Privacy Policy

We, Porsche Leipzig GmbH (hereinafter “we” or “PLG”), are pleased that you are interested in our company and our products and services. Your privacy is important to us. We take the protection of your personal data and its confidential handling very seriously. The processing of your personal data is carried out exclusively in accordance with the applicable data protection laws, in particular the EU General Data Protection Regulation (hereinafter “GDPR”). 

With this privacy policy, we inform you about the processing of your personal data and your rights as a data subject when using our website, the Porsche Leipzig app, or as a customer of PLG. For information regarding additional services or offers from other companies within the Porsche Group, please refer to the respective privacy policies of those services or Porsche companies. 

If we link to this privacy policy from external social media presences, the following conditions apply only to the extent that the data processing activities within such social media presences actually fall within our area of responsibility and are not subject to more specific and therefore overriding data protection notices provided in connection with those social media presences. 

1. The responsible party for the data processing and data protection officer; contact 

The responsible party for the data processing within the meaning of the data protection laws is: 

Porsche Leipzig GmbH
Porschestraße 1
04158 Leipzig
Germany  

Email: PLG_Datenschutz[at]porsche.de 

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us. 

You can contact our data protection officer as follows: 

Porsche Leipzig GmbH 
Data protection Officer 
Porschestraße 1
04158 Leipzig 
Germany  

Contact: PLG_Datenschutz[at]porsche.de 

2. Subject of the data protection 

The subject of data protection is personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, email address or telephone number, but also information that 

  • is necessarily provided during the use of our website, such as information about the start, end and extent of its use, as well as the transmission of your IP address,
  • or data required for the booking, organization, and execution of our experience programs or events. 

 

3. Type, scope and legal basis of data processing 

Below you will receive an overview of the purposes and legal bases of data processing within the framework of the contractual relationship. 

The use of our website/app is generally possible without registration. However, even if you use our website/app without registration, personal data can be processed. 

Below you will find an overview of the type, scope, purposes and legal basis of automated data processing via our website and for booking, organizing and implementing our event packages or events.

3.1. Provision of our Website 

When our website is accessed from your device, the following data is processed for internal operational and administrative purposes, including but not limited to task allocation, verification of service delivery records, invoice validation, billing workflows, communication with service providers, and the reassignment of service providers based on positive performance assessments. 

• Date and time of access 
• Duration of the visit 
• Type of end device 
• Operating system used 
• Functions or features accessed 
• Amount of data transmitted 
• Type of event 
• Referrer URL 
• IP address 
• Domain name 

We process this data on the basis of Article 6 (1)(f) GDPR for the provision of the website, to ensure its technical operation, and for the purpose of identifying and rectifying disruptions. In doing so, we pursue our legitimate interest in enabling the use of our website and ensuring its continuous technical functionality. When our website is accessed, this data is processed automatically. Without the provision of this data, you cannot use our website. We do not use this data to draw conclusions about your person or your identity.  

3.2. Cookies 

When visiting our website, so‑called “cookies” — small files — may be stored on your device in order to provide you with a wide range of functionalities, make the use of our services more convenient, and enable us to optimize our offerings. If you do not wish to allow the use of cookies, you can prevent cookies from being stored on your device through the corresponding settings in your web browser or by using separate opt‑out options. Please note that this may restrict the functionality and range of features of our services. 
Detailed information on the type, scope, purposes, legal bases, and opt‑out options regarding data processing in connection with cookies can be found in our Cookie Policy. 

Cookie-Settings

4. Individual services and offers 

You may voluntarily provide personal data at various points on our website or register for services using an individual profile, for example in connection with the following offerings: webshops, contact requests, and information requests. Without registration, the aforementioned services may not be available at all or may only be available with limited functionality. 

 4.1 Registration process 

Mandatory information required for registration is marked with an “*” in the respective input field. This typically includes at least the following details: title, first and last name, postal address, and email address. Without providing the mandatory data, registration is not possible. As part of your registration, you also have the option to voluntarily provide additional information, such as company contact details, profession, date of birth, etc. Please note that these details are not required for registration, and it is entirely up to you whether you choose to provide such information. However, if you do not provide this data, we may not be able to fully meet your preferences when you use our services. 

The personal data you provide during registration is used by us to create your profile and to identify you during each subsequent login. The applicable legal basis for these data processing activities is Article 6(1)(b) GDPR. Depending on the service for which you register, additional data may be collected and subsequently linked to your profile data. When using the services and offerings described in detail below, further personal data may also be collected and processed (e.g., payment data when placing orders) and may, where necessary, be transferred to third parties (e.g., Porsche Centers) to make these services and offerings available to you. 

All processing activities described in this section are carried out either—where indicated—on the basis of your consent, for the performance of a contract with you, or on the basis of our legitimate interests. 

Further information regarding the additional services and offerings can be found below. 

4.2. Webshop Porsche Leipzig event packages 

We offer you the possibility to place orders for Porsche Leipzig experience packages via our webshop. You can either use your Porsche ID or place the order by manually entering your data. 

  • manual data entry 
     

You may manually enter your data to place an order through this webshop. The following data will be processed for this purpose: title, first name, last name, address, and email address. On a voluntary basis, you may also provide additional information; however, such information is not required for placing or processing the order. 

The personal data you provide in connection with an order is used by us to process and fulfil orders and payment transactions conducted via the webshop. In the case of a credit card payment, the card number, card expiration date, cardholder name, and card verification number will also be collected. The applicable legal basis for these data processing activities is Article 6 (1)( b) GDPR. For the purpose of processing payment transactions, we may transfer the relevant data to the payment service provider contracted by us, who will process this data on our behalf in order to complete the payment process. 

We delete the data you provide in connection with an order as soon as the purpose of storage ceases to apply, subject to continued retention of the data for the purpose of complete contractual performance (e.g., during ongoing limitation periods) and subject to existing statutory commercial or tax-related retention obligations. 

  •  Porsche ID 
     

We offer a registration and login procedure for orders in our webshop with your Porsche ID. This means that you do not have to remember any new login data for our webshop. The Porsche ID and the corresponding service are provided by the Porsche Sales & Marketplace GmbH (“PSM GmbH”). The details on how to register a user account for a Porsche ID can be found in the privacy policy of the PSM GmbH.  

If you decide to use the registration and login procedure involving the Porsche ID, you will be redirected to the PSM GmbH login/registration screen for the Porsche ID where you can log in with your Porsche ID username and password. We will then receive a message from PSM GmbH that you have successfully registered and the registration or application for our online offer will be completed. As part of the registration and login process, you can confirm to PSM GmbH that we may access the profile data of your Porsche ID user account. This may also apply to the payment data stored there. This means that you do not have to re-enter or maintain your profile data and, if applicable, payment data (e.g. if your address changes) in order to create your user profile for our online offer. Conversely, changes to the profile data in the user account of our online service are then also synchronised accordingly in your user account for the Porsche ID.  

The data processing within the scope of the registration and login procedure with the integration of the Porsche ID is carried out on the basis of Article 6  (1)( b) and (f) GDPR in order to register you with your user account for our online offer or to identify you when you register. In addition to carrying out your desired procedure, we are interested in making the registration and application process efficient and convenient. In this context, we are joint controllers with PSM GmbH and jointly determine the purposes and means of processing personal data in relation to the process. In an agreement on joint controllership pursuant to Article 26 of the GDPR, we have defined how the respective tasks and responsibilities for the processing of personal data are structured and who fulfils which data protection obligations. In particular, we have determined how an appropriate level of security and your data subject rights can be ensured, how we can jointly fulfil the information obligations under data protection law and how we can monitor potential data protection incidents. This also includes ensuring that we can fulfil our reporting and notification obligations. You can exercise your data protection rights against any data controller, regardless of the agreement addressed. If you contact us, we will coordinate in accordance with Article 26 of the GDPR in order to respond to your request and ensure your data protection rights.  

4.3. Co-Pilot 

We process personal data in the form of film recordings relating to Co-Pilot event packages exclusively at the request of the person concerned. 

Data processing is based on Art. 6 (1)( a) GDPR. 

We delete the video data four weeks after the completion of the experience program, unless a longer retention period is required by law or the data is needed to establish, exercise, or defend legal claims. 

4.4. Preparation and execution of event packages or an event 

We process personal data, which is normally at least the following information: salutation, name, postal address, telephone numbers and email address if this is necessary for the preparation and execution of a contract with you. The purposes depend on the specific contract and include in particular 

  • customer communication;
  • the preparation and processing of offers or enquiries;
  • the execution of the concluded contracts;
  • support and service before, during and after the visitor programme or event 

 

Further details on the purposes of data processing can be found in the respective contractual documents. 

Data processing is based on Art. 6 (1)( b) GDPR. You must provide the personal data required for the preparation and implementation of our visitor programmes or events. Without this information, we will not be able to process your request or fulfil the contract. 

We delete the data if it is no longer necessary for the purposes of preparing and executing a contract and if no other legal basis applies. If the latter is the case, we will delete the data once the other legal basis has ceased to apply. 

4.5. Live Chat 

In certain areas of our website we offer contact and advice via live chat. With the help of the live chat function, you can communicate with one of our consultants via text messages. When you access and use live chat, for technical reasons your browser automatically transmits the following data at the beginning of use, which we store separately from other data that you may transmit to us: 

  • date and time of access,
  • duration of the visit,
  • type of browser and version,
  • operating system used,
  • amount of data sent,
  • type of event,
  • IP address (anonymised). 

 

The legal basis of this data processing is Art. 6 (1)( f) GDPR, whereby our legitimate interest is directed towards guaranteeing and maintaining the operation and security of our offers as well as the elimination of faults.  

Within this context, the data is also processed by us for analytical purposes, without being associated with any identifiable individual.  

If you provide us with additional personal data via the live chat function, this is done on a voluntary basis. We do not actively request personal data from you. The texts you enter in the input mask during the live chat are stored on the server of an external service provider on our behalf. The legal basis for this data processing is Art. 6 (1)( b) GDPR. 

4.6. Other means of contact 

If you provide us with personal data by email or via a contact form, this is always done on a voluntary basis. Your details will be processed by us for processing your contact enquiry and its handling in accordance with Art. 6 (1)( b) or f) GDPR and if necessary also passed on to third parties (e.g. Porsche Centres). For some contact points, it is also possible to register, e.g. for competitions; the principles described above in Section 4.1 apply accordingly. 

4.7. Matomo 

This website uses the open source web analysis service Matomo. Matomo does not use "cookies". Information about the use of this website is stored. Your IP address is anonymized before it is saved so that it can no longer be clearly assigned to you. This analysis tool is used to collect and analyze various statistical data on the basis of Art. 6 (1)( f) GDPR. We have a legitimate interest in the anonymized analysis of user behaviour in order to optimize our website. 

Information about the use of this website is not passed on to third parties. 

If you wish to object to the storage and use of your data, you can deactivate this in the checkbox below. In this case, an opt-out cookie will be stored in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit this website again. 

4.8. SalesViewer® 

Data is collected and stored on this website for marketing, market research, and optimization purposes using the SalesViewer® technology provided by SalesViewer® GmbH. Usage profiles may be created from this data under a pseudonym. For this purpose, so‑called tracking pixels are used to collect company‑related information. The data collected using this technology is not used to personally identify visitors to this website without the separate and explicit consent of the data subject, nor is it combined with personal data relating to the bearer of the pseudonym. 

The legal basis for this processing is Article 6 (1)( f) GDPR. Our legitimate interest lies in the purposes described above. You may object to the processing of your data at any time with effect for the future. Where personal data is stored, it will be deleted without delay once it is no longer required.  

4.9. Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform any independent analyses. It merely serves to manage and deploy the tools integrated through it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google’s parent company in the United States. Google is certified under the EU-US Data Privacy Framework (DPF).

This service is used on the basis of your consent pursuant to Art. 6 (1)( a) GDPR and Section 25 (1) of the TDDDG. You may withdraw your consent at any time.

4.10.  Google Analytics

This website uses the web analytics service Google Analytics. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies that enable an analysis of the use of this website. In particular, the following data may be processed: truncated IP address, date and duration of the visit, referrer URL, device information (such as browser, operating system, and device), as well as approximate location data. The processing of personal data is carried out for the purposes of analyzing user behavior, improving the usability of our website, and optimizing our online services. We have entered into a data processing agreement with Google in accordance with Art. 28 GDPR.

In the course of using Google Analytics, the transfer of personal data to Google LLC, headquartered in the United States, cannot be ruled out. From a data protection perspective, the United States is regarded as a third country in which an adequate level of data protection comparable to that of the European Union cannot be fully guaranteed at present. In particular, there is a risk that U.S. governmental authorities may access personal data without data subjects having effective legal remedies. Any such data transfers are carried out on the basis of Art. 44 et seq. GDPR. Where applicable, appropriate safeguards are ensured through Google’s certification under the EU-U.S. Data Privacy Framework (DPF) and, where necessary, through the conclusion of Standard Contractual Clauses (SCCs) adopted by the European Commission.

