Privacy

This site tells companies to know their dependencies and to handle data sparingly. It holds itself to that. Which is why this statement is shorter than you are used to.

Controller

BALANE GmbH, Balanstraße 84, 81541 Munich, Germany. Email: contact@balane.tech. Full details are in the legal notice.

What this site does not do

• No cookies. No cookie is set, not even a technically necessary one. Which is why there is no consent banner either.
• No analytics. No Google Analytics, no Matomo, no pixel, no server-side tracking.
• No third-party embeds. Fonts, icons and scripts are served from the same origin as the page. No connection is made to Google Fonts, to a social network, or to anybody else's server. Check it in your browser's network tab: exactly one host appears.
• No accounts. There is no registration and no login.

The sovereignty check

Your answers in the check are stored exclusively in your browser's local storage (localStorage, key sovereignty-check-v1). They are not transmitted to any server — including ours. The score and the roadmap are computed in your browser.

You delete this data by choosing "Start over" in the check, or by clearing your browser's storage for this site. We never have access to it.

Server logs

When you request a page, the host processes technically necessary connection data: IP address, time, requested address, volume transferred, browser identification and, where sent, the referring page. The legal basis is Art. 6(1)(f) GDPR; the legitimate interest is the secure and stable operation of the site. This data is not combined with other sources and is deleted after a short period.

Hosting

This site is operated on Vercel Inc., a company based in the United States. A data processing agreement under Art. 28 GDPR is in place; the transfer relies on the adequacy decision for the EU–US Data Privacy Framework.

We state this explicitly, because this site tells companies to ask exactly that question of their own providers. What is processed there is connection data from requests for public content and nothing else — this site has no accounts, no forms and no database. Your answers in the sovereignty check are not transmitted there, because they never leave your browser.

An account of why we consider this a contradiction, and what we are doing about it, is on "About this site".

Contacting us

If you write to us by email, we process what you send in order to handle your enquiry. The legal basis is Art. 6(1)(b) or (f) GDPR. We delete the message once it has been dealt with and no retention obligation applies.

Booking a call

The "Talk to us" page carries a link to our booking calendar at Cal.eu, the European Union deployment of Cal.com. The calendar is not embedded in this site: until you follow the link, no connection to that provider is made and no data reaches it.

Following the link takes you off this site, and the provider's privacy notice applies from that point. What is processed there is what you enter into the booking form yourself — normally your name, email address, the slot you pick and your time zone — along with the technical connection data of the request. We receive those details in order to keep the appointment. The legal basis is Art. 6(1)(b) GDPR, or for purely informational calls Art. 6(1)(f) GDPR, the legitimate interest being the initiation of a business relationship.

The provider processes the data as a processor under Art. 28 GDPR, within the European Union. We delete your booking details once the appointment has been dealt with and no retention obligation applies. If you would rather not use an external service, send us an email instead — the outcome is the same.

Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection. Please write to the address above. You may also lodge a complaint with a data protection supervisory authority; ours is the Bayerisches Landesamt für Datenschutzaufsicht.