Porsche Experience website and Porsche Experience events
We, Dr. Ing. h.c. F. Porsche AG (hereinafter, “we” or “Porsche AG”), want to thank you for your interest in Porsche Experience. We take the protection of your personal data very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the General Data Protection Regulation (hereinafter, “GDPR”). This Privacy Policy informs you about how we process your personal data and your rights as a data subject when using the Porsche Experience website, and when enquiring about, booking and receiving Porsche Experience offers. Information on the processing of personal data in other areas can be found in the relevant privacy policy.
If we reference this Privacy Policy from external social media profiles, the following statements only apply insofar as the processing takes place in our area of responsibility and insofar as no more specific and therefore prioritised information on data protection is provided in the context of such social media profiles.
Data controller and data protection officer
The entity responsible for data processing within the meaning of data protection laws is:
Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Tel.: +49 711 911-0
Email: info@porsche.de
Please do not hesitate to contact us if you have any questions or ideas relating to data protection. You can contact our data protection officer as follows:
Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Germany
Contact: https://www.porsche.com/privacy-contact/
With regard to the processing of data relating to the individual services and features offered via our website and at Porsche Experience events, which are described in more detail below, we are joint controllers alongside the companies listed below (“we” also refers to these companies, which are jointly responsible, in the following). The joint processes relate particularly to providing information on various events, creating a uniform user profile and booking events for which AVANTGARDE Experiences GmbH or Manthey-Racing GmbH is the tour operator within the meaning of the Package Travel Act. We jointly determine the purposes and means of processing personal data in relation to the joint processes with all jointly responsible companies. In an agreement on joint responsibility, we have defined, pursuant to Article 26 of the GDPR, the respective tasks and responsibilities in the processing of personal data and the parties responsible for fulfilling data protection obligations. In particular, we have defined how an appropriate level of security and your rights as a data subject can be ensured, how we can jointly comply with information obligations under data protection law and how we can monitor potential data protection incidents. This also includes ensuring that we can fulfil our reporting and notification obligations. Insofar as you contact us, we will come to an agreement in accordance with the aforementioned agreement pursuant to Article 26 of the GDPR in order to answer your enquiry and guarantee your data subject rights.
Organiser of the Porsche Travel and Ice Experience:
AVANTGARDE Experiences GmbH
Atelierstrasse 10
81671 Munich, Germany
Tel.: +49 711 652-000222
Email: info.porscheexperience@avantgarde.de
You can contact the data protection officer of the above-mentioned company as follows:
Dr. Ralf Heine
Aulinger Data Protection & Consulting GmbH
Josef-Neuberger-Str. 4
44787 Bochum
Tel.: +49 201 95986-62
Email: datenschutz.porscheexperience@avantgarde.de
Organiser of the Porsche Track Experience:
Manthey-Racing GmbH
Rudolf-Diesel-Strasse 11-13
53520 Meuspath, Germany
Tel.: +49 2691 9338-911
Email: porschetrackexperience@manthey-racing.de
You can contact the data protection officer of the above-mentioned company as follows:
Manthey-Racing GmbH
Data Protection Officer
Rudolf-Diesel-Strasse 11-13
53520 Meuspath
E-mail: datenschutz@manthey-racing.de
2. Subject matter of data protection
The subject matter of data protection is the protection of personal data. This includes all information relating to an identified or identifiable natural person (data subject). For example, this includes details such as your name, postal address, email address and telephone number, as well as other information generated when using the Porsche Experience website or enquiring about, booking or attending Porsche Experience events, in particular details such as the start and end times of your use and your IP address.
3. Purposes and legal bases of data processing
Below, you will find an overview of the purposes and legal bases for data processing in connection with the Porsche Experience website and Porsche Experience events. We always process personal data in accordance with the legal requirements, even if, in specific cases, a different legal basis from that stated below may be applicable.
You may be legally or contractually obligated to provide personal data when using the services, or it may be necessary for the conclusion of a contract. We will inform you separately if you are obliged to provide personal data and what the possible consequences of not doing so would be (e.g. a loss of claims, or we might have to inform you that we cannot provide the requested service without being provided with certain details). The use of the Porsche Experience offer is generally possible without registration. The use of individual services and features may require prior registration. However, even if you make use of our offer without registration, personal data can still be processed.
