Data privacy information for applicants

Data privacy

For German version click here

 

In this data protection notice, we inform you about the processing of the personal data you submit to our global career portal as part of the application process and any personal data we collect and your rights in this regard. The processing of personal data takes place within the framework of the applicable data protection regulations, in the European Economic Area in particular the General Data Protection Regulation (hereinafter "GDPR"). The specified legal standards refer to this legal area. Insofar as non-European law applies, our information on the legal principles used (e.g. for the fulfillment of contracts or for the fulfillment of legal provisions) applies accordingly.

I. Scope of application

The following information relates to the processing of personal data of applicants (data subjects and hereinafter referred to as "you" / "your") by Miele & Cie. KG and all other companies of the Miele Group on our career websites and as part of the recruitment process.

II. Definitions

This data protection information is based on the following data protection terms, which we have defined for better understanding.

GDPR means the EU General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (Art. 4 (1) GDPR).

Processing is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4 (2) GDPR).

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law (Art. 4 (7) GDPR).

Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing (Art. 4 (9) GDPR).

III. Controller

Miele & Cie. KG (Carl-Miele-Str. 29, 33332 Gütersloh, Germany; info@miele.de) and the respective company of the Miele Group named in the respective job advertisement are joint controllers for data processing and are hereinafter referred to as "Miele, "we" or "our". The name of the (co-)responsible Miele company can be found in the respective job advertisement, the contact details can be found here. When you apply via the career websites, your data will be automatically transmitted to the relevant Miele company.

You can contact us or the tendering Miele company at any time if you have any questions or wish to exercise your rights as a data subject.

On request, we will provide you with the main provisions of the joint controller agreement between Miele & Cie. KG and the Miele companies jointly responsible. You can find the companies of the Miele Group here.

IV. Data Protection Officer

You can contact our data protection officer at the postal address or telephone number of the company responsible for you mentioned in section 1 or by e-mail to: datenschutz@miele.de.

V. Purposes and legal bases of processing

 

1. Processing of your data when you visit our websites

When you visit our career websites, we automatically process certain personal data such as your Internet Protocol address (IP address), the type and version of the browser you are using, your operating system and your platform, including the Uniform Resource Locator (URL) on our servers in order to display the requested pages to you without disruption and to implement the functions offered on your end devices, Art. 6 para. 1 lit. b GDPR. In addition, this data is processed for security reasons, such as combatting cyber-attacks, misuse and preventing fraud, Art. 6 para. 1 lit. f GDPR. For the use of cookies and similar technologies, we refer to our Cookie Policy.

2. Registration and login in the application portal

For applications on our career portal, you create a user account ("Candidate Home Account"). To create the account we need

  • Your e-mail address and
  • a password of your choice.

With your user account, you can view your applications at a glance and check their status at any time. You will also receive communication and tasks (e.g. to check the contract offer).

The data will be processed in order to take measures at your request before and during the application procedure, Art. 6 para. 1 lit. b GDPR, Art. 88 GDPR in conjunction with the respective member state regulation.

3. Processing your application

Once you have created a user account, you will be taken to the specific application form where you will be asked to provide the following data:

  • First and last name,
  • Telephone number,
  • E-mail address,
  • Address, languages (optional),
  • how you became aware of us,
  • Curriculum vitae (CV),
  • any other documents you would like to submit to us, e.g. letter of motivation, letter of recommendation;
  • Depending on the country, further questions may be asked, e.g. about salary expectations, notice periods, willingness to travel, mobile working/home office, work permit, willingness to relocate, driving license, etc.

If you select the "Auto-fill with CV" option, the underlying information from the application form will be pre-filled using the data from your CV. Accordingly, this data will only match if the information requested is also contained in your CV (e.g. first and last name, e-mail address, etc.). At the same time, your CV is already uploaded to the system so that you do not have to carry out this step manually.

 

Before sending the data, you have the opportunity to check and adjust your data again.

 

The data is processed for the purpose of carrying out the application process, Art. 6 para. 1 lit. b GDPR, Art. 88 GDPR in conjunction with the respective member state regulation in the European Economic Area. We use your contact details, in particular your e-mail address and telephone number, to communicate with you about the application process, e.g. to request further documents or to inform you. The answer to the question of how you became aware of us serves to evaluate and improve our efforts to attract applicants, Art. 6 para. 1 lit. f GDPR.

