Data Protection

The responsible body within the meaning of the data protection laws, in particular the EU Data Protection Basic Regulation (DSGVO), is

SUPERHEROES FLY AHEAD

Davy Dallas Peng

c/o WeWork Europapassage

Hermannstr. 13 / 20095 Hamburg

mail: info@superheroes-fly-ahead.com

Your data subject rights
You can exercise the following rights at any time by contacting our data protection officer:

Information about your data stored with us and its processing (Art. 15 DSGVO),
Correcting incorrect personal data (Art. 16 DSGVO),
Deletion of your data stored with us (Art. 17 DSGVO),
Restriction of data processing, provided that we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
Objection to the processing of your data by us (Art. 21 DSGVO) and
Data transferability, if you have consented to data processing or have concluded a contract with us (Art. 20 DSGVO).
If you have given us your consent, you can revoke it at any time with effect for the future.

You may at any time submit a complaint to a supervisory authority, e.g. to the competent supervisory authority of the federal state of your residence or to the authority responsible for us as the responsible body.

A list of the regulatory authorities (for the non-public sector) with their addresses can be found at: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Comment function
Nature and purpose of the processing:
If users leave comments on our website, in addition to this information, the time of their creation and the user name previously selected by the website visitor are also stored. This serves our security, as we can be prosecuted for illegal content on our website, even if it was created by users.

Legal basis:
The processing of the data entered as a comment is based on a legitimate interest (Art. 6 para. 1 lit. f DSGVO).

By providing the comment function, we would like to enable you to interact in an uncomplicated manner. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

Recipient:
Recipients of the data may be order processors.

Storage period:
The data will be deleted as soon as they are no longer required for the purpose of collection. This is generally the case when the communication with the user has been completed and the company can conclude from the circumstances that the matter in question has been finally clarified.

Provision prescribed or necessary:
The provision of your personal data is voluntary. Without the provision of your personal data, we cannot grant you access to our comment function.

Newsletter
Nature and purpose of the processing:
Your data will only be used to send you the subscribed newsletter by e-mail. Your name will be given in order to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a data subject.

To receive the newsletter, it is sufficient to enter your e-mail address. If you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions).

For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the “double opt-in” procedure. For this purpose we log the ordering of the newsletter, the sending of a confirmation mail and the receipt of the hereby requested answer. Further data is not collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.

Legal basis:
On the basis of your expressly granted consent (Art. 6 para. 1 lit. a DSGVO), we will send you our newsletter or comparable information regularly by e-mail to your specified e-mail address.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You will find a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option at the end of this data protection notice.

Recipient:
Recipients of the data may be order processors.

Storage period:
The data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted.

Storage duration:
The data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted.

Provision prescribed or necessary:
The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without existing consent.

Contact form
Nature and purpose of the processing:
The data entered by you will be stored for the purpose of individual communication with you. For this purpose, it is necessary to provide a valid e-mail address and your name. This serves to assign the inquiry and to answer it afterwards. The specification of further data is optional.

Legal basis:
The processing of the data entered in the contact form is based on a legitimate interest (Art 6 para. 1 lit. f DSGVO).

By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing your inquiry and for possible follow-up questions.

If you contact us to request an offer, the data entered in the contact form will be processed for the purpose of implementing pre-contractual measures (Art 6 para. 1 lit. b DSGVO).

recipient:
Recipients of the data may be processors.

Storage period:
Data will be deleted at the latest 6 months after processing the request.

If a contractual relationship is established, we are subject to the statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods have expired.

Provision prescribed or necessary:
The provision of your personal data is voluntary. However, we can only process your inquiry if you provide us with your name, your e-mail address and the reason for your inquiry.

Use of script libraries (Google Webfonts)
Nature and purpose of the processing:
In order to display our content correctly and in a graphically appealing manner across browsers, we use “Google Web Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter “Google”) to display fonts on this website.

The privacy policy of the library operator Google can be found here: https://www.google.com/policies/privacy/

Legal basis:
The legal basis for the integration of Google Webfonts and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible – although it is currently unclear whether and for what purposes – that the operator will collect data from Google in this case.

Storage duration:
We do not collect any personal data through the integration of Google Webfonts.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://www.google.com/policies/privacy/.

Third Country Transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or necessary:
The provision of personal data is not required by law or contract. However, it cannot be provided without the correct display of the contents of standard fonts.

Revocation of consent:
The programming language JavaScript is regularly used to display the content. You can therefore object to the data processing by deactivating the execution of JavaScript in your browser or by installing an integration JavaScript blocker. Please note that this may result in functional restrictions on the website.

Use of Adobe Typekit
Nature and purpose of the processing:
We use Adobe Typekit for the visual design of our website. Typekit is a service provided by Adobe Systems Software Ireland Companies (4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland; hereinafter “Adobe”) which gives us access to a font library. To incorporate the fonts we use, your browser must connect to an Adobe server in the United States and download the font required for our website. This will provide Adobe with information that your IP address was used to access our website. For more information about Adobe Typekit, please refer to Adobe’s privacy policy, which is available here: https://www.adobe.com/de/privacy/policy.html

Storage duration:
We do not collect any personal data by integrating Adobe Typekit Web Fonts.