3.1 Fulfilment of contractual and precontractual obligations
We process your personal data if this is necessary for performance of a contract to which you are a party or for the performance of pre-contractual measures that take place at your request. Data is processed on the basis of Article 6, paragraph 1, point (b), of the GDPR. The purposes of the processing include enabling the use of our specific products and services within the scope of the offer. In this specific case, these are the following features in particular:
3.1.1 Registration process and creating a user profile
Mandatory data required for the registration and creation of a user profile are marked with an “*” in the respective input field; the following information is regularly the minimum: title, first name and surname, email address, preferred language and country. Registration is not possible without providing this mandatory data. When creating a user profile, you can voluntarily disclose further information, such as company contact details, occupation, date of birth, etc. Please note that this data is not required for the registration of a user profile, and you can decide yourself whether you want to share this data with us. If you do not provide this information, we may not be able to fully satisfy your requests for use of this feature. We shall use the personal data that you disclose to create your user profile and to identify you later at each login. Depending on the service and feature for which you are registering, additional data can be collected and then linked to your profile data, e.g. a vehicle configuration selected by you. When using the services and features described in detail below, additional personal data may also be collected and processed (e.g. payment data when placing orders) and may be transmitted to third parties (e.g. Porsche Centres) in order to make these services and features available to you.
3.1.2 Use of individual features involving registration/login
The features covered by the offer on our website and the Porsche Experience events, the personal data processed in this context, and the purposes for which it is processed, are described in more detail below.
Booking an event
This feature allows you to book various events (Travel Experience or Ice Experience) with AVANTGARDE Experiences GmbH or Track Experience events with Manthey-Racing GmbH. When you use this feature, the following categories of personal data will be processed as mandatory data, in addition to the data collected during registration described in Section 3.1.1:
title,
address (street, house number, postcode, city),
date of birth,
nationality,
clothing size and weight (only when booking the Ice Experience and Track Experience event),
telephone number,
details of your own vehicle, if applicable (e.g. manufacturer, model, licence plate, photo of your vehicle),
IP address.
Depending on the event, if you wish to bring an additional participant or an accompanying person, you must provide the following categories of personal data for this person:
title,
first name,
surname,
email address.
Providing this data is a prerequisite for participating in the event. When booking an event, you also have the option of providing further information on a voluntary basis:
name of your company,
your VAT identification number,
further address details,
driving licence number,
ID number,
your note,
details of your desired accommodation, such as a double room (only for the Ice and Travel Experience).
Depending on the event, you may wish to bring an additional participant or an accompanying person. If so, you can provide further personal data about them on a voluntary basis:
title,
additional name information.
This information is provided voluntarily. If you do not provide this data, however, we may not be able to fully comply with your wishes in relation to using this feature.
To determine whether you require a visa for the event you have booked, the country of your origin and the country of your destination are transmitted to the provider passolution.de. This information is not used to identify you. passolution.de uses it to inform us whether a visa is required.
Payment for the event is made by credit card via Adyen (Adyen N.V. German Branch, Friedrichstrasse 63, Eingang Mohrenstrasse 17, 10117 Berlin) or via PayPal (PayPal (Europe) S.à.r.l. et Cie, S.C.A. 22-24 Boulevard Royal, L-2449 Luxembourg). You will always be redirected via a link to the secure website of the relevant payment provider. The terms of use and privacy policy of the respective service provider will apply in this regard.
Profile administration
This feature allows you to manage your profile. You can change and supplement the personal data entered during registration and profile creation at any time, as well as delete voluntary information. You can also provide further information on a voluntary basis. In addition, you can view your past event participation, current bookings and invoices. You also have the option to save a vehicle in the “My Garage” section.
When you use the “My Garage” feature, the following categories of personal data will be processed in particular, in addition to the data collected during registration described in Section 3.1.1:
address data,
information about your profession,
a profile picture,
vehicle details,
a photo of your vehicle.
This information is provided voluntarily. If you do not provide this data, however, we may not be able to fully comply with your wishes in relation to using this feature.
Expressing interest in an event
This feature enables you to sign up to a mailing list and receive updates as soon as new event dates are published online. When you use this feature, the following personal data category will be processed, in addition to the data collected during registration described in Section 3.1.1:
your personal event interests.
This information is provided voluntarily. If you do not provide this data, however, we may not be able to fully comply with your wishes in relation to using this feature.
