General information on data processing

Controller under the GDPR

The controller for data processing on this website is

milvius.systems GmbH, FN 605951f

Kirchenplatz 6/3/6, 1230 Vienna

Austria

Represented by: Klaus Thurnhofer

Where, in an individual case, other parties are responsible for specific processing (for example external service providers or platform operators), we point this out separately.

Hosting and technical provision

This website is a static site and is provided via Cloudflare Pages, a service of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA.

Cloudflare processes personal data on behalf of and on the instructions of the website operator (Art. 28 GDPR).

When the site is requested, technically required server log data may be processed:

IP address
time of the request
page requested
information about the browser and operating system
referring URL (referrer)

This data is processed in order to provide the website securely and reliably. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a working and secure website).

Cloudflare may process data in the USA. A transfer to a third country cannot be ruled out. Details are set out in the Cloudflare privacy policy: https://www.cloudflare.com/privacypolicy/.

Fonts and images are delivered by this website itself. Loading a page does not connect to an external font or image service.

Rights of data subjects

Under the General Data Protection Regulation (GDPR) you have various rights regarding your personal data. You may exercise these rights at any time by contacting us using the contact details above.

In particular, you have the right:

to obtain access to the personal data we process about you (Art. 15 GDPR),
to request rectification of inaccurate or incomplete data (Art. 16 GDPR),
to request erasure of your personal data unless statutory retention duties apply (Art. 17 GDPR),
to request restriction of the processing of your data (Art. 18 GDPR),
to object to the processing of your data where it is based on legitimate interests (Art. 21 GDPR),
to receive your data in a structured, commonly used, and machine-readable format, or to have it transmitted to another controller (Art. 20 GDPR).

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. In Austria, this is:

Austrian Data Protection Authority

Barichgasse 40–42, 1030 Vienna

www.dsb.gv.at

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, for example when you send us an email, this website uses SSL or TLS encryption.

You can recognise an encrypted connection because the address line of your browser changes from “http://” to “https://” and by the lock symbol in the browser bar.

Encryption means that the data you send to us cannot be read by third parties.

Cookies and consent management

Our website uses cookies and your browser’s local storage only to the extent described in the cookie policy.

Storing your cookie choice under milvius-cookie-consent is necessary. If you set the colour appearance yourself, we also store that preference. We set Google Analytics 4 statistics cookies only after your consent. We do not set advertising cookies.

On your first visit we ask for your consent to statistics. You can change that choice at any time via “Cookie settings” in the footer.

Legal basis

Technically necessary storage: Art. 6(1)(f) GDPR (legitimate interest in respecting a consent decision that was given or refused)

All other cookies: Art. 6(1)(a) GDPR (consent)

Details are set out in the cookie policy.

Email communication

If you contact us by email, we process the information you provide, including the contact details you enter, in order to handle your enquiry and any follow-up questions.

We do not pass this data on without your consent.

Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to a contract or to pre-contractual steps. In all other cases it is based on our legitimate interest in handling enquiries (Art. 6(1)(f) GDPR).

Messages are deleted once the enquiry has been dealt with, unless statutory retention duties provide otherwise.

Appointment booking

Links on this website lead to appointment booking at connect.milvius.systems. Booking is provided via Odoo Online, a service of Odoo S.A., Chaussée de Namur 40, 1367 Grand-Rosière, Belgium.

Merely calling up this website does not transmit data to the booking service. Processing begins only when you open the link and enter information on the booking page.

The data you enter there is processed to handle your enquiry and to take steps prior to entering into a contract. The legal basis is Art. 6(1)(b) GDPR. The privacy information in the booking process applies to the booking page.

The footer links to our company profile on LinkedIn.

The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The link is for information and for communication with interested people and customers.

Calling up this website does not transmit data to LinkedIn.

Processing by LinkedIn begins only when you open the link. LinkedIn is then responsible for any further processing. The LinkedIn privacy policy applies: https://www.linkedin.com/legal/privacy-policy.

Analytics and tracking tools

After your explicit consent we use Google Analytics 4, measurement ID G-MGHFFREJXL, to evaluate use of the website and improve it. The script is loaded only after you have agreed.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Usage data, technical information, and online identifiers may be processed. Google may set cookies whose names start with _ga, in particular _ga and _ga_MGHFFREJXL. Retention may be up to two years. A transfer to the USA cannot be ruled out. We do not use advertising or remarketing features.

The legal basis is Art. 6(1)(a) GDPR.

You can withdraw your consent at any time via “Cookie settings” in the footer. Further details are set out in the cookie policy.

Retention periods

We store personal data only for as long as necessary to fulfil the respective purposes or as required by statutory retention duties. Once the purpose of processing no longer applies — for example after an enquiry has been dealt with — the data is deleted, unless statutory retention periods or other legitimate interests (for example preserving evidence for legal claims) require otherwise.

Where processing was based on consent, the data concerned is deleted at the latest when consent is withdrawn, unless further storage is required by law.

Changes to this privacy notice

We reserve the right to adapt this privacy notice when necessary so that it continues to meet current legal requirements or reflects changes to our services — for example when new functions or services are introduced on this website.

The version of the privacy notice that is current at the time applies to your next visit.

Date

Last updated: 7 November 2026