Legal document · GDPR
Privacy policy
This translation is provided for your convenience. The German version is legally binding: Datenschutzerklärung
The short version first: this website cares about the galaxy, not about your data. No tracking, no analytics tools, cookies only with your consent. Whatever does get processed is listed here. Short and sweet, with nothing hidden in the small print.
1. Controller
The controller responsible for data processing on this website is:
Thomas Manglitz
Film character exhibition “Stars of the Galaxy”
Berliner Platz 10
41061 Mönchengladbach, Germany
Phone: +49 2161 406 37 90
Email: info@starsofthegalaxy.de
2. Hosting & server log files
This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with the host in accordance with Art. 28 GDPR.
Whenever pages are accessed, the server automatically stores what are known as log files. They contain:
- the IP address of the requesting device,
- the date and time of access,
- the page requested,
- the user agent (browser type and operating system).
We need this data to keep the site running stably and securely, for example to detect attacks. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in technically error-free operation). The log files are deleted in line with the host’s retention periods. They are not combined with any other data.
3. Contact and enquiry forms
This website has several forms: for general contact enquiries and for enquiries about prop rental, hen & stag parties and kids’ birthday parties. Whatever you enter there (e.g. your name, email address, preferred date and message) is processed solely to handle and answer your enquiry. The details are sent by email to info@starsofthegalaxy.de.
The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract (e.g. booking a birthday party or a guided tour), and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We do not pass your data on to third parties. We delete it once your enquiry has been fully dealt with, unless statutory retention obligations apply.
4. Google Maps: link only
We do not embed a map on the contact page; we link to Google Maps instead. Only when you click the link does Google Maps open in a new window. Only then is data (including your IP address) transferred to Google, and Google’s terms apply. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
For more details, see Google’s privacy policy.
5. Videos: only from our own server
The videos on this website (such as the guide to the AR app SnoopIT) are hosted exclusively on our own server. No data is passed on to third parties. The guide videos only play after you have started them with a click. Short decorative animations (for example on the birthday party page) play silently, straight from our server. Loading them only creates the server log files described in section 2.
6. Cookies & consent
On your first visit, a pop-up asks which cookies you want to allow. Necessary entries are always active: they store your cookie choice (in browser storage under “sotg-cookie-consent-v1”, which stays on your device) and use sessionStorage to stop notices from popping up again every time you change page. These entries are not sent to anyone.
Cookies in the preferences, statistics and marketing categories are only set with your consent and only if a corresponding service is actually in use. There are currently no analytics or advertising tools active on this website; if you decline, everything simply stays off. Should services such as Google Tag Manager or the Meta Pixel be added in future, they will only load with your consent, and this section will be updated accordingly.
You can change or withdraw your choice at any time via the “Cookie settings” link in the footer of every page.
7. External links & services
Some services are provided by external companies. As soon as you switch over to them, their privacy notices apply instead of this policy:
- Ticket and merch shop (Ticket shop, Merch shop): run on the Shopify platform. See the shop’s privacy policy.
- Digital exhibition guide (in five languages, at /en/guide/): displayed as an Adobe Express embed directly on our site. The embed only loads when you click a language. Your click counts as consent, and from then on Adobe may set cookies within the embedded window. See Adobe’s privacy policy.
- AR app “SnoopIT” (download link): a third-party service. The privacy notices of the app or of the respective app store apply.
- Facebook and Instagram (links in the footer): plain links only; we do not embed any content or scripts from these services. Their privacy policies only apply once you click one of the links.
8. “Ask Kenny” chat & Google reviews
“Ask Kenny” chat: Kenny answers your questions using only a knowledge file loaded from our own server. Whatever you type into the chat is processed only in your browser. It is not sent to us or to any third party, and it is not stored.
Google reviews: The reviews shown are public Google reviews. Our server retrieves them regularly via the Google Places API and stores them as a file. When you visit the site, no connection to Google is made and no visitor data is transferred.
9. Your rights
Under the GDPR you have the following rights. An informal email to info@starsofthegalaxy.de is all it takes:
- Access to the data stored about you (Art. 15 GDPR),
- Rectification of inaccurate data (Art. 16 GDPR),
- Erasure (Art. 17 GDPR),
- Restriction of processing (Art. 18 GDPR),
- Data portability (Art. 20 GDPR),
- Objection to processing based on legitimate interests (Art. 21 GDPR),
- Withdrawal of consent given, with effect for the future (Art. 7(3) GDPR), for example for the Adobe Express exhibition guide.
You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW) (the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
10. Last updated
Last updated: November 2026. If the law or the website changes, we will update this policy. You will always find the current version right here.
Back to the home page