This Privacy Notice aims to inform you about the data processing in connection with our website and related services. The processing of personal data takes place exclusively within the framework of the respective valid legal data protection regulations, in particular the General Data Protection Regulation (hereinafter referred to as "GDPR").
1. General information
1.1 Personal data
In accordance with Art. 4 (1) GDPR, “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”; a natural person is considered as being identifiable, directly or indirectly, in particular by means of an identifier such as a name, an identification number, location data, an online identifier or one or more special characteristics expressing the physical, physiological, genetic, mental, economic, cultural or social identity of this natural person.
The controller within the meaning of Art. 4 (7) GDPR is
Miele Co Ltd,
Fairacres, Marcham Road,
Oxfordshire, OX14 1TW
Tel: 0330 160 6600
1.3 Data Protection Officer
You can contact our Data Protection Officer at the postal address listed under 1.2 or by sending an e-mail to: firstname.lastname@example.org
2. Collection and processing related to our website
2.1 Automatically processed data when visiting
Each time you access our website, your browser automatically transmits data that are stored in the log files of the server. This includes the following data (hereinafter referred to as the "Log file data"):
- Information about browser type and browser version;
- operating system of the user;
- Internet service provider and IP address of the user; and
- date and time of the access.
The Log file data is anonymised and then evaluated on a continuous basis in order to improve the website, to adapt the website to the interests of our users and to be able to remedy errors quickly. For these purposes, the legal basis for the processing of data is our legitimate interest pursuant to Art. 6 (1)(f) GDPR.
In a non-anonymised form, Log file data are used solely to detect malfunctions and to ensure system security, including detection and tracking of improper access attempts and fraud and abuse attempts. The data are stored for 7 to 14 days and then deleted. On occasions, we require the further storage of Log file data for evidence purposes so this will not be deleted until final clarification of the respective incident has been obtained and may in individual cases be forwarded to the investigating authorities.
2.2 Processed data when using the online shop
If you actively submit data to us, for example by registering with our online shop or placing an order, we will process the data transmitted by you.
When registering for our online shop or when using the online shop, we collect and process the following information from you:
- telephone number;
- as well as date of birth (voluntary); and
- order history.
When ordering, we also process the following information:
- items ordered;
- delivery address, if different; and
- invoice and payment data.
We process the above data in order to update your registration and to process your orders. The legal basis for processing this data is performance of a contract pursuant to Art. 6 (1)(b) GDPR.
We store the data collected for the purposes of performing the contract until the expiry of the statutory or any contractual warranty and guarantee claims. Thereafter, we store the information required by commercial and tax law for the statutory periods of time for the sole purposes of making it available to the tax authorities in the event of an audit being.
Your payment data will be forwarded to the respective payment service provider for payment processing.
Orders for Miele calendars are processed via external service providers, to whom any payments are also to be made. These service providers act on our behalf and following our instructions.
The delivery address will be forwarded to the delivery partner appointed by us. So that the delivery partner can contact you to coordinate the delivery date or in the case of delivery problems, we will provide the delivery partner with your e-mail address and, if applicable, telephone number. The respective data are transmitted solely for the respective purposes and are deleted after delivery. Some of our delivery partners offer track-and-trace services. We will transfer your e-mail address to the delivery partner in order to enable our partner to provide its track-and-trace services to you. The legal basis for the processing of the data is the consent pursuant to Art. 6(1)(a) GDPR.
2.3 Collection service
In the event that you are in default of payment despite repeated reminders, we reserve the right to forward the data required for the execution of a collection to a debt collection agency for the purpose of fiduciary collection or to sell the outstanding claims to a collection service provider. In the event of a sale, the collection service provider becomes the holder of the claim and asserts the claims in its own name. The legal basis for the transfer of data in connection with the fiduciary collection is performance of contract pursuant to Art. 6 (1)(b) GDPR and for the transmission of data in the context of the sale of a claim our legitimate interest pursuant to Art. 6 (1)(f) GDPR.
2.4 Credit check
Our company regularly checks your credit status for contracts and –in cases where we have a legitimate interest – even for existing customers. For this purpose, we work together with a service partner from which we receive the necessary data. In order to perform the above, we will transmit your name and contact details to our service partner. The legal basis for the data processing is our legitimate interest pursuant to Art. 6 (1)(f) GDPR.
2.5 Miele Club
If you register for the Miele customer program Miele Club, we will collect the following customer data as part of the registration:
- telephone number;
- and date of birth (voluntary).
We process these customer data for the purpose of providing our customer programme. The legal basis is performance of contract pursuant to Art. 6 (1)(b) GDPR.
We store the customer data during your membership in our Miele customer program Miele Club. Thereafter, we store the customer data only and insofar as we are obliged to store it for reasons based on commercial and tax law.
