Data protection

We, Porsche Leipzig GmbH (hereinafter "we" or "PLG"), appreciate your interest in our company and our products and services. Your privacy is important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation (hereinafter "GDPR").

In this privacy policy, we inform you about the processing of your personal data and about your rights as a data subject within the context of using our website, the Porsche-Leipzig App or as a customer of PLG. For information on other services and on offers of other companies in the Porsche Group, please refer to the respective privacy policy of these services or Porsche companies.

If we link to this data protection declaration from external social media sites, the following conditions only apply insofar as the data processing operations within the scope of such social media sites are actually our responsibility and no more specific and therefore primarily applicable references to data protection are made available within the scope of such social media sites. 

1. The responsible party for the data processing and data protection officer; contact

The responsible party for the data processing within the meaning of the data protection laws is:

Porsche Leipzig GmbH
Porschestraße 1
04158 Leipzig
Germany

Email: PLG_Datenschutz@porsche.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.
You can contact our data protection officer as follows:

Porsche Leipzig GmbH
Data protection Officer
Porschestraße 1
04158 Leipzig
Germany

Contact: PLG_Datenschutz@porsche.de

2. Subject of the data protection

The subject of data protection is personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, email address or telephone number, but also information that

• is necessarily provided during the use of our website, such as information about the start, end and extent of its use, as well as the transmission of your IP address,
• or data which is necessary for booking, organising and carrying out our event packages or events.

3. Type, scope and legal basis of data processing

Below you will receive an overview of the purposes and legal bases of data processing within the framework of the contractual relationship.

The use of our website/app is generally possible without registration. However, even if you use our website/app without registration, personal data can be processed.

Below you will find an overview of the type, scope, purposes and legal basis of automated data processing via our website and for booking, organising and implementing our event packages or events.

3.1. Provision of our Website
When your end device accesses our website, we process the following data:

• date and time of access,
• duration of the visit,
• type of end device,
• operating system used,
• functions used,
• amount of data sent,
• type of event,
• referrer URL,
• IP address,
• domain name.

We process this data on the basis of Art. 6 Section 1 f) GDPR to provide the website, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When you visit our website, this data is processed automatically. Without this provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity. 

3.2. Cookies
When you visit our website, so-called "cookies", i.e. small files, can be stored on your device in order to offer you a comprehensive range of functions, to make use more convenient, and to optimise our offers. If you do not wish cookies to be used, you can prevent them from being stored on your device by making the appropriate settings in your internet browser or using separate options for objecting. Please note that this may limit the functionality and range of the functions of our offer. Please refer to our cookie policy for detailed information on the type, scope, purposes, legal bases and possible objections to data processing in relation to cookies. 

3.3. Use of the Porsche Leipzig App
When your device accesses our website, we process the following data:

• date and time of access,
• duration of the visit,
• type of end device,
• operating system used,
• functions used,
• amount of data sent,
• type of event,
• referrer URL,
• IP address,
• domain name.

We process this data on the basis of Art. 6 Section 1 f) GDPR to provide the Porsche Leipzig App, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When you visit our website, this data is processed automatically. Without this provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity. We process personal data in the form of film recordings for Co-Pilot event programmes exclusively at your request. Data processing is based on Art. 6 Section 1 f ) GDPR.

4. Individual services and offers

You can voluntarily provide personal data in several places on our website or register for services with an individual profile, e.g. as part of the following offers: webshops, contact requests, information requirements. Without registration, some or all of the above services can only be used with limited functionality.

4.1 Registration process
Mandatory information required for registration is marked with an "*" in the respective input field; as a rule, at least the following information is required: salutation, name, postal address, telephone numbers and email address. It is not possible to register without providing the mandatory data. Within the scope of your registration you have the possibility to provide further information on a voluntary basis, e.g. company contact data, profession, date of birth, etc. Please note that this information is not required for registration and you alone decide whether you wish to provide us with this information. If you do not provide this information, we may not be able to best meet your wishes in using our offers.

The personal data you provide during registration is used by us to create your profile and to identify you later each time you log in. The applicable legal basis for these data processing operations is Art. 6 Section 1 b) GDPR. Depending on the service for which you are registering, additional data may be collected and then linked to your profile data. When using the services and offers described in detail below, other personal data may also be collected and processed (e.g. payment data when placing orders) and, if necessary, may be transmitted to third parties (e.g. Porsche Centres) in order to make these services and offers available to you.

