaccurate data.
- Right to erasure (Art. 17 DSGVO) – You can request the deletion of your personal data stored with us.
- Right to restriction of processing (Art. 18 DSGVO) – You can request the restriction of processing.
- Right to data portability (Art. 20 DSGVO) – You can request that we provide your data in a structured, commonly used, and machine-readable format.
- Right to object (Art. 21 DSGVO) – You can object to the processing of your personal data at any time.
- Right to withdraw consent (Art. 7 Abs. 3 DSGVO) – You can withdraw your consent given to us at any time.
- Right to lodge a complaint with a supervisory authority (Art. 77 DSGVO) – You can lodge a complaint with a data protection supervisory authority.
11. Changes to this privacy policy
We reserve the right to adjust this privacy policy to ensure it always meets current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will apply to your next visit.
Status: April 2026