Expressing interest in vehicles from Porsche Works Vehicle Sales
At selected Porsche Experience events, you will have the opportunity to register your interest in a vehicle from Porsche Works Vehicle Sales. To do so, you can complete a form providing your contact details and information about the vehicle you are interested in. This includes your title, first name, surname, address, country, email address, telephone number, and where applicable, details of a specific vehicle or your vehicle preferences. This information will be forwarded to the relevant Dr. Ing. h.c. F. Porsche AG departments responsible for Porsche Works Vehicle Sales so they can process your expression of interest, contact you for further consultation and assess the possibility of a vehicle purchase. This information is provided voluntarily. If you do not provide this data, your expression of interest cannot be processed.
Voucher feature
This feature allows you to purchase a voucher. When using this feature, no further categories of personal data will be processed other than those set out in Section 3.1.1 during registration. The same payment methods are available for paying for the voucher as when booking an event.
Digital check-in
This feature allows you to check in for the event either online before it takes place or on-site via an iPad by following a digital process (e.g. confirming your details). When using this feature, no further categories of personal data are processed apart from those set out in section 3.1.1 during registration and when booking an event.
3.1.3 Using the individual features without registration/login
The functions within the scope of the offer on our website as well as the personal data processed and the purposes in each case are described below.
Contact form and other ways to get in contact via email
This feature allows you to get in touch if you have any questions or suggestions. You can either use a contact form or, alternatively, send an email. When this function is used, the following categories of personal data will be processed:
name,
email address,
telephone number,
company,
your individual message.
This information is provided voluntarily. If you do not provide this data, however, we may not be able to fully comply with your wishes in relation to using this feature.
3.2 Compliance with legal obligations
We process your personal data in order to comply with legal obligations to which we are subject. The data processing takes place on the basis of Article 6, paragraph 1, point (c), of the GDPR. The obligations may result, for example, from commercial, tax, money laundering, financial or criminal law. The purposes of processing arise from the respective legal obligation; the processing generally serves the purpose of complying with state obligations with regard to monitoring and duty of disclosure.
3.3 Safeguarding legitimate interests
We also process your personal data to protect legitimate interests of ourselves or third parties, unless these interests are outweighed by your interests which require the protection of your personal data. Data is processed on the basis of Article 6, paragraph 1, point (f), of the GDPR. Processing for legitimate interests is carried out for the following purposes or to protect the following interests:
further development of products, services and customer support offerings, as well as other measures for business transactions and process control;
improving product quality and rectifying errors and faults by analysing vehicle data and customer feedback, amongst other methods;
processing data on a central prospect and customer care platform, as well as in upstream and downstream systems for customer loyalty and sales purposes;
needs analysis and customer segmentation, e.g. calculating and evaluating affinities, preferences and customer potentials;
processing non-contractual inquiries and matters;
performing risk management and coordinating product recalls;
credit assessment through data exchange with credit agencies (e.g. SCHUFA);
ensuring the legally compliant handling, prevention of and protection against statutory violations (especially criminal offences), assertion of and defence against legal claims, internal and external compliance measures;
ensuring the availability, operation and security of technical systems, as well as technical data management;
answering and evaluating contact requests and feedback;
preventing unauthorised reseller activities (“grey market trading”) and protecting the selective distribution system based on concrete indications.
3.3.1 Accessing the online offer
When you access the online offer, data relating to your device and your use of the online offer is processed and stored in a log file. In particular, this involves technical data such as date and time of access, duration of the visit, type of device, operating system used, the functions used, quantity of data sent, IP address and referrer URL. We process this data in order to ensure technical operation and to identify and rectify faults. We thereby pursue the interest of enabling long-term technical functionality. We do not use this data for the purpose of drawing conclusions about you.
3.3.2 Studies and surveys
As part of our ongoing product, service and support programme development, you may occasionally be selected to participate in a study or survey when visiting our online offer. Participation is voluntary. We process your personal data when this is necessary for the initiation, conduct and evaluation of the study or survey. This also includes the further analysis of the results. The purpose of this processing is to gain insight into customer satisfaction and the general preferences and views of customers and potential customers. Please also refer to the study or survey description and any additional information provided alongside this Privacy Policy. We do not use the data collected to draw conclusions about your person or your identity. Data directly linked to your identity will only be processed if you voluntarily provide it as part of the study or survey. Should a company other than Porsche AG be responsible for the processing of your data, this will be indicated accordingly. We may engage agencies acting as data processors to carry out the studies and surveys, subject to our instructions (see Section 7 for further details).