The use of Google Analytics is based exclusively on your consent pursuant to Art. 6 (1)( a) GDPR in conjunction with Section 25 (1) TTDSG. You may withdraw your consent at any time with effect for the future

4.11.   Microsoft Advertising

We use Microsoft Advertising on our website, a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, United States (“Microsoft”). In connection with Microsoft Advertising, we implement Universal Event Tracking (UET). For this purpose, a tracking tag is integrated into our website, which enables the recording and evaluation of specific user actions. The processing is carried out for the following purposes: the analysis of user behavior on our website, the measurement of the effectiveness of advertising measures (conversion tracking), the provision of interest-based advertising (remarketing), and the optimization of our marketing activities.

If you access our website via an advertisement placed through Microsoft Advertising, a cookie is stored on your device. This cookie allows us to determine whether a specific action (e.g., a purchase or registration) has been completed (conversion tracking) and to recognize visitors to our website in order to present them with personalized advertising at a later point in time (remarketing). In this context, the following categories of data may be processed: truncated or anonymized IP address, page views and interactions, duration of the visit, device and browser information, and the referrer URL.

The storage of cookies and the processing of personal data are carried out exclusively on the basis of your consent pursuant to Art. 6 (1)( a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future.

Microsoft processes personal data, in part, also in the United States. Any such transfer of data is carried out in accordance with Art. 44 et seq. GDPR on the basis of the EU Standard Contractual Clauses (SCCs) and, where applicable, additional appropriate safeguards. Nevertheless, it cannot be excluded that U.S. governmental authorities may access personal data without data subjects having effective legal remedies available against such access.

4.12.   Meta Pixel 

This website uses the “Meta Pixel” provided by Meta Platforms Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Meta Pixel enables the analysis of website activities, the measurement of the effectiveness of advertisements (conversion tracking), the optimization of marketing campaigns, and the delivery of targeted advertising. It also allows us to re‑engage visitors who have previously interacted with our website. In this context, information may be stored on, or accessed from, your device. Detailed information on the specific data stored and the purposes of processing can be found in the cookie settings available via the website footer. 

The following data is processed in particular: IP address, device and browser characteristics, URLs and domains, interactions on the website (e.g., button clicks), pixel ID, and cookie information. 

We do not store any personal data in this context. 

The legal basis for this processing is Article 6 (1)( a) GDPR and Section 25(1) TDDDG (consent). 

4.13.   LinkedIn Insight 

This website uses the “LinkedIn Insight Tag,” a conversion‑tracking tool provided by LinkedIn Ireland Unlimited Company, to optimize the website and analyze visitor information. 

A cookie is placed in your browser for this purpose, and in particular your IP address, device and browser characteristics, and page events (e.g., time of visit, page views) are processed. Detailed information on the specific data stored and the purposes of processing can be found in the cookie settings available via the website footer. 

We do not store any personal data in this context. LinkedIn anonymizes the data within seven days and deletes it within 90 days. 

The legal basis for this processing is Article 6 (1)(a) GDPR and Section 25 (1) TDDDG (consent). 

5. Press

If you subscribe to our press distribution list or if we have received your contact details in the context of existing press contacts, we process your personal data (e.g., name, email address, media outlet/editorial office, and, where applicable, your role) for the purpose of sending press releases, invitations to press events, and other press-related information. The legal basis for this processing is Article 6 (1)(f) GDPR. Our legitimate interest lies in maintaining media contacts and disseminating company information. Where you actively subscribe to the press distribution list, the processing is additionally based on your consent pursuant to Article 6(1)(a) GDPR.

Subscription to the press distribution list is voluntary. You may object to the receipt of press communications or withdraw your consent at any time.

We store your data for as long as you wish to remain on our press distribution list or as long as a legitimate interest exists in maintaining the press contact.

6. Protection of legitimate interests 

We process your personal data to protect our legitimate interests. In addition to the interests stated in the description of the individual services and offers under Section 4, data processing takes place within the framework of our website or after registration has taken place, in particular against the background of the following interests: 

  • Ensuring the availability, operation and security of technical systems as well as technical data management;
  • Further development of products, services and support offers;
  • Processing of data in a central prospect and customer support platform as well as upstream and downstream systems for promoting customer loyalty and sales purposes for the individual support of customers and prospects;
  • Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences and potentials. 


The respective data processing is carried out on the basis of Art. 6 (1)( f) GDPR.

