Last updated: 26 September 2026
This policy explains what personal data Balkan Programs collects, why we collect it, and what rights you have. It is written to meet the EU General Data Protection Regulation (GDPR / RGPD) and the French Data Protection Act.
1. Who is responsible for your data
The data controller is Balkan Programs, 31 Rue de l'Oasis, 92800 Puteaux, France.
Contact: support@balkani.online
2. What we collect and why
| Data | Why we need it | Legal basis |
|---|---|---|
| Name, email, billing address, country | To process your order, deliver your download and issue an invoice | Performance of a contract |
| Payment details | To take payment — handled entirely by our payment providers; we never see or store your full card number | Performance of a contract |
| Order history and download activity | To provide support, re-send files and prevent abuse of our licences | Legitimate interest |
| Emails you send us | To answer your question | Legitimate interest |
| Newsletter email address | To send training tips and offers | Your consent — withdrawable at any time |
| Cookies and site analytics | To keep the shop working and understand how it is used | Essential cookies: legitimate interest. All others: your consent |
3. Who we share it with
We do not sell your personal data. We share it only with the service providers that make the shop work:
- Shopify — e-commerce platform and hosting
- Payment providers (Shopify Payments, PayPal and similar) — payment processing and fraud prevention
- Email and file delivery providers — to send your order confirmation and download link
Where a provider is outside the European Economic Area, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.
4. How long we keep it
- Order and invoice records: 10 years, as required by French commercial and tax law
- Customer account and download access: for the length of your plan, then 12 months
- Support emails: 3 years from our last contact
- Newsletter: until you unsubscribe
- Cookies: 13 months maximum
5. Your rights
Under the GDPR you have the right to access your data, correct it, erase it, restrict or object to its processing, receive it in a portable format, withdraw consent at any time, and set instructions for what happens to your data after your death (Article 85 of the French Data Protection Act).
To exercise any of these, email support@balkani.online. We reply within one month.
If you are not satisfied with our response, you may lodge a complaint with the French supervisory authority:
CNIL, 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr
6. Cookies
We use cookies that are strictly necessary for the shop, your basket and checkout to function. Analytics and marketing cookies are only set if you accept them, and you can change your choice at any time from the cookie banner or your browser settings.
7. Security
The site is served over HTTPS. Payment data is handled by PCI-DSS compliant providers and never reaches our systems. Access to customer records is limited to the people who need it to provide support.
8. Children
Our products are sold to adults. We do not knowingly collect data from children under 15.
9. Changes
If we change this policy we will update the date at the top of this page and, for significant changes, notify customers by email.