Privacy Policy

Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)

The German version of this privacy policy is legally binding. Translations are for informational purposes only.

As of: January 2025

Data Controller

Responsible for data processing on this website is:

Balane GmbH Balanstraße 84 81541 Munich Germany Email: contact@balane.tech Managing Director: Jonas David Höttler

General Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data includes all data that can personally identify you.

SSL/TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the padlock symbol in your browser bar.

Server Logs & Hosting

Hosting Provider:
Vercel Inc. 440 N Barranca Ave #4133 Covina, CA 91723, USA

Type and Scope of Processing

When visiting this website, technical information is automatically stored in server log files by the hosting provider:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the retrieved file
  • Website from which the access is made (Referrer URL)
  • Used browser and possibly the operating system

Purpose and Legal Basis

Processing is carried out for the technical provision of the website, to ensure system security, and to optimize the internet offer. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.

Retention Period

The data is deleted as soon as it is no longer necessary for the purpose of collection. This is usually after 7 to 30 days.

Third Country Transfer

Vercel operates servers worldwide, including in the USA. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A contract for order processing has been concluded with Vercel in accordance with Art. 28 GDPR.

More information: Vercel Privacy Policy

Web Analytics (Umami)

This website uses Umami, a privacy-friendly, cookie-free open-source web analytics software. Umami does not set cookies and does not store personal data.

Collected data

Umami collects only anonymous, aggregated usage data such as page views, dwell time, and referrers. It is not possible to identify individual visitors.

Cookies & Tracking

Umami is completely cookie-free and GDPR-compliant. No cookies are set, and no fingerprinting is performed.

Hosting

Umami is hosted by us on servers of Railway Inc. in the European Union. Railway is a US-based company certified under the EU-US Data Privacy Framework. A data processing agreement (DPA) has been concluded with Railway in accordance with Art. 28 GDPR. No data is transmitted to third parties.

Legal Basis

Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in analyzing and optimizing our internet offering. Since Umami does not collect personal data and does not set cookies, no consent is required.

Content Management (Strapi)

For providing blog content and articles, we use the open-source content management system Strapi.

Hosting

Strapi is hosted by us on servers of Hetzner Online GmbH in Germany. No data is transmitted outside the European Union.

Legal Basis

Art. 6 para. 1 lit. f GDPR (legitimate interest in providing content).

Contact via Email

When you contact us via email, the data you provide (your email address, possibly your name and other information you provide) will be stored by us to process your request.

Purpose

Processing your request and communicating with you.

Legal Basis

Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your request) or Art. 6 para. 1 lit. b GDPR if your request aims at concluding a contract.

Retention Period

The data will be deleted once your request has been processed and there are no legal retention obligations.

Support & Live Chat

If you use our live chat or submit a support request via our ticket system, your data will be processed to handle your request.

Collected Data

Name, email address, subject, message, chat history, as well as timestamp and possibly ticket number of the request.

Purpose

Processing your support or chat request, tracking the request, and communicating with you.

Legal Basis

Art. 6(1)(b) GDPR (performance of a contract) or Art. 6(1)(f) GDPR (legitimate interest in processing your request).

System Used

Zammad – a self-hosted open-source system for support tickets and live chat.

Hosting Location

Zammad is hosted on our own servers at Hetzner Online GmbH in Germany. No data transfer outside the European Union occurs.

Retention Period

Support tickets are retained after the issue is resolved for an appropriate period to be available for follow-up questions. Deletion occurs once no longer required to meet retention obligations.

Cookies and Local Storage

This website uses the following local storage:

  • Language setting: Your selected language is stored locally in the browser
  • Dark Mode preference: Your design preference is stored locally
  • Cookie settings: Your cookie preferences are stored locally

Analysis and marketing cookies are only used with your explicit consent. You can change your cookie settings at any time via the "Cookie Settings" button at the bottom of the page.

Your Rights as an Affected Person

You have the following rights regarding the personal data concerning you:

Right of Access (Art. 15 GDPR)

You have the right to request information about the personal data we process about you.

Right to Rectification (Art. 16 GDPR)

You have the right to request the correction of incorrect or the completion of your stored data without delay.

Right to Erasure (Art. 17 GDPR)

You have the right to request the deletion of your data stored with us, unless the processing is necessary to exercise the right to free expression of opinion and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

Right to Restrict Processing (Art. 18 GDPR)

You have the right to request the restriction of processing of your personal data if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, or you have objected.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive your data, which you have provided to us, in a structured, common, and machine-readable format or to request the transfer to another controller.

Right to Withdraw Consent (Art. 7(3) GDPR)

If the processing is based on your consent, you have the right to withdraw this consent at any time. The legality of processing based on consent until withdrawal remains unaffected.

Right to Complain (Art. 77 GDPR)

You have the right to complain to a supervisory authority, especially in the member state of your residence, your workplace, or the location of the alleged violation.

Right to Object (Art. 21 GDPR)

You have the right to object at any time to the processing of personal data concerning you, which is carried out based on Art. 6 para. 1 lit. f GDPR (data processing based on a balance of interests), for reasons arising from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Contact for objection: contact@balane.tech

Responsible Supervisory Authority

The data protection supervisory authority responsible for us is:

Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach Germany Phone: +49 (0) 981 180093-0 Email: poststelle@lda.bayern.de Website: www.lda.bayern.de

Data Protection Officer

The appointment of a data protection officer is not legally required for our company. If you have questions about data protection, please contact: contact@balane.tech

Automated Decision-Making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place.

Changes to this Privacy Policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. Your renewed visit will then be subject to the new privacy policy.

Note on the SynapseGym App

A separate privacy policy applies to the SynapseGym Mobile App. Here to the App Privacy Policy

Datenschutzerklärung Website | SynapseGym | SynapseGym