Privacy Policy

Who is responsible

Millow AB (corporate ID 559264-9536, registered with Bolagsverket, the Swedish Companies Registration Office, with its registered office in Gothenburg; VAT no. SE559264953601), Åkerivägen 2, 443 61 Stenkullen, Sweden, is the controller of the personal data described in this policy.

For anything about your data, including a request to use your rights, email hello@millow.co.

What we collect and why

When you contact us. The contact form asks for your name, email address and message and, depending on the topic, your organisation, role, country and the products you are interested in. You can also tell us how you heard about Millow. With it we record when you sent it, your IP address, the language you used and whether you ticked the newsletter box. We use this to answer you, to follow up on business enquiries, to document your newsletter choice and to protect the form against abuse. Legal basis: our legitimate interest in answering and following up on the enquiries we receive (Article 6(1)(f) GDPR). If you contact us as a private person about an agreement with you, the basis is steps you ask us to take before entering into it (Article 6(1)(b)).

Giving us your details is voluntary. We need your name, email address and message to answer you; the other fields are optional.

Newsletter. If you tick the newsletter box, we use your name and email address to send you Millow news now and then. Legal basis: your consent. You can withdraw it at any time with the unsubscribe link in every email or by writing to us.

Job applications. If you apply for a role or send an open application, we use what you send us, such as your CV, cover letter and contact details, to assess your application. Legal basis: our legitimate interest in recruiting, and steps before a possible employment contract.

Visiting the site. We count page views on our own server, without cookies and without tracking. For each page view we add one to a daily count for that page and language. When a visit starts, we also add one to three separate monthly counts: the kind of site you came from (a search engine, social media, an AI assistant, another website or none), your country and, if you followed one of our own campaign links, that campaign. The counts are kept apart and contain no IP address, no browser details and no identifier, so they are not linked to individual visitors. To make them, our server briefly uses what your browser sends with every request: the page address, the address of the page that linked to us, your country as determined by our hosting provider's network, and your browser's identification string, which we use only to leave out automated traffic. This is discarded straight away. No analytics script runs in your browser and nothing is stored on your device. If your browser sends a Global Privacy Control or Do Not Track signal, we do not count your visit at all. We also count, per month, the answers to the contact form's question about how you heard about us. Our servers also keep short-lived technical logs, which include IP addresses, for security. Legal basis: our legitimate interest in a secure website and in knowing which content is useful.

We do not make decisions about you based solely on automated processing.

Who receives it

Your enquiry is stored in our website system and passed on to our customer system, which our team uses to answer you. We do not give your personal data to other companies for their own purposes. We use service providers for hosting and email, who process data only on our behalf under data processing agreements. We may also disclose personal data when the law requires it.

Transfers outside the EU

We store our data in the EU. Some of our service providers, for example for email, may process data outside the EU/EEA. Transfers to US companies certified under the EU-US Data Privacy Framework rely on the European Commission's adequacy decision for that framework; other transfers are protected by the Commission's standard contractual clauses. Email hello@millow.co for a copy of these clauses.

How long we keep it

• Contact form submissions in our website system are deleted 90 days after they have been passed to our customer system, or 90 days after a failed delivery was reported to our support inbox. If that report itself failed, the submission is kept until we have handled it by hand.
• Enquiries in our customer system are kept as long as needed to handle the enquiry and any business relationship that follows, and are deleted no later than 24 months after our last contact, unless we need them longer to meet a legal obligation or to establish, exercise or defend a legal claim. Records that form part of our accounting are kept as long as the Swedish Bookkeeping Act requires: seven years after the end of the calendar year in which the financial year ended.
• Newsletter subscriptions are kept until you unsubscribe. After that we keep your email address on a suppression list, so that you do not receive our newsletter again unless you subscribe anew.
• Job applications are kept for up to 24 months after the recruitment has closed, so that we can respond to any legal claims (for example under the Discrimination Act), unless you consent to us keeping them longer for future roles.
• Page counts are kept for at most 25 months. Technical server logs are deleted after at most one month.

Deleted data can remain in our backups for up to 12 months before the backups expire.

Cookies

millow.co sets no cookies for visitors unless you change the language with the language switcher. Then it sets a language cookie (NEXT_LOCALE) that remembers the language you chose. It is a session cookie that your browser removes when the browsing session ends, and it is never used for tracking. Because it is needed to show the site in the language you chose, it does not require consent. We do not use any cookies or similar technologies that require your consent, so we do not show a cookie banner.

Your rights

Under the EU General Data Protection Regulation (GDPR) you have the right to:

• get a copy of the personal data we hold about you
• have incorrect data corrected
• have your data deleted, or its use restricted
• object to our use of your data
• receive the data you gave us in a machine-readable format
• withdraw your consent at any time, without affecting the lawfulness of processing based on your consent before you withdrew it

Your right to object. You can at any time object to our use of your data for direct marketing, such as the newsletter, and we will stop. You can also object to processing based on our legitimate interest, such as following up on an enquiry or counting your page views; we will then stop unless we have compelling legitimate grounds that override your interests. For page counts, turning on Global Privacy Control or Do Not Track in your browser is enough.

Email hello@millow.co and we will reply within one month. For complex requests we may need up to two more months; if so, we will tell you within the first month. You can also lodge a complaint with a supervisory authority at any time, in Sweden the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).