Privacy Policy
Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)
Data Controller
Responsible for data processing on this website is:
Balane GmbH
Balanstraße 84
81541 München
Deutschland
E-Mail: contact@balane.tech
Managing Director: Jonas David Höttler
General Information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
SSL/TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Server Logs & Hosting
Hosting Provider:
Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA
Type and Scope of Processing:
When visiting this website, the hosting provider automatically stores technical information in server log files:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which access was made (referrer URL)
- Browser used and, if applicable, the operating system
Purpose of Processing:
Processing is carried out for the technical provision of the website, to ensure system security, and to optimize the internet offering.
Legal Basis:
Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.
Storage Duration:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after 7 to 30 days.
Third Country Transfer:
Vercel operates servers worldwide, including in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR has been concluded with Vercel.
More information: Vercel Privacy Policy
Web Analytics (Umami)
This website uses Umami, a privacy-friendly, cookie-free open-source web analytics software. Umami does not set cookies and does not store personal data.
Data Collected:
Umami only collects anonymous, aggregated usage data such as page views, time on page, and referrer. Identification of individual visitors is not possible.
Cookies & Tracking:
Umami is completely cookie-free and GDPR-compliant. No cookies are set and no fingerprinting is performed.
Hosting:
Umami is self-hosted by us on servers of Railway Inc. in the European Union. Railway is a US company certified under the EU-US Data Privacy Framework. A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Railway. No data is transferred to third parties.
Legal Basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in analyzing and optimizing our website. Since Umami does not collect personal data and does not set cookies, no consent is required.
Contact via Email
If you contact us by email, the data you provide (your email address, possibly your name, and other information you provide) will be stored by us to process your inquiry.
Purpose:
Processing your inquiry and communicating with you.
Legal Basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your inquiry) or Art. 6 para. 1 lit. b GDPR if your inquiry is aimed at concluding a contract.
Storage Duration:
The data is deleted as soon as the processing of your inquiry is completed and no legal retention obligations exist.
Contact Form & Lead Management
If you contact us via a contact form on this website, your data will be processed for lead management and customer service.
Data Collected:
- Name
- Phone number (optional)
- Company (optional)
- Message
- Timestamp of inquiry
Purpose of Processing:
Lead management, customer service, processing inquiries, and contract initiation if applicable.
Legal Basis:
Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your inquiry and customer care).
System Used:
The transmitted data is stored in our self-hosted Odoo CRM system to process your inquiry and manage customer contact.
Hosting Location:
Odoo is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.
Storage Duration:
Lead data is stored as long as it is required for processing your inquiry or for a possible business relationship. After correspondence is completed, the data is deleted unless legal retention obligations (e.g., commercial or tax law) exist. These are usually 6 to 10 years.
Data Processing Agreement:
A data processing agreement pursuant to Art. 28 GDPR has been concluded with Hetzner Online GmbH, which ensures compliance with European data protection standards.
More information: Hetzner Privacy Policy
Support & Live Chat
If you use our live chat or submit a support request via our ticket system, your data will be processed to handle your inquiry.
Data Collected:
- Name
- Subject
- Message
- Chat-history
- Timestamp and ticket number if applicable
Purpose of Processing:
Processing your support or chat request, tracking the matter, and communicating with you.
Legal Basis:
Art. 6 para. 1 lit. b GDPR (contract performance) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your inquiry).
System Used:
Zammad – a self-hosted open-source system for support tickets and live chat.
Hosting Location:
Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.
Storage Duration:
Support tickets are retained for a reasonable period after the matter is closed to be available for follow-up questions. Deletion occurs as soon as no retention obligations exist.
Your Rights as a Data Subject
You have the following rights regarding your personal data:
- Right to Information (Art. 15 DSGVO): You have the right to request information about your personal data processed by us.
- Right to Rectification (Art. 16 DSGVO): You have the right to demand immediate rectification of inaccurate or completion of your stored data.
- Right to Erasure (Art. 17 DSGVO): You have the right to demand the erasure of your data stored by us, unless processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
- Right to Restriction of Processing (Art. 18 DSGVO): You have the right to demand restriction of processing of your personal data if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, or you have objected.
- Right to Data Portability (Art. 20 DSGVO): You have the right to receive your data that you have provided to us in a structured, commonly used, and machine-readable format or to request transmission to another controller.
- Right to Withdraw Consent (Art. 7 Abs. 3 DSGVO): If processing is based on your consent, you have the right to withdraw this consent at any time. The lawfulness of the processing carried out on the basis of the consent until the withdrawal is not affected.
- Right to Complain (Art. 77 DSGVO): You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement.
To exercise your rights, contact us at: contact@balane.tech
Right to Object
Objection to data processing based on legitimate interests (Art. 21 GDPR):
You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (data processing based on a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
Contact for objection: contact@balane.tech
Supervisory Authority
The data protection supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Deutschland
Phone: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
www.lda.bayern.de
Data Protection Officer
The appointment of a data protection officer is not legally required for our company. If you have questions about data protection, please contact: contact@balane.tech
Automated Decision-Making
No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.
Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.
Stand: January 2026