2.6 Commercial communication
If and insofar as you have given us your consent for advertising purposes, e.g. you have signed up to the e-mail newsletter, the data processing required in the context of establishing contact with you takes place on the legal basis of consent pursuant to Art. 6 (1)(a) GDPR (hereinafter referred to as "Consent"). You may revoke your consent to us at any time with effect for the future (e.g. by using the unsubscribe link included in the e-mail). It might be possible that commercial communication will be provided through our external service providers.
3. Contact and customer service
3.1 Contacting us
Our website lists different ways that you can contact us. Furthermore, you can contact us through our social media presences (e.g. on Facebook or Instagram). If you use these and contact us e.g. by e-mail, we will process the data you provided to us in order to answer your request.
We have a legitimate interest in answering your enquiries. The legal basis for the data processing is therefore our legitimate interest pursuant to Art. (6)(1)(f) GDPR. If the purpose of your request is to conclude a contract, the legal basis is performance of contract pursuant to Art. 6 (1)(b) GDPR.
When contacting us, data transmitted to us will be deleted after completion of your request, provided and insofar as we are not obliged to store it for reasons based on commercial and tax law.
3.2 Miele Customer Service
You can contact Miele Customer Service in various ways, e.g. by telephone or online. In this case, we will process the data you submit to us as part of your request. Insofar as is necessary for the provision of customer service, for example, to collect the device from you, to carry out repair work or to process warranty or guarantee claims, your data will be forwarded to our service partners.
The legal basis for the processing of your data in the context of customer service is performance of contract pursuant to Article 6 (1) (b) GDPR.
With regard to customer service, data transmitted to us will be deleted upon expiry of the corresponding warranty or guarantee periods, provided and insofar as we are not obliged to store them for a longer period for reasons based on commercial and tax law.
The information stored in the cookies tells the website that you have already visited it. This allows us to display the website in the best possible way in accordance with your preferences. Only the Cookie itself is identified on your terminal. In addition, personal data will be processed only after your explicit consent or if absolutely necessary in order to be able to use the service offered and requested by you accordingly.
You can disable certain Cookies on our Cookie settings page. Furthermore, you can generally prevent the storage of Cookies by setting your browser software accordingly; in that case, you may not be able to use all features of our website to their fullest extent.
5. Analysis and targeting tools
5.1 Google services
On our website, we use various services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google").
For more information about Google services please visit http://www.google.com/privacy/ads/.
5.1.1 Google Analytics
Our website uses Google Analytics for the needs-oriented design and improvement of the website. Google Analytics uses so-called cookies that are stored on your terminal and that allow an analysis of the use of the website by you. The information generated by the cookie is usually transmitted to a Google server in the US and stored there. We use the extension of IP anonymisation (referred to as IP masking) on this website, i.e. your IP address is shortened by Google within Member States of the European Union or in the other States that are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage to the website operator.
The legal basis for the data processing is legitimate interest pursuant to Art. (6)(1)(f) GDPR.
Google's services also include reporting on the effectiveness of our advertising efforts (including across devices), the demographics and interests of our users, and cross-device delivery features of online advertising when you have a Google Account and personalised advertising (hereinafter referred to as "personalised ads"). In this case, the legal basis of data processing is the consent you granted to Google (Art. 6 (1)(a) GDPR).
You may object to the collection or analysis of your data by Google Analytics by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout.
The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs will be automatically deleted after 14 months.
For more information about the Google Analytics terms and conditions, visit http://www.google.com/analytics/terms/.
5.1.2 Google Remarketing Features
Google's remarketing feature allows us to show our users advertisements based on their interests on our other websites within the Google Ads Network (so-called "Google ads" or ads on other websites). For this purpose, the interaction of the users on our website is analysed in order to be able to show users targeted advertising even after visiting our website on other sites. Google stores a number in the browsers of users who visit certain Google services or websites on the Google Display Network. This number records the visits of these users.
The legal basis for the data processing is legitimate interest pursuant to Art. (6)(1)(f) GDPR.
5.1.3 Google Conversion Tracking
We also use Google's Conversion Tracking in this context. When you click on an ad served by Google, a 30-day conversion tracking cookie will be placed on your device. These cookies are not for personal identification. The information gathered using the conversion cookie is used to generate conversion statistics for Google Ads advertisers.
The legal basis for this data processing is legitimate interest pursuant to Art. (6)(1)(f) GDPR.
You can disable Google interest-based ads on your browser by turning off http://www.google.com/settings/ads or opting out of http://www.aboutads.info/choices/.
5.1.4 Further Services of the Google Marketing Platform
Google uses a cookie ID to record which ads are played in which browser and thus prevents them from being displayed multiple times. In addition, Google can use cookie IDs to track what are known as conversions, i.e. whether a user sees an advertisement and later goes to the advertiser's website and buys something there. According to Google, such cookies do not contain person information.
