Data privacy

I. Introduction

Thank you for visiting our website and your interest in our company. We want you to feel safe and secure when visiting our website. We therefore take the protection as well as the confidentiality of your personal data very seriously.

This privacy notice is to inform you about when and for which purpose we process personal data that we collect when you use our website.

Of course, your personal data will be processed in compliance with the provisions of the EU General Data Protection Regulation („GDPR“), the German Federal Data Protection Act (Bundesdatenschutzgesetz, („BDSG“) and any other applicable regulations on data protection.

 

 

II. Data controller

The Controller, i.e., the body responsible for processing personal data, is:

Porsche Automobil Holding SE
Porscheplatz 1
70435 Stuttgart
Germany
Telephone +49 711 911 110 21
Telefax +49 711 911 118 19
E-Mail: investorrelations@porsche-se.com

Our data protection officer can be contacted by email at datenschutzbeauftragter@porsche-se.com or by post by adding „For the attention of the data protection officer“ to the address.

 

 

III. Processing of personal data when you visit our website

1. General information

On the one hand, your personal data will be collected when you communicate them to us; e.g. if you write to us via the contact form or if you send us an inquiry. As far as certain input fields are marked as „mandatory“, we collect with these fields only the data that is necessary for the fulfillment of the contract or the execution of the desired action. Of course, you can provide us with additional information. Your personal data will only be processed for the execution of the requested measures, e.g. answering your enquiries and fulfilling your requests (Art. 6 para. 1 sentence 1 lit. b GDPR).

On the other hand, our IT systems automatically collect data when you are visiting the website (for more information, please see clause 2 onwards).

 

2. Logs

By visiting our site our server stores your access data. This includes e.g. the type and version of your browser, the kind of your used operating system, the domain name of the internet service provider, the IP address of the computer used, the website from which you are visiting us, date and time of the server request as well as the client's file request (file name and URL). We use these data anonymously for statistical evaluations, whereby no attribution is made to the respective user.

Purpose of this data processing is to enable the availability and the correct presentation of our website on your device and to optimize our website. In that regard, we have legitimate interests. Legal basis for the processing of the personal data is Art. 6 para. 1 sentence 1 lit. f GDPR as well as § 15 TMG.

 

3. Cookies

A cookie is a small text file that is stored by a website on your hard drive. Cookies do not cause any damage to your computer and do not contain any viruses.

Generally, two types of cookies must be distinguished: cookies that only exist while the user navigates a website and are deleted when the browser is closed (known as session cookies) and cookies that are saved to the user's computer when a website is accessed and that enable us to identify your computer on your next visit (known as persistent cookies).

We use cookies to enable you to navigate through the website and to use its functions. Without these cookies we cannot provide you with certain services that you have requested (Art. 6 para. 1 sentence 1 lit. b GDPR). Most browsers accept such cookies automatically. If you do not want this, you can deactivate the relevant setting in the internet options of your browser. You can delete saved cookies in the internet options of your browser at any time. This may lead to certain functional restrictions of our offers.

As far as you have consented to this, we may also use cookies in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR for tracking purposes, to improve the functionality and the service of the website, to compile statistics on how our website is used and to measure the effectiveness of our advertising campaigns. In addition, cookies make it possible to remember previous details of a visit (e.g. user name, language) to offer services tailored to the user’s needs. Cookies are also used to enable a demand-oriented design of our website; for this purpose, pseudonymous user profiles may be created which enable an analysis of your use of the website. For this purpose we use the third-party cookie Google Analytics (see clause 4),

You can withdraw the consent you provided to us at any time. This is possible via the button „Change your cookie settings“ in the footer of our website.

 

4. Google Analytics

With your consent, this website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Irland („Google“). Google Analytics uses so-called „cookies“, which are text files saved on your computer to enable the website analyze how visitors use the site.

It cannot be ruled out that the information collected may also be transmitted to a Google server in a third country, in particular to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, USA. Google LLC is certified under the „EU US Privacy Shield“ (can be found at https://www.privacyshield.gov/list under the search term „Google“). Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States.

We use Google Analytics to enable us to continually enhance your experience when using our website. Using the statistics so generated allows us to improve our offer and to make it more interesting for you as the user.

Anonymization of IP addresses

For your protection, we have activated the function that anonymizes IP addresses on our website. This means that Google will shorten your IP address within member states of the European Union or other states being a party to the Agreement on the European Economic Area. Only in exceptional cases the full IP address will be communicated to a Google LLC server located in the United States and shortened there.

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage and thus enable us to analyze website usage. In this case, pseudonymous user profiles can be created. According to Google, Google will not connect your transmitted IP address with any other data held by Google.

Withdrawal of consent

You can withdraw the consent you provided to us at any time. This is possible via the button „Change your cookie settings“ in the footer of our website. Furthermore, you may prevent the data created by the cookie regarding your use of the website (including your IP address) from being sent to and processed by Google by downloading and installing the browser add-on to disable Google Analytics available from the following website: tools.google.com/dlpage/gaoptout.

For browsers on mobile devices, you may prevent that Google Analytics collects your data by clicking on the link below: Deactivate Google Analytics. This activates an opt-out cookie that prevents the collection of your data for all of your future visits to this website. Please note that this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click the link again.

Commissioned data processing

We have entered into a data processing agreement with Google and are fully compliant with the strict requirements of the German data protection authorities when using Google Analytics.

Further Information

For further information on the processing of your personal data through Google, possibilities of adjustment and contradiction please refer to the websites of Google, for example:

 

5. MONOTYPE Web Fonts

For the standardized presentation of fonts on our website we use so-called web fonts, which are provided by Monotype GmbH, Spichernstraße 2, 10777 Berlin, Germany, in cooperation with its parent company Monotype Imaging Holdings Inc., headquartered at 600 Unicorn Park Drive, Woburn, Massachusetts 01801 USA („Monotype“).