We carry out all the processing described in this section either - as far as indicated - on the basis of your consent, to fulfil our contract with you or on the basis of our legitimate interests.

Further information on other services and offers can be found below.

4.2. Webshop Porsche Leipzig event packages
We offer you the possibility to place orders for Porsche Leipzig experience packages via our webshop. You can either use your Porsche ID or place the order by manually entering your data.

• manual data entry

To place an order via this webshop, you can enter your data manually. The  following data will be processed: salutation, first name, surname, address, email address. On a voluntary basis, you may also provide further information; however, this is not necessary for the placing and execution of the order.

The personal data provided by you within the scope of the order will be used by us for the execution and processing of orders and payment transactions placed via the webshop. In the case of a credit card payment, the card number, expiry date of the card, the holder's name and the card verification number are also recorded. The legal basis for these data processing operations is Art. 6 Section 1 b) GDPR. In order to process payment transactions, we may pass on your data to the payment service provider commissioned by us, who will process this data on our behalf.

We delete the data provided by you within the scope of an order as soon as the purpose of collection ceases to apply, subject to further storage of the data for purposes of complete contract fulfilment (e.g. during current statutory limitation periods) and subject to continued archiving obligations under commercial or tax legislation.

• Porsche ID

We offer a registration and login procedure for orders in our webshop with your Porsche ID. This means that you do not have to remember any new login data for our webshop. The Porsche ID and the corresponding service are provided by the Porsche Sales & Marketplace GmbH (“PSM GmbH”). The details on how to register a user account for a Porsche ID can be found in the privacy policy of the PSM GmbH. 

If you decide to use the registration and login procedure involving the Porsche ID, you will be redirected to the PSM GmbH login/registration screen for the Porsche ID where you can log in with your Porsche ID username and password. We will then receive a message from PSM GmbH that you have successfully registered and the registration or application for our online offer will be completed. As part of the registration and login process, you can confirm to PSM GmbH that we may access the profile data of your Porsche ID user account. This may also apply to the payment data stored there. This means that you do not have to re-enter or maintain your profile data and, if applicable, payment data (e.g. if your address changes) in order to create your user profile for our online offer. Conversely, changes to the profile data in the user account of our online service are then also synchronised accordingly in your user account for the Porsche ID. 

The data processing within the scope of the registration and login procedure with the integration of the Porsche ID is carried out on the basis of Article 6 Section 1 b) and f) GDPR in order to register you with your user account for our online offer or to identify you when you register. In addition to carrying out your desired procedure, we are interested in making the registration and application process efficient and convenient. In this context, we are joint controllers with PSM GmbH and jointly determine the purposes and means of processing personal data in relation to the process. In an agreement on joint controllership pursuant to Article 26 of the GDPR, we have defined how the respective tasks and responsibilities for the processing of personal data are structured and who fulfils which data protection obligations. In particular, we have determined how an appropriate level of security and your data subject rights can be ensured, how we can jointly fulfil the information obligations under data protection law and how we can monitor potential data protection incidents. This also includes ensuring that we can fulfil our reporting and notification obligations. You can exercise your data protection rights against any data controller, regardless of the agreement addressed. If you contact us, we will coordinate in accordance with Article 26 of the GDPR in order to respond to your request and ensure your data protection rights. 

4.3. Co-Pilot
We process personal data in the form of film recordings relating to Co-Pilot event packages exclusively at the request of the person concerned.

Data processing is based on Art. 6 Section 1 a) GDPR.

4.4. Preparation and execution of event packages or an event
We process personal data, which is normally at least the following information: salutation, name, postal address, telephone numbers and email address if this is necessary for the preparation and execution of a contract with you. The purposes depend on the specific contract and include in particular

• customer communication;
• the preparation and processing of offers or enquiries;
• the execution of the concluded contracts;
• support and service before, during and after the visitor programme or event
• Further details on the purposes of data processing can be found in the respective contractual documents.

Data processing is based on Art. 6 Section 1 b) GDPR. You must provide the personal data required for the preparation and implementation of our visitor programmes or events. Without this information, we will not be able to process your request or fulfil the contract.

