Privacy Policy
Responsible Party
Balane GmbH
Balanstraße 84
81541 München, Deutschland
E-Mail: contact@balane.tech
Managing Director: Jonas David Höttler
General Information
The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is any data that can be used to personally identify you.
SSL/TLS Encryption
This site uses SSL/TLS encryption for security. Encrypted connections are indicated by "https://" in the browser address bar and a padlock symbol.
Web Fonts
This website uses the "Inter" font from Google Fonts, hosted locally on our servers. No connection to Google servers is established, and no IP addresses are transmitted.
Server Logs & Hosting
Hosting Provider
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723, USA
Data Processing
Technical information is automatically collected with each access to our website: IP address, date and time of access, file names and URLs accessed, referrer URL, and browser/operating system information.
Processing Purpose
Technical provision of the website, ensuring system security, and optimizing the internet service.
Legal Basis
Art. 6(1)(f) GDPR (legitimate interest in the proper functioning and security of the website).
Storage Duration
Data is deleted once it is no longer needed for the purpose of collection, typically within 7-30 days.
Third-Country Transfer
Vercel operates servers worldwide, including US locations. Data transfer is based on the EU-US Data Privacy Framework (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place. Further information: https://vercel.com/legal/privacy-policy
Web Analytics (Umami)
We use Umami, a privacy-friendly, cookie-free open-source analytics tool. No cookies are set and no personal data is stored.
Collected Data
Only anonymous, aggregated usage data: page views, time spent, referrers. Identification of individual visitors is not possible.
Cookies & Tracking
Completely cookie-free and GDPR-compliant. No cookies, no fingerprinting.
Hosting
Umami is self-hosted by us on Railway Inc. servers in the EU. No data is transmitted to third parties.
Legal Basis
Art. 6(1)(f) GDPR (legitimate interest in analysis and optimization). No consent required as no personal data is collected.
Email Contact
When you contact us by email, the data you provide (email address, name, information) is stored for processing your request.
Purpose
Processing requests and communication.
Legal Basis
Art. 6(1)(f) GDPR (interest in responding) or Art. 6(1)(b) GDPR (contract initiation).
Storage Duration
Data is deleted upon completion of the request unless legal retention obligations exist.
Support System
Support requests via email are processed through our ticket system.
Collected Data
Name, email address, subject, message, chat history, timestamp, ticket number.
Purpose
Processing support requests, issue tracking, communication.
Legal Basis
Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest).
System Used
Zammad — a self-hosted open-source support ticket system.
Hosting Location
Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transmitted outside the EU.
Storage Duration
Support tickets are retained after completion for a reasonable period for follow-up availability. Deletion occurs when retention obligations cease.
Rights of Data Subjects
You have the following rights regarding your personal data:
- Right to Information (Art. 15 GDPR) — You have the right to request information about your personal data processed by us.
- Right to Correction (Art. 16 GDPR) — You have the right to demand immediate correction of incorrect or incomplete data.
- Right to Deletion (Art. 17 GDPR) — You have the right to demand deletion of your data unless processing is required for freedom of expression, legal obligations, or assertion of legal claims.
- Right to Restriction (Art. 18 GDPR) — You have the right to demand restriction of processing.
- Right to Data Portability (Art. 20 GDPR) — You have the right to receive your data in a structured, commonly used, and machine-readable format.
- Right to Withdrawal (Art. 7(3) GDPR) — If processing is based on consent, you may withdraw it at any time.
- Right to Complaint (Art. 77 GDPR) — You have the right to lodge a complaint with a supervisory authority.
Right to Object (Art. 21 GDPR)
You have the right to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR (legitimate interests). Upon objection, your data will no longer be processed unless compelling legitimate grounds for processing exist. Contact for objection: contact@balane.tech
Responsible Supervisory Authority
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach, Deutschland
Telefon: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de
Policy Amendments
We reserve the right to adapt this privacy policy to meet current legal requirements or to implement changes to our services. The new privacy policy applies upon your subsequent visit.