Privacy Policy
Responsible Entity
Balane GmbH
Balanstraße 84
81541 München, Deutschland
E-Mail: contact@balane.tech
Managing Director: Jonas David Höttler
General Information
The following notes provide a simple overview of what happens to your personal data when you visit our website. Personal data includes all data that can personally identify you.
SSL/TLS Encryption
This site uses SSL or TLS encryption for security reasons. You can recognise an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock symbol.
Webfonts
This website uses the font "Inter" from Google Fonts, which is hosted locally on our servers. No connection to Google servers is made, and no IP addresses are transmitted.
Server Log Files & Hosting
Hosting Provider
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723, USA
Data Processing
Technical information is automatically collected each time you access our website: IP address, date and time of access, requested files and URLs, referrer URL, as well as browser and operating system information.
Purpose of Processing
Technical provision of the website, ensuring system security, and optimisation of the internet service.
Legal Basis
Art. 6(1)(f) GDPR (legitimate interest in proper functioning and security of the website).
Storage Duration
Data is deleted as soon as it is no longer necessary for the purpose of collection, typically within 7-30 days.
Transfer to Third Countries
Vercel operates servers worldwide, including US locations. Data transfer is based on the EU-US Data Privacy Framework (Art. 45 GDPR). A data processing agreement according to Art. 28 GDPR exists. More information: https://vercel.com/legal/privacy-policy
Web Analytics (Umami)
We use Umami, a privacy-friendly, cookie-free open-source analytics tool. No cookies are set, and no personal data is stored.
Collected Data
Only anonymous, aggregated usage data: page views, dwell time, referrer. Individual visitor identification is not possible.
Cookies & Tracking
Completely cookie-free and GDPR-compliant. No cookies, no fingerprinting.
Hosting
Umami is hosted by us on servers of Railway Inc. in the EU. No data is transmitted to third parties.
Legal Basis
Art. 6(1)(f) GDPR (legitimate interest in analysis and optimisation). Consent is not required as no personal data is collected.
Email Contact
If you contact us by email, the data you provide (email address, name, information) will be stored to process your request.
Purpose
Processing inquiries and communication.
Legal Basis
Art. 6(1)(f) GDPR (interest in response) or Art. 6(1)(b) GDPR (contract initiation).
Storage Duration
Data is deleted after the request is completed unless legal retention obligations apply.
Support System
Support requests via email are processed through our ticket system.
Collected Data
Name, email address, subject, message, chat history, timestamp, ticket number.
Purpose
Processing support requests, issue tracking, communication.
Legal Basis
Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest).
System Used
Zammad — a self-hosted open-source support ticket system.
Hosting Location
Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the EU.
Storage Duration
Support tickets are retained for a reasonable period after completion for follow-up inquiries. Deletion occurs when the retention obligations end.
Rights of Data Subjects
You have the following rights regarding your personal data:
- Right of Access (Art. 15 GDPR) — You have the right to request information about the personal data we process.
- Right to Rectification (Art. 16 GDPR) — You have the right to request the immediate correction of incorrect or incomplete data.
- Right to Erasure (Art. 17 GDPR) — You have the right to request the deletion of your data, provided the processing is not necessary for exercising the right to freedom of expression, fulfilling legal obligations, or asserting legal claims.
- Right to Restriction (Art. 18 GDPR) — You have the right to request the restriction of processing.
- Right to Data Portability (Art. 20 GDPR) — You have the right to receive your data in a structured, common, and machine-readable format.
- Right to Withdraw Consent (Art. 7(3) GDPR) — If processing is based on consent, you can withdraw it at any time.
- Right to Complain (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR (legitimate interests). When you object, your data will no longer be processed unless there are compelling legitimate grounds for the processing. Contact for objection: contact@balane.tech
Competent Supervisory Authority
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Deutschland
Telefon: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de
Changes to This Privacy Policy
We reserve the right to adapt this privacy policy to comply with current legal requirements or to implement changes to our services. The new privacy policy applies on your next visit.