We delete the data if it is no longer necessary for the purposes of preparing and executing a contract and if no other legal basis applies. If the latter is the case, we will delete the data once the other legal basis has ceased to apply.

4.5. Live Chat
In certain areas of our website we offer contact and advice via live chat. With the help of the live chat function, you can communicate with one of our consultants via text messages. When you access and use live chat, for technical reasons your browser automatically transmits the following data at the beginning of use, which we store separately from other data that you may transmit to us:

• date and time of access,
• duration of the visit,
• type of browser and version,
• operating system used,
• amount of data sent,
• type of event,
• IP address (anonymised).

The legal basis of this data processing is Art. 6 Section 1 f) GDPR, whereby our legitimate interest is directed towards guaranteeing and maintaining the operation and security of our offers as well as the elimination of faults. Within this framework, the data is also processed by us for analysis purposes - without assignment to a specific person.

If you provide us with additional personal data via the live chat function, this is done on a voluntary basis. We do not actively request personal data from you. The texts you enter in the input mask during the live chat are stored on the server of an external service provider on our behalf. The legal basis for this data processing is Art. 6 Section 1 b) GDPR.

4.6. Other means of contact
If you provide us with personal data by email or via a contact form, this is always done on a voluntary basis. Your details will be processed by us for processing your contact enquiry and its handling in accordance with Art. 6 Section 1 b) or f) GDPR and if necessary also passed on to third parties (e.g. Porsche Centres). For some contact points, it is also possible to register, e.g. for competitions; the principles described above in Section 4.1 apply accordingly.

4.7. Matomo
This website uses the open source web analysis service Matomo. Matomo does not use "cookies". Information about the use of this website is stored. Your IP address is anonymized before it is saved so that it can no longer be clearly assigned to you. This analysis tool is used to collect and analyze various statistical data on the basis of Art. 6 Section 1 f) GDPR. We have a legitimate interest in the anonymized analysis of user behaviour in order to optimize our website.

Information about the use of this website is not passed on to third parties.

If you wish to object to the storage and use of your data, you can deactivate this in the checkbox below. In this case, an opt-out cookie will be stored in your browser that prevents Matomo from storing usage data. If you delete your cookies, the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit this website again.

5. Protection of legitimate interests

We process your personal data to protect our legitimate interests. In addition to the interests stated in the description of the individual services and offers under Section 4, data processing takes place within the framework of our website or after registration has taken place, in particular against the background of the following interests:

• Ensuring the availability, operation and security of technical systems as well as technical data management;
• Further development of products, services and support offers;
• Processing of data in a central prospect and customer support platform as well as upstream and downstream systems for promoting customer loyalty and sales purposes for the individual support of customers and prospects;
• Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences and potentials.

The respective data processing is carried out on the basis of Art. 6 Section 1 f) GDPR.

6. Consent

If you give us your consent to certain data processing procedures, this is always earmarked for a specific purpose; the purposes result from the content of the specific declaration of consent. In this case, data processing is based on Art. 6 Section 1 a) GDPR. We will not be able to comply with your request without your consent. You may revoke your consent at any time without this affecting the legality of the processing carried out on the basis of the consent until revocation.

On the basis of any consents you may have given, the companies listed in the declaration of consent may use the data for specific purposes, e.g. for individual customer and prospect support, and contact you via the communication channels you have requested. In this context, we will use your data to offer you an inspiring brand and service experience with Porsche and to make communication and interaction with you as personal and relevant as possible.

Which of your data is specifically used for individual customer and potential customer care depends in particular on which data was collected on the basis of enquiries, orders and advice (e.g. when purchasing Porsche products) and which data you have made available at the respective contact points (e.g. via this website or in the Porsche Centre) (e.g. your personal interests). The scope and purpose of the consent given by you result in each case concretely from the formulation of the declaration of consent at the point of contact.

We send newsletters after corresponding registration, which means with your consent. If the contents of the newsletter are specifically described in the registration, these are decisive for the scope of the consent. In addition, our newsletters contain information about our products, offers, promotions and our company. The company named in the registration process is responsible for processing your data. The registration is carried out by a double opt-in method, that means after your registration you will receive an email in which you are asked to confirm your registration in order to prevent the misuse of your email address. We log the registrations in order to be able to prove the registration process and the consent contained therein in accordance with the legal requirements. The logging of the registration and the processing of the data entered by you during registration is accordingly carried out on the basis of our legitimate interests pursuant to Art. 6 Section 1 f) GDPR. You can revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter.

