1. Introduction
We, mbold.io FlexCo , take the protection of your personal data seriously. This Privacy Policy explains how we collect, use, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Controller:
mbold.io FlexCo
Schloßgasse 26/21, 1050 Vienna, Austria
Email: antonio@mbold.io
2. Data We Collect
a) Server Logs & Website Access:
When you visit our website, our hosting provider (Webflow, Inc.) automatically collects data such as your IP address, browser type, operating system, referring URL, and time of access. This data is used to ensure website security and optimize performance.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in operating a secure website).
b) Google Analytics 4
We use Google Analytics 4 to analyze visitor behavior. Google may store cookies or similar technologies on your device. The collected data (including IP address) is transferred to Google servers, potentially in the USA.
We have activated IP anonymization.
Legal basis: Art. 6(1)(a) GDPR (consent via cookie banner).
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
More information: https://policies.google.com/privacy
c) Contact Forms & Cal.com
When you use our contact form or schedule a call through Cal.com, we process the information you provide (e.g., name, email, message, meeting time) to respond to your inquiry.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
Provider: Cal.com, Inc., 2261 Market Street #4376, San Francisco, CA 94114, USA.
Privacy Policy: https://cal.com/privacy
d) Newsletter (Substack)
If you subscribe to our newsletter via Substack, we process your email address and any additional data you voluntarily provide.
You can unsubscribe at any time via the unsubscribe link in the email.
Legal basis: Art. 6(1)(a) GDPR (consent).
Provider: Substack, Inc., 548 Market St #95993, San Francisco, CA 94104, USA.
Privacy Policy: https://substack.com/privacy
e) Lead Capture & CRM (Kit)
We use Kit for lead capture and email automation. Personal data such as name, email address, and company details may be collected.
Legal basis: Art. 6(1)(b) GDPR (performance of a contract or pre-contractual measures).
Privacy Policy: https://kit.com/privacy
3. Data Retention
We store personal data only as long as necessary to fulfill the purposes mentioned or as required by law.
4. Data Security
We use SSL encryption and appropriate technical measures to protect your data from unauthorized access, loss, or misuse.
5. Your Rights
Under the GDPR, you have the right to
- Access your personal data (Art. 15 GDPR)
- Rectify incorrect data (Art. 16 GDPR)
- Request erasure (“right to be forgotten,” Art. 17 GDPR)
- Restrict or object to processing (Art. 18–21 GDPR)
- Data portability (Art. 20 GDPR)
To exercise these rights, contact us at antonio@mbold.io.
If you believe your data is being processed unlawfully, you may file a complaint with the Austrian Data Protection Authority (DSB):
Barichgasse 40-42, 1030 Vienna, Austria
Website: https://www.dsb.gv.at
6. Updates
We may update this Privacy Policy from time to time to reflect changes in legal or technical requirements.
Last updated: October 2025