Privacy Policy

We, Dr. Ing. h.c.F. Porsche AG (hereinafter referred to as "we" or "Porsche AG"), welcome your visit to our website porsche.com/international (hereinafter referred to as "website"), as well as your interest in our company and our products. Your privacy is very important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation (hereinafter "GDPR").

With this Privacy Policy, we inform you about the processing of your personal data and about your rights as a data subject within the scope of using our website. For information about other services as well as offers from other companies in the Porsche Group, please refer to the respective privacy policy of these particular services or Porsche companies.

If we link to this Privacy Policy from external social media sites, the following conditions only apply insofar as the data processing procedures within the framework of such social media sites are actually within our area of responsibility and no further specific and, therefore, primarily applicable information on data protection is made available within the framework of such social media sites.

1. The responsible party for the data processing and data protection officer; Contact

The responsible party for the data processing within the meaning of the data protection laws is:

Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Deutschland
Tel: (+49) 0711 911-0
E-Mail: info@porsche.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.
You can contact our data protection officer as follows:

Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Deutschland
Kontakt: www.porsche.com/international/privacy/contact/

2. Subject matter of data protection

The subject matter of data protection is the protection of personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, e-mail address or telephone number, but also information that is necessarily provided during the use of our website, such as information about the start, end and extent of its use as well as the transmission of your IP address.

3. Type, scope, purposes of, and legal basis for automated data processing

The use of our website is generally possible without registration. The use of individual services and functions may require prior registration. However, even if you use our website without registration, personal data can still be processed.

Below you will find an overview of the type, scope, purposes and legal basis of automated data processing within the scope of using our website. Information on the processing of personal data when using the individual services and functions can be found in the following paragraphs.

3.1 Provision of our website

When your end device accesses our website, we will process the following data:

• date and time of access,
• duration of the visit,
• type of end device,
• operating system used,
• the functions that you use,
• quantity of data sent,
• type of event,
• IP address,
• referrer URL,
• domain name.

We process this data on the basis of article 6 paragraph 1 f) of the GDPR to provide the website, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so, we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When our website is opened, this data is processed automatically. Without the provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity.

3.2. Cookies, tracking technokogies and services based on

3.2.1 Scope and definition

We use cookies and cookie-like technologies on our website (hereinafter jointly referred to as "cookies"). These are usually small files that are stored on your device using your Internet browser, to provide you with comprehensive features, make the site easier to use and optimise our offers for you.

3.2.2 Categories, purposes and legal basis of cookies

The cookies used on our website can be divided into three categories: technically required cookies, cookies for analysis of reach and performance, and marketing cookies. You have the opportunity here to decide whether or not to allow the use of cookies for each of the specified purposes. You can change your settings at any time. Please note that blocking certain types of cookies can impact on your experience of our website and/or the services and functions available there.

For more details about the cookies used, please refer to the following sections, as well as our cookie policy.

a) Technically required cookies

The use of technically required cookies is necessary to ensure the safe and proper operation of our website and its features, as well as to make our website as a whole available. These cookies are placed, for example, to

• enable basic functions of the website,
• save your data protection preferences,
• provide secure authentication that allows you to log into your user account,
• save your selection in the vehicle configurator,
• provide you with multimedia content that meets the technical requirements of your end device, and
• enable the completion of forms.

Provided an appropriate contractual agreement is in place, data is processed using technically required cookies based on article 6 paragraph 1 b) of the GDPR, as well as on our legitimate interest in accordance with article 6 paragraph 1 f) of the GDPR. Our legitimate interest arises from the described purpose of use of the specific cookie, as well as ensuring the technical operation of our website and certain basic features. These cookies are automatically placed when accessing our website or a specific feature, unless you have prevented the placement of cookies in your device and/or Internet browser settings. For more details, please refer to clause 3.2.3. More information about the services used and third-party providers is available in clause 3.2.4. a).

b) Cookies for analysis are used to allow an evaluation of website usage.

These cookies are partly set by third parties. By using such cookies, we can, for example, count the number of visits to our website and determine from which other websites our pages were accessed. We can therefore find out which sections of our website are most popular, which are the least frequented and how visitors navigate our website. This allows us to measure and improve the overall performance of our website and optimise the content. For example, we use these cookies to

• understand what content is relevant for users to continue improving the quality of our website and optimise the user experience,
• measure the reach and success of measures,
• measure and improve the performance of our website, and
• adapt content to the needs of the user.

Data is processed using cookies exclusively on the basis of your consent in accordance with article 6 paragraph 1 a) of the GDPR. If you give us your consent to this, cookies are set for analysis when our website is accessed or when an offer made available via the website is accessed. You can extend your consent either to individual cookies or to all cookies in this category. You may withdraw your consent at any time with future effect. For details of how to change your settings and/or object, please refer to clause 3.2.3. More information about the services used and third-party providers is available in clause 3.2.4. b).

c) Marketing cookies

Marketing cookies are used to provide interest-based content and advertising, and to receive more accurate reports on campaign performances. These cookies are sometimes placed by third-party providers, i.e. by our selected marketing and social media partners. They therefore receive information about your use of our website and may collate this information with other data they may have received about you elsewhere.

