Privacy Policy

Last updated: 15 November 2026

Controller

Miro Holding B.V.
Jacques Veltmanstraat 111
1065 DB Amsterdam
The Netherlands
Email: [email protected]

We have not appointed a data protection officer because we are not required to.

Visiting the website

This website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). When you open a page, Cloudflare processes the data needed to deliver it: your IP address, the date and time, the page you opened and details of your browser and operating system. Without this data the page cannot be delivered or protected against attacks. The legal basis is our legitimate interest in a secure, fast website (Art. 6(1)(f) GDPR). We do not keep server log files ourselves.

Cloudflare processes this data on our behalf (Art. 28 GDPR) and may transfer it to the USA. Cloudflare is certified under the EU-US Data Privacy Framework, so the transfer relies on the European Commission's adequacy decision (Art. 45 GDPR).

No cookies, no tracking

This website sets no cookies and uses no analytics or advertising services. Its fonts are delivered with the website, not loaded from third parties.

Waitlist

When you join the waitlist, we process the details you enter in the form: whether you are asking for a pharmacy or a telehealth company, the company's name, website and size, and your name, position, email address and phone number. We also store the time, the language and the page you sent the form from, and the country Cloudflare derives from your IP address. We do not store your IP address itself.

We use these details to run the waitlist, select the companies that take part and contact you about the launch of MedFlow. The legal bases are Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and our legitimate interest in getting in touch with interested companies (Art. 6(1)(f) GDPR).

The details are kept in a database at Cloudflare (see above). We do not share them with third parties and we do not sell them. We delete them as soon as you ask us to, and at the latest 24 months after you signed up if no business relationship has come about by then.

Giving these details is voluntary, but without the required fields we cannot add you to the waitlist. We decide on participation ourselves; there is no automated decision-making within the meaning of Art. 22 GDPR.

Email

When you write to [email protected], Cloudflare forwards your message to our mailbox at Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). Data may be transferred to the USA in the process; Google LLC is also certified under the EU-US Data Privacy Framework. We only use your message and contact details to answer your request (Art. 6(1)(b) and (f) GDPR) and delete them once the request is dealt with, unless the law requires us to keep them.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can object at any time to processing based on our legitimate interest (Art. 21). An email to [email protected] is enough.

You can also lodge a complaint with a data protection authority, for example the Autoriteit Persoonsgegevens, which is responsible for us (Postbus 93374, 2509 AJ Den Haag, The Netherlands, autoriteitpersoonsgegevens.nl), or the authority where you live or work.