Website privacy and cookie notice
For this website and your enquiries only
This notice applies only to the public milktrail.com website, website enquiries and related follow-up. It does not apply to the MilkTrail software used by healthcare organisations or to patient, donor and staff records processed in that software.
The website uses separate hosting, email and optional analytics services. References below to international processing concern those website services only. The MilkTrail software does not use international processing. Its data handling is covered separately in customer agreements and the relevant service privacy information.
Updated 18 October 2026
Who is responsible?
Trients AB, Skidspåret 3B, 903 38 Umeå, Sweden, is the controller responsible for personal data processed through this marketing website. MilkTrail is a product of Trients AB. Contact contact@trients.com with questions or requests about your data.
This notice covers the public MilkTrail website, enquiries and related business correspondence. The MilkTrail software used by healthcare organisations has a different purpose and data-processing context. Information about patient, donor and staff data in those services is provided separately by the responsible organisation and through the applicable customer agreements. Please do not use this website’s enquiry form to submit those records.
Enquiries and follow-up
When you contact us, we process your name, email address, chosen topic and any organisation or message you provide. We store website enquiries in our website database, send an acknowledgement to you and email notifications to our team. Messages may be forwarded to the team members who handle your enquiry. Email correspondence may also contain contact details and information you choose to send.
We use this information to answer questions, arrange demonstrations, prepare proposals and follow up on your request. For professional enquiries, our legal basis is our legitimate interest in responding to people who contact us and managing prospective business relationships (GDPR Article 6(1)(f)). Where you personally request steps towards a contract with us, Article 6(1)(b) may apply. We do not add enquiry details to newsletters or unrelated marketing lists.
Your name, email address and enquiry topic are required for the online form; organisation and message are optional. Without the required details we cannot process an online enquiry. You can instead contact us by email. Please do not submit patient information, medical records or other sensitive information.
Website operation and security
Our hosting service processes technical information needed to serve and protect the website, such as IP addresses, requested resources, timestamps and error information. The form uses a session identifier, anti-forgery token and duplicate-submission protection. Application rate limiting uses a keyed hash derived from the IP address rather than storing the raw IP address in the rate-limit record. This does not mean that hosting logs contain no IP addresses.
The legal basis for necessary operation and abuse prevention is our legitimate interest in providing a reliable, secure website (Article 6(1)(f)). Technical storage strictly necessary to provide the requested service is used without optional analytics consent.
Optional analytics
If you accept optional analytics, we use Google Analytics to understand which pages and contact routes are useful. Measurements include page views, browser/device information, referral information and events such as opening the contact page or successfully submitting an enquiry. The website code does not send your form name, email address or message to analytics. It disables Google signals and advertising-personalisation signals.
The legal basis for optional analytics is your consent (Article 6(1)(a)). You can refuse without losing access to the website or enquiry form. Use Cookie settings in the footer to change your choice or withdraw consent. Withdrawal does not affect the lawfulness of processing before withdrawal.
Cookies and similar storage
| Technology | Purpose and duration |
|---|---|
| milktrail-consent, milktrail-consent-date, milktrail-consent-version (local storage) | Remember your choice and its version. The website treats the choice as valid for 180 days, then asks again. Browser storage may remain until replaced or cleared. |
| milktrail_operations (session cookie) | Secures form submissions and maintains the session. A session cookie; browsers may restore sessions. The application renews an inactive session after 30 minutes. |
| _ga and _ga_* (Google Analytics cookies) | Optional visitor/session measurement, only after acceptance. Google documents a default cookie duration of up to two years. Browser settings may shorten this. This cookie duration is separate from our 14-month Analytics data-retention setting. Rejecting optional analytics removes matching first-party analytics cookies through the website controls. |
Who receives information?
Relevant Trients team members receive enquiries. Service providers support hosting/database operations and email delivery. The known service chain includes Miss Hosting, its outgoing mail service (MailChannels), and Microsoft 365 for Trients email. Google processes optional analytics data when you consent. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.
International processing — website services only
This section concerns the public website, enquiry emails and optional analytics. It does not describe processing in the MilkTrail software.
Our website uses hosting, email and analytics providers whose operations may involve processing outside the European Economic Area. Google describes its use of the EU–US Data Privacy Framework and standard contractual clauses in its data transfer information. For information about the providers involved in your enquiry, their processing locations and applicable safeguards, contact contact@trients.com. The hosting description for the MilkTrail software does not describe every provider involved in this marketing website and its email services.
How long we keep information
We review website enquiries and associated sales emails annually and delete closed enquiries with no meaningful contact for more than 12 months that are no longer needed for a response or follow-up. We keep active discussions only while they remain relevant. Where an enquiry becomes a customer relationship, necessary information is managed separately for that relationship and any applicable legal obligations. Information needed for a specific dispute may be retained for that purpose.
Google Analytics is configured to retain user-level and event-level data for 14 months, with the user retention period not reset by new activity. Expired data is deleted through Google's monthly deletion process. Standard aggregated reports are not subject to this setting. Analytics cookie lifetimes are separate from this server-side retention setting.
Your rights
Depending on the circumstances, you can request access to your personal data, correction, deletion, restriction of processing or a portable copy where applicable. You can object to processing based on legitimate interests and withdraw consent for processing based on consent. These rights are subject to the conditions and exceptions in data-protection law.
Email contact@trients.com to make a request. We may ask for proportionate information to verify your identity. We normally respond within one month; if an extension is permitted because a request is complex or numerous, we explain it within that month. You may complain to the Swedish Authority for Privacy Protection (IMY) or your competent supervisory authority. You do not need to contact us first.
We do not make decisions producing legal or similarly significant effects about you solely by automated means through the enquiry process.
Updates and external websites
External websites have their own privacy practices. We update this notice when our website processing changes and show the revision date above.