Milva Lab Standard SaaS agreement · Terms of Service · Data Processing & GDPR
Standard SaaS Agreement
Governs the customer's implementation and use of the Milva Service, outlining the scope, term, and fee structure based on the selected service tier and consumption.
Terms and Conditions
Defines key operational and financial clauses. They also specify the non-exclusive license for internal business use, delineate responsibilities regarding data and intellectual property.
Data Processing & GDPR
How we handle, store, and protect your personal data
By accessing or using our platform, you agree to be bound by our Standard SaaS Agreement, which governs the terms of service.
The Milva Lab Standard SaaS agreement is governed by Danish law. Disputes shall be resolved by binding arbitration, except where prohibited by law. You may contact us at contact@milva.io for any questions relating to the agreement.
Legal
Terms and Conditions
By accessing or using our platform, you agree to be bound by our latest Terms and Conditions. Please read them carefully before using any of our services.
Latest version is effective from 1st of January 2026.
These Terms are governed by applicable law. Disputes shall be resolved by binding arbitration, except where prohibited by law. You may contact us at info@milva.io for any questions relating to these Terms.
GDPR
Data Processing & GDPR
We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This section explains how we collect, use, and safeguard your data.
1
Data We Collect
We collect data you provide directly (name, email, payment details), data generated by your use of the platform (usage logs, content, analytics), and technical data (IP address, browser type, device identifiers).
2
Legal Basis for Processing
We process personal data on the following legal bases: contract performance (to provide the service), legitimate interests (security, fraud prevention, service improvement), legal obligation, and consent where required.
3
Data Retention
We retain personal data for as long as necessary to provide the service and comply with legal obligations. Account data is typically retained for the duration of your subscription plus 90 days following termination, unless otherwise required by law.
4
International Transfers
Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.
Your Rights Under GDPR
Access
Request a copy of the personal data we hold about you
Rectification
Ask us to correct inaccurate or incomplete data
Erasure
Request deletion of your personal data ("right to be forgotten")
Restriction
Request that we limit how we process your data
Portability
Receive your data in a structured, machine-readable format
Objection
Object to processing based on legitimate interests
To exercise any of your rights, contact our Data Protection Officer at contact@milva.io. We will respond within 30 days.
DPA
Request a Data Processing Agreement (DPA)
A Data Processing Agreement (DPA) is required when you use our platform to process personal data on behalf of your organisation as a data controller. Submit the form below and our team will respond within 5 business days.
What is a DPA?
A DPA is a legally binding contract between a data controller (your organisation) and a data processor (us) that governs how personal data is handled in accordance with GDPR Article 28.
Who needs a DPA?
Organisations using the platform to process personal data of EU/EEA residents
Businesses subject to GDPR, CCPA, or equivalent data protection legislation
Enterprise customers requiring contractual data protection guarantees
Organisations operating in regulated industries (healthcare, finance, education)
DPA Request Form
Please have the following information ready when submitting your request:
Organisation name and registered address
Contact name and email of your Data Protection Officer or legal representative
Nature of data processing (types of personal data, categories of data subjects)
Purpose of processing and estimated volume of data subjects
Jurisdiction and applicable data protection regulation
Our legal team will review your request and send a pre-signed DPA within 10 business days. Enterprise customers may request a custom DPA on their own template.
Standard DPA available immediately — covers all standard GDPR Article 28 requirements and Sub-processor obligations.
Enterprise & custom DPA — contact contact@milva.io for negotiated terms, custom templates, or SCCs addenda.
Response time — standard requests are processed within 5 business days. Urgent requests can be flagged in the subject line.