Your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and further use of the data collected through the use of this tool by Google. According to Google, through the involvement of this services, Google receives the information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a service of Google, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, there is a chance that the provider will find out and store your IP address.
In addition, the Google cookies allow us to understand whether you are performing certain actions on our website after you have viewed or clicked on one of our ads on Google or on another platform (Conversion Tracking) (“Floodlight”). Google uses this cookie to understand the content with which you have interacted on our web sites so that it can later send you targeted advertising.
You can prevent the tracking process by setting your browser software accordingly (e.g. third party cookies disabled), deactivate the cookies for conversion tracking by blocking cookies from the domain www.googleadservices.com in your browser settings, at www.google.com/settings/ads, for interest-based ads of the providers that are part of the About Ads self-regulatory campaign, via the link http://www.aboutads.info/choices or the link http://www.google.com/settings/ads/. We point out that in this case you may not be able to use all the features of this offer in full.
For more information about the Google Marketing Platform please visit https://marketingplatform.google.com/. You can also find more information from the Network Advertising Initiative (NAI) at http://www.networkadvertising.org/.
The legal basis for the data processing is your consent pursuant to Art. (6)(1)(a) GDPR.
5.2 Facebook Custom Audiences
Our website uses the "Custom Audiences" remarketing feature of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") as part of their visit to the social network Facebook or other websites that also use the process. We are interested in showing you advertisements that are of interest to you in order to make our online offers more interesting to you. The legal basis for the processing of your data is legitimate interest pursuant to Art. 6(1(1)(f) GDPR.
The use of Custom Audience means your browser automatically establishes a direct connection to the Facebook server. We have no influence on the extent and further use of the data collected through the use of this tool by Facebook and therefore inform you that according to our knowledge: By integrating Facebook Custom Audiences, Facebook receives the information that you have accessed our website or have clicked on an ad from us. If you are registered with a service of Facebook, Facebook can assign the visit to your Facebook account. Even if you are not registered with Facebook or have not logged in, there is a chance that the provider will process your IP address and other identifying features.
Disabling the "Facebook Custom Audiences" feature is available to logged-in users at https://www.facebook.com/settings/?tab=ads#.
For more information about data processing through Facebook, please see: https://www.facebook.com/about/privacy.
5.3 Amazon Conversion Pixel and Amazon Remarketing Pixel
You can prevent the storage of cookies by using a corresponding setting on your browser software; however, please note that if you do this, you may not be able to use all the features of this website to the fullest extent possible. You may also prevent Amazon from collecting the data generated by the cookie and related to your use of the website, as well as the processing of such data by Amazon, by clicking on this link and selecting the setting "Do not personalise Ads by Amazon for this Internet Browser": https://www.amazon.de/adprefs. Alternatively, you can select the appropriate settings at http://www.youronlinechoices.com/en. An opt-out cookie will then be set in your browser, which prevents the future collection of your data by the Amazon Pixels when visiting our website. This opposition is valid as long as you do not delete the opt-out cookie.
The legal basis for this is legitimate interest pursuant to Art. 6 (1)(f) GDPR, whereby the improvement in comfort and quality of our services justifies our legitimate interest.
Our website uses the Smartlook analysis service of Smartsupp.com s.r.o., Milady Horakove 13, 602 00 Brno, Czech Republic.
Smartlook captures movements on the viewed websites in so-called heatmaps. This allows us to see where users are clicking and how far they are scrolling. This allows us to make our website better and more customer friendly.
This includes information about the website and the referencing URL, the date and time of the visit to the website and technical information in the form of screen resolution, operating system, browser type and device type, as well as the country and town from which the website was accessed. The users' IP address or form information will not be used for this purpose.
The legal basis for the use of Smartlook is legitimate interest pursuant to Art. 6 (1)(f) GDPR, whereby the improvement in comfort and quality of our website justifies our legitimate interest.
6. Social media plugins
Our website uses the Facebook social media plug-in of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (hereinafter referred to as "Facebook").
Facebook may receive the information that you have accessed the corresponding website of our online service and possibly interacted with the plug-in. By activating the plug-in, your personal data will be saved and sent to Facebook in the USA.
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of data collection, the purpose of the processing, or the retention periods. We also have no information on how to delete the data collected by Facebook.
As far as we know Facebook stores the data collected about you as usage profiles and uses them for purposes of advertising, market research and/or tailor-made website design. Such an evaluation is carried out in particular (also for non-logged-in users) for the presentation of needs-based advertising and to inform other users of the social network about your activities on our website. You have a right to object to the formation of these user profiles, whereby you must exercise this right to Facebook.
Through the plug-ins we offer you the opportunity to interact with the social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is legitimate interest pursuant to Art. 6(1)(f) GDPR.
