Privacy Policy
Information on the processing of your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR)
Data Controller
Responsible for data processing on this website:
Balane GmbH
Balanstraße 84
81541 München
Germany
E-Mail: contact@balane.tech
Managing Director: Jonas David Höttler
General Information
The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you.
SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
Server Logs & Hosting
Hosting Provider:
Railway Inc.
548 Market St PMB 45375
San Francisco, CA 94104-5401
USA
Type and Scope of Processing:
When visiting this website, technical information is automatically stored in server log files by the hosting provider:
• IP address of the requesting computer
• Date and time of access
• Name and URL of the accessed file
• Website from which access was made (referrer URL)
• Browser used and operating system if applicable
Purpose of Processing:
Processing is carried out for the technical provision of the website, to ensure system security and to optimize the internet offering.
Legal Basis:
Processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the proper functioning and security of our website.
Storage Duration:
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case after 7 to 30 days.
Third Country Transfer:
Railway operates servers in the USA and the Netherlands. Data transfer to the USA is based on the EU-US Data Privacy Framework, for which the European Commission has issued an adequacy decision (Art. 45 GDPR). A data processing agreement was concluded with Railway in accordance with Art. 28 GDPR.
More information:
Railway Privacy Policy
Cookies & LocalStorage
This website uses a cookie banner to manage your cookie settings. Your consent is stored in the LocalStorage of your browser.
LocalStorage Entry:cookie_consent
Content:
Stores your consent for cookie categories: necessary, functional, analytics, marketing as well as timestamp and version.
Purpose:
Storage of your cookie preferences according to GDPR and TDDDG.
Legal Basis:
Art. 6 para. 1 lit. c GDPR (legal obligation to obtain consent according to TDDDG).
Storage Duration:
Unlimited until you revoke your consent or delete the LocalStorage.
Cookie Categories:
1. Necessary Cookies
These cookies are required for the basic functions of the website and cannot be deactivated. They do not store personal data.
2. Functional Cookies
These cookies enable advanced features such as theme settings or language selection. The legal basis is your consent (Art. 6 para. 1 lit. a GDPR).
3. Analytics Cookies (Mautic)
We use Mautic, a self-hosted open-source marketing automation platform, to analyze user behavior on our website.
Provider & Hosting:
Mautic is self-hosted by us on Railway Inc. servers in the EU (Amsterdam, Netherlands). No data is transferred to third parties.
IP Anonymization:
IP addresses are anonymized on the server, so no complete IP addresses are stored.
Cookies Set:mtc_id, mtc_sid, mautic_device_id
Purpose:
Recording page views, analyzing user behavior to optimize our website.
Legal Basis:
Art. 6 para. 1 lit. a GDPR (your express consent via the cookie banner).
Opt-Out:
You can reject analytics cookies at any time via the "Cookie Settings" link in the footer or revoke your consent. If rejected, no tracking will be performed.
4. Marketing Cookies
Currently no marketing cookies are used. If marketing tools are used in the future, this will only be done with your express consent (Art. 6 para. 1 lit. a GDPR).
You can change your cookie settings at any time via the "Cookie Settings" link in the footer of this website.
Contact via Email
If you contact us by email, the data you provide (your email address, your name if applicable, and any other information you provide) will be stored by us to process your request.
Purpose:
Processing your request and communication with you.
Legal Basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest in responding to your request) or Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract.
Storage Duration:
The data will be deleted as soon as your request has been processed and there are no legal retention obligations.
Contact Form & Lead Management
If you contact us via a contact form on this website, your data will be processed for lead management and customer support.
Data Collected:
Name, email address, phone number (optional), company (optional), message, and timestamp of the request.
Purpose of Processing:
Lead management, customer support, processing of requests, and potential contract initiation.
Legal Basis:
Art. 6 para. 1 lit. b GDPR (contract initiation) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your request and customer relationship management).
Systems Used:
1. n8n (Workflow-Automatisierung)
Your form data is processed via n8n, a self-hosted workflow automation platform, and forwarded to our CRM system. n8n serves exclusively for technical transmission and does not store data permanently.
2. Odoo CRM
The transmitted data is stored in our self-hosted Odoo CRM system to process your request and manage customer contact.
Hosting Location:
Both systems (n8n and Odoo) are hosted on Railway Inc. servers in Amsterdam, Netherlands (EU). No data is transferred outside the European Union.
Storage Duration:
Lead data is stored as long as it is required for processing your request or for a potential business relationship. After completion of correspondence, the data is deleted unless there are legal retention obligations (e.g., commercial or tax law), which typically range from 6 to 10 years.
Data Processing Agreement:
A data processing agreement in accordance with Art. 28 GDPR has been concluded with Railway Inc., which ensures compliance with European data protection standards.
More information about the services used:
• n8n: n8n.io/legal/privacy
• Odoo: odoo.com/privacy
• Railway: railway.app/legal/privacy
Your Rights as Data Subject
You have the following rights with regard to the personal data concerning you:
Right to Access (Art. 15 DSGVO):
You have the right to request information about your personal data processed by us.
Right to Rectification (Art. 16 DSGVO):
You have the right to request the immediate correction of incorrect data or the completion of your stored data.
Right to Erasure (Art. 17 DSGVO):
You have the right to request the deletion of your data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
Right to Restriction of Processing (Art. 18 DSGVO):
You have the right to request the restriction of processing of your personal data if the accuracy of the data is disputed, the processing is unlawful, we no longer need the data, or you have objected.
Right to Data Portability (Art. 20 DSGVO):
You have the right to receive your data that you have provided to us in a structured, common and machine-readable format or to request transmission to another controller.
Right to Withdraw Consent (Art. 7 Abs. 3 DSGVO):
If the processing is based on your consent, you have the right to revoke this consent at any time. The lawfulness of the processing carried out on the basis of the consent until the revocation is not affected.
Right to Lodge a Complaint (Art. 77 DSGVO):
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
⚠️ RIGHT TO OBJECT
Objection to data processing based on legitimate interests (Art. 21 DSGVO):
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6 para. 1 lit. f GDPR (data processing based on a balance of interests).
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Contact for objection:
contact@balane.tech
Competent Supervisory Authority
The competent data protection supervisory authority for us is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Phone: +49 (0) 981 180093-0
E-Mail: poststelle@lda.bayern.de
Website: www.lda.bayern.de
Changes to this Privacy Policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your next visit.
Last updated: November 2025