We, Porsche Deutschland GmbH (hereinafter 'we' or 'Porsche Deutschland'), appreciate your visit to our website and your interest in our company and our products. Your privacy is extremely important to us. We therefore take the protection of your personal details very seriously, and treat them in the strictest confidence. Your personal data is processed only within the scope of the legal provisions of the data protection law, in particular the EU General Data Protection Regulation (hereinafter 'GDPR').
In this privacy policy we provide you with information about the processing of your personal data and your rights as a data subject within the scope of the use of our website. For information on other products and services offered by other companies in the Porsche Group, please consult the respective privacy policy for these services or Porsche companies.
If we provide a link to this privacy policy from external social media sites, the following conditions only apply insofar as the data processing activities carried out on such social media sites actually lie within our area of responsibility and that no more specific and therefore overriding information regarding data protection is provided as part of such social media sites.
1. Controller and data protection officer for data processing; contact
Controller for data processing within the meaning of the data protection legislation is:
Porsche Deutschland GmbH
Porschestraße 1
74321 Bietigheim-Bissingen
Germany
Please do not hesitate to contact us if you have any questions or suggestions relating to data protection.
The contact details for our data protection officers are as follows:
Porsche Deutschland GmbH
Data Protection Officer
Porschestraße 1
74321 Bietigheim-Bissingen
Germany
Contact: https://www.porsche.com/germany/privacy/contact/
2. Subject matter of data protection
The subject matter of data protection is personal data. This is all the information that relates to an identified or identifiable natural person (known in the legislation as the data subject). This covers, for example, information such as name, postal address, e-mail address or telephone number, as well as information that necessarily originates during the use of our website such as details about the start, end and scope of use, and the communication of your IP address.
3. Type, scope, purposes of, and legal basis for automated data processing
In general, it is possible to use our website without registering. Even if you use our website without registering, personal data can still be processed.
An overview of the type, scope, purposes of, and legal basis for automated data processing via our website is provided below.
3.1 Provision of our website
When you access our website using your device, we automatically process the following data:
We process this data on the basis of Article 6 (1) (f) of the GDPR to provide the website, to ensure the technical operation, and to identify and rectify any faults. In this way, we pursue the interest of facilitating and ensuring the long-term use of our website and its technical functionality. When our website is accessed, this data is automatically processed. You cannot use our website unless this data is provided. We do not use this data for the purpose of drawing conclusions about you or your identity.
3.2 Cookies
When you visit our website, 'cookies', which are small files, may be stored on your device in order to provide you with a comprehensive scope of functions, make it easier to use our service, and optimise our offers.
The use of technically required cookies is necessary to ensure the proper and secure operation of our website and its functionalities and to make our website available as a whole. These cookies are set, for example, to
The data processing by means of the technically required cookies used takes place - if a corresponding contractual relationship is based - on the basis of Article 6 (1) (b) of the GDPR or on the basis of Article 6 (1) (b) GDPR - if necessary to fulfill a legal obligation - and otherwise based on our legitimate interest in accordance with Article 6 (1) (f) GDPR. Our legitimate interest arises from the stated purposes of use of the respective cookie as well as ensuring the technical operation of our website with certain basic functionalities. These cookies are set automatically when you visit our website or when you access a certain function, unless you have prevented the setting of cookies through settings in your device and / or internet browser.
If you do not wish to allow the use of cookies, you can prevent them from being stored on your device by configuring the relevant settings in your internet browser or using the specific opt-out options. Please note that the functionality and functional scope of our service could be restricted as a result. For details on the type, scope, purposes of, legal basis for, and opt-out options for data processing in relation to cookies, please refer to our Cookie Policy.
4. Individual services and functionalities
You can voluntarily enter personal data in several places on our website and register by creating an individual profile. This information is required, for example, when registering to participate in an event. Not providing this personal data may make participation impossible or only possible to a limited extent.
4.1 Registration process
The input fields for mandatory information required for registration are marked with an ‘*’. This usually includes the following details at least: salutation, first name, last name, postal address and e-mail address. It is not possible to register without these details.
4.2 Registering for events
When registering for events, depending on the type of event, further mandatory information may be required. These input fields are also marked with an ‘*’. This may include details from a driving licence or identity document as proof of legal age or permission to drive a vehicle. In addition, you also have the option - depending on the type of event - to voluntarily provide further details, such as information about accompanying persons, dietary requirements or clothing size.
If you provide us with health data or any other sensitive data (e.g. information about allergies, intolerances, religious dietary restrictions), this is done voluntarily. You thereby give your consent for this data to be processed by us for the purposes of planning and carrying out the event. This data shall be provided by us to external service providers such as event partners and/or catering companies solely for this purpose and for this event. You may withdraw this consent at any time with effect for the future. For further information, please refer to our privacy policy.
