Privacy Policy for test drives

Für eine deutsche Version bitte hier klicken.

We, Dr. Ing. h.c. F. Porsche AG (hereinafter referred to as "we" or "Porsche AG"), inform you about the processing of your personal data and about your rights as a data subject as affected in the area of test drives. For information on the processing of personal data in other areas, please refer to the respective specific privacy policies. We take the protection of your personal data very seriously. Your personal data will be processed exclusively in accordance with the statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter referred to as "GDPR").

1. Controller and data protection officer

Responsible for the data processing as controller in terms of data protection law is:

Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Phone: +49 (0) 711 911-0

If you have any questions or suggestions regarding data protection, please feel free to contact us. You can reach our data protection officer as follows:

Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart

2. Subject of data protection

The subject of data protection is the protection of personal data. This is all information relating to an identi-fied or identifiable natural person (so-called data subject). This includes information such as name, postal address, email address or telephone number. For the development and refinement of driver assistance and information systems as well as automated driving functions for active and passive safety and comfort func-tions, our test vehicles collect data from the environment using various sensors and video cameras in the vehicle. These process real images of public road traffic, including vehicle license plates and people. This information also contains personal data about you. Porsche AG never identifies individuals in the data rec-ords.

3. Purposes and legal basis of data processing

The Porsche AG processes your personal data on the basis of legitimate interests pursuant to Article 6, paragraph 1, Section f GDPR exclusively for development, testing and trial purposes as well as quality assurance measures.

The focus here is on the development and safeguarding of safety-relevant driving functions such as driving assistance systems and highly and fully automated driving, as well as product improvement in order to reduce traffic accidents.

4. Change of purpose

If we process your personal data for a purpose other than that for which the data was collected, beyond the scope of a corresponding consent or a mandatory legal basis, we will take into account, in accordance with Article 6 paragraph 4 GDPR, the compatibility of the original and the now pursued purpose, the nature of the personal data, the possible consequences of further processing for you and the guarantees for the protection of the personal data.

5. Recipients of personal data

Within our company, only those persons who need your personal data for the respective purposes mentioned have access to it. Your personal data will only be passed on to external recipients if we have legal permission to do so or have your consent. Below you will find an overview of the corresponding recipients:

  • Processors: Group companies or external service providers, for example in the areas of conducting and documenting trials, who are carefully selected and reviewed. The processors may only use the data in accordance with our instructions. These include, for example, VW Group companies that provide services (e.g. development services) for us, development service providers, IT service providers.
  • Joint Controller: For some specific development projects, there is joint responsibility with other Volkswagen Group companies. For these specific data processing activities, the legally required agreement with the joint controller has been concluded (Article 26 (1) DSGVO). Further information can be found here (PDF; 0,06 MB).
  • Public bodies: Authorities and state institutions, such as tax authorities, public prosecutors' offices or courts, to which we (must) transfer personal data, e.g. to fulfil legal obligations or to protect legitimate interests.
  • Private bodies: Group companies, Porsche dealers, cooperation partners, (non-processor) service providers or commissioned persons such as Porsche Centres or transport service providers.

6. Data processing in third countries

If a data transfer takes place to entities whose registered office or place of data processing is not located in a member state of the European Union, another state party to the Agreement on the European Economic Area or a state for which an adequate level of data protection has been determined by a decision of the European Commission, we will ensure prior to the transfer that either the data transfer is covered by a statutory permit, that guarantees for an adequate level of data protection with regard to the data transfer are in place (e.g., through the agreement of contractual warranties, officially recognized regulations or binding internal data protection regulations at the recipient), or that you have given your consent to the data transfer.

If the data is transferred on the basis of Articles 46, 47 or 49 paragraph 1, subparagraph 2 GDPR, you can obtain from us a copy or reference to the availability of the guarantees for an adequate level of data protection in relation to the data transfer. Please use the information provided under Section 1.

7. Storage duration, erasure of data

We store your personal data, if there is legal permission to do so, only as long as necessary to achieve the intended purposes or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data, unless further processing is still permitted by law. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will usually delete your personal data immediately

  • after the legal permission has ceased to apply and provided that no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter applies, we will delete the data after the other legal basis has ceased to apply;
  • if your personal data is no longer required for the purposes we pursue and no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter is the case, we will delete the data after the other legal basis has ceased to apply.

8. Rights of data subjects

Right to access: You have the right to receive information about your personal data stored by us.

Right to rectification and erasure: You can demand that we correct incorrect data and, if the legal requirements are met, delete your data.

Restriction of processing:

You can demand that we restrict the processing of your data, provided that the legal requirements are met.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, demand that the data you have provided us with are handed over in a structured, common and machine-readable format or that we transfer it to another controller.

Objection: You have the right to object at any time to data processing by us based on the safeguarding of legitimate interests for reasons arising from your particular situation. If you make use of your right to object, we will stop processing the data unless we can prove compelling reasons for further processing worthy of protection which outweigh your rights and interests.

Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country or the supervisory authority responsible for us.

Your contact with us and the exercise of your rights: Furthermore, you can contact us free of charge if you have questions regarding the processing of your personal data and your rights as a data subject. Please contact us at or by letter mail to the address provided under Section 1. Please make sure that we can definitely identify you. If you revoke your consent, you can alternatively choose the contact method that you used when you gave your consent.

We will gladly comply with the exercise of your data subject rights towards us.

Please note, however, that we generally only process the captured real images of public road traffic to record the environment of the vehicle. This is to detect obstacles and other road users only to train the algorithm to effectively avoid accidents in the future.

An identification of the recorded persons is therefore at no time in the foreground and can, if at all, only be possible with additional information (e.g. location, time and date, type of test vehicle, information about their appearance, etc.).

If identification is not possible even after providing further information, we will explain this to you.

9. Effective date

The latest version of this Privacy Policy applies. This version dates from [24.03.2022].