Privacy policy

This policy covers the website mileengine.com, the «Werkstatt-Cockpit» app and the subscription. It follows the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (revFADP).

1. Controller

OnlineBuilders LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States
Email: [email protected]

Representative in the EU (Art. 27 GDPR): [name, address – to be appointed]
Representative in Switzerland (Art. 14 revFADP): [name, address – to be appointed]

2. In brief

• The website sets no cookies and uses no analytics or advertising services.
• Fonts and all files are served from our own server, not from third parties.
• App data is stored on servers in Germany.
• We do not sell data or pass it on for advertising.

3. Hosting and server logs

The website, the app server and the database run at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, in data centres in Germany. When you visit the website, the server briefly stores IP address, date and time, requested address, referrer and browser identifier. The purpose is secure operation (troubleshooting, defending against attacks). The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Logs are deleted after 14 days.

4. Cloudflare

For DNS, encrypted connections, protection against overload attacks and forwarding emails to [email protected] we use Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Connection data (in particular IP addresses) is processed, including in the USA. Cloudflare is certified under the EU-US Data Privacy Framework; standard contractual clauses also apply. Legal basis: Art. 6(1)(f) GDPR.

5. Demo, contact and trial forms

When you send a form, we process your name, company, email address and, if provided, phone number, company size and message. We only use this information to answer your request, arrange a demo or set up a trial account. The legal basis is taking steps prior to entering into a contract (Art. 6(1)(b) GDPR). If no contract follows, we delete the data after 12 months at the latest.

To prevent automated abuse we check a field that is invisible to humans and the time between loading and sending. No additional data is stored for this.

6. Email

Cloudflare forwards incoming emails to [email protected] to our mailbox. System emails of the app (for example invitations or password resets) are sent via Mailgun Technologies, Inc., 112 E Pecan St. #1135, San Antonio, TX 78205, USA, processed in the EU region. Recipient address, content and delivery status are processed.

7. App and subscription

What workshops record in the app (orders, work cards, sign-offs, clock times, photos, qualifications) we process as a processor on behalf of the respective workshop. The workshop is then the controller; the data processing agreement (DPA) applies.

We are the controller for the customer account itself (company, contacts, billing address, plan, payment status). The legal basis is performance of the contract (Art. 6(1)(b) GDPR) and statutory retention obligations (Art. 6(1)(c) GDPR).

Payments are handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin 2, Ireland. Only Stripe receives card data, not us. Stripe may transfer data to Stripe, Inc. in the USA (Data Privacy Framework, standard contractual clauses).

At start-up and during operation the app asks our update server for new versions. IP address, app version and operating system are transmitted and logged for 14 days.

For error monitoring we use GlitchTip, self-hosted on our servers in Germany. Error reports contain technical information about the device and the situation, no content from work cards. They are deleted after 30 days.

8. Transfers to third countries

OnlineBuilders LLC is based in the USA. Data is stored in Germany; where staff of OnlineBuilders LLC access it from the USA (for example for support), this is based on the European Commission's standard contractual clauses with the Swiss amendments. [Check Data Privacy Framework certification.]

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection. You can withdraw consent at any time. Write to [email protected]. You can also lodge a complaint with a data protection supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC).

10. Security

Connections are encrypted with TLS. Data of different workshops is technically separated in the database. Server access is protected by two-factor authentication, backups are encrypted. Details are in the annex to the DPA.

11. Changes

We update this policy when our processing changes. The version published here applies.