Privacy Policy

1. Controller

2. Which data we process

Ordering a book: first name, email address, date of birth, time of birth, place of birth as well as order and payment data.

Server logs: technically necessary data (for example IP address, time, page requested) for the secure operation of the website.

3. Purposes and legal bases

We process your data to fulfil the contract on the creation and delivery of your book (Art. 6 (1) (b) GDPR), to fulfil legal obligations (for example retention under tax law, Art. 6 (1) (c) GDPR) and on the basis of our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR).

4. Processors and service providers

To provide our service we use carefully selected service providers:

Text creation: Anthropic PBC (Claude), USA, to generate the individual texts from the calculated data. We transmit as little data as possible (usually only the first name and the calculated astrological facts, not the complete date of birth).

Email delivery: Brevo (Sendinblue GmbH), for the delivery of your book.

Payment processing: the payment service provider named at the checkout (for example Stripe or PayPal).

Hosting: operation on servers in the EU.

Where required, data processing agreements exist with these service providers (Art. 28 GDPR).

4a. Reach measurement (Umami, self hosted)

To understand which content of our website is used, we use the analytics software Umami, self hosted on our own server in the EU. Umami works without cookies and without tracking across websites. No data is passed on to third parties. Only aggregated, anonymised usage data is recorded (pages viewed, referring page, browser and device type, country). IP addresses are not stored and individual persons cannot be identified. The legal basis is our legitimate interest in improving our offer (Art. 6 (1) (f) GDPR).

4b. Google Analytics 4

In addition we use Google Analytics 4, a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), but only if you consent via our cookie banner (Art. 6 (1) (a) GDPR, Section 25 TTDSG). Without consent Google Analytics sets no cookies (Google Consent Mode). With consent Google Analytics uses cookies to analyse your use. The information generated is transferred to Google servers. A transfer to the USA is possible and is based on the EU US Data Privacy Framework and standard contractual clauses. You can withdraw or give your consent at any time with effect for the future.

4c. Meta Pixel and Conversion API (only with consent)

Only with your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TTDSG) we use the Meta Pixel and the server side Meta Conversion API of Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) to measure the effect of our advertisements. Cookies are set (among others _fbp, _fbc) and event data (for example page views, purchases with order value) are transmitted to Meta, for purchases additionally your email address in hashed form (SHA-256) for matching. Without your consent neither the pixel is loaded nor an event sent to Meta. The data transfer to the USA is based on the EU US Data Privacy Framework or standard contractual clauses.

4c-1. OpenAI Pixel and Conversions API (only with consent)

Only with your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TTDSG) we use the OpenAI Pixel and the server side OpenAI Conversions API of OpenAI Ireland Ltd. (1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland) to measure whether our advertisements in ChatGPT lead to purchases. Cookies are set (__oppref with the identifier of a click on our advertisement, __obref as a random browser identifier). Technical status messages of the pixel and, for a purchase, event data (order number, amount paid, products purchased) are transmitted to OpenAI, additionally your email address and your name in hashed form (SHA-256), your country and your IP address for matching. Without your consent neither the pixel is loaded nor an event sent to OpenAI. A transfer to the USA is possible and is based on standard contractual clauses.

4c-1a. Microsoft Advertising UET tag (only with consent)

Only with your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TTDSG) we use the UET tag (Universal Event Tracking) of Microsoft Advertising, provided by Microsoft Ireland Operations Ltd. (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland). Microsoft uses it to confirm our domain for the Microsoft Merchant Center, and we measure whether our advertisements in Bing search lead to purchases. Cookies are set (e.g. _uetsid, _uetvid, MUID) and data about your visit is transmitted (pages viewed, browser, IP address, identifier of a click on our advertisement), for a purchase additionally the order number and the amount paid. Without your consent the tag is not loaded. A transfer to the USA is possible and is based on standard contractual clauses and the EU-US Data Privacy Framework. You can withdraw your consent at any time via the “Cookie settings” in the footer.

4d. Partner programme

If you reach our website through a link of one of our partners (address with the parameter partner), we store the identifier of that partner for 30 days in the cookie kg_partner. If you order during this time, we note the partner at your order so that we can pay the partner a commission. The cookie contains no personal data and is technically necessary for the settlement with our partners (Art. 6 (1) (f) GDPR, Section 25 (2) TTDSG). You can delete it at any time in your browser settings.

4e. Origin of an order

If you reach us through one of our advertisements, a newsletter or a link on another website, we store for 30 days in the cookie kg_quelle which way you came: channel (for example Instagram or Google), campaign and advertisement, the first page you opened and the time. If you order during this time, we note this information at your order so that we can see which advertising leads to orders and which does not. The cookie contains no personal data, no IP address and no identifier of your device. The legal basis is our legitimate interest in settling and managing our advertising spending (Art. 6 (1) (f) GDPR, Section 25 (2) TTDSG). You can delete the cookie at any time in your browser settings.

5. Data minimisation and storage period

Data of other persons (for example relationship horoscope, child's birth chart): if you enter birth data of other people, you confirm when ordering that you are entitled to do so, for minors as a person with custody or with the consent of those concerned. We use this data exclusively to create the ordered book and do not pass it on.

Birth data deserves special protection. We keep raw data only as long as it is necessary for the creation and delivery of your book and then minimise or pseudonymise it, unless statutory retention obligations (in particular under tax and commercial law) stand in the way.

6. Your rights

You have the right to information, rectification, erasure, restriction of processing, data portability and objection. Please contact info@kosmosgenie.de.

You also have the right to lodge a complaint with a data protection supervisory authority.

Last updated: 2026. This policy is updated when our offer changes.