Privacy Policy

Responsible for data processing on this website:

Balane GmbH
Balanstraße 84
81541 München
Germany

E-Mail: contact@balane.tech
Managing Director: Jonas David Höttler

Hosting Provider:

Vercel Inc.
440 N Barranca Ave #4133
Covina, CA 91723
USA

Type and Scope of Processing:
When visiting this website, technical information is automatically stored in server log files by the hosting provider:

• IP address of the requesting computer
• Date and time of access
• Name and URL of the accessed file
• Website from which access was made (referrer URL)
• Browser used and operating system if applicable

Purpose of Processing:
Processing is carried out for the technical provision of the website, to ensure system security and to optimize the internet offering.

Legal Basis:
Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.

Storage Duration:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after 7 to 30 days.

Third Country Transfer:
Vercel operates servers worldwide, including in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A data processing agreement was concluded with Vercel in accordance with Art. 28 GDPR.

More information:
Vercel Privacy Policy

This website uses Umami, a privacy-friendly, cookie-free open-source web analytics software. Umami does not set cookies and does not store personal data.

Data Collected:
Umami only collects anonymous, aggregated usage data such as page views, session duration, and referrers. Identification of individual visitors is not possible.

Cookies & Tracking:
Umami is completely cookie-free and GDPR-compliant. No cookies are set and no fingerprinting is performed.

Hosting:
Umami is self-hosted by us on Railway Inc. servers in the European Union. Railway is a US company certified under the EU-US Data Privacy Framework. A data processing agreement (DPA) has been concluded with Railway in accordance with Art. 28 GDPR. No data is transferred to third parties.

Legal Basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the analysis and optimization of our website. Since Umami does not collect personal data and does not set cookies, no consent is required.

This website uses OpenReplay, an open-source software for recording user sessions. OpenReplay helps us analyze usability, identify technical issues, and improve the quality of our service. Recording only takes place after your explicit consent given via our consent banner.

Data Collected:
Page views, click behavior, mouse movements, scroll behavior, device and browser information (user agent, screen resolution), anonymized IP address, and timestamps. Content of input fields (e.g., forms) is automatically masked and not stored. Passwords, email addresses, and numbers in free text are also obscured.

Purpose of Processing:
Analysis of usability, identification of technical errors (e.g., JavaScript errors, broken forms), improvement of the user interface and product quality.

Access to Device Information:
Subject to your consent, OpenReplay stores a technically required session identifier in your browser storage (localStorage / sessionStorage) to associate individual requests within the same session. No marketing cookies are set, no cross-site tracking and no fingerprinting takes place. Your consent itself is also stored as a technical entry in your browser's localStorage (key "consent-openreplay-v1").

Hosting Location:
OpenReplay is self-hosted by us on Hetzner Online GmbH servers in Nuremberg, Germany (ingest endpoint: replay.balane.tech). No data is transferred outside the European Union and no data is shared with third parties.

Data Processing Agreement:
A data processing agreement has been concluded with Hetzner Online GmbH in accordance with Art. 28 GDPR, which ensures compliance with European data protection standards.

Storage Duration:
Recorded sessions are automatically deleted after a maximum of 30 days.

Legal Basis:
Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TDDDG (German Telecommunications Digital Services Data Protection Act) for storing and reading information in or from your device. Recording only starts after you have given explicit consent via the consent banner.

Withdrawal of Consent:
You can withdraw your consent at any time with effect for the future. To do so, click "Cookie settings" in the footer of any page and select "Decline". The lawfulness of processing carried out until withdrawal remains unaffected. In addition, no recording is performed if your browser sends the "Do Not Track" signal.

More information:
• OpenReplay: openreplay.com/privacy
• Hetzner: hetzner.com/legal/privacy-policy

If you contact us by email, the data you provide (your email address, your name if applicable, and any other information you provide) will be stored by us to process your request.

Purpose:
Processing your request and communication with you.

Legal Basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your request) or Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract.

Storage Duration:
The data will be deleted as soon as your request has been processed and there are no legal retention obligations.

If you contact us via a contact form on this website, your data will be processed for lead management and customer support.

Data Collected:
Name, email address, phone number (optional), company (optional), message, and timestamp of the request.

Purpose of Processing:
Lead management, customer support, processing of requests, and potential contract initiation.

Legal Basis:
Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your request and customer relationship management).

System Used:
The transmitted data is stored in our self-hosted Odoo CRM system to process your request and manage customer contact.

Hosting Location:
Odoo is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.

Storage Duration:
Lead data is stored as long as it is required for processing your request or for a potential business relationship. After completion of correspondence, the data is deleted unless there are legal retention obligations (e.g., commercial or tax law), which typically range from 6 to 10 years.

Data Processing Agreement:
A data processing agreement in accordance with Art. 28 GDPR has been concluded with Hetzner Online GmbH, which ensures compliance with European data protection standards.

More information:
• Hetzner: hetzner.com/legal/privacy-policy

If you use our live chat or submit a support request through our ticket system, your data will be processed to handle your inquiry.

Data Collected:
Name, email address, subject, message, chat history, as well as timestamp and ticket number of the request if applicable.

Purpose of Processing:
Processing your support or chat request, tracking the issue, and communication with you.

Legal Basis:
Art. 6 para. 1 lit. b GDPR (contract performance) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your request).

System Used:
Zammad – a self-hosted open-source system for support tickets and live chat.

Hosting Location:
Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data is transferred outside the European Union.

Storage Duration:
Support tickets are retained for a reasonable period after resolution to be available for follow-up questions. Deletion occurs once there are no longer any retention obligations.

You have the following rights with regard to the personal data concerning you:

Right to Access (Art. 15 DSGVO):
You have the right to request information about your personal data processed by us.

Right to Rectification (Art. 16 DSGVO):
You have the right to request the immediate correction of incorrect data or the completion of your stored data.

Right to Erasure (Art. 17 DSGVO):
You have the right to request the deletion of your data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.

Right to Restriction of Processing (Art. 18 DSGVO):
You have the right to request the restriction of processing of your personal data if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data, or you have objected.

Right to Data Portability (Art. 20 DSGVO):
You have the right to receive your data that you have provided to us in a structured, common and machine-readable format or to request transmission to another controller.

Right to Withdraw Consent (Art. 7 Abs. 3 DSGVO):
If the processing is based on your consent, you have the right to revoke this consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.

Right to Lodge a Complaint (Art. 77 DSGVO):
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

The competent data protection supervisory authority for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany

Phone: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de