Privacy Policy

1. Introduction

We, MILKINK e.U., take the protection of your personal data very seriously. Your data is processed exclusively on the basis of the legal provisions (GDPR, TKG 2003).

This Privacy Policy informs you about what personal data we collect, how we use it, and what rights you have.


2. Data Controller

MILKINK e.U.
Photography and Multimedia Agency

Owner: Stefan Kokovic
Habsburgergasse 14/Top 9
1010 Vienna, Austria

E-Mail: contact@milkinkstudio.com
Website: www.milkinkstudio.com


3. Data Collection on Our Website

a) Server Log Files

When visiting our website, the following information is automatically collected and transmitted by your browser:

  • IP address

  • Browser type and version

  • Operating system used

  • Referrer URL

  • Date and time of access

These data are used exclusively for the secure and stable operation of the website and are not merged with other data sources.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).


b) Cookies and Consent Management

Our website uses cookies. Essential cookies are necessary for the functionality of the website. Additional cookies (e.g., analytics, marketing, external media) are only set with your explicit consent.

You can adjust or withdraw your consent at any time using the Cookie Button in the footer of this website.


4. Cookie Overview

Below you will find an overview of the cookies used on this website. The list is maintained manually and kept up to date.

Cookie Name Provider Purpose Duration Type Legal Basis
webhead_cookie_consent stefankokovic.com Stores visitor’s cookie preferences (SmartCookie). No personal data is stored. 182 days Essential Art. 6 (1) lit. f GDPR
webhead_media_consent stefankokovic.com Remembers a user’s choices for loading embedded media (e.g., YouTube/Vimeo iframes) so that these iframes can be loaded automatically on subsequent visits. 355 days Essential Art. 6 (1) lit. f GDPR
theme-preference stefankokovic.com Saves the user’s choice between light and dark design of the website. 1 year Essential Art. 6 (1) lit. f GDPR
_GRECAPTCHA www.google.com Used by Google reCAPTCHA to provide spam protection for forms and to distinguish humans from bots. 6 months Essential Art. 6 (1) lit. f GDPR
CONSENT .google.com Stores a user’s state regarding Google services’ cookie choices. 2 years Essential Art. 6 (1) lit. f GDPR
_ga Google LLC Used by Google Analytics to distinguish unique users. 2 years Analytics Art. 6 (1) lit. a GDPR
_ga_<container-id> Google LLC Persists session state for Google Analytics 4 (GA4) measurements. 2 years Analytics Art. 6 (1) lit. a GDPR
_gid Google LLC Used by Google Analytics to store and count pageviews. 24 hours Analytics Art. 6 (1) lit. a GDPR

5. Third-Party Services and Tools

Depending on your consent, the following services may be integrated into this website:

  • Cookie Consent Tool (SmartCookie) – management of cookie settings

  • YouTube / Vimeo – embedding of videos

  • Google Analytics (GA4) – audience measurement and reach statistics. We use IP anonymization (IP masking). Data is processed by Google LLC. You can withdraw consent at any time via the Cookie Button in the footer.

  • Google reCAPTCHA – spam and abuse protection for forms. The service checks interactions to prevent automated misuse and may set the _GRECAPTCHA cookie.

  • Security solutions (e.g., Wordfence) – website protection

For more information on Google services, see Google’s Privacy Policy: https://policies.google.com/privacy.


6. Legal Bases

  • Art. 6 (1) lit. a GDPR – consent (analytics, marketing, external media – if used)

  • Art. 6 (1) lit. f GDPR – legitimate interest (essential cookies, IT security)


7. Your Rights

You have the right to request at any time:

  • Access to stored personal data (Art. 15 GDPR)

  • Rectification of inaccurate data (Art. 16 GDPR)

  • Erasure (“right to be forgotten”) (Art. 17 GDPR)

  • Restriction of processing (Art. 18 GDPR)

  • Data portability (Art. 20 GDPR)

  • Withdrawal of consent (Art. 7 GDPR)

  • Objection to processing (Art. 21 GDPR)

If you believe the processing of your data violates data protection law, you may lodge a complaint with the competent supervisory authority: Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, Austria.


8. Security

We implement technical and organizational measures (TOMs) to protect your personal data against loss, misuse, and unauthorized access. These measures are regularly reviewed and adapted to the state of the art.


9. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect legal requirements or changes to our services. The current version is always available on our website.