This enables us to deliver interest-focused advertising on other online and social media platforms to users interested in content and offers on our website, with the help of selected partners (retargeting/remarketing). Advertising is inserted on the websites of our marketing and social media partners based on an analysis of your Internet previous usage behaviour on our website. Such usage profiles are created based on information supplied by the providers of the retargeting/remarketing services we use, sometimes anonymously or using pseudonyms. We will not use your data collected in this way to personally identify you, and never merge it with the personal data we hold about you.

For example, we use these cookies to

• for the continuous optimisation of marketing communication with visitors to our website
• address interested users with the right information and
• display advertising content that is relevant to you – including outside of the Porsche websites.

Data is processed exclusively on the basis of your consent in accordance with article 6 paragraph 1 a) of the GDPR. If you give your consent, marketing cookies will be placed when you visit our website or access one of the services provided, allowing you to experience interest-based advertising also on other websites and social media platforms. You can extend your consent either to individual cookies or to all cookies in this category. You may withdraw your consent at any time with future effect. For more details, please refer to clause 3.2.3. More information about the creation of such usage profiles, as well as the services and third-party providers used, is available in clause 3.2.4. c).

3.2.3. Consent and options for objecting to the use of cookies

In the cookie settings of our website, you have the option to consent to the use of cookies for analysis as well as marketing cookies individually or in general and revoke them at any time for the future.

If you do not want to allow the use of certain cookies or cookies in general, you can also prevent these from being stored on your device by adjusting the settings of your device and/or Internet browser accordingly.

You can select “Do not accept cookies” in your Internet browser settings. The process for managing and deleting cookies in your Internet browser settings is detailed in the help menu of your Internet browser. You can also disable all cookies using free Internet browser add-ons such as "Adblock Plus" (adblockplus.org/de) in combination with the "EasyPrivacy" list (easylist.to) or "Ghostery" (ghostery.com).

Stored cookies can be deleted at any time in the system settings of your device and/or Internet browser.

Please note that the functionality and functional scope of our website may be limited if you block or do not consent to the use of cookies.

3.2.4. Services and third-party providers used

a) Services of third-party providers as part of technically required cookies

Userlike

We use live chat (clause 5.6) provided by Userlike UG, Probsteigasse 44-46, 50670 Cologne (hereinafter referred to as “Userlike”)on our website. Userlike uses cookies to enable you to talk to us in person in the form of real-time chat. To use this function, there is no need for live chat visitors to declare their name - the chat can be anonymous. We use Userlike in so-called data protection mode. This means that your IP address is stored in anonymised form in cookies and is not used to personally identify you. If you reveal personal data about yourself during this anonymous chat, this will be on a voluntary basis.

The data collected via Userlike is processed on our behalf and on the basis of an order processing contract.

Your personal data is therefore processed on the basis of article 6 paragraph 1 f) of the GDPR, as we have a legitimate interest in the commercial operation, functionality and optimisation of our website in the form of a chat function between different websites.

For more information, please refer to Userlike’s Privacy Policy: https://www.userlike.com/de/terms.

Usercentrics

We use cookie consent technology provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany (hereinafter referred to as “Usercentrics”) on our website, in order to obtain your consent to the storage of certain cookies on your device and document this in accordance with data protection regulations. Usercentrics uses a cookie to be able to assign the granted consent to you, as well as its withdrawal.

The data collected via Usercentrics is processed on our behalf and on the basis of an order processing contract.

Usercentrics is used to obtain and manage the legally required consent to the use of cookies. The legal basis for this is article 6 paragraph 1 c) of the GDPR.

For more information, please refer to the Usercentrics website: https://usercentrics.com/de/.

b) Services of third-party providers for analysis of reach and performance

Google Analytics

We use Google Analytics, a web analysis service provided by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). Google Analytics uses cookies to identify the frequency of use of certain areas of our website and preferences. The information generated by the cookie about your use of our website (including your encrypted IP address) is transmitted to a Google server in the USA, where it is stored. Google will use this information on our behalf and on the basis of an order processing contract to evaluate your use of our website, compile reports on website activities for us and provide other services related to the use of the website and of the Internet.

Google is certified under the Privacy Shield agreement and therefore guarantees to comply with European data protection law. More information about data processing in non-EU countries is available in clause 9.

We only use Google Analytics with enabled IP anonymisation. This means that Google will encrypt the user's IP address within the Member States of the European Union (EU) or in other nations party to the Agreement on the European Economic Area (EEA). Only in exceptional cases is the full IP address be transmitted to a Google server in the USA, where it will be encrypted. The IP address transmitted by your Internet browser will not be merged with other Google data.