Please note that this information is not required for participation in an event and you alone decide whether you wish to share this data with us. However, if you do not provide this data, we may not be able to ensure that our services meet your needs as fully as they can.
The data collected during processing under Clauses 4.1 and 4.2 will be processed by us on the basis of Article 6 (1) (b) and (f) of the GDPR and Sections 14 (1) and 15 (1) of the German Telemedia Act (TMG), in order to set up your profile for the relevant event and to provide you with the desired services in this respect.
We generally delete this data after 12 months, unless we need it for longer in exceptional cases for the aforementioned purposes. In such a case, we will delete the data as soon as it is no longer needed.
4.3 Other contact
If you share personal data with us by e-mail or through a contact form, this is always done on a voluntary basis. Your details will be processed by us in order to handle your contact enquiry in accordance with Article 6 (1) (b) or (f) of the GDPR, and, if necessary, forwarded to third parties (e.g. Porsche Dealerships or external service providers) in this context.
We will carry out all of the processing steps described in this section - unless otherwise stipulated - either on the basis of your consent, in order to fulfil our contract with you or on the basis of our legitimate interests.
5. Safeguarding legitimate interests
We will process your personal data in a way that safeguards our legitimate interests. In addition to the interests specified as part of the description of individual services and offers under Clause 4, any data processing activities carried out as part of our website or after successful registration, in particular, will take account of the following interests:
Any data processing in this respect is carried out on the basis of Article 6 (1) (f) of the GDPR.
6. Consent
If you give your consent for certain data processing activities, this will always be for a specific purpose; the purposes are covered by the contents of each specific declaration of consent. In this case, the data processing is carried out on the basis of Article 6 (1) (a) of the GDPR. If consent is not given, we will be unable to fulfil the request covered by the consent. You may withdraw your consent at any time without affecting the lawfulness of the processing of your data until the time that consent is withdrawn.
On the basis of any consent you may have given, the companies listed in the declaration of consent may use the data for appropriate purposes, e.g. to provide individual support to existing and prospective customers, and to contact you via your chosen communication channels. Your data will be used by us in this context to offer you an exhilarating brand and support experience with Porsche and to make the communication and interaction with you as personal and relevant as possible.
Which of your data is used specifically for individual support depends, in particular, on which data you have provided at the respective points of contact (e.g. via this website or at the event location). The scope and intended use of the consent you have given is taken specifically from the wording of the declaration of consent at the point of contact.
7. Recipients of personal data
Internal recipients: within Porsche Deutschland the only people who have access are those who need it for the aforementioned purposes.
External recipients: we only forward your personal data to external recipients outside Porsche Deutschland if this is necessary for the administering or processing of your request, if another legal authorisation exists, or if we have your consent to forward the data.
External recipients can be:
a) Processors
Dr. Ing. h.c. F. Porsche AG or its group of companies or external contractors that we use to provide services, for example in the areas of technical infrastructure and maintenance for the Porsche Deutschland offers or the provision of content. We carefully select and regularly inspect these contractors to make sure that your privacy is protected. The contractors may use the data only for the purposes we have specified and in accordance with our instructions.
b) Public bodies
Authorities and public institutions, such as public prosecutors, courts, or financial authorities to which we must transfer personal data for compelling legitimate reasons. The data is transferred on the basis of Article 6 (1) (c) of the GDPR.
c) Private bodies
Porsche dealers and service outlets, cooperation partners, service providers or people to whom the data is transferred on the basis of consent, to implement a contract with you or to safeguard legitimate interests, for example Porsche Dealerships and Porsche Service Centres, financing banks, providers of other services or transport service providers. The data is transferred on the basis of Article 6 (1) (a), (b) and/or (f) of the GDPR.
8. Data processing in third countries
If data is transferred to bodies whose headquarters or whose place of data processing is not located in a member state of the European Union or in another country outside of the European Union who is a signatory to the treaty, we ensure before forwarding the data that, outside of legally permitted exceptional cases pertaining to the recipient, either an appropriate level of data protection exists (e.g., through an adequacy decision of the European Commission, through suitable guarantees such as self-certification by the recipient for the EU-US Privacy Shield, or the agreement of Standard Contractual Clauses between the European Union and the recipient) or if you give your consent for the transfer of the data.
We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. To obtain these, please contact the address specified in Clause 1.
9. Duration of storage and deletion
For information on the duration of storage for personal data, please refer to the relevant section on data processing relating to certain services and functions in Clauses 3 and 4.
In addition, as a general rule, we store your personal data only for the length of time necessary to fulfil the intended purposes, or - in the case of consent - until you withdraw your consent. If you submit an objection to the processing, we delete your personal data, unless its further processing is permitted according to the relevant legal provisions. We also delete your personal data if we are obliged to do so for other legal reasons.
