PRIVACY POLICY

1. limitation of liability

The contents of this website were created with the greatest possible care and to the best of our knowledge. Nevertheless, Miles GmbH, as the provider of this website, accepts no liability for the topicality, completeness and correctness of the pages and content provided.

As a service provider, Miles GmbH is responsible for its own content and the information provided on these pages in accordance with § 7 paragraph 1 of the German Telemedia Act (TMA); however, in accordance with §§ 8 to 10 TMA, Miles GmbH is not obliged to monitor the transmitted or stored third-party information. These contents will be removed or blocked immediately from the time we become aware of a concrete violation of the law. A liability is only possible from the time of knowledge.

2. external links

The website contains so-called “external links” (links) to other websites, over whose content Miles GmbH has no influence. For this reason, Miles GmbH cannot accept any liability for these contents.

The respective provider of the linked website is solely responsible for the content and accuracy of the information provided. At the time the link was created, no legal infringements were apparent. If such an infringement becomes known, the link will be removed immediately.

3. copyright/performance protection law

The contents, works and information provided on this website are subject to German copyright and ancillary copyright law. Any kind of duplication, editing, distribution, storage, and any kind of use outside the limits of copyright law requires the prior written consent of the respective copyright holder. Unauthorised copying/storage of the information provided on these web pages is not permitted and is liable to prosecution.

4. data protection declaration according to the GDPR

I. Name and address of the person responsible for
The responsible person in terms of the basic data protection regulation and other national data protection laws of the member states and other data protection regulations is the:

Miles GmbH
Harckesheyde 91-93
22844 Norderstedt
Germany
Phone: +49-40-943 64 0
e-mail: info@milesgroup.eu
Website: www.milesgroup.eu

II. Name and address of the Data Protection Officer
The data protection officer of the controller is:
mein-datenschutzbeauftragter.de
Mr. Philipp Herold
Phone: +4945116085221
Email: datenschutz@milesgroup.eu

I. General information on data processing

1. the scope of processing of personal data

As a matter of principle, we collect and use personal data of our users only to the extent necessary to provide a functional website and our contents and services. The collection and use of personal data of our users is regularly only carried out with the consent of the user. An exception is made in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

2. legal basis for the processing of personal data
Insofar as we obtain the consent of the data subject for the processing of personal data, Art. 6 para. 1 lit. a EU Data Protection Regulations (GDPR) serves as the legal basis.

When processing personal data which is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out pre-contractual measures.

Insofar as the processing of personal data is necessary to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c GDPR serves as the legal basis.

If vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or of a third party and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the former interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Data deletion and storage duration

The personal data of the person concerned will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU regulations, laws, or other regulations to which the person responsible is subject. Data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires unless there is a need to continue storing the data for the purpose of concluding or fulfilling a contract.

III. providing the website and creating log files

1. description and scope of data processing

Whenever our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected:
(1) Information about the browser type and version used
(2) The user’s operating system
(3) The Internet service provider of the user
(4) The IP address of the user
(5) Date and time of access
(6) Websites from which the user’s system accesses our website
(7) Websites that are called up by the user’s system via our website
The data is also stored in the log files of our system. These data are not stored together with other personal data of the user.

2. legal basis for the data processing
The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

3. purpose of the data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes also include our legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f GDPR.

4. duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session is ended.

In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

5. possibility of contradiction and removal
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. There is therefore no possibility of objection on the part of the user.

IV. Use of cookies

a) Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. If a user calls up a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies on our website which enable an analysis of the surfing behaviour of the user.
In this way the following data can be transmitted:

• Entered search terms
• Frequency of page views
• Use of website functions

The user data collected in this way is pseudonymised by technical precautions. It is therefore no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users.

When calling our website, users are informed by an info banner about the use of cookies for analysis purposes and are referred to this privacy policy. In this context, a reference is also made to how the storage of cookies can be prevented in the browser settings.

