Privacy policy
Last updated: 24 September 2026
This policy explains which personal data we process when you visit milkrun.dev, contact us or send us data for a simulation, why we do it and what rights you have.
Controller
The controller responsible for data processing on this website is:
CourierCloud
Contact form
Visiting the website
When you open a page, our web server automatically records technical data sent by your browser: IP address, date and time, the page requested, the referring page, browser and operating system. We need this data to deliver the website and keep it secure. The legal basis is our legitimate interest in a stable and secure website (Art. 6(1)(f) GDPR). Log files are deleted after 14 days at the latest, unless we need them to investigate a security incident.
No cookies, no tracking
We do not use cookies, analytics or advertising tools, and we do not build user profiles. Fonts and all other files are loaded from our own server, so opening the website does not send your data to third parties.
Contact and simulation requests
When you use the request form, the details you enter (name, company, work email, fleet size, message) are sent to our form service Cloudflare, which processes them on our behalf under a data processing agreement (Art. 28 GDPR) and forwards them to us. We use them only to answer your request and to prepare and discuss your simulation. The legal basis is steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Operational data for simulations
For a simulation you send us operational data such as supplier locations, milk volumes, vehicles and schedules. Supplier lists can contain personal data, for example farmers' names and addresses. We use this data only to build your simulation and do not pass it on. Where it contains personal data, we process it on your behalf and sign a data processing agreement under Art. 28 GDPR on request. We can also sign a non-disclosure agreement before you send anything. We delete the data after the project, or earlier if you ask us to.
Recipients
We do not sell or rent personal data. Inside our company, only the people who handle your request see it. Technical service providers, such as our hosting and email providers, process data on our behalf and are bound by data processing agreements.
Hosting provider: Cloudflare
How long we keep data
We delete contact and request data once your request has been fully handled and no follow-up is expected, at the latest 12 months after our last contact. If a contract follows, or statutory retention obligations apply (for example to business correspondence under commercial and tax law), we keep the data for as long as required and use it only for that purpose.
Your rights
You have the right to access your data (Art. 15 GDPR), to have it corrected (Art. 16) or erased (Art. 17), to restrict its processing (Art. 18), to data portability (Art. 20) and to object to processing based on our legitimate interest (Art. 21). You can withdraw your consent at any time with effect for the future (Art. 7(3)). To do so, use the contact form.
Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work or where the alleged infringement took place (Art. 77 GDPR).
No automated decisions
We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
Security
The website is served only over an encrypted HTTPS connection. We protect the data we receive with technical and organisational measures appropriate to the risk.
Changes to this policy
We update this policy when our services or the legal requirements change. The current version is always available on this page.