Privacy notice
How MiBB Regulatory handles your personal data
Last updated: 23 October 2026
Data controller
MiBB Regulatory ApS, Lindegaardsvej 12A 2.tv., 2920 Charlottenlund, Denmark. CVR 46526155, VAT no. DK46526155. Contact: mikkel@mibb-regulatory.eu.
Free checklist and regulatory updates
When you request the free “NB Reviewer’s Top 25 SaMD Findings” checklist, we process:
- your email address, and your name and company if you provide them;
- the date and time of your request and the version of the consent text you agreed to;
- whether you asked for occasional regulatory updates, when you confirmed that by email (double opt-in), which of the introductory emails we have sent you, and when you unsubscribed, if you do.
Purpose and legal basis: to send you the checklist you asked for, and, only if you ticked and confirmed it, occasional emails about EU MDR, MDCG guidance, standards and the EU AI Act. These start with two short introductory emails with practical tips on the checklist topics, sent about 2 and 5 days after you confirm. The legal basis is your consent (GDPR Article 6(1)(a) and section 10 of the Danish Marketing Practices Act). You can withdraw consent at any time with the unsubscribe link in every email, or by emailing us.
We do not store your IP address. To prevent abuse of the form, a one-way scrambled (hashed) version of your IP address and email is kept for up to 24 hours.
Enquiries by email
If you email us, we use your message and contact details to reply. The legal basis is our legitimate interest in answering enquiries (GDPR Article 6(1)(f)).
Template purchases
Payments are processed by Stripe, which acts as an independent controller for card data. We receive your name, email, billing address, company name and VAT number to deliver the kit by email, issue the invoice and meet our bookkeeping duties (GDPR Article 6(1)(b) and (c)). Questions or problems with a purchase: info@mibb-regulatory.eu. Your kit is delivered by an automated email sent on our behalf (see the processors below).
Who processes the data for us
- Simply.com (Denmark) – website hosting and email.
- Stripe – payments (purchases only).
- Our bookkeeping system (Dinero, Denmark) – invoices and accounting records (purchases only).
- An automated assistant service that checks new orders and sends the kit delivery emails on our behalf (purchases only).
We do not sell or share your data for others’ marketing.
How long we keep it
- Checklist-only requests: deleted 12 months after the request.
- Update subscribers: kept until you unsubscribe. When you unsubscribe, your details are deleted straight away. We keep only a scrambled (hashed) version of your email address and the date, so that we never email you again and can show that you unsubscribed.
- Purchase and accounting records: 5 years from the end of the financial year, as required by the Danish Bookkeeping Act.
- Enquiry emails: as long as needed to handle your enquiry and any follow-up.
Your rights
You can ask for access to, correction or deletion of your data, restrict or object to its use, receive it in a portable format, and withdraw consent at any time. To unsubscribe, use the link in any of our emails. To unsubscribe or make a request by email, write to mikkel@mibb-regulatory.eu. You can complain to the Danish Data Protection Agency (Datatilsynet), datatilsynet.dk.
Cookies
This website does not use analytics, advertising or tracking cookies, and the signup form does not set cookies. Our hosting provider’s security firewall may set a strictly necessary cookie if it needs to run a browser check to protect the site against automated attacks. When you pay, Stripe’s checkout page uses its own cookies, described in Stripe’s privacy policy.