If you do not want Google Analytics to perform an analysis and reach measurement, you can specifically disable the use of Google Analytics cookies by means of an Internet browser add-on as an alternative to the options described in clause 3.2.3. You can download this here: http://tools.google.com/dlpage/gaoptout?hl=de. In this case, so-called “opt-out” information will be stored on your device that serves to assign your deactivation of Google Analytics. Please note that such “opt-out” information will only disable Google Analytics for the device and Internet browser from which it was placed. You may also need to reset this if you delete cookies from your device. As an alternative to this browser add-on, on mobile devices for example, you can also prevent this analysis by Google Analytics by clicking the following link. An "opt-out cookie" will then be placed that prevents the future analysis of your data. This opt-out cookie only applies to the Internet browser used to place it - and only for our website - and is stored on your device. If you delete the cookies in your Internet browser, you must reset the opt-out cookie.

More information about Google’s data usage, settings and objection options is available on the Google website under the following links:

• https://www.google.com/intl/de/policies/privacy/partners (“Google's data usage when using our partners’ websites or apps”),
• https://www.google.com/policies/technologies/ads (“The use of data for advertising purposes”).

Dynatrace

We use a service provided by Dynatrace LLC, 1601 Trapelo Road, Suite 116, Waltham, MA 02451, USA (hereinafter referred to as “Dynatrace”) on our website. Dynatrace uses cookies on our behalf to enable the analysis of your use of our website and to identify preferences. It records the number of clicks on certain buttons, browser type and links viewed, for example. The information generated by these cookies is usually only transmitted to servers that are located in a Member State of the European Union or in another nation party to the Agreement on the European Economic Area, where it is stored. The data collected via Dynatrace is processed on our behalf and on the basis of an order processing contract.

We only use Dynatrace if IP masking is enabled. This means that Dynatrace will encrypt the user's IP address within the Member States of the European Union (EU) or in other nations party to the Agreement on the European Economic Area (EEA).

If you do not want to allow analysis and reach/performance measurement by Dynatrace, you can prevent the storage of these cookies. For more information, see clause 3.2.3.

More information about Dynatrace's data usage , settings and options for withdrawing your consent is available on the Dynatrace websites under the following links:

• https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security,
• https://www.dynatrace.com/support/help/how-to-use-dynatrace/data-privacy-and-security/data-privacy/personal-data-captured-by-dynatrace/,
• https://www.dynatrace.com/company/trust-center/.

Psyma

We use the Psyma user survey (clause 5.7) provided by Psyma Research+Consulting GmbH, Lauf Office, Nürnberger Str. 103, 91207 Lauf, Germany (hereinafter referred to as “Psyma”) on our website. Psyma uses cookies to note whether you have participated in the user survey. The information stored in the cookies will not be used to personally identify you.

The data collected via Pysma is processed on our behalf and on the basis of an order processing contract.

If you do not want to allow analysis and reach/performance measurement by Pysma, you can prevent the storage of these cookies. For more information, see clause 3.2.3.

For more information, please refer to Pysma’s Privacy Policy: https://scripts.psyma.com/documents/privacy/privacy.php?lang=de.

The aforementioned third-party providers will only process data to analyse the reach and performance of our website after you have given your voluntary consent in accordance with article 6 paragraph 1 a) of the GDPR. For more details, please refer to clause 3.2.2 b). To find out how to withdraw your consent and disable analysis cookies individually or in general, please refer to clause 3.2.3.

c) Marketing services of third-party providers (retargeting/remarketing)

Google Ads/Google Marketing Platform (formerly DoubleClick by Google) and Google AdSense

We use Google Ads, Google Marketing Platform (formerly DoubleClick by Google) and Google AdSense services provided by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”) on our website.

The data collected via Google is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising, the Google Marketing Platform (formerly DoubleClick by Google) and Google AdSense is available here: https://www.google.com/intl/de/policies/privacy/ andhttps://policies.google.com/technologies/ads and https://marketingplatform.google.com/about/enterprise/ and https://support.google.com/adsense/answer/7549925?hl=de.

In addition to the options already described in clause 3.2.3, you can also disable interest-based advertising on Google at the following link: http://www.google.com/settings/ads/plugin.

Twitter

We also use services provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (hereinafter referred to as “Twitter”) on our website.

The data collected via Twitter is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising and data protection at Twitter is available here: https://business.twitter.com/de/resources/global-audience.html and https://twitter.com/de/privacy.

In addition to the options already described in clause 3.2.3, more information about disabling interest-based advertising on Twitter is also available at the following link: https://help.twitter.com/de/rules-and-policies/twitter-cookies.

Facebook

In addition, our website uses interest-based advertising services provided by Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”).

The data collected via Facebook is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising on Facebook, as well as Facebook’s Privacy Policy, is available here: https://de-de.facebook.com/legal/terms/ and https://www.facebook.com/about/privacy/update and https://www.facebook.com/policies/cookies/.

In addition to the options already described in clause 3.2.3, you can also disable interest-based advertising on Facebook at the following link: https://de-de.facebook.com/ads/settings.

YouTube

We also use YouTube services (hereinafter referred to as “YouTube”) provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”) on our website.