In accordance with these general principles, we generally delete your personal data immediately
10. Rights of data subjects
As the data subject affected by the data processing, you have several rights. Specifically,
Right of access: you have the right to obtain information from us about the data that we have stored about you.
Right of rectification and erasure: you have the right to demand that we rectify incorrect data and - provided the legal requirements are met - that we delete your data.
Restriction of processing: you have the right - provided the legal requirements are met - to demand that we restrict the processing of your data.
Data portability: if you have provided us with data on the basis of a contract or consent, you have the right, in accordance with the legal requirements, to obtain the data you have provided in a structured, standard, and machine-readable format or you can demand that we transfer this data to another controller.
Objection to the processing of data on the legal basis of 'legitimate interests': you have the right to object at any time, on grounds relating to your particular situation, to our processing of your data, provided this objection is based on the legal basis of ‘legitimate interests’. If you exercise your right to object, we will cease the processing of your data unless we can - pursuant to the legal requirements - provide compelling legitimate reasons for the further processing, which override your rights.
Withdrawal of consent: if you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected up until the time of the withdrawal of consent.
Objection to cookies: you can also object to the use of cookies at any time. For details on how to object, please refer to our Cookie Policy.
Right to lodge a complaint with a supervisory authority: you can also submit a complaint to the relevant supervisory authority if you believe that the processing of your data is in breach of the legislation. To do so, you can contact the data protection authority that is responsible for your town/city or country or the data protection authority that is responsible for us.
Contacting us: in addition, you may contact us free of charge if you have any questions regarding the processing of your personal data, your rights as a data subject, and any consent that you may have given. To exercise all of these above-mentioned rights, please contact us by post at the address specified above in Clause 1. In doing so, please ensure that it is possible for us to clearly identify you.
11. Inclusion of third-party offers
Websites and services delivered by other providers that are linked to our website have been and are designed and provided by third parties. We do not have any influence over the design, content or role of these third-party services. We explicitly distance ourselves from all content in all linked third-party offers. Please note that the third-party offers linked to our website may install their own cookies on your device or collect personal data. We have no influence over this. Please contact the providers of these linked third-party offers as required for the relevant information.
12. Status
The latest version of this privacy policy applies.
Status: 01.01.2021
Scope of application
This cookie policy applies in addition to the general privacy policy for our website and describes the type, scope, purposes of, legal basis for, and opt-out options for data processing in relation to cookies. The general privacy policy for our website applies to all other information. Status: 01.01.2021.
What are cookies?
We use 'cookies' in order to provide you with a comprehensive scope of functions, make it easier to use our service, and optimise our offers. Cookies are small files, which are stored on your device by your internet browser.
Categories of cookies
We use cookies for different purposes and with different functions. We make a distinction according to whether the cookie is technically mandatory (technical requirement), how long it is stored for and used (duration of storage).
We use certain cookies because they are mandatory for our website and its functions to work properly. These cookies are set automatically when our website or a specific function is accessed, unless you have disabled cookies in your browser settings.
Duration of storage
Session cookies: most cookies are required only for the duration of your current request or session and are deleted or become invalid as soon as you exit our website or your current session expires. Session cookies are used, for example, to retain certain information such as your login for our website during your session.
Permanent cookies: cookies are occasionally stored over a longer period for the purposes of recognising you when you subsequently access our website again and retrieving saved settings. This makes it faster and easier for you to access our website and means that you do not have to repeat settings such as your selected language, for example. Permanent cookies are deleted automatically at the end of a predefined period when you visit the page or domain from which the cookie was set.
Deletion and objection to the use of cookies
The acceptance of cookies is not obligatory when using our website; if you would prefer not to have cookies saved on your device, you can disable the relevant option in the system settings of your browser. Saved cookies can be deleted at any time in the system settings of your browser. If you choose not to accept any cookies, this can, however, lead to restrictions in the functions offered on our website.
The following cookies may be stored when you call up our event management system:
| Name of cookie | Technical requirement | Duration of storage | Cookie provider | Purpose and interest | Legal basis |
|---|---|---|---|---|---|
| de.porsche.ag.peps.presentation.b2c | yes | Session cookie (end of session) | Dr. Ing. h.c. F. Porsche AG | This cookie is required for storing the user session and the login to the event management system. | Art. 6 (1) (b) GDPR |
| de.porsche.ag.peps.presentation.b2c.Language | yes | Permanent cookie (duration of storage: 10 days) | Dr. Ing. h.c. F. Porsche AG | This cookie stores the user’s decision in which language the presentation should take place. | Art. 6 (1) (b) GDPR |
| _RequestVerificationToken | yes | Session cookie (end of session) | Dr. Ing. h.c. F. Porsche AG | This cookie is used to prevent cross-site-request-forgery (CSRF) attempts | Art. 6 (1) (b) GDPR |