banner

Porsche Experience Website and Porsche Experience Events

We, Dr. Ing. h.c. F. Porsche AG (hereinafter “we” or “Porsche AG”), appreciate your interest in our online offer for Porsche Experience (hereinafter the “online offer”). We take the protection of your personal data very seriously. We process your personal data exclusively within the framework of the statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter “GDPR”). In this Privacy Policy, we provide you with information about the processing of your personal data and about your rights as a data subject within the framework of our online offer. For information on the processing of personal data in other areas, please refer to the relevant, specific privacy policy.

If we refer to this Privacy Policy from external social media profiles, the following explanations only apply insofar as the processing takes place within our area of responsibility and insofar as no more specific, and therefore overriding, information on data protection is provided as part of such social media profiles.

1. Controller and Data Protection Officer

Responsible for data processing in the sense of the data protection legislation is:

Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Germany
Phone: +49 (0) 711 911-0
Email: info@porsche.de

If you have any questions or suggestions regarding data protection, please contact us. You can contact our Data Protection Officer as follows:

Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Germany
Contact: https://www.porsche.com/privacy-contact/

With regard to data processing in the area of individual services and functions offered through our website and Porsche Experience events and described in more detail below, we are joint controllers together with the

SPORTTOTAL EVENT GmbH
Stammheimer Strasse 31
70435 Stuttgart, Germany
Phone: +49 (0) 711 911-23360
Email: info@porscheexperience.de

You can contact the Data Protection Officer of the above company as follows:

Tobias Erdmann
SICDATA – Business Consultants
Heiligenstock 34c
42651 Solingen
Phone: +49 (0) 212 659 850
Email: erdmann@sicdata.de
Website: www.sicdata.de

Therefore, we jointly determine the purposes and means of processing personal data for these areas with the other joint controller. The joint processes relate in particular to the provision of offers of information on various events as well as the creation of a uniform user profile and the booking of events whose tour operator within the meaning of the Package Travel Act is SPORTTOTAL Event GmbH. In an agreement on joint control pursuant to Article 26 of the GDPR, we have determined how the respective tasks and responsibilities for the processing of personal data are structured and who fulfills which obligations under data protection law. In particular, we have determined how an appropriate level of security, and your rights as a data subject, may be ensured, how we can jointly fulfill the information obligations under data protection law, and how we can monitor potential data protection incidents. This also includes ensuring that we can fulfill our reporting and notification obligations. If you contact us, we will coordinate our efforts in accordance with the aforementioned agreement in accordance with Article 26 of the GDPR in order to respond to your enquiry and to guarantee your rights as a data subject.

2. Object of data protection

The object of data protection is the protection of personal data. This is any information relating to an identified or identifiable natural person (a so-called data subject). This includes information such as name, postal address, email address or telephone number, but also other information that arises in the context of using our online offer, in particular information about the beginning, end and scope of use as well as the transmission of your IP address.

3. Purposes and legal basis of data processing

Below you will find an overview of the purposes and legal bases of data processing as part of our online offer. We process personal data in any case in accordance with legal requirements, even if in individual cases a different legal basis should be relevant than stated below.

The provision of personal data by you may be required by law or contract or may be necessary for the conclusion of a contract. We will inform you separately if you are obliged to provide personal data and what the possible consequences of not doing so might be (e.g. a loss of claims or our advice not to provide the requested service without the provision of certain information). Usage of our online offer is generally possible without registering. Use of individual services and functions may require prior registration. Even if you use our online offer without registering, personal data may still be processed.

3.1 Fulfilment of contractual and pre-contractual obligations

We process your personal data if this is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures that take place at your request. The data processing takes place on the basis of Article 6(1)(b) GDPR. The purposes of the processing include enabling the use of our specific products and services as part of our online offer. In this respect, please also note the descriptions of these products and services as part of our online offer. In this specific case, these are the following functions in particular:

3.1.1 Registration process and creation of a user profile

Mandatory information required for registration and creation of a user profile is marked with an “*” in the respective input field, and regularly includes at least the following information: salutation (title/gender), first and last name, address, email address and your preferred language of communication. Registration is not possible without providing the mandatory information. When creating a user profile, you have the option of providing additional information on a voluntary basis: additional name information. Please note that this information is not required for registration and you alone decide whether you wish to provide us with this data. If you do not provide this information, we may not be able to fully accommodate your requests when using this function. The data you provide will be used by us to create your user profile and subsequently identify you each time you log in. Depending on the service and function for which you are registering, further data e.g. a vehicle configuration selected by you, may be collected and subsequently linked to your profile data.