The data collected via YouTube/Google is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising on YouTube, as well as data protection, is available here: https://www.youtube.com/intl/de/yt/advertise/how-it-works/ and https://support.google.com/youtube/answer/3181017?hl=de.

In addition to the options for disabling interest-based advertising on YouTube already described in clause 3.2.3, you can also manage your YouTube advertising privacy settings here: https://support.google.com/youtube/answer/3181017?hl=de.

Instagram

We also use Instagram services (hereinafter referred to as “Instagram”) provided by Facebook Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”) on our website.

The data collected via Facebook is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising on Instagram, as well as data protection, is available here: https://www.facebook.com/help/instagram/1554245014870700/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Instagram%20f%C3%BCr%20Unternehmen and https://help.instagram.com/519522125107875.

In addition to the options for disabling interest-based advertising on Instagram already described in clause 3.2.3, you can also manage your Instagram advertising privacy settings here, provided you have linked your Instagram and Facebook accounts: https://de-de.facebook.com/ads/preferences.

LinkedIn

We also use services provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”) on our website.

The data collected via LinkedIn is processed on our behalf and on the basis of an order processing contract.

More information about interest-based advertising on LinkedIn, as well as data protection, is available here: https://www.linkedin.com/help/linkedin/answer/65446/anzeigeneinstellungen-verwalten?lang=de and https://www.linkedin.com/legal/privacy-policy.

In addition to the options for disabling interest-based advertising on LinkedIn already described in clause 3.2.3, you can also manage your LinkedIn advertising privacy settings here: https://www.linkedin.com/psettings/advertising.

The aforementioned third-party providers will only process data for marketing purposes after you have given your voluntary consent in accordance with article 6 paragraph 1 a) of the GDPR. For more details, please refer to clause 3.2.2 c). To find out how to withdraw your consent and disable cookies for marketing purposes individually or in general, please refer to clause 3.2.3.

3.3. Integration of third-party content and videos

Our website also uses third-party services to integrate their offers and content (hereinafter referred to as “Content”). Unless the third-party provider is stated separately in the following as part of the individual services, data is processed based on article 6 paragraph 1 f) of the GDPR, as we have a legitimate interest in using third-party content and services for the efficient operation and optimisation of our website.

The providers of this third-party content are therefore notified of your IP address, as they would be unable to transfer the content to your device without this. The IP address is required to display the content. The third-party provider may also store cookies on your device.

Vimeo

Videos are integrated into this website via vimeo.com. This is a service of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”) for which Vimeo will process your data for its own purposes and not on our behalf. To do this, a connection is established to Vimeo servers in the USA. Certain information (e.g. your IP address) is therefore transmitted to Vimeo. Vimeo may also store cookies on your device. We are unaware of the nature and extent of the data collected by Vimeo and have no control over its use. During integration, Vimeo may also be notified that your browser has accessed the corresponding page of this website, even if you do not have an account with Vimeo or are not logged into Vimeo.

More information about the collection and use of your data by Vimeo, as well as your rights in this regard, is available in Vimeo’s Privacy Policy at https://vimeo.com/privacy.

You can technically disable the storage and use of cookies by Vimeo in your browser settings and/or using browser add-ons; pleased be advised, however, that in this case you may not be able to fully use all the features of our website. For more information on how to prevent the storage of cookies, please refer to clause 3.2.3.

YouTube

YouTube videos are also integrated into our website. YouTube is operated by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). The YouTube videos integrated into our website, which are stored at http://www.youtube.com and can be played directly from this website, are integrated in “extended data protection mode”, i.e. according to YouTube, no data about you as a user will be transmitted to YouTube if you do not watch these videos. When accessing the integrated videos, a connection is established to YouTube’s servers in the USA and certain information (e.g. your IP address) sent to the provider, even if you are not registered with them. We are unaware of the nature and extent of the data collected by YouTube and have no control over its use.

For the purpose and scope of this data collection, along with the further processing and use of this data by YouTube, as well as your rights in this regard, and the available privacy protection options, please refer to the provider's Privacy Policy:
Google Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de.

You can technically disable the storage and use of cookies by YouTube in your browser settings and/or using browser add-ons; pleased be advised, however, that in this case you may not be able to fully use all the features of our website. For more information on how to prevent the storage of cookies, please refer to clause 3.2.3.

Google Maps

We use the Google Maps service from the third-party provider Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”) to display maps on our website. The processed data may include IP addresses and locations, in particular. However, this data will not be collected without your consent (usually via appropriate device settings).

More information on the use of data by Google, as well as options for granting and withdrawing your consent, can be found on Google’s website under the following link:https://policies.google.com/privacy?hl=dehttps://www.google.de

You can technically disable the loading of the Google Maps plug-in and/or its storage and the use of cookies by Google in your browser settings and/or using browser add-ons; pleased be advised, however, that in this case you may not be able to fully use all the features of our website. For more information on how to prevent the storage of cookies, please refer to clause 3.2.3.