MORE COOKIES (VIMEO, YOUTUBE)

b) Legal basis for the data processing
The legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. a GDPR.

c) Purpose of the data processing
The analysis cookies are used for the purpose of improving the quality of our website and its contents. The analysis cookies enable us to find out how the website is used and thus to constantly optimise our offer.

These purposes also include our legitimate interest in the processing of personal data in accordance with Art. 6 para. 1 lit. a GDPR.

e) the duration of storage, objection and removal possibilities
Cookies are stored on the user’s computer and transmitted by the user to our site. Therefore, you as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies for our website are deactivated, it may not be possible to use all the functions of the website to their full extent.

YouTube- integration

1.description, purpose and scope of data processing

We make available to you at various points on this website integrations of YouTube of Google Inc., USA, so that you can watch vivid image presentations via videos. YouTube contains the possibility of registering user accounts and thus joining a Google network.

The YouTube plug-in determines at least the IP address of the user and the page address from which it was activated when the page in which it is integrated is called. As long as you are logged into a YouTube account at the same time, YouTube can monitor your usage behavior and associate it with your account. This allows us to create personal profiles that are available to Google.

2. legal basis for data processing

By using this website and the functions of the YouTube integrations of Google Inc, USA, you agree to the collection and use of the automatically determined data and the data entered by you by Google in the USA in the sense of Art. 6 Para. 1 lit.I a) GDPR. Google is certified under the so-called “Privacy Shield” resolution of the European Commission to ensure an adequate level of data protection in accordance with the European Union:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI
(Cf. above under “Google Analytics”). Within the scope of data usage for YouTube, Google acts on its own responsibility and not bound by our order.

3.Duration of storage, possibility of objection and removal

We have no knowledge of the further processing by Google and the possibilities of influencing it. You can find detailed information in the Privacy Center of google.de: Google Privacy Policy and under the Terms of Use at www.youtube.com  (https://www.youtube.com/t/terms).

If you do not want Google to monitor your usage patterns, please log out of your YouTube account when you visit this page.

Vimeo

Kind and scope of processing
We have integrated Vimeo Video on our website. Vimeo Video is a component of the video platform of Vimeo, LLC, where users can upload content, share it over the Internet and receive detailed statistics.

Vimeo Video enables us to integrate content from the platform into our website.

Vimeo Video uses cookies and other browser technologies to evaluate user behavior, recognize users and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports.

When you access this content, you will be connected to servers at Vimeo, LLC, 555 W 18th St, New York, New York 10011, where your IP address and possibly browser information such as your user agent will be transmitted.

Purpose and legal basis
The use of the service is based on our legitimate interests, i.e. interest in a platform-independent provision of content in accordance with Art. 6 Para. 1 lit. f. GDPR.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Vimeo, LLC. For more information, please refer to the Vimeo Video Privacy Policy: https://vimeo.com/privacy.

Google Analytics

Type and scope of processing
We use Google Analytics from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offer is called up, sub-pages visited and the length of time visitors stay.

Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and legal basis
We process data using Google Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 (1) lit. a. DSGVO.

Storage period
The specific storage period of the processed data cannot be influenced by us, but is determined by Google LLC. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy?hl=de-DE.

Google Maps

Type and scope of processing
We use the map service Google Maps to create directions. Google Maps is a service of Google Ireland Limited, which displays a map on our website.

When you access this content on our website, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google Maps.

Purpose and legal basis
The use of Google Maps is based on your consent pursuant to Art. 6 para. 1 lit. a. DSGVO.

Storage period
The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Maps: https://policies.google.com/privacy.

V. Contact form and e-mail contact

1. description and scope of data processing
On our website there is a contact form which can be used for electronic contact. If a user takes advantage of this possibility, the data entered in the input mask is transmitted to us and stored. These data are:

• form of address*
• First name*
• Last name*
• Company name
• e-mail*
• Phone
At the time the message is sent, the following data is also stored:
• The IP address of the user
• Date and time of the contact request

For the processing of the data, your consent will be obtained during the sending process and reference will be made to this privacy policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

2. legal basis for the data processing
The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given his consent.

The legal basis for the processing of data transmitted while sending an e-mail is Art. 6 para. 1 letter f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

3. purpose of the data processing
The processing of the personal data from the input mask serves us only for the processing of the establishment of contact. In the case of contacting us by e-mail, this is also the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. duration of storage
The data will be deleted as soon as they are no longer necessary for the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. possibility of opposition and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued.

An objection to the storage of personal data must be made in writing, by e-mail or fax.

All personal data stored during the contact will be deleted in this case.

VI. rights of the data subject

If personal data are processed by you, you are the data subject within the meaning of the GDPR and you are entitled to the following rights in relation to the person responsible:

to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right of correction, deletion, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details of such data;
in accordance with Art. 16 GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;

in accordance with Art. 17 GDPR to demand the deletion of your personal data stored with us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;

in accordance with Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request its transfer to another responsible party;

in accordance with Art. 7 Para. 3 GDPR to revoke your once given consent to us at any time. As a result, we may no longer continue to process the data which was based on this consent in the future and

complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can turn to the supervisory authority of your usual place of residence or workplace or to our office.

Objection right
If your personal data are processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 letter f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR if there are reasons for doing so arising from your particular situation or if the objection is directed against direct marketing. In the latter case, you have a general right of objection, which will be implemented by us without indicating any special situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@milesgroup.eu

VII. Privacy policy for job applicants

Introduction
The protection and confidentiality of your data is of importance to Miles GmbH. For this reason, your data will of course be processed exclusively in accordance with the applicable data protection regulations, in particular the German Federal Data Protection Act (BDSG) and the German Telemedia Act (TMG). This data protection declaration also complies with all legal requirements which will become binding when the European basic data protection regulation (GDPR) comes into force. The GDPR will apply from 25 May 2018. Under no circumstances will your personal data be passed on to third parties without authorisation for advertising, marketing, or other purposes. Should you have any questions regarding this data protection declaration, please feel free to contact us by email at datenschutz@milesgroup.eu.

1. what are personal data?
Personal data is all information from which conclusions about your personal or factual circumstances can be drawn or which makes you identifiable.

2 Which data is collected?
For the processing of your application the following data is collected and processed:
1. first name, surname, e-mail and, if applicable, address/city, date of birth, form of address, telephone number, nationality
2. additional questions (e.g. driving licence) depending on the call for applications
3. curriculum vitae, in particular details of professional experience and training
4. professional experience and training
5. competencies (e.g. MS Office, Photoshop)
6. application photo
7. qualifications, awards and language skills
8. letter of motivation
9. files and documents that you may upload

3. we store the written, electronic communication that takes place between you and the company you are applying for. Furthermore, we process comments and evaluations that are written about you during the application process.

4. purpose of data collection
Miles GmbH processes and uses the personal data collected for the purpose of registration on the companies’ websites and for the purpose of exchanging information between applicants and companies.

5. use of cookies
You can find more information on the use of cookies under point IV in our general data protection declaration.

6. is data passed on to third parties or collected by third parties?
The data collected in the context of your application will neither be published nor passed on to third parties without your consent. Apart from our employees who process your data within the application process, we do not pass on your personal data to third parties.

7. storage periods

1. personal data of rejected applicants will be stored for a maximum period of six months, starting from the date of rejection of the application If you prefer a longer storage period in the course of your application process (e.g. in order to continue your application process later), we ask you to make the appropriate settings when registering.

2. longer storage periods may also result from the fact that the data are necessary for the assertion, exercise or defence of legal claims before an authority or that there are legal storage obligations. The data will be stored for as long as necessary to fulfil these purposes.

