Data protection

We, Porsche Leipzig GmbH (hereinafter "we" or "PLG"), appreciate your interest in our company and our products and services. Your privacy is important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation (hereinafter "GDPR").

In this privacy policy, we inform you about the processing of your personal data and about your rights as a data subject within the context of using our website, the Porsche-Leipzig App or as a customer of PLG. For information on other services and on offers of other companies in the Porsche Group, please refer to the respective privacy policy of these services or Porsche companies.

If we link to this data protection declaration from external social media sites, the following conditions only apply insofar as the data processing operations within the scope of such social media sites are actually our responsibility and no more specific and therefore primarily applicable references to data protection are made available within the scope of such social media sites.

The responsible party for the data processing within the meaning of the data protection laws is:

Porsche Leipzig GmbH
Porschestraße 1
04158 Leipzig
Germany

Email: PLG_Datenschutz@porsche.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.
You can contact our data protection officer as follows:

Porsche Leipzig GmbH
Data protection Officer
Porschestraße 1
04158 Leipzig
Germany

Contact: PLG_Datenschutz@porsche.de

The subject of data protection is personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, email address or telephone number, but also information that

• is necessarily provided during the use of our website, such as information about the start, end and extent of its use, as well as the transmission of your IP address,
• or data which is necessary for booking, organising and carrying out our event packages or events.

Below you will receive an overview of the purposes and legal bases of data processing within the framework of the contractual relationship.

The use of our website/app is generally possible without registration. However, even if you use our website/app without registration, personal data can be processed.

Below you will find an overview of the type, scope, purposes and legal basis of automated data processing via our website and for booking, organising and implementing our event packages or events.

3.1 Provision of our Website

When your end device accesses our website, we process the following data:

• date and time of access,
• duration of the visit,
• type of end device,
• operating system used,
• functions used,
• amount of data sent,
• type of event,
• referrer URL,
• IP address,
• domain name.

We process this data on the basis of Art. 6 Section 1 f) GDPR to provide the website, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When you visit our website, this data is processed automatically. Without this provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity.

3.2 Cookies

When you visit our website, so-called "cookies", i.e. small files, can be stored on your device in order to offer you a comprehensive range of functions, to make use more convenient, and to optimise our offers. If you do not wish cookies to be used, you can prevent them from being stored on your device by making the appropriate settings in your internet browser or using separate options for objecting. Please note that this may limit the functionality and range of the functions of our offer. Please refer to our cookie policy for detailed information on the type, scope, purposes, legal bases and possible objections to data processing in relation to cookies.

3.3 Use of the Porsche Leipzig App

When your device accesses our website, we process the following data:

• date and time of access,
• duration of the visit,
• type of end device,
• operating system used,
• functions used,
• amount of data sent,
• type of event,
• referrer URL,
• IP address,
• domain name.

We process this data on the basis of Art. 6 Section 1 f) GDPR to provide the Porsche Leipzig App, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When you visit our website, this data is processed automatically. Without this provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity. We process personal data in the form of film recordings for Co-Pilot event programmes exclusively at your request. Data processing is based on Art. 6 Section 1 f ) GDPR.

You can voluntarily provide personal data in several places on our website or register for services with an individual profile, e.g. as part of the following offers: webshops, contact requests, information requirements. Without registration, some or all of the above services can only be used with limited functionality.

4.1 Registration process

Mandatory information required for registration is marked with an "*" in the respective input field; as a rule, at least the following information is required: salutation, name, postal address, telephone numbers and email address. It is not possible to register without providing the mandatory data. Within the scope of your registration you have the possibility to provide further information on a voluntary basis, e.g. company contact data, profession, date of birth, etc. Please note that this information is not required for registration and you alone decide whether you wish to provide us with this information. If you do not provide this information, we may not be able to best meet your wishes in using our offers.

The personal data you provide during registration is used by us to create your profile and to identify you later each time you log in. The applicable legal basis for these data processing operations is Art. 6 Section 1 b) GDPR. Depending on the service for which you are registering, additional data may be collected and then linked to your profile data. When using the services and offers described in detail below, other personal data may also be collected and processed (e.g. payment data when placing orders) and, if necessary, may be transmitted to third parties (e.g. Porsche Centres) in order to make these services and offers available to you.

We carry out all the processing described in this section either - as far as indicated - on the basis of your consent, to fulfil our contract with you or on the basis of our legitimate interests.

Further information on other services and offers can be found below.