Storystream

Users can post comments, images, videos, text, opinions, suggestions and other content (user content) on social media platforms via the #Porsche hashtag or any other hashtags. Selected user content posted on other social media platforms may be published on our website. Before we publish your user-generated content on our website, we will actively request your approval.

If you want to remove user content after it has been published on our website, you can delete your original post on the social media platform, which will also automatically delete your user content on our website.

If you do not want a published post to be displayed on our website, please send a deletion request to www.porsche.com/international/privacy/contact/ so that your user content can be deleted from our website.

4. Access authorisations in the end device

Some functions of our website require you to grant access to your end device (e.g. access to location data).

Granting authorisation is voluntary. However, if you wish to use the corresponding functions, you must grant the corresponding authorisations, otherwise you will not be able to use these functions. The authorisations remain active as long as you have not reset them in your end device and/or Internet browser by deactivating the respective setting.

5. Individual services and functionalities

When using our website, you may voluntarily provide personal data or register for services or functions, e.g. the following services and functions: online shops, newsletter subscription, contact requests, information requirements, competition entries, web specials, car configurator, pre-owned car locator (including search agent, for example) and retailer contact. Without registration, some of the above-mentioned services and functions cannot be used or only with limited functionality.

5.1. Registration process and creating a user profile

Mandatory data required for the registration and creation of a user profile are marked with a "*" in the respective input field; the following information is regularly the minimum: title, first and surname, postal address and e-mail address. Registration and the creation of a user profile is not possible without the mandatory data. When registering and creating a user profile, you can voluntarily disclose further information, such as company contact details, occupation, date of birth, etc. Please note that this data is not required for the registration and creation of a user profile, and you can decide yourself whether you want to share this data with us. If you do not provide this information, we may not be able to fully satisfy your requests for use of this feature.

We shall use the personal data that you disclose when registering and creating a user account to create your user profile and to identify you later at each login. The applicable legal basis for this data processing is article 6 paragraph 1 b) and f) of the GDPR. Depending on the service and function for which you are registering, additional data can be collected and then linked to your profile data, e.g. a vehicle configuration selected by you as part of the Car Configurator. When using the services and functions described in detail below, additional personal data may also be collected and processed (e.g. payment data when placing orders) and may be transmitted to third parties (e.g. Porsche Centres) in order to make these services and functions available to you.

We will carry out any processing described in this section either with your consent, where indicated, to fulfil our contract with you or on the basis of our legitimate interests.

Further information on the other services and functions can be found below:

5.2. Porsche Shop

When you place an order, you can choose whether you want to register or log in, or whether you want to place an order as a guest buyer, i.e. without registering and logging in. When registering and creating a user profile, the principles set out in clause 5.1 apply accordingly. When placing an order through this online shop, the following data is processed: title, forename, surname, address, e-mail address. You can also provide further information voluntarily, however, this is not required for the placing and execution of the order.

Porsche Smart Mobility GmbH is responsible for processing your personal data in the Porsche Drivers Selection Shop. You can be redirected to the Porsche Drivers Selection Shop from our website. For information about the processing of your data during your visit to the Porsche Drivers Selection Shop, please refer to the applicable Privacy Policy, which is available at: https://store.porsche.com/de/de/privacyPolicy

5.3. Porsche Classic Online Shop

Please note that the Porsche Classic Online Shop is a service that we provide in which the individual Porsche Centres listed on the respective sub-pages sell goods and services as independent companies in their own name and for their own account. In addition to the following information, the data protection notice published on the respective page of the Porsche Centre you have selected must therefore also be observed. Unless otherwise stated, the following information applies uniformly to all online shops of the Porsche Centres:

The registration and creation of a user profile is required to use this online shop and place orders; the principles set out in clause 5.1 apply accordingly. When placing an order, the following data is processed: title, forename, surname, address, e-mail address. You can also provide further information voluntarily, however, this is not required for the placing and execution of the order.

We or the operating Porsche Centre shall use the personal data that you disclose when ordering to execute and process orders and payment transactions made via the online shop. In the case of a credit card payment, the card number, expiry date of the card, the cardholder's name and the card verification number are also collected. The applicable legal basis for this data processing is article 6 paragraph 1 b) of the GDPR. In order to process the payment transactions, we can pass on your relevant data to the payment service provider commissioned by us,

AYDEN B.V.
Simon Carmiggeltstraart 6-50
1011 DJ Amsterdam

who will process this data on our behalf or on behalf of the respective Porsche Centre for the settlement of payments.

Every Porsche Centre participating in the Porsche Classic Shop has its own shop URL, and customers placing orders are therefore a contractual partner of the respective Porsche Centre.

Porsche Centres participating in the Porsche Classic Online Shop are able to:

• if you offer payment by credit card: independently conclude an agreement with Wirecard
• if you offer payment with Bancontact (only available in Belgium): independently specify this
• if you offer payment via Paypal: independently link your Paypal business account
• if you offer payment in advance: independently store your bank details
• if you offer payment on collection/installation: independently specify this.

