Privacy Policy

This policy applies when you visit hero-worlds.com.

Data controller

Website hosting and security

We host this website on Cloudflare Pages. Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, receives the data needed to serve the website. When you visit a page, Cloudflare processes technical connection and request data, including your IP address, the time of access, and the requested resource. It may also process HTTP headers sent by your browser when needed for delivery or security.

We process this data to deliver the content you request and to keep the website running securely. The legal basis is Article 6(1)(f) GDPR. Our legitimate interests are providing a reliable website and protecting it against disruption and abuse. The website cannot be delivered without the necessary connection data.

We do not keep our own server access logs. Cloudflare handles access data according to the retention periods for the service. According to Cloudflare, sampled security events are available in its dashboard for up to 31 days. When responding to or investigating a specific incident, we may need to keep relevant data until the investigation is complete or as needed to establish or defend legal claims.

Processing outside the European Economic Area

Cloudflare may process data outside the European Economic Area, including in the United States. For transfers to the United States covered by its certification, Cloudflare relies on the EU–US Data Privacy Framework. Where there is no adequacy decision, Cloudflare's Data Processing Addendum provides for EU Standard Contractual Clauses as applicable. For information about these safeguards and the certification, see the Cloudflare Data Processing Addendum and the Cloudflare privacy policy.

Contact by email

If you email us, we process your email address, the content of your message and the details you provide so we can reply. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to handle your inquiry. If your inquiry concerns a contract with you or steps you request before entering into one, Article 6(1)(b) GDPR applies.

We use Gmail for our mailbox. Google receives the data needed to deliver and store messages and may process it outside the European Economic Area. Details about the safeguards and the grounds for transfers are available in Google's privacy policy and its data transfer frameworks.

We keep inquiries for as long as needed to handle them and respond to follow-up questions. We then delete them unless the law requires us to keep them or we need them to establish or defend legal claims. Contacting us is optional. We need a working reply address to respond.

Cookies and embedded services

The website does not include advertising, analytics, externally hosted fonts or content embedded from other platforms. The website itself does not set cookies.

Cloudflare checks requests to protect the website against abuse. If Cloudflare triggers a security challenge, it may set the cf_clearance cookie once you pass the check. The cookie records that the check was passed so it does not have to be repeated immediately on subsequent visits. For this domain it is set to be valid for 30 minutes. Section 25(2)(2) of the German TDDDG applies where storing the cookie is strictly necessary for the secure operation of the site. The legal basis for the associated processing of personal data is Article 6(1)(f) GDPR. See Cloudflare's cookie documentation for details.

Your rights

Subject to the conditions in the GDPR, you can ask for access to, correction of, deletion of or restriction of processing of your personal data. You can also request data portability (Articles 15–20 GDPR). If processing is based on Article 6(1)(f) GDPR, you can object for reasons relating to your particular situation (Article 21 GDPR). To exercise these rights, use the contact address above.

You can also lodge a complaint with a supervisory authority, particularly where you live, where you work, or where the alleged infringement took place (Article 77 GDPR).