4. Invitation to interviews and feedback

After a pre-selection process, we invite suitable candidates to interviews. For online interviews, we use "Microsoft Teams", whereby the link to the meeting is sent to you by e-mail.

We use "Microsoft Teams" via our data processing agreement with Microsoft Deutschland GmbH.

Please note that this data protection notice only informs you about the processing of your personal data by us if you conduct online interviews with us. If you access the "Microsoft Teams" website or app, the provider of "Microsoft Teams" is sole controller for data processing. If you require information about the processing of your personal data by this provider, we ask you to read their relevant information.

Various types of data are processed when using "Microsoft Teams". The scope of the data also depends on the data you provide before or when participating in an online interview.

The following personal data is processed:

  • IP address
  • User details: e.g. display name, e-mail address if applicable, profile picture (optional), preferred language
  • Meeting metadata: e.g. date, time, meeting ID, telephone numbers, location
  • Text, audio and video data: You may have the option of using the chat function in an "online interview". In this respect, the text entries you make are processed in order to display them in the "online interview". In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the "Microsoft Teams" applications.

The legal basis for data processing when conducting "online interviews" in the European Economic Area is Art. 6 para. 1 lit. b) GDPR, Art. 88 GDPR in conjunction with the respective member state regulation, insofar as the meetings are conducted as part of the application procedure or serve to execute the employment relationship after conclusion of the contract.

The optional or non-mandatory data is processed on the basis of our legitimate interest in the effective conduct of online interviews, Art. 6 para. 1 lit. f) GDPR.

Personal data relating to participation in online interviews will not be passed on to third parties unless this is necessary for the initiation (e.g. application process) or execution of the contract.

You will be informed of our decision regarding the next steps by email or telephone, and you can check the status of your application at any time via your user account.

5. References, background checks, assessment tests and sanctions list screenings

If necessary to verify the information provided in the application, we may use the personal data available to us to carry out reference and/or background checks. These take place in different forms, often not for all advertised positions and not in all countries.

Reference checks may, for example, involve providing two contacts from your previous employer to verify the references provided to us or just a simple check of your LinkedIn profile. We use background checks (e.g. certificate of good conduct, medical examination) to ensure the suitability of candidates for the position in question. These are sometimes carried out on our behalf by external service providers.

In some countries or for some job advertisements, additional assessment tests are carried out (e.g. English Test or Technical Assessment). These tests are sometimes carried out on our behalf by external service providers.

If you are interested in a particular position and want to know more about the recruitment process and the practices of the country in question, please contact the specified contact person for this country, the person who posted the advertisement, or our Data Protection Officer at datenschutz@miele.de.

These measures and the processing of your personal data ensure that there is no evidence suggesting that applicants are not suitable for the position in question. The legal basis for this processing is our legitimate interest in verifying information, preventing fraud, conducting suitability checks, and complying with legal requirements (Art. 6 para. 1 lit. f GDPR).

In accordance with our legally binding obligations to match candidates against official sanctions lists, we also carry out these checks. This check is usually based on the candidate's first name, surname and address. The legal basis is Art. 6 para. 1 lit. f GDPR: our legitimate interest in complying with legally binding requirements.

If you are employed by us, we may process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship, or for the exercise or fulfilment of the rights and obligations arising from the representation of employees' interests, as set out in a law, collective agreement or works or service agreement (Art. 6 para. 1 lit. b GDPR or Art. 88 GDPR in conjunction with an (if existing) EU member state employee privacy law, such as § 26 para. 1 BDSG in Germany).

6. Preparation of quotations and conclusion of contracts

Once you have been selected, you will receive an offer. This will set out the terms of the contract, including salary, working hours and start date. If no salutation has been provided up to this point, you will now be asked for it. If you accept our offer, the existing data will be used to draw up the employment contract. If your address and date of birth are not yet available, you will be asked for this information, too. The approval of the works council, if one exists in the hiring company, is also part of the process. The following information is required from you for this purpose (if applicable): Surname, first name, date of birth, address and application documents for all candidates for the named position. The legal basis is the initiation or execution of the employment contract, Art. 6 para. 1 lit. b GDPR or Art. 88 GDPR in conjunction with an (if existing) EU member state employee privacy law, such as § 26 para. 1 BDSG in Germany.

