Privacy Policy

The controller responsible for data processing on this website is:

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (“Vercel”). When you load the site, Vercel processes technical connection data on our behalf, including IP address, request date and time, browser type, operating system, referrer, and transferred data volume. This data is necessary to deliver the website and is not used for profiling.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in secure, fast, and stable provision of the website). A data processing agreement under Art. 28 GDPR is in place with Vercel.

As Vercel is a US company, personal data may be transferred to the United States. Vercel is certified under the EU-U.S. Data Privacy Framework; in addition, EU Standard Contractual Clauses under Art. 46 (2) (c) GDPR apply. Details: vercel.com/legal/privacy-policy.

We use Umami — an open-source, cookieless, privacy-friendly analytics tool — to measure audience reach. We run our own Umami instance; no analytics data is shared with third parties.

We collect only anonymous, non-correlatable events: visited URL, referrer, approximate location (country, derived from IP), language preference, screen type, browser, operating system, and timestamp. The IP address itself is not stored; it is combined with the user agent and a daily-rotating salt to produce a hashed session identifier that prevents recognition across days.

The Umami instance runs on infrastructure provided by Railway Corp., 2261 Market Street #4382, San Francisco, CA 94114, USA (see Sub-processors below).

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in pseudonymous audience measurement). Because no terminal-device information beyond the technically necessary is stored or read and no cookies are set, no consent is required under Sec. 25 (2) No. 2 TTDSG.

We engage the following processors under Art. 28 GDPR:

• Vercel Inc. — website hosting. 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Data Processing Agreement.
• Railway Corp. — hosting of our Umami analytics instance. 2261 Market Street #4382, San Francisco, CA 94114, USA. Data Processing Agreement.

Both providers are based in the United States. Transfers are based on EU Standard Contractual Clauses (Art. 46 (2) (c) GDPR) and, where certified, the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023, Art. 45 GDPR).

This website does not set tracking cookies. The browser’s local storage is used solely to remember your language choice under the key balane-locale — and only when you actively select a language using the language toggle. Under Sec. 25 (2) No. 2 TTDSG, this storage does not require consent because it is strictly necessary to provide the service explicitly requested by you (remembering your language).

You can delete this entry at any time via your browser’s privacy settings.

This page links to other BALANE websites (balane.tech, balane.app, balane.academy, balane.capital). Clicking a link will redirect you to an external site. Data processing on those sites is governed by their respective privacy policies.

You have the following rights:

• Access (Art. 15 GDPR) — to information about the personal data we hold about you.
• Rectification (Art. 16 GDPR) — of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR) — of your personal data.
• Restriction (Art. 18 GDPR) — of processing.
• Data portability (Art. 20 GDPR).
• Objection (Art. 21 GDPR) — to processing based on legitimate interest.

An informal email to contact@balane.tech is sufficient to exercise these rights.

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority for us is:

We update this privacy policy when legal requirements or our processing activities change. The version dated above is the one currently in force.