4.2 Webshop Porsche Leipzig event packages

When you place an order via this webshop, the following data will be processed: salutation, first name, surname, address, email address. On a voluntary basis, you may also provide further information; however, this is not necessary for the placing and execution of the order.

The personal data provided by you within the scope of the order will be used by us for the execution and processing of orders and payment transactions placed via the webshop. In the case of a credit card payment, the card number, expiry date of the card, the holder's name and the card verification number are also recorded. The applicable legal basis for these data processing operations is Art. 6 Section 1 b) GDPR. For the processing of payment transactions, we may pass on your relevant data to the payment service provider commissioned by us, who will process this data on our behalf for payment processing.

We delete the data provided by you within the scope of an order as soon as the purpose of collection ceases to apply, subject to further storage of the data for purposes of complete contract fulfilment (e.g. during current statutory limitation periods) and subject to continued archiving obligations under commercial or tax legislation.

4.3 Co-Pilot

We process personal data in the form of film recordings relating to Co-Pilot event packages exclusively at the request of the person concerned.

Data processing is based on Art. 6 Section 1 a) GDPR.

4.4 Preparation and execution of event packages or an event

We process personal data, which is normally at least the following information: salutation, name, postal address, telephone numbers and email address if this is necessary for the preparation and execution of a contract with you. The purposes depend on the specific contract and include in particular

• customer communication;
• the preparation and processing of offers or enquiries;
• the execution of the concluded contracts;
• support and service before, during and after the visitor programme or event

Further details on the purposes of data processing can be found in the respective contractual documents.

Data processing is based on Art. 6 Section 1 b) GDPR. You must provide the personal data required for the preparation and implementation of our visitor programmes or events. Without this information, we will not be able to process your request or fulfil the contract.

We delete the data if it is no longer necessary for the purposes of preparing and executing a contract and if no other legal basis applies. If the latter is the case, we will delete the data once the other legal basis has ceased to apply.

4.5 Live Chat

In certain areas of our website we offer contact and advice via live chat. With the help of the live chat function, you can communicate with one of our consultants via text messages. When you access and use live chat, for technical reasons your browser automatically transmits the following data at the beginning of use, which we store separately from other data that you may transmit to us:

• date and time of access,
• duration of the visit,
• type of browser and version,
• operating system used,
• amount of data sent,
• type of event,
• IP address (anonymised).

The legal basis of this data processing is Art. 6 Section 1 f) GDPR, whereby our legitimate interest is directed towards guaranteeing and maintaining the operation and security of our offers as well as the elimination of faults. Within this framework, the data is also processed by us for analysis purposes - without assignment to a specific person.

If you provide us with additional personal data via the live chat function, this is done on a voluntary basis. We do not actively request personal data from you. The texts you enter in the input mask during the live chat are stored on the server of an external service provider on our behalf. The legal basis for this data processing is Art. 6 Section 1 b) GDPR.

4.6 Other means of contact

If you provide us with personal data by email or via a contact form, this is always done on a voluntary basis. Your details will be processed by us for processing your contact enquiry and its handling in accordance with Art. 6 Section 1 b) or f) GDPR and if necessary also passed on to third parties (e.g. Porsche Centres). For some contact points, it is also possible to register, e.g. for competitions; the principles described above in Section 4.1 apply accordingly.

We process your personal data to protect our legitimate interests. In addition to the interests stated in the description of the individual services and offers under Section 4, data processing takes place within the framework of our website or after registration has taken place, in particular against the background of the following interests:

• Ensuring the availability, operation and security of technical systems as well as technical data management;
• Further development of products, services and support offers;
• Processing of data in a central prospect and customer support platform as well as upstream and downstream systems for promoting customer loyalty and sales purposes for the individual support of customers and prospects;
• Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences and potentials.

The respective data processing is carried out on the basis of Art. 6 Section 1 f) GDPR.

If you give us your consent to certain data processing procedures, this is always earmarked for a specific purpose; the purposes result from the content of the specific declaration of consent. In this case, data processing is based on Art. 6 Section 1 a) GDPR. We will not be able to comply with your request without your consent. You may revoke your consent at any time without this affecting the legality of the processing carried out on the basis of the consent until revocation.

On the basis of any consents you may have given, the companies listed in the declaration of consent may use the data for specific purposes, e.g. for individual customer and prospect support, and contact you via the communication channels you have requested. In this context, we will use your data to offer you an inspiring brand and service experience with Porsche and to make communication and interaction with you as personal and relevant as possible.