7. Improvement of our HR processes

We only process anonymised data for the purposes of improving internal HR processes, analysis and reporting. We evaluate the number of applications received and analyse conversion rates throughout the recruitment process (e.g. number of applications per interview round, offer stage, recruitment). We also count the number of responses indicating how applicants became aware of the job advertisement. This processing is based on our legitimate interest in continuously improving our services (Art. 6 para. 1 lit. f GDPR). According to the current state of the art, re-identification of the data subjects is excluded.

VI. Provision of your data and duration of data storage

Providing your personal data is neither contractually nor legally required. However, if you wish to apply for a job with us, we require some of the personal data requested in the application form. Without this information, we will not be able to assess your application and/or contact you.

We may also process your personal data if this is necessary to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR), or if processing is necessary for the establishment, exercise or defence of legal claims (Art. 6 para. 1 lit. f GDPR. One legitimate interest is for example the burden of proof in proceedings under the German General Equal Treatment Act (AGG). Further information on the individual procedures can be found in this data protection notice.

Once the application process is complete, your documents are usually deleted after a certain period of time. This period varies internationally due to different legal requirements, ranging from immediate deletion to a maximum retention period of five years. Usually, it is six months, as in Germany. Deletion is always subject to the provision that it does not conflict with any law or legitimate interests, for example ongoing legal proceedings. If you have any questions about the procedure in a specific country, please contact the specified contact person for that country, the person advertising the job or our data protection officer at datenschutz@miele.de.

We generally reject unsolicited applications, i.e. applications that do not refer to an advertised position. If this happens, we will not accept the application and will delete it upon receipt.

The log files of our career website visitors are deleted after 7 days , unless there is a suspicion of misuse of our service or a cyber attack that justifies further storage until the matter has been finally clarified.

You can request the deletion of your application at any time, even before the specified retention periods have expired. We will grant this request unless there are any legally relevant reasons to the contrary (e.g. legal deadlines or our overriding legitimate interest).

If your application is successful, the transmitted data will be stored for the purpose of processing your employment in compliance with legal requirements.

VII.Recipients of the data

The controlling Miele company will only share your personal data with the necessary departments and individuals to fulfil contractual and legal obligations, or to pursue legitimate interests.

For our career portal, application procedures and HR systems, we sometimes use service providers acting on our behalf (data processor, Art. 28 GDPR). If these service providers act independently within our sphere of interest, we will make this clear at the appropriate place.

We may transfer data to the following categories of recipients (in addition to the third parties already explicitly named in this privacy policy):

• External consultants (e.g. lawyers, tax consultants and auditors);

• Service providers and vicarious agents (e.g. IT service providers);

• Companies in the Miele Group (https://www.miele.com/de/com/standorte-2090.htm);

• insurance companies;

Authorities and state institutions.

We only transfer your personal data to third parties if it is necessary to fulfil the contract, if we or the third party have a legitimate interest in processing your personal data, or if you have consented to the data transfer. We will also transfer your personal data if we are required to do so by law or by an official or court order.

VIII. Place of data processing

Unless this data protection notice expressly states otherwise, your personal data will be stored on servers within the territory of the European Union. However, it is possible that your data may be processed outside the European Union, for example, if you apply to one of our companies based in a non-European country. In these cases, we take all necessary measures to protect your data in accordance with Art. 44 and following GDPR, to protect your data.

IX. Your rights as a data subject

With regard to your personal data, you have the following rights vis-à-vis the controlling Miele company:

• Right to access (Art. 15 GDPR).

• Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR).

• Right to restriction of processing (Art. 18 GDPR).

• Right to data portability (Art. 20 GDPR).

• Right to object to processing (Art. 21 GDPR).

To assert these rights, please contact the relevant Miele company and state your request. You can find the contact details in sections III and IV.


Your right of appeal

If you are of the opinion that data processing violates data protection law, you can contact our data protection officer at datenschutz@miele.de at any time. You also have the right to lodge a complaint with a data protection supervisory authority of your choice (Art. 77 GDPR).


Your right of objection

If your personal data is processed on the basis of legitimate interests, as set out in Article 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR. Provided that there are reasons arising from your particular situation for this objection and Miele cannot demonstrate compelling legitimate grounds for the processing, or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to specify a particular situation.

Please address your objection to the controlling Miele company, stating your request. To do so, please use the contact details provided in sections III and IV.

Data Protection Statement - China

Before submitting any job application and your personal information, please read this Data Privacy Statement. You acknowledge and agree that information you enter during the application process will be transferred outside the People’s Republic of China and collected and processed by Miele in accordance with the Data Privacy Statement, and the respective Miele entity which advertised the job offer you are applying for.