7. Recipients of personal data

Internal recipients: Within Porsche Leipzig GmbH, only those persons have access who need this for the purposes stated in each case.

External recipients: We will only pass on your personal data to external recipients outside Porsche Leipzig GmbH if this is necessary for the use of our website or app, if other legal permission exists or if we have your consent for this.

External recipients can be:

7.1 Processors
External service providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche Leipzig GmbH or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.

7.2 Public authories
Authorities and state institutions, such as public prosecutor's offices, courts or tax authorities, to which we must transmit personal data for mandatory legal reasons. The transmission then takes place on the basis of Art. 6 Section 1 c) GDPR.

7.3 Affiliated companies
Affiliated companies of VOLKSWAGEN AG and Dr. Ing. h.c. F. Porsche AG, to whom your personal data is transferred for the purpose of implementing the business relationship, fulfilling legal obligations or safeguarding legitimate interests (e.g. for the implementation, operation and trouble-free maintenance of IT systems, the administration of the stock of terminal devices and software and data backup). The transfer then takes place on the basis of Art. 6 Section 1 b), c) and/or f) GDPR.

7.4 Other external parties
Porsche dealers and service companies, cooperation partners, service providers, insurance companies or persons to whom data is transmitted on the basis of consent, for the execution of a contract with you or to safeguard legitimate interests, for example, Porsche Centres and Porsche service centres, financing banks, providers of other services or transport service providers. The transfer then takes place on the basis of Art. 6 Section 1 a), b) and/or f) GDPR.

8. Data processing in non-EU countries

If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission.

We can provide you with an overview of the recipients in third countries and a copy of the concretely agreed regulations to ensure the appropriate level of data protection. Please see the information in Section 1.

9. Storage time and deletion

If the description of the individual services and offers does not specify the specific storage period or deletion of the data, the following applies.

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or - in the case of a consent - as long as you have not revoked the consent. In the event of an objection to processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We also delete your personal data if we are obliged to do so for other legal reasons.

By applying these general principles, we usually delete your personal data immediately after the legal basis or the pursued purpose has ceased to apply and provided that no other legal basis (e.g. retention periods under commercial and taxation law) intervenes. If the latter is the case, we will delete the data once the other legal basis has ceased to apply.

10. Rights of the data subject

As a data subject, you have a number of rights. These include:

Right to information: You have the right to receive information about your personal data stored by us.

Right of correction and deletion: You may request us to correct incorrect data and - insofar as the legal requirements are fulfilled - to delete your data.

Restriction of processing: You can demand - as far as the legal requirements are fulfilled - that the processing of your data by us is restricted.

Data transferability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another responsible party, provided that the legal requirements are met.

Objection to data processing on the legal basis of "legitimate interest":  You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of "legitimate interest". If you exercise your right of objection, we will stop the processing of your data unless we can - in accordance with the applicable statutory provisions - prove compelling reasons worthy of protection for further processing which outweigh your rights.

Revocation of consent: If you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.

Objection to cookies: You can also object to the use of cookies at any time. Please refer to our cookie policy for details. 

Right of appeal to the supervisory authority: You can also lodge a complaint with the supervisory authority if you believe that the processing of your data violates applicable law. Especially for this purpose, you can contact the data protection authority which is responsible for your place of residence or country or the data protection authority responsible for us.

Your contact to us: Furthermore, you can contact us free of charge with questions about the processing of your personal data, your rights as a data subject and any consent given. To exercise all your aforementioned rights, please contact plg_datenschutz@porsche.de by email or write to the address provided in Section 1. Please make sure that we are able to identify you clearly.

11. Automated decision-making and profiling

We do not use automated decision-making or profiling for the processing of the business relationship.

12. Integration of third-party offers

The websites and services of other providers to which our website links have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our website may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers.

The offers of third parties also include those of other Porsche companies and Porsche Centres to which links are provided from our website or which are otherwise integrated into our website, such as in particular:

• My Porsche
• Porsche Car Configurator
• Porsche Connect

The respective provider and responsible party can be identified in particular via the legal notice and the respective data protection information on the individual websites.

13. Valid from

01.12.2023