Privacy Policy
Last updated: 24 August 2026
This Privacy Policy explains how personal data is processed when you visit the website of ExtraCosmic Studios.
1. Controller
The controller responsible for data processing on this website is:
ExtraCosmic Studios
Owner: Kostiantyn Kravchyshyn
Hans-Albers-Platz 3
20359 Hamburg
Germany
Email: [email protected]
Phone: +49 1575 102 99 61
2. General Information
We process personal data only where necessary to operate this website, communicate with visitors, provide requested services, ensure website security, or where you have given your consent.
Personal data means any information relating to an identified or identifiable natural person, for example an IP address, email address, name, or information submitted through a contact form.
The main legal bases for processing under the General Data Protection Regulation (GDPR) are:
Art. 6(1)(a) GDPR – consent;
Art. 6(1)(b) GDPR – processing necessary for a contract or pre-contractual measures;
Art. 6(1)(c) GDPR – compliance with a legal obligation;
Art. 6(1)(f) GDPR – processing based on legitimate interests.
3. Website Hosting
This website is hosted using services provided by Bluehost, a brand within the Newfold Digital group.
When you visit this website, technical information may automatically be processed by the hosting infrastructure. This may include:
IP address;
date and time of access;
requested page or file;
browser type and version;
operating system;
referring website;
server status information.
This information is required to technically deliver the website, maintain the stability and security of the hosting infrastructure, detect misuse, and troubleshoot technical problems.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, reliable and efficient operation of this website.
Bluehost/Newfold may process data in countries outside the European Economic Area, including the United States. Where required under applicable data-protection law, appropriate safeguards such as Standard Contractual Clauses or another legally recognized transfer mechanism are used.
Further information about Bluehost/Newfold’s data processing can be found in their privacy documentation.
4. WordPress and Elementor
This website is built using WordPress and Elementor.
These systems are used to create, display and technically operate the website. Depending on the functionality being used, technical information such as IP addresses, browser information or cookie preferences may be processed.
We do not currently use Google Analytics or other website analytics tools for visitor tracking.
5. Cookies and Consent Management
We use Elementor Cookie Consent to manage cookie and privacy preferences.
When legally required, non-essential cookies and third-party scripts are blocked until you have given your consent.
You can choose whether to accept or reject non-essential categories of cookies and can change your preferences later through the cookie settings available on the website.
Our current consent configuration uses an opt-in model. Consent preferences are currently set to expire after 180 days, after which visitors may be asked to make their selection again.
The legal basis for processing based on consent is Art. 6(1)(a) GDPR together with §25(1) TDDDG, where information is stored on or accessed from the visitor’s device.
You may withdraw your consent at any time with effect for the future.
Necessary technologies that are strictly required to provide a service explicitly requested by the visitor may be used without consent where permitted by law.
The current cookie list and categories can be viewed through the website’s cookie preference interface.
6. YouTube Videos
Some pages of this website may contain videos provided by YouTube, a service operated by Google.
Where possible, YouTube videos are integrated using privacy-enhanced functionality. In addition, non-essential YouTube-related technologies are managed through our cookie consent system.
Before the relevant consent is provided, third-party functionality that requires consent should remain blocked.
If you consent to the relevant category or interact with an enabled YouTube video, a connection to YouTube/Google servers may be established. YouTube may then receive information including:
your IP address;
information about your browser and device;
the page from which the video was accessed;
information about your interaction with the video.
YouTube may also store or access cookies or similar technologies. These may include cookies used for functionality, security, service improvement, personalization, measurement or advertising.
The legal basis for activating non-essential YouTube functionality is your consent pursuant to Art. 6(1)(a) GDPR and §25(1) TDDDG.
You may withdraw your consent at any time through the cookie settings.
The provider of YouTube services in the European Economic Area is generally Google Ireland Limited. Data may also be processed by Google companies or service providers outside the European Economic Area.
Further information can be found in Google’s privacy information.
7. Contact Form and Email Contact
You may contact us by email and, where available, through the contact form on this website.
If you contact us, we process the information you provide, which may include:
your name;
email address;
message;
any other information voluntarily provided by you.
The purpose of this processing is to respond to your inquiry and communicate with you.
Where your inquiry concerns a potential contract or business relationship, processing is based on Art. 6(1)(b) GDPR.
For general inquiries, processing may be based on Art. 6(1)(f) GDPR, with our legitimate interest being the ability to communicate with visitors, customers, business partners and other interested persons.
We retain correspondence only for as long as necessary for the relevant purpose, unless statutory retention obligations require longer storage.
Please do not send confidential or sensitive personal information through the contact form unless it is necessary.
8. External Links and Social Media
This website contains links to external services, including platforms such as:
YouTube;
Discord;
Instagram;
X / Twitter.
If these are implemented as ordinary external links, no connection to the respective platform is established merely because you view our website.
When you click an external link, you leave our website. From that point onward, the privacy policy and data-processing practices of the respective third-party provider apply.
We have no control over the processing carried out by those external services.
9. Newsletter
We do not currently operate an active newsletter subscription service through this website.
If a newsletter service is introduced in the future, this Privacy Policy will be updated with information about the provider, the data processed, the legal basis, any international data transfers, retention periods and your withdrawal rights before the service is activated.
10. Data Retention
Unless a specific retention period is stated elsewhere in this Privacy Policy, personal data is retained only for as long as necessary for the purpose for which it was collected.
Data may be stored for a longer period where required by statutory retention obligations, for the establishment or defence of legal claims, or where another lawful basis permits continued processing.
When the applicable purpose and legal basis cease to apply, the relevant data will be deleted or anonymized where technically and legally possible.
11. International Data Transfers
Some of the service providers used by this website, particularly providers such as Bluehost/Newfold and Google, may process personal data outside the European Union or European Economic Area.
Where personal data is transferred to a country outside the EEA, the transfer is carried out only where a lawful transfer mechanism applies. Depending on the provider and destination, this may include:
an adequacy decision by the European Commission;
Standard Contractual Clauses approved by the European Commission;
another transfer mechanism permitted under the GDPR.
12. Your Rights
Under the GDPR, you may have the following rights regarding your personal data:
Right of Access
You may request information about whether and how we process your personal data and obtain a copy of that data.
Right to Rectification
You may request correction of inaccurate personal data and completion of incomplete information.
Right to Erasure
You may request deletion of your personal data where the legal requirements are met.
Right to Restriction of Processing
You may request that processing of your personal data be restricted in certain circumstances.
Right to Data Portability
Where applicable, you may request to receive personal data you have provided to us in a structured, commonly used and machine-readable format.
Right to Object
Where processing is based on Art. 6(1)(f) GDPR, you have the right to object to the processing on grounds relating to your particular situation.
Withdrawal of Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact:
13. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that the processing of your personal data infringes applicable data-protection law.
For a business based in Hamburg, the competent supervisory authority is generally:
The Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22
20459 Hamburg
Germany
Telephone: +49 (0)40 428 54-4040
Email: [email protected]
14. Security
We use appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
The website is intended to be made available using encrypted HTTPS connections. Please note that data transmission over the internet can never be guaranteed to be completely secure.
15. Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects or similarly significant effects concerning visitors to this website.
16. Changes to this Privacy Policy
We may update this Privacy Policy when the website, legal requirements or the services used by ExtraCosmic Studios change.
The current version published on this website applies.
Last updated: 24 August 2026