Privacy Policy
Last updated: 16 October 2026
At Cosmic Sports we respect your privacy. This policy explains what personal data we collect through www.cosmicsports.io, why we collect it, how long we keep it and what rights you have. It complies with the EU General Data Protection Regulation (GDPR) and the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD).
1. Who is responsible for your data
Data controller: Cosmic School SL
Tax ID (NIF/CIF): B16700643
Address: Viladrau, Girona, Spain
Email: hello@cosmicsports.io
2. What data we collect
When you send us an inquiry through our contact form, we collect:
- First and last name
- Phone number
- Email address
- The service you are interested in
- Any information you include in your message
Please do not include health information or other sensitive data in the message. We will ask for it separately, with your explicit consent, if a service requires it.
When you browse the website, our hosting provider (Wix) automatically records technical data such as your IP address, browser, device and pages visited. If you accept analytics cookies, Google Analytics also collects information about how you use the website (see section 8).
3. Why we use your data and on what legal basis
- Replying to your inquiry and preparing a proposal for the service you request. Legal basis: steps taken at your request before entering into a contract (Art. 6.1.b GDPR) and your consent when you submit the form (Art. 6.1.a GDPR).
- Providing the contracted services and managing the client relationship. Legal basis: performance of a contract (Art. 6.1.b GDPR).
- Keeping accounting and tax records. Legal basis: legal obligation (Art. 6.1.c GDPR).
- Keeping the website secure and working properly. Legal basis: our legitimate interest (Art. 6.1.f GDPR).
- Measuring how the website is used, to improve it. Legal basis: your consent through the cookie banner (Art. 6.1.a GDPR).
We do not use your data for automated decision-making or profiling, and we do not sell it.
4. How long we keep your data
- Inquiries that do not lead to a contract: up to 12 months after our last contact, then deleted.
- Clients: for as long as the business relationship lasts and, afterwards, for the periods required by law (for example, 6 years for accounting records under the Spanish Commercial Code).
- Google Analytics data: 14 months, then automatically deleted.
5. Who we share your data with
We only share your data with service providers that we need to run our business, under data processing agreements:
- Wix.com Ltd. (website hosting and form management). Wix is based in Israel, a country with an adequacy decision from the European Commission, and may process data in the United States under the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Google Ireland Ltd. (Google Analytics, website usage statistics, only if you accept analytics cookies).
We will only share data with public authorities when required by law.
6. Minors
Our services are aimed at adult athletes and brands. If an inquiry concerns an athlete under 14 years of age, it must be submitted by their parent or legal guardian, as required by Spanish law (Art. 7 LOPDGDD).
7. Your rights
You can, at any time and free of charge:
- access your data;
- rectify inaccurate data;
- erase your data;
- restrict or object to how we process it;
- receive it in a portable format (data portability);
- withdraw your consent, without affecting processing carried out before you withdrew it.
To exercise any of these rights, email hello@cosmicsports.io with the subject "Data protection" and tell us which right you want to exercise. We will reply within one month.
If you believe we have not handled your data correctly, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
8. Cookies
This website uses two types of cookies:
- Strictly necessary cookies, set by Wix, our hosting provider, so that the website works and stays secure. These do not require your consent.
- Analytics cookies, set by Google Analytics (Google Ireland Ltd.), which help us understand how visitors use the website, for example which pages are visited and how people find us. The information is aggregated and we do not use it to identify you. These cookies are only set if you accept them in the cookie banner. You can accept or reject analytics cookies when you first visit the website, and change your choice at any time through the cookie settings link at the bottom of the page.
You can also delete cookies in your browser settings.
Google may transfer data to the United States under the EU-US Data Privacy Framework. More information: https://policies.google.com/privacy
9. Security
We apply reasonable technical and organisational measures to protect your data against loss, misuse or unauthorised access. The website is served over an encrypted (HTTPS) connection.
10. Changes to this policy
We may update this policy to reflect changes in the law or in our services. The date at the top shows when it was last updated.