Miele does not intend to collect or process any Sensitive Personal Information for the job application. Sensitive Personal Information refers to the personal information that, once leaked or illegally used, would easily cause harm to the personal dignity or endanger the personal and property safety of natural persons, including information relating to biometrics identification, religious beliefs, special identities, medical health, financial accounts, whereabouts and personal information of minors under the age of fourteen. For the avoidance of any doubt, Sensitive Personal Information regarding special identities including but not limited to the identity of a criminal, the identity of a person with a disability, specific working experience (e.g. military, police) and identity card numbers. Please refrain from uploading such information in our platform.

Cookies

Cookie Notice

Miele & Cie. KG ("Miele") uses so-called cookies on this website. In this Cookie Notice we explain in detail what types of cookies Miele uses, what data is processed by them, cookie lifespan and your rights in relation to cookies.

1. General Explanation

Cookies are small text files that are stored on your computer or end device when you use our websites. When you visit the Miele website, a cookie may be stored on your system. This contains an individual string of characters that can be used to identify your browser the next time you visit the website. There are two basic types of cookies:

  • Temporary cookies: These cookies, also called session cookies, are temporarily stored on your computer or terminal device during your visit to our website and then deleted.
  • Persistent cookies: These cookies remain on your computer for a longer period of time.
     

In general, Miele uses various Internet technologies (e.g. cookies, Java-Script) to make it easier for you to use the Miele Internet applications and to optimize them. This means, e.g. that they are used to remind us of your chosen language during the session, so that you can navigate our pages more easily.

Please note that Miele needs you to express your preferences regarding the use of cookies, on its own interface, but by changing the cookie settings of your Internet browser, you can also deactivate or restrict the transmission of cookies. You can delete already stored cookies at any time. Further browser specific information on how to delete cookies can be found here:

Please note, however, that if you deactivate cookies, you may no longer be able to use all the functions of the website. In the menu of most browsers you will find setting options for the use of cookies. Typically, a browser has the following setting options:

  • View cookies,
  • Allow cookies,
  • Disable all or certain cookies,
  • Disable all cookies when closing the browser,
  • Blocking cookies,
  • Notify when a cookie is to be set,
  • Objection to tracking web analysis (opt-out).
     

When you visit our website, a banner informs you about the use of cookies.

2. Technically necessary cookies (essential cookies)

Essential cookies are required for navigation of the websites and for the use of their functions, such as access to the registration part of the website or the use of our chat tool. Without these cookies certain functions of the website are not possible.

The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR. The data collected by technically necessary cookies is not used to create user profiles.

Essential cookies cannot be deactivated. The essential cookies we use are generally so-called session cookies, which are generally automatically deleted after the browser session has ended.

Cookie

Cookie Host

Description

Lifespan

PLAY_LANG,

Miele

Session experience– user, device, and session ID cookies along with timestamp cookies for timing out sessions after inactivity. These cookies expire at the end of the session.

 

Session

PLAY_SESSION,

timezoneOffset,

wd-browser-id

TS

Miele

Security Management - Helps prevent cyber attacks on the user’s interactions with the enterprise cloud applications. Verifies that the domain and subdomain cookies sent between the web server and the client aren’t altered.

 

Session

CALYPSO_CSRF_TOKEN

Miele

Security Management - Contains a CSRF token to prevent cross-site request forgery attacks, that is, to prevent a user from carrying out unintended operations on the career site

 

Session

__cf_bm

Miele

Security Management - To identify and mitigate automated traffic to protect the Platform from malicious bots.

 

After 30 mins of inactivity

 

__cfuvid

Workday

Security Management - To apply rate-limiting rules to traffic from a particular source and prevent denial of service attacks.

 

When session ends or browser window is closed.

 

__cflb

Workday

Load balancing - To ensure that requests for a single session are handled from the same server.

Session cookie which can last from several seconds to 24 hours

 

Namenskonvention von WorkdayLB_

Miele

 

Load balancing - to forward requests for a single session to the same server for consistency of service. 

 

Session

 

WorkdayLB_UICLIENT,

WorkdayLB_SAS

 

3. Changes to this Cookie Notice

We may change this Cookie Notice from time to time to reflect changes to the cookies we use or for other operational, legal or regulatory reasons.

4. To get further information

If you have any questions or comments about this Cookie Notice, contact us at datenschutz@miele.de.