3.1.2 Use of the individual functions with registration/login

The functions within the scope of our website offer and Porsche Experience events as well as the personal data and purposes processed in each case are described below.

Booking an event

This function enables you to book various events (Travel Experience, Track Experience or Ice Experience) with SPORTTOTAL Event GmbH (tour operator). When using this function, the following categories of personal data are processed as mandatory data during registration, in addition to the data provided under subparagraph 3.1.1:

  • Salutation,
  • Address data (street, house number, postcode, city),
  • Date of birth,
  • Clothing size and weight (only when booking the Ice Experience event),
  • Telephone number,
  • If applicable, details of your own vehicle (e.g. manufacturer, model, number plate, photo of your vehicle),
  • IP address.

If, depending on the event in question, you would like to bring another participant or an accompanying person, it is necessary for you to provide the following categories of personal data for this person:

  • Salutation,
  • First name,
  • Surname,
  • Email address.

Without providing this data, participation in an event is not possible. When booking an event, you also have the option of providing further information on a voluntary basis:

  • Name of your company,
  • Your VAT identification number,
  • Further address details,
  • Driving licence number,
  • Identity card number,
  • Your comment,
  • Details of your desired accommodation e.g. double room (only for Ice and Travel Experience).

If you, depending on the event in question, wish to bring another participant or accompanying person, you can provide further categories of the other participant or accompanying person’s personal data on a voluntary basis:

  • Title,
  • Further name information.

These are details that are given voluntarily. However, if you do not provide this information, we may not be able to fully accommodate your requests when using this function.

In order to determine whether you require a visa for the event you have booked, the relevant country of origin and destination country will be transmitted to the provider passolution.de without any features identifying you. They will inform us on the basis of this information whether a visa is required.

Payment for the event is made by credit card via Adyen (Adyen N.V. German Branch, Friedrichstrasse 63, Mohrenstrasse 17 entrance, 10117 Berlin) or via PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg). For this purpose, you will always be forwarded to an external service’s secure website by means of a link. In this respect, the terms of use and data protection information of the corresponding service apply. In the case of PayPal, you can access these at https://www.paypal.com/de/webapps/mpp/ua/legalhub-full. In order to complete payment, you need to enter all the data required for payment there.

Profile management

This function allows you to manage your profile. To this end, you can change and add to the personal data you have entered as part of your registration and creation of your user profile at any time as well as deleting voluntary information. In addition, you can enter further information there on a voluntary basis. You can also view your previous participation in events, as well as your current bookings and invoices. You also have the option of entering a vehicle under the heading “My Garage”.

When using this function, the following categories of personal data, in particular, will be processed in addition to the data provided under subparagraph 3.1.1 during registration:

  • address data,
  • details of your profession,
  • a profile picture,
  • details of your vehicle,
  • a photo of your vehicle.

These are details that are given voluntarily. However, if you do not provide this information, we may not be able to fully accommodate your requests when using this function.

Expressing interest in an event

This function enables you to enter your name in a list of interested parties and to be informed as soon as new dates for further events are available online. When using this function, the following additional category of personal data is processed in addition to the data provided under subparagraph 3.1.1 during registration:

Your personal event interests

These are details that are given voluntarily. However, if you do not provide this information, we may not be able to fully accommodate your requests when using this function.

Voucher function

This function enables you to purchase a voucher. When using this function, no other categories of personal data are processed apart from the data provided under subparagraph 3.1.1 during registration. To pay for your voucher, you can use the same payment methods as when booking an event.

Digital check-in

This function allows you to check-in for an event either online before the event or on-site via iPad by means of a digital process (e.g. confirmation of your data). When using this function, no further categories of personal data are processed in addition to the data provided under subparagraph 3.1.1 when registering and booking an event.

3.1.3 Use of the individual functions without registration/login

The functions as part of our website offer and the personal data and purposes processed in each case are described below.

Contact form and other contact by email

This function allows you to contact us with questions or suggestions. You can either use a contact form or alternatively send an email. When using this function, the following categories of personal data are processed

  • Name,
  • Email address,
  • Telephone number,
  • Company,
  • Your individual message.

These are details that are given voluntarily. However, if you do not provide this information, we may not be able to fully accommodate your requests when using this function.

