Privacy policy

Last updated: January 14, 2025

Milkos ("we," "us," or "our") publishes an independent personal finance journal at milkokos.info. We respect your privacy and have designed our website around the principle of collecting as little data as possible. This policy explains exactly what we collect, why, and how to exercise your rights under the EU General Data Protection Regulation (GDPR).

1. Who we are

Milkos editorial desk is operated from Calea Victoriei 142, București 010073, Romania. Registration: Reg. No: 38491726. You can reach our data protection contact at hello@milkokos.info or on +40 314 286 197.

2. What we collect

• Subscription details — email address, optional name, billing country.
• Contact form submissions — name, email, message, optional phone.
• Comments and reader letters — only the content you submit voluntarily.
• Reading preferences — a single cookie that remembers cookie consent and dark-mode toggle.
• Server logs — anonymised request data for 14 days for security and uptime purposes.

We do not run advertising trackers. We do not embed Google Analytics, Facebook Pixel, or any third-party measurement script. We do not sell or rent reader data to anyone.

3. Why we collect it

We collect data for narrowly defined purposes:

• To deliver subscription emails and quarterly review letters.
• To respond to messages submitted via the contact form.
• To keep the website functioning, secure, and accessible.
• To comply with our legal obligations (e.g., tax records for paid subscriptions).

4. Legal basis for processing

Under GDPR Article 6, we rely on the following bases:

• Consent for newsletter subscriptions and optional cookies.
• Contract for delivering paid subscriptions.
• Legitimate interests for security logging and replying to reader correspondence.
• Legal obligation for the retention of accounting records.

5. How long we keep it

Newsletter records are kept for as long as you remain subscribed plus 30 days after unsubscribing. Contact form messages are stored for 12 months. Paid-subscription billing records are retained for the period required by Romanian tax law. Server logs are pruned after 14 days.

6. Who we share data with

Only a handful of carefully selected processors:

• Our email delivery provider (EU-hosted, GDPR-compliant) — for newsletter dispatch.
• Our payment processor — for processing paid subscriptions only.
• Our hosting provider (EU data centres) — for serving the website itself.

We sign written processing agreements with each provider. We do not transfer data to processors outside the European Economic Area without appropriate safeguards.

7. Your rights

You have the right to:

• Request access to the data we hold about you.
• Ask us to correct or delete that data.
• Restrict or object to specific processing activities.
• Request portability of your data in a machine-readable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with the Romanian National Supervisory Authority (ANSPDCP).

8. Cookies

The website uses a single technical cookie to remember your cookie consent choice. No third-party cookies are set unless you explicitly opt-in to embedded social media previews. You can clear the cookie at any time using your browser's settings.

9. Children

Milkos content is written for adults. We do not knowingly collect data from anyone under 16. If you believe we have, please contact us so we can delete it.

10. Updates to this policy

If we materially change this policy, we will publish the updated version at this URL with a new "Last updated" date and notify active subscribers by email.

11. Contact

Questions about this policy? Write to the desk at hello@milkokos.info or use the contact form. We respond to data requests within 30 days.