Data protection declaration Last update: 03.01.2024
The purpose of this data protection declaration is to inform you about data processing in connection with your use of the Miele Professional Showroom website ("website").
1. General information
1.1 Personal data According to Art. 4 para. 1 GDPR, "personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
1.2 Controller The controller within the meaning of Art. 4 para. 7 GDPR is
Miele & Cie KG
Carl-Miele-Straße 29
33332 Gütersloh
Tel: +49 5241 89-0
Fax: +49 5241 89-2090
E-mail:
info@miele.de 1.3 Data protection officer You can contact our data protection officer at the postal address given in section 1.2 or by e-mail at:
datenschutz@miele.de 2. Miele Professional Showroom Website Each time you visit the website, your browser automatically transmits data that is stored in the server log files. This includes the following data, including personal data (hereinafter referred to as 'log files data'):
- Information about the browser type and browser version used,
- the user's operating system,
- Internet service provider and IP address of the user,
- date and time of access.
We have log file data analysed anonymously in order to continuously improve the website, to adapt the website to the interests of our users and to rectify faults more quickly. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.
The log file data is used in non-anonymised form exclusively to determine faults and to ensure system security, including detecting and tracking unauthorised access attempts and attempts at fraud and misuse. They are stored for 7 to 10 days for this purpose and then deleted. Log file data whose further storage is required for evidence purposes are exempt from deletion until the respective incident has been finally clarified and may be passed on to investigating authorities in individual cases. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR.
We also use cookies on our website. Cookies are small text files that are stored by your browser on your terminal device. The next time you visit our website with the same terminal device, the information stored in cookies is sent back either to our website (hereinafter "first-party cookie") or to another website (hereinafter "third-party cookie").
The information stored in the cookies enables the website to recognise that you have already visited the website. This allows you to customise the display of the website to your needs. Only the cookie itself is identified on your terminal device. Beyond this, personal data is only processed with your express consent or if this is absolutely necessary in order to be able to use the service offered and called up by you accordingly.
Cookie name: PHPSESSID
Purpose: This cookie saves the current session with reference to PHP applications and thus ensures that all functions of the website that are based on the PHP programming language can be displayed in full.
Retention period: When the browser session ends
3. Place of data storage Unless expressly stated otherwise in this data protection declaration, all personal data collected from you in connection with the use of the portal is generally stored on servers in the territory of the European Union or the European Economic Area. However, it is possible that data may have to be transferred and processed outside the territory of the European Union. In such a case, your data will be secured by appropriate safeguards in accordance with Art. 46 para. 2 GDPR, in particular, but not exclusively, by using the standard contractual clauses for the transfer of data between EU and non-EU countries (which you can find here).
4. Data exchange As part of the processing operations mentioned in this data protection declaration, we may transfer your data to the following additional categories of recipients (in addition to the third parties already explicitly mentioned in this data protection declaration):
- authorised representatives and other consultants (e.g. lawyers, tax consultants, auditors);
- Processors within the meaning of Art. 28 GDPR, in particular, but not exclusively, Service-now.com GmbH, Frankfurt, Germany;
- other service providers;
- Businesses of the Miele Group (https://www.miele.com/de/com/vertriebsgesellschaften-2156.htm);
- insurance companies and
- state authorities and government agencies.
We only transfer your personal data to third parties if this is necessary for the fulfilment of the contract, if we or the third party have a legitimate interest in processing your personal data or if you have consented to the data transfer. In addition, we only pass on personal data to third parties if and to the extent that we are obliged to do so under applicable law, official measures or dish orders.
5. Rights of data subjects Data subjects have various rights under the GDPR. These include in particular
Right to information: In accordance with Art. 15 GDPR, you can request confirmation as to whether personal data concerning you is being processed by us. If such processing is taking place, you can also request further information from us about the processing.
Right to rectification: In accordance with Art. 16 GDPR, you have the right to rectification and/or completion if the processed personal data concerning you is incorrect or incomplete.
Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to obtain restriction of processing of personal data concerning you where one of the following grounds applies
- the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead
- the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims
- the data subject has objected to processing pursuant to Art. 21 pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Right to erasure: In accordance with Art. 17 GDPR, you have the right, under certain conditions, to request the erasure of personal data stored about you if one of the following reasons applies
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the data subject withdraws consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
- the data subject objects to the processing pursuant to Art. 21 (1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2);
- the personal data have been processed unlawfully;
- the erasure of the personal data is necessary for compliance with a legal obligation in Union or Member State law to which the controller is subject
- the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
Right to data portability: In accordance with Art. 20 GDPR, you also have the right to receive the personal data concerning you, which you have provided, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from us.
To assert the aforementioned rights, please contact us, stating your request, your name and, if applicable, your customer number. Please address your enquiry to the contact details given in sections 1.2 and 1.3.
6. Right to lodge a complaint You have the right to complain to a data protection authority about the handling of your personal data.
7. Right to object If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation, Miele cannot demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of the data subject, or the objection is directed against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation.
Please address your enquiry to the contact details given in sections 1.2 and 1.3.
8. Updates to this data protection declaration We reserve the right to update this data protection declaration from time to time in order to adapt it to changes in legal, regulatory, technical or business developments. When we update our data protection declaration, we will take appropriate measures to inform you appropriately about the changes we have made. We will obtain your consent to any material changes to the data protection declaration if and to the extent required by applicable data protection laws.
The status of the data protection declaration and its last update will be indicated by the date (above).
