Privacy policy

The controller responsible for data processing on this website within the meaning of the GDPR is:

The operator of this website
Contact: hello@milalegal.de

A data protection officer is not legally required; for data protection matters please contact us using the details above.

This policy applies to the websites milalegal.de and milalegal.eu. On these pages you can currently only sign up for the launch notification (waitlist); no sales or payment processing take place via these pages.

The website runs on Cloudflare (Cloudflare, Inc.) infrastructure. When you access it, technically necessary data is processed in server logs: IP address, date and time, requested page, data volume and user agent. The legal basis is our legitimate interest in secure, stable operation (Art. 6(1)(f) GDPR). Any transfer to third countries is based on the EU Standard Contractual Clauses.

If you join the waitlist, we process your email address to notify you when Mila OS launches. The legal basis is your consent (Art. 6(1)(a) GDPR). Signup uses double opt-in: your address is only stored and used after you confirm via the link in our confirmation email. We log the time of your consent as proof. You may withdraw your consent at any time with future effect — an informal email to the address above is sufficient, and we will delete your address. The email is stored in a database with Supabase in the EU region (Ireland); the confirmation email is sent via the service Resend. Data processing agreements are in place with both providers.

This website uses only strictly necessary cookies / local storage (e.g. to remember your light/dark preference).

For usage measurement we use PostHog (EU cloud, eu.i.posthog.com) in cookieless mode: NO cookies or identifiers are stored on your device (memory-only). Pseudonymous usage data (e.g. page views and interactions) is collected to improve our offering. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR); processing takes place in the EU.

Because no non-essential cookies are set and nothing is stored on your device, no consent (cookie banner) is required under § 25 (2) TDDDG.

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). You may withdraw any consent given at any time with future effect (Art. 7(3) GDPR). You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR).