Privacy policy

1. Privacy at a glance

5bats collects as little data as technically possible. This website sets no cookies, embeds no analytics or tracking tools, and makes no third-party requests. Personal data only arises where it is technically unavoidable (server logs when the page is requested), or when you actively contact 5bats (by email, phone or Session). Details are in the sections below.

2. Hosting and server logs (Cloudflare)

This website is hosted on Cloudflare Pages, a service of
Cloudflare, Inc.,
101 Townsend Street,
San Francisco,
CA 94107,
USA

When you visit the site, your browser necessarily transmits technical data to Cloudflare’s servers so the page can be delivered and protected from abuse. This data is processed in server log files and may include:

  • your IP address (considered personal data under the GDPR, even on a cookieless site),
  • the date and time of the request,
  • the page or file requested,
  • the referring page (if any),
  • your browser type, version and operating system.

This processing is necessary to deliver the website securely and reliably and is based on our legitimate interest (Art. 6 (1) (f) GDPR) in a functional, attack-resistant site. Cloudflare acts as our processor under a data-processing agreement pursuant to Art. 28 GDPR. Where data is transferred to the USA, the transfer is safeguarded by Cloudflare’s certification under the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses. Log data is retained only as long as needed for delivery and security and is then deleted or anonymised.

Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/ .

3. General information and mandatory disclosures

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. Please note that data transmitted over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

The controller

The party responsible for data processing on this website is:

5bats
60000 Gjilan
Kosovo
Email: [email protected]

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. See also the imprint .

Storage duration

Unless a more specific storage period is stated within this privacy policy, your personal data remains with us until the purpose for processing it ceases to apply. If you make a legitimate request for erasure or withdraw your consent to processing, your data will be deleted unless we have other legally permissible grounds for storing it (e.g. retention periods under tax or commercial law); in the latter case, deletion takes place once those grounds no longer apply.

Where you have consented to processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR. Where your data is necessary to perform a contract or to take pre-contractual steps, we process it on the basis of Art. 6 (1) (b) GDPR. Otherwise, processing is based on our legitimate interest in a secure, functional website and in answering enquiries (Art. 6 (1) (f) GDPR). The legal basis applicable in each case is set out in the sections that follow.

Where processing is based on your consent, you may withdraw it at any time. The lawfulness of the processing carried out until the withdrawal remains unaffected.

Right to object (Art. 21 GDPR)

IF PROCESSING IS BASED ON ART. 6 (1) (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

Right to lodge a complaint with a supervisory authority

In the event of breaches of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged breach.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Access, deletion and rectification

Within the framework of the applicable legal provisions, you have the right at any time to free information about your stored personal data, its origin and recipients, and the purpose of the processing, and, where applicable, a right to rectification or deletion of this data. For this and other questions about personal data, you can contact us at any time.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restriction of processing exists in the following cases:

  • If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the review, you have the right to request the restriction of processing.
  • If the processing of your personal data happened or is happening unlawfully, you can request the restriction of processing instead of deletion.
  • If we no longer need your personal data but you need it to exercise, defend or assert legal claims, you have the right to request restriction instead of deletion.
  • If you have lodged an objection pursuant to Art. 21 (1) GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to request the restriction of processing.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption (HTTPS), provided through Cloudflare. You can recognise an encrypted connection by the change in the browser’s address line from “http://” to “https://” and by the lock symbol in your browser line. When encryption is active, the data you transmit to us cannot be read by third parties.

Objection to promotional emails

We hereby object to the use of contact data published on this website for sending unsolicited advertising and information materials. The operator of the pages expressly reserves the right to take legal action in the event of the unsolicited sending of advertising information, e.g. by spam emails.

4. Data collection and contact on this website

What this site does not do

5bats is privacy-by-design. This website:

  • sets no cookies;
  • loads no analytics and runs no trackers;
  • makes zero third-party requests — all fonts, styles, scripts and images are self-hosted and served from this domain only;
  • shows no consent banner, because there is nothing to consent to.

There is therefore no profiling, no advertising, and no cross-site tracking of any kind.

Email (Proton Mail)

If you email [email protected] , the data you send — your email address and the content of your message — is processed solely to handle and respond to your enquiry. The legal basis is our legitimate interest in answering your message (Art. 6 (1) (f) GDPR), or, where your message relates to entering into or performing a contract, Art. 6 (1) (b) GDPR.

Email is handled via Proton Mail, a service of
Proton AG,
Route de la Galaise 32,
1228 Plan-les-Ouates,
Geneva,
Switzerland

Switzerland is recognised by the EU as providing an adequate level of data protection (adequacy decision), so no additional transfer safeguards are required. Proton Mail provides zero-access and end-to-end encryption for message storage. Your message is kept until your request has been dealt with and any statutory retention periods have expired, then deleted.

Proton’s privacy policy: https://proton.me/legal/privacy .

Telephone (satellite)

If you call the published phone number, the connection is handled via satellite, a service of
sipgate GmbH,
Gladbacher Straße 74,
40219 Düsseldorf,
Germany

sipgate processes the connection data needed to route your call (voice calls only — no SMS). The legal basis is our legitimate interest in being reachable and in answering enquiries (Art. 6 (1) (f) GDPR). sipgate is based in the EU, so no third-country transfer applies.

Session (optional)

The contact page also offers Session, a decentralised, end-to-end-encrypted messenger that requires no phone number or email address. If you choose to contact 5bats over Session, the message content is processed only to reply. 5bats keeps no CRM and builds no profiles.

Changes to this policy

We may update this policy when the site, its providers, or the legal requirements change. The current published version always applies.