Which of your data is specifically used for individual customer and potential customer care depends in particular on which data was collected on the basis of enquiries, orders and advice (e.g. when purchasing Porsche products) and which data you have made available at the respective contact points (e.g. via this website or in the Porsche Centre) (e.g. your personal interests). The scope and purpose of the consent given by you result in each case concretely from the formulation of the declaration of consent at the point of contact.

We send newsletters after corresponding registration, which means with your consent. If the contents of the newsletter are specifically described in the registration, these are decisive for the scope of the consent. In addition, our newsletters contain information about our products, offers, promotions and our company. The company named in the registration process is responsible for processing your data. The registration is carried out by a double opt-in method, that means after your registration you will receive an email in which you are asked to confirm your registration in order to prevent the misuse of your email address. We log the registrations in order to be able to prove the registration process and the consent contained therein in accordance with the legal requirements. The logging of the registration and the processing of the data entered by you during registration is accordingly carried out on the basis of our legitimate interests pursuant to Art. 6 Section 1 f) GDPR. You can revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter.

Internal recipients: Within Porsche Leipzig GmbH, only those persons have access who need this for the purposes stated in each case.

External recipients: We will only pass on your personal data to external recipients outside Porsche Leipzig GmbH if this is necessary for the use of our website or app, if other legal permission exists or if we have your consent for this.

External recipients can be:

a) Processors
External service providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche Leipzig GmbH or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) Public authories
Authorities and state institutions, such as public prosecutor's offices, courts or tax authorities, to which we must transmit personal data for mandatory legal reasons. The transmission then takes place on the basis of Art. 6 Section 1 c) GDPR.

c) Affiliated companies
Affiliated companies of VOLKSWAGEN AG and Dr. Ing. h.c. F. Porsche AG, to whom your personal data is transferred for the purpose of implementing the business relationship, fulfilling legal obligations or safeguarding legitimate interests (e.g. for the implementation, operation and trouble-free maintenance of IT systems, the administration of the stock of terminal devices and software and data backup). The transfer then takes place on the basis of Art. 6 Section 1 b), c) and/or f) GDPR.

d) Other external parties
Porsche dealers and service companies, cooperation partners, service providers, insurance companies or persons to whom data is transmitted on the basis of consent, for the execution of a contract with you or to safeguard legitimate interests, for example, Porsche Centres and Porsche service centres, financing banks, providers of other services or transport service providers. The transfer then takes place on the basis of Art. 6 Section 1 a), b) and/or f) GDPR.

If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission.

We can provide you with an overview of the recipients in third countries and a copy of the concretely agreed regulations to ensure the appropriate level of data protection. Please see the information in Section 1.

If the description of the individual services and offers does not specify the specific storage period or deletion of the data, the following applies.

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or - in the case of a consent - as long as you have not revoked the consent. In the event of an objection to processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We also delete your personal data if we are obliged to do so for other legal reasons.

By applying these general principles, we usually delete your personal data immediately after the legal basis or the pursued purpose has ceased to apply and provided that no other legal basis (e.g. retention periods under commercial and taxation law) intervenes. If the latter is the case, we will delete the data once the other legal basis has ceased to apply.

As a data subject, you have a number of rights. These include:

Right to information: You have the right to receive information about your personal data stored by us.

Right of correction and deletion: You may request us to correct incorrect data and - insofar as the legal requirements are fulfilled - to delete your data.

Restriction of processing: You can demand - as far as the legal requirements are fulfilled - that the processing of your data by us is restricted.

Data transferability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another responsible party, provided that the legal requirements are met.

Objection to data processing on the legal basis of "legitimate interest":  You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of "legitimate interest". If you exercise your right of objection, we will stop the processing of your data unless we can - in accordance with the applicable statutory provisions - prove compelling reasons worthy of protection for further processing which outweigh your rights.

Revocation of consent: If you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.

Objection to cookies: You can also object to the use of cookies at any time. Please refer to our cookie policy for details. 

Right of appeal to the supervisory authority: You can also lodge a complaint with the supervisory authority if you believe that the processing of your data violates applicable law. Especially for this purpose, you can contact the data protection authority which is responsible for your place of residence or country or the data protection authority responsible for us.

Your contact to us: Furthermore, you can contact us free of charge with questions about the processing of your personal data, your rights as a data subject and any consent given. To exercise all your aforementioned rights, please contact plg_datenschutz@porsche.de by email or write to the address provided in Section 1. Please make sure that we are able to identify you clearly.

The websites and services of other providers to which our website links have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our website may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers.