3.2 Compliance with legal obligations 

We process your personal data in order to comply with legal obligations to which we are subject. The data processing is based on Article 6(1)(c) GDPR. The obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law. The purposes of the processing result from the respective legal obligation; the processing usually serves the purpose of complying with state monitoring and information obligations.

3.3  Safeguarding legitimate interests

We and, where applicable, the joint controller also process your personal data to protect the legitimate interests of us or third parties, as long as your interests, requiring the protection of your personal data, are not overridden. This data processing is based on Article 6(1)(f) GDPR. Processing for legitimate interest is carried out for the following purposes or to protect the following interests.

  • Further development of products, services and support offers as well as other initiatives to manage business transactions and processes;
  • improvement of product quality and elimination of errors and malfunctions, including assisting in the analysis of vehicle data and customer feedback;
  • processing of data in a central prospective customer / customer care platform as well as upstream and downstream systems for customer loyalty and sales purposes;
  • needs analysis and customer segmentation e.g. calculation and evaluation of affinities, preferences and customer potential;
  • processing of non-contractual enquiries and concerns;
  • handling of warranty and goodwill cases;
  • risk management and coordination of recall campaigns;
  • credit assessment through data exchange with credit agencies (e.g. SCHUFA);
  • ensuring that we comply with legislation, preventing and protecting against breaches of the law (especially criminal offences), assertion of and defence against legal claims, internal and external compliance measures;
  • ensuring the availability, operation and security of technical systems as well as technical data management;
  • answering and evaluating contact requests and feedback.

When you access our online offer, data relating to your end device and your use of our online offer are processed and stored in a so-called log file. This concerns in particular technical data such as date and time of access, visit duration, type of end device, operating system used, functions used, amount of data sent, IP address, and referrer URL. We process this data to ensure the technical operation of our website and to determine and eliminate faults. In doing so, we pursue the interest of permanently ensuring technical functionality. We do not use this data for the purpose of drawing conclusions about your person.

When we send customer care emails to existing and prospective customers, we use standard market technologies such as tracking pixels or click-through links where relevant. This enables us to analyse which or how many emails have been sent, rejected and/or opened. The latter in particular is enabled by the use of tracking pixels. Measuring our email opening rate using tracking pixels, for instance, is not wholly possible if you have deactivated the displaying of images in your email software. In this case, you will not be able to view the email in its entirety. However, we can still see whether an email has been opened if you click on text or graphic links in the email. By using click-through links, we can analyse which links in our emails are clicked on and derive from that the interest in particular topics. This means that when you click on the corresponding link you will be directed to our separate analysis server prior to the target page being called up. Using these analytical results, we can send emails in a more relevant and targeted manner, or cease sending emails. If you would rather your data is not recorded and tracked in this way, please avoid clicking on text and graphic links in emails.

Users can post comments, images, videos, text, opinions, suggestions, or other user content on social media platforms using hashtags such as #PorscheExperience or #IceExperience and any other hashtags. Selected user content posted on other social media platforms may be published on our website. We process this data on the basis of our legitimate interest in advertising and optimising the Porsche Experience offer based on user-generated content from participants. If you wish to remove your user content after it has been published on our website, you can delete your original posting on the social media platform, which will also automatically delete your user content on our website. If you do not want a published post to be displayed on our website only, please send your deletion request to pe@porsche.de so that your user content can be deleted from our website.

3.5 Consent

We process your personal data on the basis of corresponding consent. The processing of data is based on Article 6(1)(a) GDPR. If you give us and, if applicable, the joint controller consent to certain data processing operations, this consent will always be for a specific purpose; the purposes of the processing will be determined in each case by the content of your declaration of consent. You can revoke the consent you have given at any time without affecting the lawfulness of the processing carried out on the basis of your consent before it was revoked.

Insofar as you have given your consent, the companies listed in the declaration of consent may use the data e.g. for the individual customer and prospective customer support, and contact you for these purposes via the communication channels you have requested. Your data will be used in this context to provide you with an inspiring brand and customer care experience with Porsche and to make communication and interaction with you as personal and relevant as possible. Which of your data is specifically used for individual customer / prospective customer support depends in particular on which data was collected on the basis of orders and consultations (e.g. when purchasing or servicing Porsche products) and which data (e.g. your personal interests) you provided at the respective contact points (e.g. in the Porsche Centre).

