Privacy Policy

Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

The German version of this privacy policy is legally binding. Translations are for information purposes only.

Last updated: January 2025

Data Controller

The data controller for this website is:

Balane GmbH Balanstraße 84 81541 Munich Germany Email: contact@balane.tech Managing Director: Jonas David Höttler

General information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data are all data with which you can be personally identified.

SSL/TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. An encrypted connection is indicated by the browser's address bar changing from http:// to https:// and by the lock icon in your browser's address bar.

Server logs & hosting

Hosting provider:
Vercel Inc. 440 N Barranca Ave #4133 Covina, CA 91723, USA

Nature and scope of processing

When visiting this website, the hosting provider automatically stores technical information in server log files:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the requested file
  • Website from which the access originated (Referrer URL)
  • Browser used and, if applicable, the operating system

Purpose and legal basis

The processing is carried out for the technical provision of the website, to ensure the security of the system and to optimize the Internet offering. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.

Retention period

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is usually the case after 7 to 30 days.

Third-country transfer

Vercel operates servers worldwide, including in the United States. Data transfers to the United States are based on the EU–U.S. Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A data processing agreement under Art. 28 GDPR has been signed with Vercel.

More information: Vercel Privacy Policy

Web analytics (Umami)

This website uses Umami, a privacy-friendly, cookie-free open-source web analytics software. Umami does not set cookies and does not store personal data.

Data collected

Umami collects only anonymous, aggregated usage data such as page views, dwell time and referrers. Identification of individual visitors is not possible.

Cookies & Tracking

Umami is fully cookie-free and GDPR-compliant. It sets no cookies and no fingerprinting is performed.

Hosting

Umami is hosted by us on servers operated by Railway Inc. in the European Union. Railway is a US company certified under the EU–U.S. Data Privacy Framework. A data processing agreement (DPA) under Art. 28 GDPR has been signed with Railway. No data is transferred to third parties.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in analyzing and optimizing our internet offering. Since Umami does not collect personal data and does not set cookies, no consent is required.

Content Management (Strapi)

To provide blog content and articles, we use the open-source content management system Strapi.

Hosting

Strapi is hosted by us on servers operated by Hetzner Online GmbH in Germany. No data is transferred outside the European Union.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in providing content).

Contact by email

If you contact us by email, the data you provide (your email address, possibly your name and other information you provide) will be stored by us to process your request.

Purpose

Processing your request and communicating with you.

Legal basis

Art. 6(1)(f) GDPR (legitimate interest in answering your request) or Art. 6(1)(b) GDPR, if your request aims at concluding a contract.

Retention period

The data will be deleted once your request has been processed and there are no legal retention requirements.

Support & Live Chat

If you use our live chat or submit a support request via our ticket system, your data will be processed to handle your request.

Collected data

Name, email address, subject, message, chat history, as well as timestamps and, if applicable, the ticket number of the request.

Purpose

Processing your support or chat request, tracking the issue and communicating with you.

Legal basis

Art. 6(1)(b) GDPR (contract performance) or Art. 6(1)(f) GDPR (legitimate interest in processing your request).

System used

Zammad – a self-hosted open-source system for support tickets and live chat.

Hosting location

Zammad is hosted on its own servers at Hetzner Online GmbH in Germany. No data is transmitted outside the European Union.

Retention period

Support tickets are kept for an appropriate period after the issue is resolved to be available for any follow-up questions. Deletion occurs once there are no longer any retention obligations.

Cookies and local storage

This website uses the following local storage options:

  • Language setting: The language you selected is stored locally in the browser.
  • Dark mode preference: Your design preference is stored locally.
  • Cookie settings: Your cookie preferences are stored locally.

Analytical and marketing cookies are used only with your explicit consent. You can change your cookie settings at any time via the 'Cookie settings' button at the bottom of the page.

Your rights as a data subject

You have the following rights regarding the personal data concerning you:

Right of access (Art. 15 GDPR)

You have the right to request information about the personal data we process about you.

Right to rectification (Art. 16 GDPR)

You have the right to have incorrect data corrected or to have incomplete data completed without undue delay.

Right to erasure (Art. 17 GDPR)

You have the right to have your stored data deleted, to the extent that such processing is not required for exercising the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request restriction of processing of your personal data when the accuracy of the data is disputed, the processing is illegal, we no longer need the data, or you have objected.

Right to data portability (Art. 20 GDPR)

You have the right to receive the data you provided to us in a structured, commonly used, and machine-readable format, and to request transmission to another controller.

Right to withdraw consent (Art. 7(3) GDPR)

If the processing is based on your consent, you have the right to withdraw this consent at any time. The lawfulness of processing based on consent before withdrawal is not affected.

Right to lodge a complaint (Art. 77 GDPR)

You have the right to complain to a supervisory authority, in particular in the Member State of your residence, your workplace, or the place of the alleged infringement.

Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to processing of your personal data based on Article 6(1)(f) GDPR (processing based on a balancing of interests).

If you raise an objection, we will not process your personal data any further unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

Contact for objection: contact@balane.tech

Competent supervisory authority

The data protection supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach Germany Phone: +49 (0) 981 180093-0 Email: poststelle@lda.bayern.de Website: www.lda.bayern.de

Data Protection Officer

The appointment of a Data Protection Officer is not mandatory for our company. If you have questions about data protection, please contact: contact@balane.tech

Automated decision-making

No automated decision-making, including profiling, takes place within the meaning of Art. 22 GDPR.

Changes to this privacy policy

We reserve the right to adjust this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will apply on your next visit.

Note about the SynapseGym app

There is a separate privacy policy for the SynapseGym mobile app. Here is the app privacy policy.

Datenschutzerklärung Website | SynapseGym | SynapseGym