The offers of third parties also include those of other Porsche companies and Porsche Centres to which links are provided from our website or which are otherwise integrated into our website, such as in particular:

• My Porsche
• Porsche Car Configurator
• Porsche Connect

The respective provider and responsible party can be identified in particular via the legal notice and the respective data protection information on the individual websites.

08.03.2023

Scope

This cookie policy is supplementary to the general privacy policy for our website and describes the type, scope, purposes and legal bases as well as possible contradictions in data processing with cookies. In all other respects, the general data protection declaration for our website applies to all further information. Valid from 25.05.18

What are cookies?

In order to offer you a comprehensive range of functions, to make the use more convenient and to optimise our offers, we use so-called "cookies". Cookies are small files that are stored on your terminal device with the help of your internet browser.

Categories of cookies

We use cookies for different purposes and with different functions. We differentiate between whether the cookie is technically absolutely necessary (technical necessity), how long it is stored and used (storage period) and whether it was set by our website itself or by third parties and by which provider of this cookie (cookie provider).

Technical necessity

Technically necessary cookies: We use certain cookies because they are imperative for our website and its functions to function properly. These cookies are automatically set when you visit our website or a specific function unless you have prevented cookies from being set by your browser settings.

Technically not absolutely necessary cookies: On the other hand, not absolutely necessary cookies are set, for example, to improve the comfort and performance of our website or to save certain settings made by you. We also use technically not absolutely necessary cookies to determine the frequency of use of certain areas of our website so that we can tailor these more specifically to your needs in the future. We do not store any cookies that are not technically necessary until you have confirmed by clicking on the appropriate field that you have read our cookie notice and continue to use our website.

Storage duration

Session cookies: Most cookies are only required for the duration of your current access or session and are deleted or lose their validity as soon as you leave our website or your current session expires (so-called "session cookies"). Session cookies are used, for example, to retain certain information such as your registration for our website during your session.

Permanent cookies: Cookies are stored only sporadically over a longer period of time, for example in order to recognise you at a later point in time when you visit our website again and to be able to call up stored settings. This allows you to access our website faster or more conveniently, for example, or you do not have to make certain settings such as your chosen language again. Permanent cookies are automatically deleted after a predefined period of time when you visit the page or domain from which the cookie was set.

Flow cookies: These cookies are used for the communication between different internal Porsche servers. They are set at the beginning of a user interaction and deleted after its completion. Flow cookies receive a unique identification number during the interaction, which, however, does not allow any conclusions to be drawn about the actual customer or user.

Cookie providers

Third-party cookies: So-called "third-party cookies" are set and used by other sites or websites, for example by providers of web analysis tools. Further information on web analysis tools and range measurement can be found in the course of this policy. Third-party providers may also use cookies to display advertisements or to integrate content from social networks such as social plug-ins.

Use of cookies for web analysis and range measurement

We use Google Analytics, a web analysis service of Google Inc. "("Google"). Google Analytics uses third-party cookies to identify the frequency of certain areas of usage from our website and preferences. The information generated by the cookie about your use of our website (including your shortened IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information on our behalf and on the basis of a contract for order processing, to evaluate your use of our website, to compile reports on the website activities for us and to provide further services associated with the use of the service and the internet. The legal basis for the use of Google Analytics is Art. 6 Section 1 s) GDPR.

Deletion and objection to the use of cookies

Acceptance of cookies when using our website is not mandatory; if you do not want cookies to be stored on your end device, you can deactivate the corresponding option in your browser's system settings. You can delete saved cookies at any time in the system settings of your browser. If you do not accept cookies, however, this can lead to functional restrictions of our offers.

In addition, you can disable the use of Google Analytics cookies using a browser add-on if you object to the website analysis. You can download it here: http://tools.google.com/dlpage/gaoptout?hl=de.

As a result so-called "opt-out" information is stored on your end device, which serves to assign your deactivation of Google Analytics. Please note that such opt-out information only leads to Google Analytics being deactivated for the terminal and the browser from which it was set. You may also need to set them again if you delete cookies from your device. As an alternative to the browser add-on, for example on mobile devices, you can also prevent Google Analytics from capturing cookies by clicking on the following link. An opt-out cookie will then be set to prevent future collection of your data. The opt-out cookie only applies to the browser used when setting and only to our website and is stored on your end device. If you delete the cookies in your browser, you must set the opt-out cookie again.

Deactivating Google Analytics

You can also activate the "Do not track" function in your end device. If this function is activated, your device informs the respective service that you do not want to be tracked.

In particular, the following cookies may be stored when you visit our website: