Content

Features

Chat to Ads

Sign In

Get early access

Privacy Policy

Information on Data Processing on the Superscale.ai Platform in Accordance with the General Data Protection Regulation (GDPR)


Superscale.ai GmbH ("Superscale.ai," hereinafter also referred to as "we") places great importance on protecting your personal data. We have implemented comprehensive technical and organizational security measures, which are regularly reviewed and updated as necessary.

The processing of your personal data is carried out exclusively within the framework of legal provisions. Below, we provide information in accordance with Articles 12, 13, and 21 of the General Data Protection Regulation ("GDPR") regarding the handling of your personal data when using the Superscale.ai platform. This privacy policy applies solely to the Superscale.ai platform and does not extend to any linked websites or online presence of other providers.

I. Responsible Party


Superscale.ai GmbH
Elisabeth-Selbert-Str. 7
34225 Baunatal
Germany

Authorized Representatives: Patrick Haede, Magnus Langanke
Contact: support@superscale.ai



II. Data Processing Activities, Purposes, and Legal Basis


The following section provides a detailed overview of the data processing activities occurring on the Superscale.ai platform.

1. Technical Provision of the Superscale.ai Platform

To ensure the proper functionality of the Superscale.ai platform, we process certain information that is automatically transmitted by your browser (so-called log files). This data is collected each time you access the platform and pertains to the system of the accessing device.

Collected Data:


  • IP address

  • Browser type/version (e.g., Firefox 59.0.2 (64 Bit))

  • Browser language (e.g., German)

  • Operating system (e.g., Windows 10)

  • Inner resolution of the browser window

  • Screen resolution

  • JavaScript activation

  • Java status (enabled/disabled)

  • Cookies status (enabled/disabled)

  • Color depth

  • Time of access


Purpose of Data Processing: The processing of the aforementioned data during your visit to the Superscale.ai platform is carried out to provide you with the requested functions and content of the Superscale.ai platform. Additionally, this processing ensures the proper, convenient, and secure use of the platform, as well as the protection of our IT systems (e.g., detection of cyberattacks).


Legal Basis: We process the data based on the following legal grounds:

  • For the performance of a user agreement or the implementation of pre-contractual measures pursuant to Art. 6(1)(b) GDPR;

  • To safeguard our legitimate interest in the user-friendly presentation of the platform pursuant to Art. 6(1)(f) GDPR.


Storage Duration: Data is stored only for the duration of your visit and is deleted immediately thereafter.



2. Cookies, Tracking, and Analytics

We also use cookies to provide certain technical functions of the Superscale.ai platform. Cookies are text files that are stored on your computer system by your internet browser when you access a website. Some functions of the Superscale.ai platform cannot be offered without the use of cookies.


a) Functional Cookies

The information collected through purely functional cookies is not used to create user profiles or analyze your browsing behavior.

Purpose of Data Processing: We use technical/functional cookies (i.e., strictly necessary cookies) to ensure the functionality of the Superscale.ai platform and to provide a smooth and user-friendly experience.

Further details on the cookies used, their legal basis, and their storage duration can be found in the Consent Manager implemented on the Superscale.ai platform.


b)  Analytics and Tracking

For the purpose of analyzing and tracking the use of the Superscale.ai platform, we and the service providers we engage use cookies that enable the evaluation of your browsing behavior. This allows us to improve the quality of the Superscale.ai platform and its content. By analyzing usage patterns, we can continuously optimize our offerings.

Purpose of Data Processing:
We use optional cookies (e.g., analytics cookies and functional cookies) for website analysis, tracking, and marketing purposes.

Further details on the cookies used, their legal basis, and their storage duration can be found in the Consent Managerimplemented on the Superscale.ai platform.



3. Consent Manager

We use a Consent Manager to obtain your consent for certain data processing activities that require approval (e.g., analytics, tracking). The Consent Manager processes your personal data to record your decision regarding the acceptance of cookies and tools and to store it for future visits to the Superscale.ai platform.


This includes, among other things, the corresponding cookie containing your consent decision as well as additional usage data, such as:


  • IP address

  • Domain name

  • Time of request

  • Server data (e.g., data transmission types, server status, etc.)

  • Country, browser, and operating system

    The Consent Manager provides an overview of the cookies and tools used and allows you to modify or withdraw your consent at any time.

    Further information, as well as the privacy policy of the Consent Manager, can be found at: 

    Purpose of Data Processing: By using the Consent Manager, we can inform you about the individual cookies and tools we use and manage your consent preferences accordingly.

    Legal Basis: We process your personal data in connection with the Consent Manager based on the following legal grounds:

    • Technical provision of the Superscale.ai platform and consent management under § 25 (2) No. 2 TDDDG (a German law regulating data protection in electronic communications), as the processing of the aforementioned data is essential to provide you with the Superscale.ai platform as requested.

    • Fulfillment of a legal obligation under Art. 6(1)(c) GDPR, which requires us as the responsible entity to inform you about the cookies we use and to obtain and document your consent for data processing.

    Storage Duration: We store your granted consent or withdrawal for one (1) year. After this period, your personal data is automatically deleted.



    4. User Account Registration

    You can register as a user on the Superscale.ai platform and create a user account. Registration is possible either via your email address using a Magic Link or through Google Single Sign-On (SSO).

    By creating a user account, you gain access to the features of the Superscale.ai platform. You are only eligible to register an account if your organization has acquired the necessary usage licenses and your email address has been authorized for access.

    Processed Data:

    During the registration and account creation process, we process the following data:


    • First and last name

    • Email address

    When you log in, we also store the following information:

    • User’s IP address

    • Date and time of login


    Purpose of Data Processing: The creation of a user account is necessary to provide access to the functionalities of the Superscale.ai platform and to verify user access rights.


    Legal Basis: We process your personal data based on the following legal grounds:


  • Performance of a contract or pre-contractual measures under Art. 6(1)(b) GDPR


Storage Duration: We store your personal data for the duration of the contractual relationship or until the expiration of potential legal claims arising from the customer relationship. The standard retention period is typically between 12 and 36 months, but in certain cases, it may extend up to 30 years. If processing is based on consent, we will delete your personal data once you effectively withdraw your consent.

Data Transfer to Google: If you log in using your Google account, we transmit data to: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For further details on Google’s data processing practices, your rights, and settings to protect your privacy, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=en.




5. Payment Processing

To process payments on the Superscale.ai platform, we use the payment service provider Stripe, operated by: Stripe, Inc., 510 Townsend St., San Francisco, USA.

Processed Data: During the payment process, the necessary data is automatically transmitted to Stripe. This typically includes the following information:

  • Name

  • Address

  • Company name (if applicable)

  • Email address

  • IP address


The transmitted data may also be forwarded by Stripe to credit agencies for identity verification and credit checks. In certain cases, Stripe may also share your data with third parties to fulfill contractual obligations or if data is processed on behalf of Stripe.

Further information on how Stripe processes your data can be found in their Privacy Policy:
https://stripe.com/privacy.


Purpose of Data Processing: The processing of payment data is required to ensure the secure execution of transactions on the Superscale.ai platform.


Legal Basis: We process your personal data for the above-mentioned purpose based on the following legal ground:


  • Performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR, as data processing is essential for completing payments via your chosen payment service provider and fulfilling the contractual agreement.


Storage Duration: We store your personal data for the duration of the contractual relationship or until the expiration of potential legal claims. The standard retention period is typically between 12 and 36 months, but in some cases, it may be up to 30 years in compliance with legal obligations.




6. Contact Requests

If you contact us via one of our contact forms or email, we process your personal data to handle and respond to your message or inquiry.

Processed Data:


  • Your name

  • Your email address

  • Your product URL


Purpose of Data Processing:
The purpose of processing your personal data is to respond to your message or inquiry. In the event of a legal dispute, the data may also be used as evidence.


Legal Basis: We process your personal data based on the following legal grounds:


  • Legitimate interest under Art. 6(1)(f) GDPR, to ensure proper handling and response to user inquiries.

  • Fulfillment of legal obligations under Art. 6(1)(c) GDPR, if your request relates to the exercise of your data subject rights.


Storage Duration: Your personal data is stored for the duration of the response process or as long as you are a user of the Superscale.ai platform. Additionally, we retain your personal data until the expiration of potential legal claims arising from the customer relationship. The standard retention period is between 12 and 36 months, but in some cases, it may be up to 30 years.




7. Integration of Third-Party Content

Our platform includes third-party content, such as texts, videos, images, or graphics from external providers. Below, we provide details on the third-party services currently used on our platform and their specific data processing activities.


Purpose of Data Processing:

The purpose of processing this data is to provide ad components (Create Function) and performance information (Research Function) related to individual ads.


Legal Basis: We process your data for the above-mentioned purposes based on the following legal ground:


  • Performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.


Storage Duration: We store your personal data for the duration of the contractual relationship or until the expiration of potential legal claims arising from the customer relationship. The retention period is typically between 12 and 36 months, but in certain cases, it may extend up to 30 years. If processing is based on consent, we delete your personal data as soon as you effectively withdraw your consent.




8. AI Training

We process personal data to train and improve Superscale.ai functionalities. The following types of data are collected for this purpose:


  • Data provided during user account registration (e.g., name, email address, payment data).

  • Data shared with us through communication (e.g., inquiries, support requests).

  • User-generated content uploaded to the Superscale.ai platform as input for creating ad components, including:

    • Prompts

    • Texts

    • Images

    • Videos

    • Music

    • Sounds

  • Technical data collected during platform use for training purposes.


Purpose of Data Processing:

The purpose of processing this data is to enhance and optimize the functionalities and results of the Superscale.ai application.