Third Country Transfer:
Adobe is certified under the Privacy Shield Agreement and thus offers a guarantee to comply with European data protection laws (https://www.privacyshield.gov/participant?id=a2zt0000000TNo9AAG&status=Active).

Provision required or necessary:
The provision of personal information is not required by law or contract. However, it cannot be provided without the correct display of the contents of standard fonts.

Use of Google Maps
Nature and purpose of the processing:
On this website we use the offer of Google Maps. Google Maps is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). This enables us to display interactive maps directly on the website and enables you to use the map function conveniently.

You can find more detailed information about data processing by Google in the Google Privacy Notice. There you can also change your personal data protection settings in the data protection center.

You can find detailed instructions on how to manage your own data in connection with Google products here.

Legal basis:
The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
By visiting the website, Google receives information that you have called up the corresponding subpage of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in at Google, your data will be assigned directly to your account.

If you do not want the assignment in your profile on Google, you must log out of Google before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide need-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

Storage period:
We do not collect any personal data through the integration of Google Maps.

Third country transfer:
Google processes your data in the USA and is subject to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:
If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website, or only to a limited extent.

Provision prescribed or necessary:
The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded YouTube videos
Nature and purpose of the processing:
On some of our websites we embed YouTube videos. The operator of the corresponding plugins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter “YouTube”). When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This will tell YouTube which pages you visit. If you are logged in to your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by first logging out of your YouTube account.

If a YouTube video is started, the provider uses cookies that collect information about user behavior.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider’s privacy policy, where you will also find further information on your rights in this regard and setting options to protect your privacy (https://policies.google.com/privacy). Google processes your data in the USA and has submitted to the EU-US Privacy Shield https://www.privacyshield.gov/EU-US-Framework

Legal basis:
The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO)

Recipient:
The call of YouTube automatically triggers a connection to Google.

al basis for the integration of Adobe Typekit and the associated data transfer to Adobe is your consent (Art. 6 para. 1 lit. a DSGVO)

For more information on data protection at “YouTube”, please refer to the provider’s privacy policy at: https://www.google.de/intl/de/policies/privacy/

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Google AdWords
Nature and purpose of the processing:
Our website uses Google Conversion Tracking. The operating company of Google AdWords services is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. If you have reached our website via an advertisement placed by Google, Google Adwords will place a cookie on your computer. The conversion tracking cookie is set when a user clicks on an ad served by Google.

If the user visits certain pages on our site and the cookie has not expired, we and Google can tell that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. As a result, cookies cannot be tracked through the websites of AdWords customers. The information collected through the conversion cookie is used to compile conversion statistics for advertisers who have opted in to conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users.

Legal Basis:
The legal basis for the integration of Google AdWords and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Recipient:
Every time you visit our website, personal data, including your IP address, is transferred to Google in the USA. This personal data is stored by Google. Google may pass on this personal data collected via the technical process to third parties.

Our company does not contain any information from Google by which the person concerned could be identified.

Storage period:
These cookies lose their validity after 30 days and are not used for personal identification.

Third country transfer:
Google processes your data in the USA and has submitted to the EU_US Privacy Shield https://www.privacyshield.gov/EU-US-Framework.

Revocation of consent:
If you do not wish to participate in tracking, you can refuse the setting of a cookie that is required for this purpose – for example, by changing your browser settings to generally disable the automatic setting of cookies or to set your browser to block cookies from the domain “googleleadservices.com”.

Please note that you may not delete the opt-out cookies unless you wish to record measurement data. If you have deleted all your cookies in your browser, you will have to set the respective opt-out cookie again.

Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

Embedded content from other websites
Contributions on this website may contain embedded content (e.g. videos, pictures, articles, etc.). Embedded content from other websites behaves exactly as if the visitor had visited the other website.

These sites may collect information about you, use cookies, embed additional third-party tracking services, and record your interaction with that embedded content, including your interaction with the embedded content if you have an account and are logged on to that site.

Use of Google Remarketing
Nature and purpose of the processing:
This website uses the remarketing function of Google Inc. the operating company of the services of Google Remarketing is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”).

The function serves to present interest-related advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the visitor’s browser, which makes it possible to recognize the visitor when he or she visits websites that belong to the Google advertising network. On these pages, the visitor may be presented with advertisements relating to content that the visitor has previously viewed on websites that use Google’s remarketing function.

Legal basis:
Legal basis for the integration of Google Remarketing and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a DSGVO).

Our company does not contain any information from Google by which the person concerned could be identified.

Revocation of consent:
According to its own statements, Google does not collect any personal data during this process. If you still do not wish to use Google’s remarketing function, you can deactivate it by making the appropriate settings at https://support.google.com/adwordspolicy/answer/143465. Alternatively, you can disable the use of cookies for interest-based advertising via the advertising network initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.aspfolgen.

Provision required or necessary:
The provision of your personal data is voluntary, based solely on your consent. If you disable access, this may result in functional restrictions on the website.

SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL) via HTTPS.

Change of our data protection regulations
We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your renewed visit.

Questions to the data protection officer
If you have any questions regarding data protection, please send us an e-mail or contact the person responsible for data protection in our organization directly:

Dada Peng
info@superheroes-fly-ahead.com