1. General Policies

In principle, we only collect and use your personal data to the extent that this is necessary for providing our website, app, or communication media. Personal data will generally only be collected or used for other purposes

  • with the consent of the user (Art. 6, para. 1, letter a of the GDPR)
  • if the data are processed for the purpose of fulfilling a contract (Art. 6, para. 1, letter b of the GDPR) or
  • in order to safeguard legitimate interests (Art. 6, para 1, letter f of the GDPR).

2. The treatment of data when accessing the website and the app

You can use our website without entering direct personal information (such as your name, postal address or email address). Even in this case, we have to collect and save certain information in order to enable your access to our website.

You can only use our app as a Miles & More member after entering the requested identification details (e.g. Miles & More card number and PIN or a user ID and password), or to register for the Miles & More programme.

Both for our website and our app we implement analysis procedures, and on our website we have integrated additional functionalities to include social networks. The following points explain the analysis procedures and integration.

2.1 Logfiles

When you visit our websites, our internet server automatically recognises the domain name or the IP address of the computer making the request, as well as the access data, the client file request (file name and URL), the HTTP response code, the website from which you are visiting us, and the number of bytes transferred during the session. This data is deleted as soon as you leave our website. We save your IP address for a seven day period for legitimate purposes permitted by law, in particular to detect misuse and to identify and eliminate technical malfunctions.

2.2 Cookies / Web Beacons

As many renowned companies do, we use so-called cookies and web beacons to ensure that our service is as userfriendly as possible.

A “cookie” is a small text file which a webserver (for example the www.miles-and-more.com webserver) sends to your browser when you visit a website. So-called “session cookies” expire at the end of the browser session and can capture your activities during the browser session. In contrast to these, there are “permanent cook-ies” which are saved on your terminal and these are able to capture your settings or activities on multiple websites.

Besides so-called “session cookies” which are deleted when you end your browser session, we put in place permanent cookies for the purposes of analysis by Adobe Analytics, the web analysis with Webtrends and app analysis with Google Analytics (see the explanation below under para. 1.3–1.6), which are stored until deleted by the user.

It depends on your browser’s settings as to whether the cookie file is stored or deleted. If the file is stored, our webserver can recognise your terminal. Next time you visit the site or when you switch between functions requiring you to enter a pass-word, the cookie can save you reinputting information. This is how cookies make it easier for you to use websites requiring user input. Additionally, cookies can help us offer you the most personalised, optimised surfing experience, as long as you give us permission to do so.

Regardless of saved cookies, for security reasons you must log in every time you enter the parts of our website where registration is required. Miles redemption also requires the prior entry of a password.

No personal data is saved in the cookies used by us: This is because these cookies are only allocated an identification number which we will not join with other data which may be available to us (possibly due to a registration) without your permission.

You can set up your browser to accept our cookies or use our website without any cookie functionality. However, in the latter case your text inputs in form fields for other requests will not be saved, so next time you visit our website you will be re-quired to input the information again. This also means that unfortunately we cannot present you with any content that is tailor-made for you.

It could be that your browser is also already set up to display an alert every time it accepts a cookie. This alert can be very annoying, as every single time a page is called up on our website, the identification cookie has to be sent again. Hence we recommend that you set up your browser to always allow cookies from www.miles-and-more.com. You can specify this setting for single websites on an individual basis.

You can find more information about the use of cookies and how to deactivate cookies at www.meine-cookies.org or www.youronlinechoices.com.

Web beacons are small graphic files (also known as “pixel tags” or “clear GIFs”) which may be contained in our websites, apps, applications and newsletters and are normally installed in conjunction with cookies to identify users and/or user behaviour. All of the above mentioned information about cookies applies also to web beacons. So web beacons will not be installed if you have refused the use of the respective cookies.

2.3 Analysis with Adobe Analytics

Adobe Analytics is installed on our website, in our app and our communication media. This is a web analysis service from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”).

Adobe Analytics uses cookies, especially 2o7.net and omtrdc.net belonging to the Adobe domain. Adobe Analytics also installs so-called Clear GIFs (also called “web beacons” or “tracking pixels”): A Clear GIF is a transparent graphic (usually 1 pixel x 1 pixel) set on digital content and its request is detected by the visitor. Using a Clear GIF enables us to measure the activities of a visitor when (s)he opens a website, app or communication medium with the Clear GIF.