Legal Basis:

We process your data for the above-mentioned purposes based on the following legal grounds:


  • Performance of a contract or pre-contractual measures pursuant to Art. 6(1)(b) GDPR.

  • Legitimate interest in ensuring the accuracy, relevance, and continuous development of our AI functionalities pursuant to Art. 6(1)(f) GDPR.


Storage Duration: We store your personal data for the duration of the contractual relationship or until the expiration of potential legal claims arising from the customer relationship. The retention period is typically between 12 and 36 months, but in certain cases, it may extend up to 30 years. If processing is based on consent, we delete your personal data as soon as you effectively withdraw your consent.



III. Categories of recipients 


Within our company, only those departments that require access to your data to fulfill contractual and legal obligations will have access to it. Additionally, service providers and contractors engaged by us (e.g., technical service providers, shipping companies, waste disposal companies) may receive data for these purposes.


We limit the sharing of your personal data to what is necessary while ensuring compliance with data protection regulations. Some recipients act as data processors on our behalf and are strictly bound by our instructions when handling your personal data. Other recipients act independently as data controllers and are required to comply with the GDPR and other applicable data protection regulations.


In some cases, we may also transfer personal data to legal or tax advisors for consultation purposes. These recipients are subject to strict confidentiality and professional secrecy obligations based on their legal profession.



IV. International Data Transfers


We transfer personal data to countries outside the EU or the European Economic Area (EEA) (so-called third countries) only in the following cases:


  • When it is necessary to fulfill our contractual obligations,

  • When it is legally required,

  • When you have provided explicit consent, or

  • When the transfer is part of a data processing agreement with a third-party service provider.


As part of our use of cookies, similar applications, or Google account login, we may transfer your IP address (or a shortened version of it) and other necessary data to countries outside the European Union.


These data transfers are carried out based on:


  • An adequacy decision by the European Commission, confirming an adequate level of data protection in the third country, or

  • Standard Contractual Clauses (SCCs) issued by the European Commission, which ensure appropriate safeguards for international data transfers.



V. Your Obligation to Provide Data


In general, you are not required to provide us with your personal data. However, if you choose not to provide certain data, we may be unable to:


  • Provide access to our platform,

  • Respond to your inquiries,

  • Send you relevant information, or

  • Enter into or perform a contract with you.



VI. Automated Decision-Making and Profiling


We do not use automated decision-making or profiling that would have legal effects on you or significantly impact you in a similar way.



VII. User Rights under GDPR


Under applicable legal provisions, you have the following rights regarding the processing of your personal data, which you may assert against us:


Right of Access (Art. 15 GDPR)


You have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you are also entitled to receive information about this data, including:


  • The purposes of processing,

  • Categories of personal data concerned,

  • Categories of recipients,

  • Planned retention period,

  • The origin of the data (if not collected from you directly),

  • A copy of the personal data undergoing processing.



Right to Rectification (Art. 16 GDPR)


You have the right to request that we correct any inaccurate or incomplete personal data concerning you.



Right to Erasure ("Right to be Forgotten") (Art. 17 GDPR)


You have the right to request the immediate deletion of your personal data under certain conditions. This right does not apply if the processing is necessary for:


(i) Exercising the right to freedom of expression and information,
(ii) Compliance with a legal obligation (e.g., statutory retention obligations), or
(iii) The establishment, exercise, or defense of legal claims.



Right to Restriction of Processing (Art. 18 GDPR)


You have the right to request that we restrict the processing of your personal data under certain conditions.



Right to Data Portability (Art. 20 GDPR)


You have the right to request that we provide you with personal data that you have provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller where technically feasible.



Right to Withdraw Consent (Art. 7(3) GDPR)


You have the right to withdraw any consent you have provided at any time with effect for the future.



Right to Object (Art. 21 GDPR)


You have the right to object to the processing of your personal data on grounds relating to your particular situation. If you object, we must cease processing your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms or if processing is required for the establishment, exercise, or defense of legal claims.



Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR)


If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a data protection authority. This may be the authority in your place of residence, workplace, or the location of the alleged violation.


The supervisory authority responsible for us is:


Hessian Commissioner for Data Protection and Freedom of Information
Gustav-Stresemann-Ring 1
65021 Wiesbaden, Germany
Phone: +49 611 1408 121
Email: poststelle@datenschutz.hessen.de


However, we recommend that you first contact us directly before filing a complaint.


How to Exercise Your Rights

If you wish to assert any of the rights mentioned above, please submit your request in writing to the contact details provided in Section I or II of this Privacy Policy.



VIII. Updates and Changes to This Privacy Policy


We reserve the right to modify this Privacy Policy at any time. Any changes will be communicated by publishing the updated Privacy Policy on the Superscale.ai platform. Unless otherwise specified, such changes will take immediate effect upon publication.We encourage you to regularly review this Privacy Policy to stay informed about the most current version.



Last updated: March 2025