For any questions about data protection, contact us at pb@cosmicpark.de.
This privacy policy explains which personal data we process when you visit our website and work with us, for what purposes and on what legal basis. Personal data is any information that can identify you personally, for example your name, email address or IP address.
Our website does not use cookies or tracking services without your consent. Marketing services only load once you agree in the cookie banner.
We process personal data on the basis of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG):
consent (Art. 6(1)(a) GDPR; for access to your device additionally § 25(1) TDDDG),
performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR),
legitimate interests (Art. 6(1)(f) GDPR), such as the secure and stable operation of our website.
Our website is hosted by Netlify, Inc., 101 2nd Street, San Francisco, CA 94105, USA. When you visit the website, Netlify processes technically necessary data that your browser transmits automatically (server log files): IP address, date and time of access, page or file requested, amount of data transferred, referrer URL, browser type and version, and operating system.
We need this data to deliver the website and to ensure its security and stability, for example to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. Log files are deleted after 30 days at the latest unless they are needed longer to investigate a security incident. We have a data processing agreement with Netlify under Art. 28 GDPR. Netlify is certified under the EU-US Data Privacy Framework (Art. 45 GDPR); the EU standard contractual clauses apply in addition.
Fonts and code libraries (e.g. for the 3D graphics) are hosted on our own server. Loading the website does not establish connections to third-party servers such as Google Fonts for this purpose.
If you contact us by email or via the enquiry form, we process your details (occasion, timeframe, name, company, email address and your message) to answer your enquiry. Form entries are transmitted via the form service of our host Netlify and stored there. To deliver them to our mailbox hello@cosmicpark.de, we use the email delivery service Resend (Plus Five Five, Inc., USA), which processes the message only for sending. We have data processing agreements with Netlify and Resend; transfers to the USA are based on the EU-US Data Privacy Framework or the EU standard contractual clauses (Art. 45, 46 GDPR). We delete the entries at Netlify regularly, at the latest after 6 months.
The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (our interest in answering enquiries). We delete the data once the enquiry has been dealt with, unless statutory retention obligations apply.
On your first visit, a banner asks whether you consent to marketing services. We store your decision in your browser’s local storage (entry “cp-consent” with your choice and the time) so that we don’t have to ask you on every visit. This entry is not transmitted to us and you are asked again after 12 months.
Storing it is necessary to document and respect your consent (Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, § 25(2) no. 2 TDDDG).
You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page or with this button:
Google Tag Manager only loads after you have consented to the “Marketing” category in the cookie banner. The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). We also use Google’s Consent Mode: the embedded services receive your choice and may only operate to the extent you have agreed to.
It cannot be ruled out that Google also transfers data to the USA. Google LLC is certified under the EU-US Data Privacy Framework, so an adequacy decision of the EU Commission applies to the USA (Art. 45 GDPR). More information: Google’s privacy policy, Tag Manager use policy.
If you consent to the “Marketing” category, Tag Manager loads Google Ads by Google. This lets us measure whether our ads lead to visits and enquiries (conversion tracking) and show ads to people who have visited our website (remarketing). Google Ads sets cookies and similar identifiers for this (e.g. “_gcl_au”, stored for up to 90 days, as well as cookies on Google domains) and processes usage and device data, your IP address and information about ad clicks.
The legal basis is your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG), which you can withdraw at any time. For data transfers to the USA, the information on Tag Manager applies. More information: Google’s privacy information for advertisers, settings for personalised ads: adssettings.google.com.
We currently do not use statistics or analytics services such as Google Analytics. Should this change, we will update this policy and the cookie banner beforehand.
On our website we link to our Instagram profile (Meta Platforms Ireland Limited). These are simple links, not embedded plugins: data is only transferred when you click the link and go to Instagram. Meta’s privacy policy applies there.
In connection with enquiries, offers and orders, we process the data of our clients and business partners (e.g. names, contact details, contract data, invoicing and payment data) to fulfil our contractual obligations and run our business (Art. 6(1)(b) and (c) GDPR). Where necessary, we share data with service providers involved in delivery, such as venues, technology and catering partners, tax advisers or banks.
If we process personal data on behalf of a client, such as guest or participant lists, we conclude a data processing agreement under Art. 28 GDPR.
We only store personal data for as long as necessary for the respective purpose or as required by statutory retention periods. Under commercial and tax law, we generally keep business records for six to ten years.
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw any consent given at any time with effect for the future (Art. 7(3) GDPR).
Right to object: where we process your data on the basis of legitimate interests, you can object to this processing at any time on grounds relating to your particular situation (Art. 21 GDPR). You can object to processing for direct marketing purposes at any time without giving reasons.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Hamburg Commissioner for Data Protection and Freedom of Information, Ludwig-Erhard-Straße 22, 20459 Hamburg, Germany.
We update this privacy policy whenever our website or our data processing changes. The version published here applies.
Last updated: October 2026. This English translation is provided for convenience; the German version is legally binding.
Cosmic Park GmbH – brand experience agency, Leunastraße 50, 22761 Hamburg, Germany · hello@cosmicpark.de
Brand stories that want to become real. Brand experiences people can feel, touch and marvel at. Relevance in the real moment, then in the feed.
People want to connect. They’re looking for real communities and experiences that leave a mark. They want to feel, taste, hear, see … and set out on a journey they’ll never forget.
That’s exactly what a strong brand experience does: it turns brands and products into multisensory moments you can’t scroll past, and don’t want to.
Up for this journey? Cosmic Park makes it happen.
People want to connect. They’re looking for real communities and experiences that leave a mark. They want to feel, taste, hear, see … and set out on a journey they’ll never forget.
That’s exactly what a strong brand experience does: it turns brands and products into multisensory moments you can’t scroll past, and don’t want to.
Up for this journey? Cosmic Park makes it happen.
Cosmic Park is the production hub for brand experiences with maximum impact. From first concept to launch. We turn brand stories into immersive playgrounds for creators and build stages for content that gets shared.
That’s how we guide our brand partners into the digital age: agile, collaborative and creative. With a clear focus on relevance and real business impact.
Our promise: brand experiences that combine creative excellence with measurable success.
Talk to the crew.
Enough scrolling. Time for real experiences. Tell us in two minutes what you have in mind. We’ll get back to you with a first take.