With Adobe Analytics your IP address is shortened, thus making it anonymous, and it is used only in this anonymised form.

Information acquired by the use of a cookie or a Clear GIF will only be transferred to Adobe’s computing centre located in a European Union member state or in other states which are party to the Agreement on the European Economic Area. Adobe uses this information solely on our behalf and only for the purposes set out above.

If you do not wish to allow the collection and usage of such information by Adobe Analytics using cookies you can decline it here. In the case of the use of our app, you can prevent this collection by deactivating the button at the end of the data protection provision. Then a corresponding opt-out cookie is installed on your device which contains no tracking data; instead it enables us to recognise your objection and not to allow any more data sharing with the Adobe server for tracking purposes.

In addition, you can generally set up your internet browser to not accept any cookies and by doing so prevent data collection by Adobe Analytics. The same applies to the “do not track” function or the deactivation of graphics displays for Clear GIFs. Please make sure you are clear about the steps required to carry this out by reading the instructions for your own internet browser, as the relevant settings vary according to each browser supplier.

You can find more information about Adobe Analytics and data protection at Adobe at
www.adobe.com/privacy.html.

2.4 Web analysis with Webtrends

Our website uses Webtrends Analytics, a web analysis service from Webtrends EMEA Acquisition Ltd. / Webtrends Inc., 851 SW 6th Ave., Suite 1600, Portland, Or-egon 97206, USA (“Webtrends”). Webtrends Analytics uses so-called “cookies”, text files which are saved on your computer, and they make it possible to carry out an analysis of the website’s usage.

Information generated by cookies about your usage of the website is generally trans-ferred to a Webtrends server in the USA and is stored there.

Webtrends will use this information on our behalf to evaluate your usage of the web-site in order to compile reports about the website activities and to provide us with services associated with the usage of the website and the internet. Where appropriate, information will be transferred to a third party insofar as it is prescribed by law, or third parties may process this data on our behalf. Access data will be stored anonymously so that no association can be made with any visitors. This is done in particular by anonymising the IP address.

You can prevent cookies being installed by a corresponding setting in your browser software; however we must notify you that in this case it is possible that you will not be able to use all the functions of the website in full.

You can refuse data collection and storing at any time with future effect using the following opt-out link: www.ondemand.webtrends.com/support/optout.asp.

2.5 App analysis with Google Analytics

Our app uses Google Analytics, an analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google Analytics”).

Google Analytics uses cookies which are stored on your mobile device and used to enable them to analyse the usage of the app. Information generated by the cookie about your usage of this app is generally transferred to a Google server in the USA and is stored there. For our app, Google Analytics is used in such a way that your IP address is collected anonymously (so-called “IP masking”). Because of this, your IP address is shortened within the member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional circumstances will the complete IP address be transferred to a Google server in the USA and shortened there. Google will use this information on our behalf to evaluate your usage of the app in order to compile reports about the activities in the app and to provide further services for us associated with the use of the app. The IP address of your browser conveyed in the context of Google Analytics will not be joined with other Google data.

You can prevent the storage of cookies in the specific settings of your mobile device / our app. However we notify you that in this case it is possible that you will not be able to make use of all functions of this app in full.

Furthermore, you can prevent the capture of data by Google relating to your use of the app generated by the cookie (including your IP address), as well as the processing of this data, by deactivating the button at the end of the data protection in-formation in the app.

More information about conditions of use and data protection with Google Analytics can be found at: www.google.com/analytics/terms/de.html or at www.google.de/intl/de/policies/

2.6 Google Remarketing

We use the remarketing technology of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). This technology allows us to reach out to users who have already visited our website and shown an interest in our offers by placing targeted ads on the pages of the Google Partner network. Cookies are used to display these ads. With the help of these cookies, the user’s behaviour upon visiting the website can be analysed and then used for targeted product recommendations and interest-based advertising.

If you do not wish to receive interest-based ads, you can deactivate Google’s use of cookies for these purposes by visiting www.google.com/settings/ads. Alternatively, you can deactivate the use of cookies for interest-related advertising via the Network Advertising Initiative, by following the instructions provided at www.networkadvertising.org/managing/opt_out.asp.