We send newsletters after corresponding registration i.e. with your consent. If the newsletter content is specifically described as part of the registration process, this is decisive for the scope of your consent. In addition, our newsletters contain information about our products, offers, promotions, and our company. The respective company named in the registration process is the controller for processing your data. Registration takes place by means of the so-called double opt-in procedure i.e. after you have registered, you will receive an email in which you are asked to confirm your registration in order to prevent the misuse of your email address. We log registrations for our newsletter in order to be able to prove the registration process and the consent contained therein in accordance with legal requirements. The logging of your registration and the processing of the data you entered during registration that is necessary for this is accordingly carried out on the basis of our legitimate interests pursuant to Article 6 (1) (f) GDPR. You can revoke your consent to receive our newsletter at any time e.g. by unsubscribing from our newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter.

In order to provide you with pictures and an impression of the events we offer, we publish photos and video recordings of past events as part of our website and, under certain circumstances, on-site. The publication of photos and/or video recordings only takes place with your consent. Your consent will be obtained on-site at the respective events. Please also note our data protection information at the respective event location.

3.5  Change of purpose

If we process your personal data for a purpose other than the one for which the data was collected, beyond a corresponding consent or a compelling legal basis, we take into account the compatibility of the original and the now pursued purpose, the type of personal data, the possible consequences of the further processing for you and the guarantees for the protection of your personal data in accordance with Article 6 (4) GDPR.

3.6  Profiling

We do not carry out any automated decision-making or profiling in accordance with Article 22 GDPR. Profiling is only carried out to protect our legitimate interests as described above.

4. Access authorisations in the end device

Insofar as functions of our online offer require the granting of authorisations to access your end device (e.g. access to location data or photos), the granting of these authorisations is voluntary. However, if you wish to use these corresponding functions, the granting of the corresponding authorisations is required, as otherwise you will not be able to use these functions. These authorisations remain active as long as you have not reset them in your end device by deactivating the respective setting.

5. Cookies and comparable technologies

As part of our online offer, we use cookies and comparable technologies that serve to communicate with your end device and to exchange stored information (hereinafter collectively referred to as “cookies”). These cookies primarily serve to make the functions of our online offer usable. General examples in which the use of cookies is technically necessary in this sense are the storage of a language selection, login data or a shopping or watch list. Accordingly, technically necessary cookies may be used by us to enable the processing described in subparagraph 3.1 and to ensure the proper and secure operation of our online offer. The data processing is then carried out on the basis of Article 6(1)(b) and (f) GDPR, as it is necessary to implement the functions you have selected or to safeguard our legitimate interest in the functionality of our online offer.

If we also use cookies to analyse the usage of our online offer and to target it to your interests and, where applicable, to provide you with interest-based content and advertisements, this will be done exclusively on the basis of your voluntary consent in accordance with Article 6 (1) (a) GDPR. You then have the option of making your corresponding settings via the consent management system as part of our online offer. You can revoke your consent at any time with effect for the future. Further detailed information on cookies and their functions, as well as on setting and revocation options, can be found directly in the corresponding sections of our consent management system. Please note that we basically only make the consent management system available as part of our online offer if cookies are to be used on a consent-based basis in addition to the technically necessary cookies mentioned above.

If you do not wish cookies to be used in general, you can also prevent them from being stored by making the appropriate settings on your end device. You can delete stored cookies at any time in the system settings of your end device. Please note that blocking certain types of cookies may impair the use of our online services.

6. Integrated third party services

Insofar as we integrate services of other providers as part of our online offer in order to provide you with certain content or functions (e.g. playing videos or route planning) and we process personal data in the process, this is done on the basis of Article 6 (1) (b) and (f) GDPR. This is because the data processing is then necessary to implement the functions you have selected or to protect our legitimate interest in an optimal range of functions of our online offer. Insofar as cookies are potentially used within the scope of these third-party services, the explanations under subparagraph 5 apply. Please also inform yourself about the respective provider’s Privacy Policy with regard to these third-party services.

Services of other providers that we integrate or to which we refer are provided by these respective third parties. As a basic principle, we have no influence on the content and function of these third-party services and are not responsible for the processing of your personal data by their providers, unless the third-party services are designed entirely on our behalf and then integrated by us under our own responsibility. Insofar as the integration of a third-party service leads to us establishing joint processes with its provider, we will determine with this provider in an agreement on joint responsibility pursuant to Article 26 GDPR how the respective tasks and responsibilities in the processing of personal data are structured and who fulfills which data protection obligations. Insofar as cookies are also to be set on the basis of your consent, you will receive further information on the responsibility for setting these cookies or any associated third-party services in the corresponding area of the consent management system.

