Privacy Policy

Controller

The controller for data processing on this website is:

1. Principle

This website is deliberately minimal. It sets no cookies, uses no analytics or tracking tools, loads no external fonts, has no contact form and keeps no user accounts. The videos are also delivered directly from our own STRATO webspace; no external video platform is embedded.

2. Hosting and server logs

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. STRATO processes the data arising from your visit on our behalf under a data processing agreement pursuant to Art. 28 GDPR.

When a page is requested, technically necessary access data is recorded in server logs:

• IP address of the requesting device
• date and time of access
• name and size of the requested file and the transfer status
• the previously visited page (referrer), if transmitted
• browser type and operating system

This processing is necessary to operate and secure the website. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in technically flawless delivery, stability and defence against attacks. This data is not merged with other sources and is not evaluated on a personal level. STRATO stores visitors’ IP addresses in these logs for a maximum of seven days for the detection and defence of attacks. Data needed to investigate a specific security incident may exceptionally be retained for longer for the duration of that investigation.

3. Self-hosted videos

The video files on this website are stored on the same STRATO webspace as the website itself and are played using your browser’s built-in video function. No external video provider is contacted and video playback does not set cookies or add separate analytics or tracking.

Requests for the video files are recorded only in the technically necessary STRATO server logs described in section 2. Playing a video therefore does not create an additional transfer to a video provider or to a third country.

4. Contacting us by email

If you send us an email, we process your address and the content of your message solely to handle your request. The legal basis is Art. 6 (1) (b) GDPR where a contract or its initiation is involved, otherwise Art. 6 (1) (f) GDPR (interest in responding to enquiries). We delete the correspondence once it is no longer needed and no statutory retention obligations apply.

5. Links to Apple

The website links to the Apple App Store and to TestFlight. These links open services of Apple Inc. and Apple Distribution International Ltd. You leave our website only when you click; from that point Apple’s privacy policy applies, over which we have no influence.

6. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interests (Art. 21). Consent once given can be withdrawn at any time with future effect (Art. 7 (3)).

You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (ldi.nrw.de); you may equally contact the authority of your country of residence.

For all privacy matters: info@cosmocleaner.de

Looking for information about data processing in the Cosmo Cleaner app? Open the separate app privacy policy.