You can completely prevent the plug-ins from being loaded using add-ons for your browser, so-called script blockers.
7. Social media presence
7.1 Note regarding the Facebook Fanpage
7.2 Note regarding Twitter
We operate the Twitter account https://twitter.com/miele_gb?lang=en or MieleGreatBritain (@Miele_GB) on the short message service, Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, (hereinafter referred to as "Twitter"). The body responsible for the data processing of persons living outside of the United States is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
When you use Twitter, your personal data are collected, transmitted, stored, disclosed and used by Twitter, transmitted, stored and used wherever you reside in the United States, Ireland and any other country in which Twitter operates.
7.3 Note regarding Instagram
7.4 Note regarding YouTube
8. Job applications
If you apply via the Miele application portal or form or otherwise for a position with us and send us application documents, we will process the personal data you provide in this context only for the purpose of the application process.
Insofar as you have applied for an advertised position, the documents will be automatically deleted six months after completion of the application procedure, provided deletion does not conflict with our legitimate interests. In the case of an application without reference to an advertised position (unsolicited application), the application will be kept for a maximum period of one year in order to contact you, if necessary, with regard to a vacancy that arises during this time. At any time you have the option of requesting the deletion of your application prior to expiry of the scheduled retention periods. In the case of a successful application, the data provided to us will be stored in your employee file in compliance with the legal requirements.
If you have applied for an position with another Miele Group company, we will forward your application to the respective company for the purpose of deciding on the establishment of an employment relationship.
As far as we process your data for the decision on the establishment of an employment relationship, the legal basis the performance of our employment contract with you and our legitimate interests of managing our relationship with you (where the processing activities are not strictly speaking necessary for the performance of a contract.
In all other cases, the legal basis for storing your application data is your consent in accordance with Art. 6(1) lit. (a) GDPR.
9. Miele trade fair presence
If you visit one of our booths, we collect your data if you provide us with such, e.g. by handing over your business card. We process these data to respond to your queries, e.g. contact for further discussions or offers. If this is necessary to respond to your queries (e.g. when requesting a contact abroad), we will forward your data to the responsible person of the respective company of the Miele Group.
We have a legitimate interest in answering your enquiries. The legal basis for the data processing is our legitimate interest pursuant to Art. (6)(1)(f) GDPR. If the purpose of your request is to conclude a contract, the legal basis is performance of contract pursuant to Art. 6 (1)(b) GDPR. If you give us your consent for such, the legal basis is Art. 6 (1)(a) GDPR. You may revoke your consent at any time with effect for the future.
When contacting us, data transmitted to us will be deleted after dealing with your request, provided and insofar as we are not obliged to store it for reasons based on commercial and tax law.
At our booths, we also occasionally take pictures and film recordings for documentation, marketing and press purposes, which are then published via i.a. our social media channels (e.g. Facebook, YouTube or Instagram). In this case, we expressly point this out to you by posting a notice on the stand. You may revoke any consent granted to us regarding the use of an image at any time with effect for the future.
10. Access to your personal data
Within the context of the data processing described in this privacy notice, it might be possible that we transfer personal data to the following categories of recipients (in addition to the recipients expressly stated in this privacy notice):
- authorized agents and other consultants (e.g. attorneys, tax accountants, auditors);
- service providers;
- companies of the Miele Group (https://www.miele.com/en/com/subsidiaries-2156.htm);
- insurance companies; and
- state agencies and governmental bodies.
We only transfer personal data to third parties insofar it is required to fulfil our contractual obligations, in case we have or the respective third party has a legitimate interest in processing the personal data or if you have given consent to the transfer. Furthermore, we only transfer personal data to third parties if and insofar we are obligated to do so according to applicable law, regulatory action or court order.
11. Your Rights
Data subjects have various rights under the GDPR where certain conditions apply. These include in particular:
- Right to access: According to Art. 15 GDPR, you can request a confirmation as to whether personal data concerning you is being processed by us. If such processing is available, you may also request further information about the processing from us.
- Right to rectification: In accordance with Art. 16 GDPR, you are entitled to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete.
- Right to restriction of processing: You may request, pursuant to Art. 18 GDPR, that the processing of your personal data be restricted.
- Right to erasure: According to Art. 17 GDPR, you also have the right under certain circumstances to demand the deletion of your personal data stored about you.
- Right to data portability: In accordance with Art. 20 GDPR, you are also entitled to receive the personal data that you have provided in a structured, common and machine-readable format and to transmit it without any obstruction from us to another controller.
12. Right to complaint
You have the right to complain about the handling of your personal data to a data protection authority.
13. Right of objection
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided there are reasons for this arising from your particular situation or if your objection is based on being targeted to marketing purposes. In the latter case, you have a general right of objection, which is implemented by us without any particular situation being specified.