Privacy Policy

Controller

The controller responsible for the processing described here is
TBDG The Balloon Dev Group LTD
Evagora Pallikaridi 38, Paphos 8010, Cyprus
contact@balloon.dev

Data protection officer

We have not appointed a data protection officer, because Article 37 GDPR does not require one for our activities. For all data protection matters please use the contact details above.

Website access and server logs

When you open this website, our hosting infrastructure processes technical request data to deliver the pages and to keep our systems secure, stable and available. Depending on the request this includes your IP address, the date and time of the request, the requested resource, the HTTP status, browser and user-agent information, referrer information and technical request identifiers.

Legal basis: Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of the website and the detection and investigation of misuse. Access logs are deleted or anonymised after 30 days, unless a specific security incident or the establishment, exercise or defence of legal claims requires longer retention.

For security reasons, requests from certain countries or regions are rejected at the edge location before they reach our website; for this purpose the country of origin is derived from your IP address. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in protecting the website against attacks and abuse.

Contact form and email

If you contact us through the contact form or by email, we process the data you provide, in particular your name, email address, company and the content of your message, in order to receive, answer and manage your enquiry.

Legal basis: Article 6(1)(b) GDPR where your enquiry concerns a contract with you; otherwise Article 6(1)(f) GDPR, our legitimate interest in handling business enquiries and communicating with prospective and existing customers and their representatives.

Form submissions are transmitted through our hosting infrastructure and delivered to our business mailbox, which is operated by a third-party email service provider acting as our processor. Enquiries that do not lead to a business relationship are deleted 12 months after they have been concluded. Correspondence that belongs to a contract is kept for the duration of the contract and the statutory retention periods.

Using the form is voluntary. The fields marked as required are needed to answer you; without them we cannot process your enquiry.

Form submissions are not stored in a database on our side. The transmission service keeps a message only until it has been delivered to our mailbox, at most for a few hours in the event of delivery problems.

Service providers and international transfers

This website and the contact form run on Amazon Web Services (AWS). Our contracting party and processor is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg, under the AWS GDPR Data Processing Addendum (Article 28 GDPR). Our resources are configured in the AWS region Ireland (eu-west-1, Dublin).

Global AWS services such as content delivery and DNS operate from edge locations worldwide and may involve processing by Amazon Web Services, Inc. in the United States. Such transfers rely on the European Commission's adequacy decision for the EU-U.S. Data Privacy Framework, under which Amazon Web Services, Inc. is certified, and on the Standard Contractual Clauses contained in the AWS Data Processing Addendum. You can request information about these safeguards by email.

Besides AWS, our third-party email service provider processes contact messages on our behalf when they are delivered to our mailbox. We disclose personal data to authorities only where we are legally required to do so. We do not sell personal data and do not share it for advertising.

The domain name system (DNS) for balloon.dev and the redirect from balloon.dev to www.balloon.dev are operated on our behalf by Infomaniak Network SA, Rue Eugène-Marziano 25, 1227 Les Acacias (Geneva), Switzerland. For these requests Infomaniak processes technical request data such as your IP address. Switzerland is recognised by the European Commission as providing an adequate level of data protection.

Cookies and tracking

This website sets no cookies and uses no comparable browser storage, no web analytics, no advertising or tracking technologies and no social media plug-ins. Should this change, this notice will be updated before the change goes live.

Your rights

Under the conditions of the GDPR you have the right to:

• access your personal data (Article 15),
• have inaccurate data corrected (Article 16),
• have your data erased (Article 17),
• restrict the processing (Article 18),
• receive your data in a portable format (Article 20),
• object to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation (Article 21).

To exercise these rights, write to contact@balloon.dev.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence. The authority responsible for us is the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus, commissioner@dataprotection.gov.cy.

Automated decision-making

We do not use automated decision-making or profiling within the meaning of Article 22 GDPR.