3.4 Consent
We process your personal data on the basis of the relevant consent. Data is processed on the basis of Article 6, paragraph 1, point (a), of the GDPR. If consent is granted, it shall always be limited to the specified purpose; the purposes for processing are set out in your declaration of consent. You can withdraw your consent at any time. This withdrawal will not affect the lawfulness of processing based on consent given before its withdrawal.
3.4.1 Newsletter
The Porsche Experience Newsletter is sent by Porsche AG. All content in the Porsche Experience Newsletter, particularly the products, events, etc. advertised therein, originates exclusively from our partner companies. These are currently, in particular:
AVANTGARDE Experiences GmbH (for the Porsche Travel Experience and the Porsche Ice Experience)
Manthey-Racing GmbH (for the Porsche Track Experience)
If you use the products, events or offers advertised in the Porsche Experience Newsletter, the responsible partner company will be your sole contractual partner. This partner company is solely responsible for providing or executing the service.
In addition to Porsche AG, AVANTGARDE Experiences GmbH and Manthey-Racing GmbH are your points of contact for consent, withdrawal and queries (for contact details, see the section “Controller and data protection officer”). You can also make the necessary adjustments yourself in your customer profile after logging in.
We send newsletters to people who have registered, i.e. with your consent. Fields marked with an “*” are required for registration. We only use your data to send our newsletter. Your data is not passed on to third parties. Once you have registered, you will receive an email containing a confirmation link. You must click this link to confirm that you wish to receive the newsletter (“double opt-in”). This prevents anyone from subscribing you to the newsletter without your knowledge. We analyse which links you click on to tailor the newsletter to your interests and when you read it, so we can send it to you at your preferred time. We keep a record of newsletter subscriptions to provide evidence of the subscription process and consent given, in accordance with legal requirements. We store your data for the purposes of sending the newsletter and analysing usage until you withdraw your consent or the newsletter is discontinued. The legal basis for processing for the purposes of sending the newsletter and analysing usage is Article 6, paragraph 1, point (a), of the GDPR. The recording of the registration and the necessary processing of the data entered by you during the registration is carried out accordingly on the basis of our legitimate interests pursuant to Article 6, paragraph 1, point (f), of the GDPR. You may revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. An unsubscribe link can be found at the end of every newsletter, allowing you to exercise your right.
3.4.2 Photography/filming
Photographs and video recordings may be taken during the event. These recordings will be used to document the event and for internal and external communication purposes (e.g. on websites, social media, in print or via internal channels). Where individuals are recognisable, consent will be sought for the taking and publication of such recordings. You may withdraw any consent given at any time with effect for the future (see the Section “Rights of data subjects”).
3.5 Change of purpose
Where we process your personal data for a purpose other than that for which it was collected, beyond appropriate consent or a compelling legal basis, we will take into account, in accordance with Article 6, paragraph 4, of the GDPR, the compatibility of the original purpose and the purpose now pursued, the nature of the personal data, the possible consequences for you of further processing and the guarantee of the protection of the personal data.
3.6 Profiling
We do not carry out automated decision-making or profiling as defined in Article 22 of the GDPR. Profiling is only conducted to protect our legitimate interests as described above.
4. Access authorisations in the end device
Some functions of our online offer require you to grant access to your end device (e.g. access to location data). Granting authorisations is voluntary. However, if you wish to use the corresponding features, you must grant the corresponding authorisations, otherwise you will not be able to use these features. Authorisations remain active unless you revoke them in your device by deactivating the relevant setting.
5. Cookies and comparable technologies
We use cookies and similar technologies within the scope of the online offer, which serve to communicate with your terminal device and to exchange stored information (hereinafter collectively “cookies”). These cookies are primarily used to make the functions of the online offer usable. General examples in which the use of cookies is technically necessary in this sense are the storage of a language selection, login data or a shopping or wish list. Accordingly, technically necessary cookies may be used by us to enable the processing operations described in Section 3.1 and to ensure the proper and secure operation of the online offer. Data processing takes place on the basis of Article 6, paragraph 1, points (b) and (f), of the GDPR, as this is necessary for implementation of the functions that you select and in order to safeguard our legitimate interest in the functionality of our online offer.
