PrivacyPolicy

milbo GmbH, Frühlingstraße 21, 85567 Grafing bei München, Germany.

Email: contact@milbo.de.

The site is hosted by Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA), acting as our processor. When you access the site, your browser transmits technical data — such as your IP address, browser and operating system, the date and time of the request, and the URL requested — which Vercel processes in server logs to deliver and secure the site.

Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a stable, secure website). Transfers to the USA are safeguarded by the EU Standard Contractual Clauses under Vercel’s data processing agreement.

Some client case studies are only available in a password-protected area. When you enter the password, we store a single, strictly-necessary cookie (milbo_gate) that records only that access was granted. It contains no personal data and no tracking identifier.

Legal basis: § 25 (2) TDDDG and Art. 6 (1) (f) GDPR (strictly necessary to provide the service you requested).

We use the “General Sans” typeface delivered by Fontshare, a service of Indian Type Foundry (ITF Private Limited). Your browser loads the font files from Fontshare servers, which requires transmitting your IP address to that provider.

Legal basis: Art. 6 (1) (f) GDPR (our legitimate interest in a consistent, well-presented site).

If you use the contact form, we process the details you enter — name, email address, company, and your message — solely to respond to your enquiry. Delivery runs through Resend (Resend, Inc., USA) as our email processor, and the message is sent to a milbo mailbox.

Legal basis: Art. 6 (1) (b) GDPR (steps prior to a contract) and Art. 6 (1) (f) GDPR (handling enquiries). We keep the correspondence for as long as needed to deal with your request and to meet statutory retention duties. Transfers to the USA are safeguarded by the EU Standard Contractual Clauses under Resend’s data processing agreement.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority — for us, the Bavarian State Office for Data Protection Supervision (BayLDA).

We will update this policy as the underlying services change.