8. your rights regarding stored data

1. You have the right to receive information free of charge about which of your personal data we are processing, as well as the right to correct, delete and restrict data processing and data transferability. In order to assert these rights or to obtain additional information about them, please contact us by e-mail at datenschutz@milesgroup.eu.

2. Our privacy policy and our responsibility and liability in this respect do not extend to third-party websites to which we link or to which you are forwarded. We are also not responsible for data processing carried out in these cases by the operators of these websites.

9. possibility of withdrawal
you can revoke your data protection consent at any time with effect for the future. To make use of the possibility of revoking your consent, please contact us by e-mail at datenschutz@milesgroup.eu.

2 Our data protection declaration and our responsibility and liability in this respect do not extend to third-party websites to which we link or to which you are forwarded. We are also not responsible for data processing carried out in such cases by the operators of these websites.

3 If we use cookies on our website that require your consent and you have also agreed to their use, you can revoke this consent by sending an email to datenschutz@milesgroup.eu.

10. General information on our presence in social networks
In order to present our company in the best possible way and to communicate with you as a user, customer or interested party and to be able to inform you about our offered services, we make use of our presence in social networks.

You can find us on the following platforms or social networks
• Meta Platforms, Inc (Instagram)
• Youtube
• LinkedIn
• XING

When using social networks, data is processed outside the European Union (EU) and the European Economic Area (EEA). An equivalent level of data protection as exists in the EU cannot be guaranteed in all countries outside the EU.

In this context, it may lead to risks for you as a user if the transferred data is processed in so-called third countries with a non-adequate level of data protection.

This makes it more difficult to enforce known user rights. In addition, your data may not be processed in your interest by the provider in the third country.
If providers from the USA have certified themselves under the so-called Privacy Shield agreement – an agreement on data protection between the USA and the EU – these providers are obliged to comply with the EU data protection standards.

The processing purposes pursued by the social networks usually differ from ours. Thus, it mostly happens that the data collected from you in social networks is processed for purposes of market research, advertising and creation of user profiles for personalized advertising (e.g. Facebook, Google, Instagram, etc.).

To realize this, cookies are used, which record user behavior and enable profiling of the user. In the case of Facebook, this also results in the creation of a user profile of persons who do not maintain a registered account on Facebook.
A concrete list of the purposes for which user data is processed can be found in the data protection notices of the respective providers. By making the appropriate settings in your user account, you can restrict the creation of profiles, at least to a certain extent. For the exact procedure, please read the corresponding data protection notices of the respective provider.

Data subject rights
With the Facebook “Page Controller Addendum”, the rights and obligations to be complied with together with Facebook are shown. These can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

In the event of a request for information, we will forward this to Facebook and ask you to fill out the corresponding contact form at https://www.facebook.com/login.php?next=https%3A%2F%2Fwww.facebook.com%2Fhelp%2Fcontact%2F308592359910928.

Below you will find a detailed description of the respective data processing by the providers and their objection options (so-called opt-out) via the corresponding links to the providers’ websites:

• Meta Platforms, Inc (1 Hacker Way Menlo Park, California 94025) – Privacy Policy: https://www.facebook.com/about/privacy/
• Instagram (- Meta Platforms, Inc (1 Hacker Way Menlo Park, California 94025) -privacy policy: http://instagram.com/about/legal/privacy/
• Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Privacy Policy: https://policies.google.com/privacy , Opt-Out: https://adssettings.google.com/authenticated , Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

11. validity of the agreement (severability clause)
The illegality, ineffectiveness, invalidity or unenforceability of parts of these data protection provisions and terms of use shall not affect the validity and effectiveness of the remaining provisions.

12. complaint to the data protection authority
If you are of the opinion that we are processing your data in contravention of applicable legal provisions, you may lodge a complaint with the German data protection authority or with the otherwise competent supervisory authority (in particular in the member state in which you live or work).

13. contact details of the data protection officer
mein-datenschutzbeauftragter.de
Mr. Philipp Herold
Email: datenschutz@milesgroup.eu