If we also use cookies to analyse the use of the online offer and to target it to your interests and, if applicable, to provide you with interest-based content and advertisements, this will only be done on the basis of your voluntary consent in accordance with Article 6, paragraph 1, point (a), of the GDPR. You will then be able to configure your settings using the consent management feature in the online offer. You can revoke your consent at any time with effect for the future. Further information on the cookies and their function in detail, as well as on setting and revocation options, is available directly in the corresponding areas of the consent management feature. Please note that we only provide the consent management feature as part of the online offer if consent-based cookies are to be used in addition to the technically required cookies mentioned above.
If you do not wish to use cookies in general, you can also prevent any storage by means of the relevant settings on your device. Stored cookies can be erased at any time using the system settings of your device. Please note that blocking certain types of cookie may result in impaired use of our online offer.
We also use other technologies that, like cookies, serve to ensure the secure and user-friendly usability of the website (e.g. by protecting against misuse or evaluating usage). Technically, these other technologies differ from cookies, as they do not store any information on your end device or access information already stored there. Insofar as data falling under the data protection law (e.g. IP addresses) is processed using these additional technologies, we process this data on the basis of Article 6, paragraph 1, points (b) and (f), of the GDPR for the purpose of providing the website, safeguarding its technical operation and identifying and resolving malfunctions. In doing so, we also pursue the aim of permanently ensuring the technical functionality of the website, improving performance and optimising the user experience. This data is processed automatically when you access our website. Without the provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity.
6. Integrated third-party services
Insofar as we integrate services of other providers within the scope of our online offer in order to provide you with certain content or functions (e.g. playing videos or route planning) and we process personal data in the process, this is done on the basis of Article 6, paragraph 1, points (b) and (f), of the GDPR. This is because the data processing is then necessary to implement the functions you have selected or to safeguard our legitimate interest in providing an optimum range of features in the online offer. If cookies are used in connection with these third-party services, the information in Section 5 applies. For further details regarding these third-party services, please also refer to the privacy policy of the relevant provider.
Services of other providers that we include or to which we refer are provided by the respective third parties. Third-party services generally also include services offered by other group companies of Porsche AG and by Porsche Centres. As a matter of principle, we have no influence over the content and function of third-party services and are not responsible for the processing of your personal data by their providers, unless the third-party services are designed entirely on our behalf and then integrated by us under our own responsibility. Insofar as integrating a third-party service leads to our establishing joint processes with the service provider, we establish an agreement with this provider on joint responsibility pursuant to Article 26 of the GDPR, defining the respective tasks and responsibilities in the processing of personal data and the parties responsible for fulfilling data protection obligations. Insofar as cookies are also to be set on the basis of your consent, you will receive further information on the responsibility for setting these cookies or any associated third-party services in the corresponding areas of the consent management.
Unless otherwise stated, profiles on social media are only integrated into our online offer as links to the corresponding third-party services. After clicking on the embedded text/image link, you will be redirected to the service of the respective social media provider. After being redirected, personal data may be collected directly by the third-party provider. If you are logged into your user account of the respective social media provider during this time, the provider may be able to assign the collected information of the specific visit to your personal user account. If you interact via a “Share” button of the respective social media provider, this information may be stored in the personal user account and possibly published. To prevent the collected information from being directly assigned to your user account, you must log out before clicking on the embedded text/image link.
7. Recipients of personal data
Within our company, the only people who have access to your personal data are those who need it for the purposes indicated above. We only pass on your personal data to external recipients if a legal authorisation exists or if we have your consent. Below you will find an overview of the corresponding recipients:
Processors: group companies or external service providers, for example in the areas of technical infrastructure and maintenance, which are carefully selected and checked. The processors may only use the data in accordance with our instructions.
Public authorities: authorities and state institutions, such as tax authorities, public prosecutors or courts, to which we may (have to) transmit personal data, for example to fulfil legal obligations or to protect legitimate interests.
Private bodies: group companies, Porsche sales companies (including companies providing services as part of Porsche Connect and Smart Mobility), dealerships and service companies, cooperation partners, service providers (not bound by instructions) or authorised persons such as Porsche Centres and Porsche Service Centres, financing banks, credit agencies or transport service providers.
8. Customer and prospective customer support
In the following, we would like to provide you with further information on data protection in the context of the implementation of customer and prospect management at Porsche. These measures are designed to ensure that support is tailored to the needs of both groups.
8.1 Joint management of existing and prospective customers at Porsche
The measures referred to in Section 3 in connection with the management of existing and prospective customers (in particular service and support and the implementation of legal requirements, needs analyses, and individual support via the desired communication channels) are generally not carried out by the controller alone. In addition to the relevant Porsche Centre, the following organisations are involved in providing customer and prospect support under the Porsche brand: Porsche Deutschland GmbH, the importer; the respective local importers, who provide international support; Dr. Ing. h.c. F. Porsche AG, the manufacturer; and its affiliated companies, which provide financial and mobility services, digital services and lifestyle products. A current list of the companies involved with their contact details for support in Germany can be found here: https://www.porsche.com/international/legal/joint-customer-care/
By using a central platform, we avoid situations in which information about your products, contact details and interests is not available to your contact person at Porsche, which would result in you being referred to another company involved. This also applies in the event that the operating company of your respective Porsche Centre changes. By exchanging and matching data, we ensure that you receive optimal support and advice. Naturally, only the companies involved that need your data for operational purposes have access to it.
The joint management of existing and prospective customers may, in certain cases, lead to joint controllership. For this reason, the companies involved have agreed in accordance with Article 26 of the GDPR on how the respective tasks and responsibilities for the processing of personal data are structured and who fulfils which data protection obligations. In particular, it was defined how an appropriate level of security can be achieved and how your rights as a data subject and the data protection information obligations can be guaranteed. Dr. Ing. h.c. F. Porsche AG (Porscheplatz 1, 70435 Stuttgart, https://forms.porsche.com/en/privacy-contact) is available to you as a central contact point in addition to the other participating companies.
8.2 Individual customer and prospect management
Where you have given your voluntary consent to the individual management of existing and prospective customers, contact data, support and contract data (e.g. for purchase, leasing or financing), service information as well as data on interests, vehicles and services and products used by the companies involved in the joint management of existing and prospective customers will be used to send you personalised information and offers on vehicles, services and other products from Porsche, invitations to events and surveys on satisfaction and expectations via the desired communication channels.
For the purpose of individual management of existing and prospective customers, we create a customer profile for you.
The specific data used for this purpose depends on which data was collected or made available by you on the basis of orders, purchases and consultations (e.g. during a consultation in the Porsche Centre or as part of your activities under your Porsche ID at My Porsche). The data may also come from orders or purchases that are processed in cooperation with partner companies (e.g. insurance companies) and from which we may then receive the information. If corresponding consents have been given, additional data sources may also be included. This may be data on usage behaviour or vehicle condition in relation to the vehicles assigned to you (e.g. identification, basic, usage, analysis, environmental and traffic data, as well as location and movement data) or on the use of digital media (e.g. for website usage). Further information on the merging of the data can be found in the relevant consent.
In order to offer an inspiring brand and support experience with Porsche and to make communication and interaction as personal and relevant as possible, the data mentioned is used for needs analyses and customer segmentation. On this basis, affinities, preferences and potential can be determined by the companies involved within the framework of individual customer and prospect support. Examples of such measures to personalise support are indicators of your likely product interests and your level of satisfaction. The corresponding information and analysis results are stored in your customer profile and are then made available for the individual design of customer and prospective customer support. Personal evaluation and assignment in a customer profile only takes place if this serves individual customer and prospective customer support. Individual management of existing and prospective customers without these optimisation and personalisation measures is not available.
Beyond individual measures relating to direct communication with you, we use the aforementioned data, as part of general measures for customer and prospective customer support, solely to carry out general analyses based on aggregated data relating to customers and prospective customers in order to optimise our offers and systems and align them with overarching interests. Please note that data on usage behaviour or vehicle condition in relation to the vehicles assigned to you, or on the use of digital media, can also be used for this purpose if you have given the corresponding consent. Please also note that your data may also be analysed beyond the management of existing and prospective customers; in such cases, this is based on your specific consent or another legal basis.
When we send e-mails for individual customer and prospective customer support we may use standard market technologies such as tracking pixels or click-through links. This allows us to analyse which and/or how many emails are delivered and/or rejected and/or opened; the latter is done in particular via tracking pixels. It is not fully possible to measure the opening rate of our emails using tracking pixels if you have disabled the display of images in your email programme. In this case, the email will not be displayed in full. However, it is still possible for us to determine whether an email has been opened if you click on text or graphic links in the email. Using click-through links, we can analyse which links have been clicked in our emails and determine the interest in certain topics. When you click on the corresponding link, you are routed via our separate analysis server before accessing the target page. Based on the analysis results, as part of individual customer and prospective customer support, we can make emails more relevant, send them in a more targeted manner or stop sending emails. Emails will only be sent and usage will only be evaluated if you have given your voluntary consent to the individual management of existing and prospective customers. We do not offer individual customer and prospect management without the described evaluation for optimisation.
9. Data processing in third countries
If data is transferred to bodies whose headquarters or place of data processing is not located in a member state of the European Union, another country outside the European Union that is a signatory to the Agreement on the European Economic Area or a state for which an appropriate level of data protection has been determined through a decision of the European Commission, we will ensure, before disclosure, that the data transfer is either covered by a legal authorisation, that there are guarantees for an adequate level of data protection with regard to the data transfer (e.g. through the agreement of contractual warranties, officially recognised regulations or binding internal data protection regulations applied by the recipient) or that you have given your consent to the data transfer.
Insofar as data is transferred on the basis of Articles 46, 47 or 49, paragraph 1, subparagraph 2, of the GDPR, you can obtain from us a copy of the guarantees for the existence of an adequate level of data protection with regard to the data transfer or information on the availability of a copy of the guarantees. For this purpose, please use the information in Section 1.
10. Storage duration, deletion
We store your personal data, where permitted by law, only for as long as is necessary to achieve the purposes pursued or until you have withdrawn your consent. In the event of an objection to the processing, we will delete your personal data unless further processing is still permitted under the legal provisions. We will also delete your personal data if we are legally obligated to do so for other reasons. Pursuant to these general principles, we will usually delete your personal information without undue delay
once the legal basis for processing it no longer applies and provided that no other legal basis (e.g. commercial and tax retention periods) applies. If the latter is the case, we will delete the data once the other legal basis ceases to apply;
if your personal data is no longer required for our purposes, and if no other legal basis (for example, commercial and tax retention periods) is applicable. If the latter is the case, we will delete the data once the other legal basis ceases to apply.
11. Rights of the data subject
Right of access: You have the right to receive information about your personal data stored by us.
Right to rectification and erasure: You have the right to demand that we rectify incorrect data and – provided the legal requirements are met – that we delete your data.
Restriction of processing: You have the right – provided the legal requirements are met – to demand that we restrict the processing of your data.
Data portability: If you have provided us with data on the basis of a contract or consent, you have the right, in accordance with the legal requirements, to obtain the data you have provided in a structured, standard and machine-readable format, or you can demand that we transfer this data to another controller.
Objection: You have the right to object at any time, on grounds relating to your particular situation, to our processing of your data, insofar as such processing is based on the pursuit of legitimate interests. If you make use of your right to object, we will stop processing your data, unless we can prove compelling legitimate reasons for further processing that outweigh your rights and interests.
Objection to direct marketing: If we process your personal data for direct marketing purposes, you have the right to object to our processing of your data for this purpose at any time. If you exercise your right to object, we will stop processing for this purpose.
Withdrawal of consent: If you have given us your consent to the processing of your personal data, you can revoke this consent at any time with effect for the future. The withdrawal of consent will not affect the lawfulness of processing before its withdrawal.
Right to complain to the supervisory authority: You can also submit a complaint to the competent supervisory authority if you believe that the processing of your data is in breach of the legislation. You can contact the supervisory authority responsible for your place of residence or country or the supervisory authority responsible for us.
Your contact with us and exercising your rights: Furthermore, you can contact us free of charge if you have any questions regarding the processing of your personal data and your data subject rights. Please contact https://forms.porsche.com/en/privacy-contact/ or one of the postal addresses specified above in Section 1. When doing so, please make sure that we can clearly identify you. If you wish to withdraw your consent, you can alternatively use the method of contact that you used when you gave your consent.
Version
The latest version of this Privacy Policy applies. Version 6.2 - As of 16/07/2026