Privacy policy for competitions

We, Porsche Leipzig GmbH (hereinafter "we" or "PLG"), take the protection of your personal data and its confidential handling very seriously. The processing of your personal data is carried out exclusively within the framework of the statutory provisions of data protection law, particularly the General Data Protection Regulation ("GDPR") and the Federal Data Protection Act ("BDSG").

With this privacy policy, we inform you about the processing of your personal data in connection with participation in PLG contests.

1. Data Controller and Data Protection Officer; Contact

The data controller within the meaning of the data protection laws is:

Porsche Leipzig GmbH Porschestraße 1 04158 Leipzig Germany Email: PLG_Datenschutz@porsche.de

If you have any questions or suggestions regarding data protection, please feel free to contact us. You can reach our Data Protection Officer as follows:

Porsche Leipzig GmbH Data Protection Officer Porschestraße 1 04158 Leipzig Germany Contact: PLG_Datenschutz@porsche.de

2. Subject of Data Protection

The subject of data protection is personal data. This includes all information related to an identified or identifiable natural person (hereinafter referred to as "data subject"). This includes, for example, details such as name, postal address, email address, or telephone number.

3. Type, Scope, Purposes, and Legal Basis of Data Processing

Below, you will find an overview of the purposes and legal basis of data processing.

We regularly process personal data that we have received from you in the context of participating in a contest for the management and administration of the prizes. This includes, in particular, personal master data (e.g., name, first name, personnel number) and contact data (e.g., private address, email address, and telephone number). When the prize is awarded, photo and video recordings of you may also be made.

3.1 Fulfillment of Legal Obligations

We are subject to various legal obligations, particularly those arising from tax and finance laws. The purposes of processing stem from the respective legal obligation, commonly serving the purpose of complying with governmental documentation, control, and information requirements.

Data processing is based on Article 6, paragraph 1, point (c) of the GDPR. When we collect data due to a legal obligation, we process only those personal data necessary to fulfill the legal obligation.

We anonymize or delete the data once the legal obligation ceases to apply and no other legal basis intervenes. If the latter applies, we will anonymize or delete the data once the other legal basis ceases to apply.

3.2 Fulfillment of a Contract

If you are fortunate enough to win a contest, a gift contract will be concluded between you and PLG. We process your personal data to fulfill this contract. The processing is based on Article 6, paragraph 1, point (b) of the GDPR.

3.3 Consent

If you have given consent for specific purposes, the purposes of processing result from the content of this consent.

Data processing is based on Article 6, paragraph 1, point (a) of the GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out based on your consent up to the point of withdrawal. You can withdraw your consent at any time by sending an email to plg-kundendaten@porsche.de with effect for the future.

4. Recipients of Personal Data

Internal Recipients: Within PLG, only those individuals who need access for the purposes mentioned under section 3 (e.g., HR department, sales and marketing, accounting) have access.

External Recipients: We only pass on your personal data to external recipients outside PLG if we are legally obliged to do so.

External recipients may include:

a) Public Authorities

Authorities and state institutions, such as public prosecutors, courts, or tax authorities, to whom we must transfer personal data for compelling legal reasons. The transmission then takes place based on Article 6, paragraph 1, point (c) of the GDPR.

b) Other External Bodies

Other external bodies, such as doctors or emergency services, to whom data are transmitted to protect vital interests. The transmission then takes place based on Article 6, paragraph 1, point (d) of the GDPR.

5. Storage Duration

Your data will generally be stored for the duration of administering the contest. After you have received/redeemed your prize, we will store the data for one more year.

Tax-relevant documents (e.g., contracts and supplementary contract-relevant documents) must be stored for up to 15 years according to statutory retention periods.

6. Rights of the Data Subject

As a data subject, you have numerous rights. Specifically:

Right of Access: You have the right to know what personal data we process about you and to receive a copy of the personal data being processed, Article 15 of the GDPR.

Right to Rectification and Erasure: You can request the correction of incorrect personal data and the completion of incomplete personal data, Article 16 of the GDPR. If the statutory requirements of Article 17 of the GDPR are met, you can request the erasure of your personal data.

Right to Restriction of Processing: You can request that we restrict the processing of your data if the legal requirements of Article 18 of the GDPR are met.

Data Portability: If you have provided us with data that is processed based on your consent or a contract, you can request, if the legal requirements are met, that you receive the data you provided in a structured, commonly used, and machine-readable format or that we transfer this data to another controller, Article 20 of the GDPR.

Right to Object to Data Processing on the Basis of “Legitimate Interests”: You have the right to object at any time to the processing of your data based on legitimate interests for reasons arising from your particular situation. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms.

Right to Object to Data Processing for Direct Marketing Purposes: We may process your personal data based on legitimate interests to undertake direct marketing. You have the right to object to this processing at any time.

Right to Withdraw Consent: If you have granted us consent to process your data, you can withdraw your consent at any time with effect for the future. The lawfulness of processing your data up to the point of withdrawal remains unaffected.

Right to Lodge a Complaint with the Supervisory Authority: You can lodge a complaint with the supervisory authority if you believe that the processing of your data violates applicable law. You may contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

Your Contact with Us and Exercise of Your Rights: Furthermore, you can contact us free of charge with questions regarding the processing of your personal data, your data subject rights, and any consent you may have given. Please address all your requests regarding all your rights mentioned above to PLG_Datenschutz@porsche.de or by post to the address provided in section 1. Please ensure that we can clearly identify you. When withdrawing consent, you may also use the same contact method that you used to give consent.

7. Date of Last Update

April 25, 2024