For this purpose your browser loads the required web fonts from the local server of our hosting provider into your browser cache when you visit our website. In order to enable Monotype to invoice the license fees for the use of the Web Fonts to us and to count the number of page views, the project identification number of the Web font (anonymized), the URL of the licensed website linked to a customer number and the URL of the previously visited page will be collected and forwarded to Monotype. It cannot be ruled out that the information collected may also be transmitted to a Monotype server in a third country, in particular to a server of Monotype Imaging Holdings Inc., USA. According to Monotype, it is not possible to draw any conclusions about the affected website visitor.

These web fonts are used in the interest of a standardized and attractive presentation of our website. This constitutes a legitimate interest within the meaning of the relevant legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR.

For further information on the data processing through Monotype please refer to the following websites of Monotype:

 

 

IV. Processing of personal data when visiting our online presence on the social media platform LinkedIn

As Joint Controller we operate a company site on the LinkedIn platform of the provider LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn“), where we inform about news from our company and events.

Data processing on our LinkedIn site and legal basis for this

As a provider of an online presence on the social media platform LinkedIn, we process personal data when you contact us directly via the platform (in a personal message or via the public comment function). Which data is collected depends on the content of your message and the contact details you have provided or released.

Beside that LinkedIn uses cookies and similar technologies (e.g., web beacons, pixels, ad tags and device identifiers) to collect information that allows LinkedIn to recognize users and to conduct broad analysis of user behavior. LinkedIn provides us with relevant information to analyze the user behaviour of our online presence in anonymized form. This enables us to statistically evaluate the use of our LinkedIn site and thus to control the marketing of our activities in a targeted manner.

With the help of this data the provider of the social media platform can also create user profiles. This enables him to display interest-related advertising to the user within and outside the respective social media presence. If you are also logged into your social media account with the browser you use for our LinkedIn site, the name of the account is also forwarded. This allows the social media provider to match the visit of this website to your user account.

The processing of personal data collected via the platform by us is based on Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in being able to present Porsche SE to the outside world in a variety of ways and to make the most effective use of the communication opportunities with our customers. If you are asked by LinkedIn to give your consent to the above-mentioned data processing, the legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a, Art. 7 GDPR.

Disclosure of personal data

Please note that we cannot track all data processing activities on LinkedIn, nor do we have any control over it. Accordingly, we cannot control or exclude the possibility that the information collected by LinkedIn may be transferred to a third country, specifically to a server of LinkedIn's parent company, LinkedIn Corporation, located in 1000W. Maude Ave. Sunnyvale, California 94085, USA. LinkedIn Corporation is certified under the „EU US Privacy Shield“ (can be found at https://www.privacyshield.gov/list). Privacy Shield is an agreement between the European Union (EU) and the US to ensure compliance with European privacy standards in the United States.

Rights of the data subject

In principle, you can assert your data protection rights with regard to data processing by our LinkedIn site both against us and against LinkedIn. However, we would like to point out that these can be most effectively claimed on LinkedIn. Because only LinkedIn, as the provider, has access to the users' data and can therefore take appropriate measures and provide information directly.

For further information on the processing of your personal data through LinkedIn, possibilities of adjustment and contradiction please refer to the websites of LinkedIn, for example:

 

V. Recipient(s) of your personal data

Within Porsche SE, only authorised staff with relevant competencies will have access to your personal data.

We are authorised to mandate third parties, for example website administrators, to provide certain services, such as IT services. Furthermore, we retain legal advisors, management consultants and auditors, among other professionals. These third parties perform services on our behalf and under our supervision as well as in accordance with our instructions and they may have access to personal data to the extent required for them to render their services.

We require all of our employees, agencies and service providers to act in the strictest of confidence.

In addition, we can – to the extent legally permissible – transmit your personal data to authorities, courts and other governmental authorities both in Germany and abroad in order to comply with statutory duties or if this is in the company's best interest.

Your data will not be sold, hired out or traded in.

 

VI. Obligation to erase data

We will erase the data gathered in this connection once their storage is no longer necessary (usually after the request has been finally dealt with), the personal data is no longer required for any administrative or court proceedings, if any, and no other statutory obligations to furnish evidence or record retention requirements apply or any reasons justifying the storage exist.

 

VII. Security

Porsche SE employs technical and organisational security measures to protect your personal data that we process against random or intentional manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved in line with developments in technology.

 

VIII. Your rights

Subject to the statutory requirements, you have the right to access information about your processed personal data (Art. 15 GDPR), to require rectification (Art. 16 GDPR) or erasure of your personal data (Art. 17 GDPR), the restriction of processing (Art. 18 GDPR) or the portability of your personal data (Art. 20 GDPR) by using the contact information indicated above.

Right to object (Art. 21 GDPR): If we process your data for the purposes of the legitimate interests pursued by us (Art. 6 para. 1 sentence 1 lit. f GDPR), at any time with effect for the future you may object to such processing on grounds relating to your particular situation that oppose such data processing. Please submit your objection to the contact address indicated above.

In some cases, however, we are not permitted to completely erase user data, due to legal retention requirements.

We would also like to draw your attention to the possibility to file a complaint with a responsible supervisory authority. The responsible supervisory authority for us is the Baden-Württemberg State Commissioner for the Protection of Data and Freedom of Information, Königstraße 10a, 70173 Stuttgart, Germany.

 

IX. Contact us

If you have any questions, comments or suggestions about this privacy notice or our data protection policies, please contact Porsche SE's data protection officer under datenschutzbeauftragter@porsche-se.com.

 

 

Imprint