7. Consent 

If you give us your consent to certain data processing procedures, this is always earmarked for a specific purpose; the purposes result from the content of the specific declaration of consent. In this case, data processing is based on Art. 6 (1)(a) GDPR. We will not be able to comply with your request without your consent. You may revoke your consent at any time without this affecting the legality of the processing carried out on the basis of the consent until revocation. 

On the basis of any consents you may have given, the companies listed in the declaration of consent may use the data for specific purposes, e.g. for individual customer and prospect support, and contact you via the communication channels you have requested. In this context, we will use your data to offer you an inspiring brand and service experience with Porsche and to make communication and interaction with you as personal and relevant as possible. 

Which of your data is specifically used for individual customer and potential customer care depends in particular on which data was collected on the basis of enquiries, orders and advice (e.g. when purchasing Porsche products) and which data you have made available at the respective contact points (e.g. via this website or in the Porsche Centre) (e.g. your personal interests). The scope and purpose of the consent given by you result in each case concretely from the formulation of the declaration of consent at the point of contact. 

We send newsletters after corresponding registration, which means with your consent. If the contents of the newsletter are specifically described in the registration, these are decisive for the scope of the consent. In addition, our newsletters contain information about our products, offers, promotions and our company. The company named in the registration process is responsible for processing your data. The registration is carried out by a double opt-in method, that means after your registration you will receive an email in which you are asked to confirm your registration in order to prevent the misuse of your email address. We log the registrations in order to be able to prove the registration process and the consent contained therein in accordance with the legal requirements. The logging of the registration and the processing of the data entered by you during registration is accordingly carried out on the basis of our legitimate interests pursuant to Art. 6 (1)( f) GDPR. You can revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter. 

8. Presence on Social Networks 

We maintain profiles on various social networks. Our social media accounts complement our website and provide you with the opportunity to interact with us. Once you access our social media profiles, the terms of service and data processing policies of the respective platform operators apply. The data collected about you when using these services is processed by the respective networks and may also be transferred to countries outside the European Union where no adequate level of data protection exists. We generally have no influence over the data processing within the social networks, as we, like you, are users of these platforms. We use the following social networks: 

8.1. Facebook and Instagram 

Our pages are available at: 
https://www.facebook.com/PorscheLeipzig 
https://www.instagram.com/porscheleipzig/ 

Operator of the networks: 
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland 

Privacy policies of the networks: 
https://www.facebook.com/about/privacy 
https://privacycenter.instagram.com/ 

8.2. LinkedIn 

Our page is available at: 
https://www.linkedin.com/company/porsche-leipzig-gmbh 

Operator of the network: 
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland 

Privacy policy of the network: 
https://de.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy 

8.3. Joint Controllership 

We process personal data as an independent controller when you send us inquiries via our social media profiles. We process this data to respond to your requests. 

In addition, we act as joint controllers with the following networks—LinkedIn, Facebook, Instagram, and TikTok—for the processing of certain data pursuant to Article 26 GDPR. When you visit our profiles on these networks, the platforms collect aggregated statistics (“Insights Data” or “Analytics Data”) based on specific events logged on their servers when you interact with our profiles or the associated content. We receive these aggregated, anonymized statistics from the networks regarding the usage of our profiles. As a rule, we cannot associate this data with individual users. To a certain extent, we can define the parameters according to which the networks generate these statistics for us. We use these statistics to make our profiles more interesting and informative for users. 

Further information regarding this data processing on Facebook and Instagram can be found in the Joint Controller Addendum: https://www.facebook.com/legal/terms/information_about_page_insights_data 

Further information regarding this data processing on LinkedIn can be found in the Joint Controller 

Addendum: https://legal.linkedin.com/pages-joint-controller-addendum 

For all other data processing activities, the respective network acts as the sole controller. 

The processing is based on our legitimate interests pursuant to Article 6 (1)(f) GDPR. These legitimate interests correspond to the purposes described above. 

We do not store any personal data ourselves in the context of joint controllership. For contact inquiries made outside of the networks, the information provided above regarding contact requests applies accordingly.  

9. Recipients of personal data 

Internal recipients: Within Porsche Leipzig GmbH, only those persons have access who need this for the purposes stated in each case. 

External recipients: We will only pass on your personal data to external recipients outside Porsche Leipzig GmbH if this is necessary for the use of our website or app, if other legal permission exists or if we have your consent for this. 

