Privacy Policy

1. Data Controller

Hot Milk Digital
a service of Hot Milk Studio
Owner: Robert Frederick Cummings
Schwanebecker Chaussee 5
13125 Berlin
Germany

WhatsApp: +49 (0)179 784 2643
Email: webmaster@hotmilkdigital.de

2. Collection and Processing of Personal Data

We collect personal data only to the extent necessary for the provision of our services or where you provide it to us voluntarily. Processing is carried out on the basis of the following legal grounds pursuant to Art. 6 GDPR:

• Art. 6 Para. 1 lit. a GDPR — Consent
• Art. 6 Para. 1 lit. b GDPR — Performance of a contract
• Art. 6 Para. 1 lit. f GDPR — Legitimate interests

3. Hosting & Infrastructure

Lovable (Hosting Platform)

This website is delivered and published via the Lovable platform, operated by Lovable AB, Norrlandsgatan 20, 111 43 Stockholm, Sweden. Lovable serves the site through the global edge network of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Requests from Europe are served via EU edge locations (including Frankfurt). In this process, server log data is processed, including IP address, browser and operating system information, referrer URL, and time of access.

A data processing agreement (DPA) pursuant to Art. 28 GDPR has been concluded with Lovable AB. Insofar as personal data is transferred to third countries, this is based on the standard contractual clauses of the EU Commission.

Further information: https://lovable.dev/privacy-policy · DPA · Cloudflare Privacy

All-Inkl

The domain hotmilkdigital.de is registered with ALL-INKL.COM — Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. All-Inkl processes DNS requests in the context of domain management.

Further information: https://all-inkl.com/datenschutzinformationen/

Supabase

Form data is processed and stored via Supabase. Our Supabase project is hosted in the EU (Frankfurt, AWS eu-central-1) region. All data remains within the European Union.

Further information: https://supabase.com/privacy

Legal basis: Art. 6 Para. 1 lit. f GDPR

4. Contact Form

When you use our contact form or Free Web Check form, we collect the following data:

• First and last name
• Email address
• Subject and message (optional)
• Industry, current situation and budget range (Web Check form only)
• Current website address (optional, Web Check form only)

This data is used exclusively for processing your enquiry and is not passed on to third parties. The data is stored in our Supabase database (EU Frankfurt) and deleted after the communication is concluded, unless legal retention obligations apply.

Legal basis: Art. 6 Para. 1 lit. b GDPR

5. Analytics: Plausible Analytics

We use Plausible Analytics, a privacy-friendly analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia. Plausible does not use cookies and does not collect personal data. Only aggregated, anonymous usage data is collected that does not allow conclusions to be drawn about individual persons.

Plausible is fully GDPR-compliant and does not require cookie consent. No data is transferred to third countries.

Further information: https://plausible.io/privacy

Legal basis: Art. 6 Para. 1 lit. f GDPR

6. Analytics: Google Analytics 4

We use Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). GA4 helps us understand how visitors use our website (for example page views, traffic sources, devices and approximate region) so that we can improve our content and offers.

Google Analytics sets cookies on your device and processes usage data including a randomly generated identifier, IP address (shortened/anonymised by Google before storage), pages visited, referrer, browser and device information.

Google Analytics is only loaded after your explicit consent via our cookie consent banner (category "Statistics"). Without your consent, no connection to Google servers is established and no cookies are set. We have configured GA4 with IP anonymisation enabled and Google Signals as well as ad personalisation disabled.

You can withdraw your consent at any time via the "Cookie Preferences" link in the footer. In addition, you can prevent the collection of data by Google Analytics using the browser add-on provided by Google.

Google may transfer the collected data to the USA. Such transfers are based on the standard contractual clauses of the EU Commission and Google's certification under the EU-US Data Privacy Framework. Analytics data is retained for a maximum of 14 months.

Further information and opt-out:
https://policies.google.com/privacy
https://support.google.com/analytics/answer/6004245
https://tools.google.com/dlpage/gaoptout

Legal basis: Art. 6 Para. 1 lit. a GDPR (consent) and § 25 Para. 1 TDDDG (storage of and access to information on your device)

7. Facebook Pixel

We use the Facebook Pixel, an analytics tool provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The Facebook Pixel allows us to track the behaviour of visitors after clicking on a Facebook advertisement and to measure the effectiveness of our advertising campaigns.

The Facebook Pixel is only activated after your explicit consent via our cookie consent banner. Without your consent, no data is transmitted to Meta. You can withdraw your consent at any time via the "Cookie Preferences" link in the footer.

Meta Platforms Ireland Ltd. may transfer the collected data to the USA. Data transfer is based on the standard contractual clauses of the EU Commission.

Further information and opt-out:
https://www.facebook.com/privacy/explanation
https://www.facebook.com/settings?tab=ads

Legal basis: Art. 6 Para. 1 lit. a GDPR (consent) and § 25 Para. 1 TDDDG

8. WhatsApp

Our website contains a link that redirects you to WhatsApp. WhatsApp is a service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. When you click the WhatsApp button and use WhatsApp, WhatsApp's privacy policy applies.

Please note that WhatsApp may transfer data to the USA. We recommend reading WhatsApp's privacy policy before using the service.

Further information: https://www.whatsapp.com/legal/privacy-policy

Legal basis: Art. 6 Para. 1 lit. a GDPR (consent by active clicking)

9. Social Media Links

Our website contains links to the following social networks:

• Facebook (Meta Platforms Ireland Ltd.)
• Instagram (Meta Platforms Ireland Ltd.)
• LinkedIn (LinkedIn Ireland Unlimited Company)

These links lead to external platforms. By clicking these links you leave our website. We have no influence over the data processing carried out by these platforms. These are simple hyperlinks — no data about you is transmitted to these platforms unless you actively click a link.

Further information:
Facebook/Instagram: https://www.facebook.com/privacy/explanation
LinkedIn: https://www.linkedin.com/legal/privacy-policy

10. Cookies & Consent Management

We use our own consent management system, integrated directly into this website. It stores your consent decision exclusively in your browser's localStorage (key: hmd-consent-v2) together with a timestamp and version number. No cookies are set and no data is transmitted to external services for this purpose. Consent is valid for 12 months and is then requested again.

You can change or withdraw your consent at any time via the "Cookie Preferences" link in the footer.

The following categories are used:

Legal basis: Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. f GDPR (legitimate interest in documenting consent)

11. Google Fonts (Self-hosted)

We use the fonts Antonio and Jost on our website. These fonts are hosted locally on our server and are not loaded from Google servers. Therefore no data is transmitted to Google for this purpose.

12. Your Rights

You have the following rights under the GDPR regarding your personal data:

• Right of access — Art. 15 GDPR
• Right to rectification — Art. 16 GDPR
• Right to erasure — Art. 17 GDPR
• Right to restriction of processing — Art. 18 GDPR
• Right to data portability — Art. 20 GDPR
• Right to object — Art. 21 GDPR
• Right to withdraw consent — Art. 7 Para. 3 GDPR

To exercise your rights please contact:
Email: webmaster@hotmilkdigital.de
WhatsApp: +49 (0)179 784 2643

You also have the right to lodge a complaint with the competent data protection supervisory authority. The competent authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit
Friedrichstr. 219
10969 Berlin
https://www.datenschutz-berlin.de

13. Changes to this Privacy Policy

We reserve the right to update this privacy policy as necessary to reflect changes in the legal situation or changes to our services. The current version is always available on this page.