Unless otherwise stated, profiles on social media are only included in our online offer as a link to the corresponding third-party services. After clicking on the integrated text/image link, you will be redirected to the offer from the respective social media provider. After this redirection, personal data may be collected directly by the third-party provider.  If you are logged into your user account from the respective social media provider, this provider may be able to assign the collected information from your specific visit to your personal user account. If you interact via a “Share” button from the respective social media provider, this information can be stored in your personal user account and possibly published. If you would like to prevent this collected information from being directly assigned to your user account, you must log out before clicking on the integrated text/image link.

7. Receivers of personal data

Within our company, only those persons have access to your personal data who need it for the purposes stated in each case. Your personal data will only be passed on to external recipients if this is permitted by law or we have your consent. Below you will find an overview of the relevant recipients: 

  • Processors: Group companies or external service providers, for example in the areas of technical infrastructure and maintenance, who are carefully selected and checked. These processors may only use your data in accordance with our instructions.
  • Public authorities: Authorities and state institutions, such as tax authorities, public prosecutors or courts, to which we (have to) transfer personal data e.g. to fulfill legal obligations or to protect legitimate interests.
  • Private bodies: Group companies, Porsche centres and service companies, cooperation partners, service providers (not subject to directives) or commissioned persons such as Porsche centres and service companies, financial banks, credit agencies or transport service providers.

8. Data processing in third countries

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union, another state party to the Agreement on the European Economic Area or a state for which an adequate level of data protection has been established by a decision of the European Commission, we will ensure prior to transfer that the transfer of data is either covered by a legal authorisation, that guarantees exist for an adequate level of data protection with regard to the transfer of data (e.g. by agreements on contractual warranties, officially recognised regulations or binding internal data protection regulations at the recipient) or you have given your consent to the data transfer.

Where a data transfer is based on Article 46, 47 or 49 (1) 2 GDPR, you may obtain from us a copy of the safeguards for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of these safeguards. Please use the information provided under subparagraph 1 for this purpose.

9. Storage duration, deletion

We store your personal data, if legal consent exists for this, only as long as is necessary to achieve the purposes pursued or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data unless further processing is still permitted under the statutory provisions. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will normally delete your personal data without delay

  • after the legal basis ceases to exist and provided that no other legal basis (e.g. retention periods under commercial or tax law) intervenes. If the latter applies, we will delete your data after the other legal basis ceases to apply;
  • if your personal data is no longer required for the purposes pursued by us and no other legal basis (e.g. retention periods under commercial or tax law) intervenes. If the latter applies, we will delete your data after the other legal basis ceases to apply.

10. Rights of the data subject

Right to information: You have the right to obtain information about the data we have stored about you.

Right of correction and deletion: You can demand that we correct incorrect data and – insofar as legal requirements are met – delete your data.

Restriction of processing: You may request that we restrict the processing of your data, provided that legal requirements are met.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, if legal requirements are met, demand that you receive the data you have provided in a structured, common, and machine-readable format or that we transfer it to another controller.

Objection: You have the right to object to the processing of data by us at any time for reasons arising from your particular situation, insofar as this is based on the protection of legitimate interests. If you exercise your right to object, we will cease processing unless we can demonstrate compelling legitimate grounds for further processing which override your rights and interests.

Objection to direct marketing: If we process your personal data for the purpose of direct marketing, you have the right to object to our processing of your data for this purpose at any time. If you exercise your right to object, we will stop processing your data for this purpose.

Revocation of consent: If you have given us consent to process your personal data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data, until it is revoked, remains unaffected.

Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your data violates applicable law. To do so, you can contact the supervisory authority responsible for your place of residence or country or the supervisory authority responsible for us.

Contacting us and exercising your rights: Furthermore, if you have any questions about the processing of your personal data and your rights as a data subject, you can contact us free of charge. Please contact us at https://www.porsche.com/privacy-contact/ or by post at the address given in subparagraph 1. In doing so, please ensure that we are able to clearly identify you. When revoking your consent, you can alternatively choose as well the contact channel that you used when giving your consent.

11. Last update

The most current version of this Privacy Policy applies.

Last updated 5/3/2021.