By using our online services, you agree that Google may process the data collected about you in the manner described here and for the purpose specified above. Please note that Google has its own data privacy policies, which are independent from our own. We do not assume any responsibility or liability for these policies and procedures.

2.7 The integration of social networks

On our website and in our app we can integrate functionalities relating to social networks (such as Facebook or Twitter).

We currently use links to offers from Miles & More in social networks. Both our website and our app can be accessed and used without these links. If you use these ad-ditional functionalities, please be aware of the following policy about the treatment of personal data:

By linking our website to one of our offers in social networks, e.g. on our Facebook page, our YouTube channel or our Twitter account, this refers to simple links to the pages of current social networks. By the use of such links, we do not share any per-sonal information to the providers of these social networks.

However, we wish to point out to you that these providers essentially have the possibility of recognising the provenance of a visit. We have no influence over how data processing is carried out by the provider, and this data protection policy does not extend to the offers of this provider. Further information can generally be found in the respective providers’ data protection policies.

2.8. Location

If you allow the app to access your location, you are permitting the app to access your mobile device's location services. Your device's location services use information from the mobile, Wi-Fi and GPS networks and/or iBeacons in order to determine your approximate location.

The app must have your permission to access your device's location services so that the app can provide you with site-specific features, such as viewing offers in your area. If you do not allow access, the location-based display of content will be restricted.

Configuration on smartphones with an iOS operating system (Apple iPhone and iPad):
You can also enable or disable location device services in the iOS settings in the future. To do so, open the iOS "Settings" app, select the "Privacy" menu item and the "Location Services" sub-item. The following menu lists all the apps installed on your device that have location-based features. Select the Miles & More app. In the following menu, you can select whether access to the site shall always be permitted or always be blocked.

Configuration on smartphones with Android operating systems (various manufacturers such as Samsung, HTC, Sony, LG):
With an Android operating system, the app is allowed to access your mobile device's location services by default. This cannot be avoided due to Google's technical specifications, over which we have no influence.

The app will not use this feature without your consent. The app will only allow access to location services if you explicitly allow access in the app. The app will prompt you to allow access after you register or log in. The app will only access location services if you answer the prompt with "Allow".

You can also enable or disable location device services in the Android settings in the future. To do so, open the "Settings" app in your device's main menu and select the "Location Services" menu item. You can enable or disable access to location services In the following menu for all installed apps. Unfortunately, Android currently does not enable the separate configuration of location services for each app.

3. The handling of data when using the website and the app

3.1 Functionalities for Miles & More members

On our website and in our app we make available a variety of functionalities which require personal data or other information to be collected. These functionalities can only be accessed, for example for Miles & More members, after logging in with your identification details (e.g. a Miles & More card number and PIN or a user ID and password).

As a Miles & More member you can access your customer profile via our website and our app. Here you have the possibility inter alia to look at your mileage account, request specific awards, and modify or amend specific master data (as described in the Miles & More programme data protection policy).

Where the use of functionalities requires you to provide more personal information, this will be identified on our website or in our app. Mandatory information is specifically identified; if mandatory information is not provided, the use of the particular functionality will not be possible.

3.2 Other functionalities

On our website or in our app, we can offer you functionalities which can be used as a Miles & More member without a login, but nonetheless personal details or other in-formation must be collected for these functionalities, e.g. if you take part in a survey on this website or you have a question or feedback for us. We will collect, process and use such data and information without your complete permission solely to the extent required for the respective functionality (e.g. to respond to your questions or to process your feedback).

3.3 References and data collection on third party websites

You can reach third party websites via links from our website which are not operated by us. For example, these may be the websites of partner companies where you can earn miles or where special offers are made available for Miles & More members. We have no influence on the collection, processing and use of your personal data on such third party websites; this is dealt with by the relevant website provider. Therefore please read the conditions of use and data protection information on these websites in order to get more precise information about the collection, processing and use of (personal) information on these websites.

4. Miles & More Programme Privacy Policy

Additional information on how your data are handled in the Miles & More programme and, in particular, regarding your rights, consent, and options for contacting us can be found at www.miles-and-more.com/privacy-statement.

5. Updating

We check these data protection policies regularly and we will update these as necessary. Where there are significant changes made to these data protection policies, we will inform you (for example on our website or in our app).