External recipients can be: 

9.1. Processors 

External service providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche Leipzig GmbH or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions. 

9.2. Public authories 

Authorities and state institutions, such as public prosecutor's offices, courts or tax authorities, to which we must transmit personal data for mandatory legal reasons. The transmission then takes place on the basis of Art. 6 (1)(c) GDPR. 

9.3. Affiliated companies 

Affiliated companies of VOLKSWAGEN AG and Dr. Ing. h.c. F. Porsche AG, to whom your personal data is transferred for the purpose of implementing the business relationship, fulfilling legal obligations or safeguarding legitimate interests (e.g. for the implementation, operation and trouble-free maintenance of IT systems, the administration of the stock of terminal devices and software and data backup). The transfer then takes place on the basis of Art. 6 (1)(b), c) and/or (f) GDPR. 

9.4. Other external parties 

Porsche dealers and service companies, cooperation partners, service providers, insurance companies or persons to whom data is transmitted on the basis of consent, for the execution of a contract with you or to safeguard legitimate interests, for example, Porsche Centres and Porsche service centres, financing banks, providers of other services or transport service providers. The transfer then takes place on the basis of Art. 6 (1)(a)( b) and/or (f) GDPR. 

10. Data processing in non-EU countries 

If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission. 

We can provide you with an overview of the recipients in third countries and a copy of the concretely agreed regulations to ensure the appropriate level of data protection. Please see the information in Section 1. 

11. Storage time and deletion 

If the description of the individual services and offers does not specify the specific storage period or deletion of the data, the following applies. 

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or - in the case of a consent - as long as you have not revoked the consent. In the event of an objection to processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We also delete your personal data if we are obliged to do so for other legal reasons. 

By applying these general principles, we usually delete your personal data immediately after the legal basis or the pursued purpose has ceased to apply and provided that no other legal basis (e.g. retention periods under commercial and taxation law) intervenes. If the latter is the case, we will delete the data once the other legal basis has ceased to apply.

12. Rights of the data subject 

As a data subject, you have a number of rights under applicable data protection law. In detail: 

Right of access: 
You have the right to obtain information about which of your personal data we process and how we process it, as well as to receive a copy of the personal data undergoing processing, pursuant to Article 15 GDPR. 

Right to rectification and erasure: 
You may request the rectification of inaccurate personal data and the completion of incomplete personal data, Article 16 GDPR. 

Where the statutory requirements of Article 17 GDPR are met, you may request the deletion of your personal data. 

Right to restriction of processing: 
You may request the restriction of processing under the conditions set out in Article 18 GDPR. 

Right to data portability: 
If you have provided data to us and the processing is based on your consent or on a contract, you may request, under the conditions of Article 20 GDPR, to receive the personal data you have provided in a structured, commonly used, and machine‑readable format, or to have such data transmitted to another controller. 

Right to object to processing based on legitimate interests: 
You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data where such processing is based on “legitimate interests” under Article 6 (1) (f) GDPR. 

If you exercise your right to object, we will cease processing your data unless we can demonstrate—pursuant to statutory requirements—compelling legitimate grounds for the processing which override your interests, rights, and freedoms. 

Right to withdraw consent: 
Where you have given us consent to process your personal data, you may withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out prior to the withdrawal remains unaffected. 

Right to lodge a complaint with a supervisory authority: 
You also have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates applicable data protection law. You may contact the supervisory authority responsible for your place of residence or your country, or the supervisory authority responsible for us.  

Contacting Us and Exercising Your Rights: If you have any questions regarding the processing of your personal data, your data subject rights, or any consent you may have provided, you may contact us free of charge. 
To exercise any of the rights described above, please contact us at PLG_Datenschutz@porsche.de or by post at the address listed above in Section 1. 
Please ensure that you provide sufficient information to allow us to clearly identify you. 
If you wish to withdraw your consent, you may use the same communication channel that you used when giving your consent. 

13. Automated decision-making and profiling 

We do not use automated decision-making or profiling for the processing of the business relationship. 

14. Integration of third-party offers 

The websites and services of other providers to which our website links have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our website may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers. 

The offers of third parties also include those of other Porsche companies and Porsche Centres to which links are provided from our website or which are otherwise integrated into our website, such as in particular: 

  • My Porsche
  • Porsche Car Configurator
  • Porsche Connect 

 

The respective provider and responsible party can be identified in particular via the legal notice and the respective data protection information on the individual websites. 

15. Valid from 

June 2026