These details are individually selected by each participating Porsche Centre and maintained in their own systems.

We delete the data provided by you as part of an order as soon as the purpose of collection ceases to apply, subject to further storage of the data for the purpose of complete fulfilment of the contract (e.g. during current limitation periods) and subject to continued commercial or tax archiving obligations.

5.4. Magazinbestellung/ Abonnementanmeldung

To order a magazine or subscription, e.g. Christophorus Magazine, a registration and creation of a user profile is required. The principles set out in clause 5.1 apply accordingly. When placing an order, the following data is processed: title, forename, surname, address, e-mail address. You can also provide further information voluntarily, however, this is not required for the placing and execution of the order.

We shall use the personal data that you disclose when ordering to execute and process orders and payment transactions made. In the case of a credit card payment, the card number, expiry date of the card, the cardholder's name and the card verification number are also collected. The applicable legal basis for this data processing is article 6 paragraph 1 b) of the GDPR. In order to process the payment transactions, we can pass on your relevant data to the payment service provider commissioned by us, who will process this data on our behalf for the settlement of payments.

We delete the data provided by you as part of an order as soon as the purpose of collection ceases to apply, in particular after cancellation of a subscription, subject to further storage of the data for the purpose of complete fulfilment of the contract (e.g. during current limitation periods) and subject to continued commercial or tax archiving obligations.

5.5. E-mail newsletter

To subscribe to our newsletter, entering your name (incl. title), e-mail address and country of residence is sufficient. We only send newsletters to those who have registered, i.e. with your consent, on the basis of article 6 paragraph 1 a) of the GDPR. Insofar as the contents of the newsletter are specifically described when registering, these are decisive for the scope of the consent. In addition, our newsletters contain information about our products, offers, promotions and our company.

The registration takes place by means of the so-called double opt-in procedure, i.e. after your registration you will receive an e-mail in which you will be asked to confirm your registration in order to prevent the misuse of your e-mail address. Registering for the newsletter is recorded by us to be able to prove the registration process and the consent in accordance with the legal requirements. The recording of the registration and the necessary processing of the data entered by you during the registration is carried out accordingly on the basis of our legitimate interests pursuant to article 6 paragraph 1 f) of the GDPR. You may revoke your consent for receiving our newsletter at any time, e.g. by unsubscribing from the newsletter. An unsubscribe link can be found at the end of every newsletter so you can exercise this right.

We use the Salesforce Marketing Cloud service to distribute our newsletter, which is operated by salesforce.com Inc., The Landmark@One Market, Suite 300, San Francisco, California 94105, USA. To make our newsletter as interesting as possible for you, Salesforce anonymously evaluates usage behaviour on our behalf. This tells us, for example, how many of our readers have opened our newsletter and which links have been accessed most frequently. This is carried out using commercially available technologies, e.g. tracking pixels integrated in our newsletter. Data is processed on the basis of our legitimate interests within the meaning of article 6 paragraph 1 f) of the GDPR, namely our interest in the analysis and content optimisation of our newsletters. More information about Salesforce Marketing Cloud and the data processed is available at: https://www.salesforce.com/de/company/privacy/.

5.6 Analysis of e-mails sent to optimise our customer and prospective customer service

When we send e-mails to customers and prospective customers, we may use commercially available technologies such as tracking pixels or click-through links. This allows us to analyse which or how many e-mails are delivered and/or rejected and/or opened. The latter is carried out in particular by tracking pixel. It is not possible to measure the opening rate of our e-mails in full using tracking pixels, for example, if you have deactivated the display of images in your e-mail programme. In this case, however, the e-mail will not be displayed completely. That said, it is still possible for us to determine whether an e-mail has been opened.

Using click-through links, we can analyse which links have been clicked in our e-mails and determine the interest in certain topics. If you click on the corresponding link, you will be guided through our separate analysis server before accessing the target page. Based on the analysis results, we can make e-mails more relevant, send them in a more targeted manner or prevent e-mails from being sent. If you do not want such information collected and tracked, do not click text or graphic links in e-mails.

We process this data based on article 6 paragraph 1 f) of the GDPR to optimise our customer and prospective buyer support.

We use the Salesforce Marketing Cloud service, which is operated by salesforce.com Inc., The Landmark@One Market, Suite 300, San Francisco, California 94105, USA, to distribute some newsletters. Salesforce conducts the above-mentioned analysis for these newsletters on our behalf and on the basis of an order processing contract.

More information about Salesforce Marketing Cloud and the data processed is available at: https://www.salesforce.com/de/company/privacy/

5.7. Live chat

In certain areas of our website, we offer a live chat for getting in contact and advice. Through the live chat, you can communicate with one of our consultants via text messages. When you call up and use the live chat, your browser automatically transmits the following data at the beginning of use for technical reasons, which is stored by us separately from other data that you may transmit to us:

• date and time of access,
• duration of the visit to our website,
• type of browser including version,
• operating system used,
• quantity of data sent,
• type of event,
• IP address (anonymised).

The legal basis of this data processing is article 6 paragraph 1 f) of the GDPR whereby our legitimate interest is focused on guaranteeing and maintaining the operation and safety of our offer as well as eliminating malfunctions. As part of this, the data is also processed by us – without allocation to a specific person – for analysis purposes.

If you provide us with additional personal data via live chat, this is carried out on a voluntary basis. We do not actively request personal data from you. The texts you enter into the input form during the live chat are stored on our behalf on the server of an external service provider. The legal basis for this data processing is article 6 paragraph 1 b) and f) of the GDPR, as we have a legitimate interest in providing you with optimum customer and prospect support as part of a (pre) contractual relationship.

5.8. Psyma user survey

When visiting our website, you may occasionally be selected to participate in an anonymous online survey. Actively clicking on the link displayed to you takes you directly to the online questionnaire. Personal data is processed by Psyma exclusively on our behalf and only if you provide it voluntarily in the survey; personal data does not need to be provided to participate in the survey.

The data is processed on the basis of our legitimate interests in accordance with article 6 paragraph 1 f) of the GDPR, namely exclusively earmarked for market research purposes. The survey results shared with us by Psyma are anonymous and are processed exclusively anonymously by us. If you do not wish to participate in the survey, we will use an opt-out cookie on your end device to prevent you from being re-selected. This cookie information shall be used for approximately 30 days during the current survey.

The data collected will be deleted by Psyma after the purpose for which it was collected has ceased to exist and a certain waiting period has expired. You can find more information about Psyma in the Psyma Privacy Policy at the following link: https://scripts.psyma.com/documents/privacy/privacy.php?lang=de.

5.9. Other forms of contact

If you share personal data with us via e-mail or on a contact form, this is always on a voluntary basis. We will process your data to fulfil your contact request and its handling in accordance with article 6 paragraph 1 b) or f) of the GDPR and may also disclose it to third parties (e.g. Porsche Centres) in this context. For some contact points, there is also the option of register, such as the car configurator and pre-owned car locator (including search agent, for example); the principles described in clause 5.1 above apply in this case.

6. Safeguarding legitimate interests

We process your personal data with a view to safeguarding our legitimate interests. As well as the interests specified in the description of the individual services and functions under clauses 3 and 5, data is also processed on our website and/or after successful registration, especially in light of the following interests:

1. further development of products, services, service provision and support services, as well as other measures for managing business transactions and processes;
2. improvement of product quality, elimination of errors and faults, etc., by analysing vehicle data and customer feedback;
3. processing data on a central prospect and customer care platform, as well as in up and downstream systems for customer loyalty and sales purposes;
4. needs analysis and customer segmentation, e.g. calculating and evaluating affinities, preferences and potentials;
5. handling warranty and goodwill cases, processing non-contractual inquiries and concerns from prospects and customers;
6. risk management and coordination of recalls;
7. ensuring the legally compliant handling, prevention of and protection against statutory violations (especially criminal offences), assertion of and defence against legal claims;
8. guaranteeing the availability, operation and security of technical systems and technical data management.

The respective data is processed on the basis of article 6 paragraph 1 f) of the GDPR. We will expressly point out cases in which data must be provided. Without providing this data, we may not be able to process your enquiry or request or fulfil the underlying contract.

7. Consent

If you give us consent to certain data processing operations, this is always earmarked; the purposes result from the content of the concrete declaration of consent. In this case, the data processing takes place on the basis of article 6 paragraph 1 a) of the GDPR. Without your consent, we cannot comply with your request as expressed in your consent. You may revoke your consent at any time, without affecting the legality of the processing carried out on the basis of your consent until revocation.

On the basis of the consent you may have given, the companies listed in the declaration of consent may use the data for individual customer and prospective customer support, for example, and contact you for these purposes via the communication channels you have requested. We use your data in this context to offer you an inspiring brand and support experience with Porsche and to make communication and interaction with you as personal and relevant as possible.

Which of your data is specifically used for individual customer and prospective customer support depends in particular on which data was collected on the basis of enquiries, orders and consultations (e.g. when purchasing or servicing Porsche products) and which data you provided (e.g. your personal interests) at the respective contact points (e.g. in the Porsche Centre).

The scope of the consent given by you then results concretely from the formulation of the declaration of consent at the contact point.

You can grant us consent for the use of cookies to analyse reach and performance as well as marketing cookies and the use of retargeting/remarketing services individually or generally. For details on the scope and revocation of this consent(s), please refer to clause 3.2.2 b) and c), clause 3.2.3 and clause 3.2.4.

8. Recipients of personal data

Internal recipients: within Porsche AG, only those persons have access who require this for the purposes stated.

External recipients: we will only pass on your personal data to external recipients outside Porsche AG if this is necessary in order to process your request or to fulfil the underlying contract, if we have another form of legal permission or if we have your consent to do so.

External recipients can be:

a) contract processors

Companies of the Porsche group or external providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche AG or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that the safety and confidentiality of your personal data is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) public authorities

Authorities and state institutions, such as tax authorities, public prosecutor's offices or courts, to which we (must) transmit personal data for mandatory legal reasons or to protect legitimate interests. The transfer then takes place on the basis of article 6 paragraph 1 c) and/or f) of the GDPR.

c) private bodies

Porsche Centres and service centres, cooperation partners, service providers or persons to whom data is transferred on the basis of consent, for the purpose of performing a contract with you or to protect legitimate interests, such as Porsche Centres and Porsche Service Centres, financing banks, credit agencies, transport service providers or providers of other services. The transfer then takes place on the basis of article 6 paragraph 1 a), b) and/or f) of the GDPR.

9. Data processing in non-EU countries

If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission, by appropriate guarantees such as a self-certification of the recipient for the EU-US Privacy Shield or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission.

We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. Please see the information in clause 1.

10. Sources and categories of data collected by third parties

If you provide us with additional personal data via live chat, this is carried out on a voluntary basis. We do not actively request personal data from you. The texts you enter into the input form during the live chat are stored on our behalf on the server of an external service provider. The legal basis for this data processing is article 6 paragraph 1 b) and f) of the GDPR, as we have a legitimate interest in providing you with optimum customer and prospect support as part of a (pre) contractual relationship.

11. Automated decision-making and profiling

We do not use automated decision-making in accordance with article 22 of the GDPR to prepare, justify and conduct business relationships. We only undertake profiling to safeguard our legitimate interests in the context of the processing purposes described in this document.

12. Storage duration and deletion

If the description of the individual services and functions does not include information on the specific storage period or deletion of the data, the following applies:

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or – in the case of consent – as long as you have not revoked the consent. In the event that you object to the processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We will also delete your personal data if we are obligated to do so for other legal reasons.

By applying these general principles, we generally delete your personal data immediately

• after the legal basis has ceased to apply and no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.
• if it is no longer necessary for the purposes of preparing and executing a contract or legitimate interests and if no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.
• if the purpose for which we are pursuing the collection no longer applies and no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.

Information on the storage period of cookies can be found in our Cookie Policy.

13. Rights of the data subject

As a data subject you have a number of rights. Specifically:

Right to information: you have the right to receive information about your personal data stored by us.

Right of correction and deletion: you may request us to correct incorrect data and – insofar as the legal requirements are fulfilled – to delete your data.

Restriction of processing: you may require us to restrict the processing of your data, provided that the legal requirements are met.

Data portability: if you have provided us with data on the basis of a contract or consent, you can request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another responsible party, provided that the legal requirements are met.

Objection to data processing on the legal basis of “legitimate interest”: you have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of ‘legitimate interest’. If you exercise your right of objection, we will stop the processing of your data, unless we can – in accordance with applicable statutory provisions – prove compelling reasons worthy of protection for further processing which outweigh your rights.

Objection to data processing for direct advertising purposes: if we will process your personal data on the legal basis of "legitimate interest" in order to conduct direct advertising, you have the right to object to this processing at any time.

Withdrawal of consent: if you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.

Objection to cookies and withdrawal of consent to cookies: if we use cookies on the legal basis of "legitimate interest", you can also object to the use of these cookies at any time. If you have given us consent to use cookies for analysis of reach and performance and/or marketing cookies, you can revoke this individually or generally at any time with future effect. For more details, please refer to clause 3.2 et seq. and our cookie policy.

Right to complain to the supervisory authority: you can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

Your contact with us and exercising your rights:furthermore, you can contact us free of charge with questions about the processing of your personal data, your rights as a data subject and any consent given. To exercise all your aforementioned rights, please contact www.porsche.com/international/privacy/contact/ or the postal address specified in clause 1 above. Please make sure that we are able to identify you clearly. If you withdraw your consent, you can also choose the contact method that you used when you gave your consent.

14. Links to third-party offers

The websites and services of other providers to which our website is linked have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our website may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers.

The offers of third parties generally also include those of other Porsche companies and Porsche Centres which are linked to our website or which are otherwise integrated into our website, such as in particular:

• My Porsche,
• Porsche Connect,
• Porsche Financial Services,
• Porsche Classic Online Shop (see above under clause 5.3),
• Porsche Classic Parts Explorer,
• Porsche Tequipment / TEQ Finder,
• Porsche Service tyre approvals (only available in selected countries).

The respective provider and responsible party is evident on the respective websites, in particular through the imprint and the respective privacy policy.

The above also applies to the possibility of accessing the corresponding page of a(nother) Porsche company on the respective social medium or sharing an article from our website (share page) by clicking icons of various social media providers, such as Facebook, Twitter, LinkedIn or Pinterest, for example. By selecting the individual provider, a link instantly takes you to the respective offer. The terms of use and privacy policy of the respective provider apply, which are available to view on the website of the respective third-party provider.

15. Version

The latest version of this privacy policy applies.

Edition: 13/02/2020