Data privacy for shareholders

Information for shareholders of Porsche Automobil Holding SE on the processing of their personal data

Compliance with the provisions of data protection law is very important to Porsche Automobil Holding SE („Porsche SE“ – hereinafter „we“ or „us“).

In the following, we would like to inform our shareholders1 about the processing of their personal data and about their rights under data protection law.

 

I. Responsibilities and contact information

The controller of the processing of personal data is Porsche SE. You may reach Porsche SE at:

Porsche Automobil Holding SE
Porscheplatz 1
70435 Stuttgart
Telephone: +49 711 911 11021
Telefax: +49 711 911 11819
Email: investorrelations@porsche-se.com

You may address your questions or comments on the processing of personal data to the data protection officer of Porsche SE:

Porsche Automobil Holding SE
Der Datenschutzbeauftragte (The Data Protection Officer)
Porscheplatz 1
70435 Stuttgart
Email: datenschutzbeauftragter@porsche-se.com

 

II. Purposes and legal bases of the processing

We process your personal data in full compliance with the provisions of the European Data Protection Regulation („GDPR“), the German Federal Data Protection Act (Bundesdatenschutzgesetz, „BDSG“) and all other relevant data protection regulations.

Generally, Porsche SE will receive the shareholders' personal data from the credit institution that the shareholders have entrusted with the safekeeping of their bearer shares (so-called depository bank) via the registration office. In some cases, Porsche SE may receive personal data directly from the shareholders.

We process your personal data (e.g. last name and first name, address, number and class of shares, authorizations/instructions and admission ticket number) as well as personal data of your shareholder representatives, if any, to the extent that this is necessary for the obligations resulting from the German Stock Corporation Act (AktG)2 

and for the intended processing purposes, in particular for the performance of General Shareholders' Meetings (Art. 6 para. 1 sentence 1 lit. c GDPR). This includes in particular

  • the handling of the registration for the General Shareholders' Meeting;
  • the creation of lists of participants/presence lists;
  • the verifiable record of the authorization of proxies, including those appointed by the company for the General Shareholders' Meeting.

In certain individual cases, we also process your personal data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, insofar as this is necessary for the purposes of the legitimate interests pursued by Porsche SE. This occurs, inter alia,

  • for preparing statistics on, for instance, changes in the shareholder structure, the number of transactions or major shareholders;
  • for processing contact and service requests;
  • for provision of financial publications;
  • for participating in our General Shareholders' Meeting as a guest.

In addition, Porsche SE is subject to various other legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR) that may require the processing of your personal data. Such legal obligations may follow, for example, from regulatory requirements, sanctions laws as well as commercial and taxation laws.

 

III. Note on the on the possible recording and publishing of image and sound recordings of the event

During the General Shareholders' Meetings, image and sound recordings may be made and stored. Shareholders and other participants of our events could be pictured on these recordings. These image and sound recordings may in particular be published on our website www.porsche-se.com and on our company pages in the social media for the purpose of reporting and advertising our services.

We would like to point out that information on the Internet is accessible worldwide, can be found with search engines and linked to other information, from which personality profiles can possibly be created. Information posted on the Internet, including photographs, can be easily copied and distributed, and there are specialised archiving services whose aim is to permanently document the state of certain websites on certain dates. As a result, information published on the Internet may still be found elsewhere even after it has been deleted on the original website.

Legal basis:

We have a legitimate interest in the creation and storage of the image and sound recordings in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

By participating, you consent to the publication of image and sound recordings of the event on which you are also pictured.

If you do not agree, please inform the photographer or one of our employees. You have the right to withdraw your consent at any time. However, even if you withdraw your consent, the recordings may still be published and displayed for reporting purposes in accordance with Sec. 23 para. 1 No. 3 of the German Art Copyright Act if the event itself is clearly in the foreground of the recordings.

 

IV. Recipient(s) of your data

Within Porsche SE, only authorised staff with relevant competencies will have access to your personal data.

For the organization of the General Shareholders' Meeting (e. g. for carrying out the registration service for the General Shareholders' Meeting and for recording the attendance during the General Shareholders' Meeting), we commission, to some extent, third-party service providers that will also be granted access to your personal data in the context of the tasks assigned to them. In the context of commissioned data processing, our partners are carefully selected and are obligated pursuant to Art. 28 GDPR to observe the data protection standards of Porsche SE. The service providers commissioned by us will process your personal data exclusively as instructed by us and only to the extent that this is necessary for the performance of the services commissioned. Furthermore, we may be obligated to transmit your personal data to further recipients such as, for instance, public authorities in order to comply with statutory reporting obligations.

If you participate in the General Shareholders' Meeting, other shareholders of Porsche SE may access, pursuant to Sec. 129 AktG, data relating to you that is contained in the list of participants, if any, for up to two years following the General Shareholders' Meeting. If you wish to submit a motion for including additional items in the agenda, counter-motions or nominations for election, we may, under certain conditions, be obligated to publish your name.

 

V. Storage period

We will anonymize or erase your personal data as soon as they are no longer required for the aforementioned purposes, the personal data is no longer required for any administrative or court proceedings, if any, and no other statutory obligations to furnish evidence or record retention requirements (e. g. under the AktG, the German Commercial Code (Handelsgesetzbuch) or the German Tax Code (Abgabenordnung)) apply or any reasons justifying the storage exist.

 

VI. Rights of the data subjects

Subject to the statutory requirements, you have the right to access information (Art. 15 GDPR) about your processed personal data and to require rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of your personal data or the restriction of processing (Art. 18 GDPR) using the contact information indicated above.

Right to object (Art. 21 GDPR): If we process your data for the purposes of the legitimate interests pursued by us (Art. 6 para. 1 sentence 1 lit. f GDPR), you may object to such processing at any time with effect for the future on grounds relating to your particular situation that oppose such data processing. Please submit your objection to the contact address indicated above.

If we process your personal data on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR), you may withdraw your consent at any time (Art. 7 para. 3 GDPR). Please submit your withdrawal to the contact address indicated above. If you have given your consent, you are further entitled to receive the personal data relating to you in a structured, commonly used and machine-readable format (Art. 20 GDPR).

We would also like to draw your attention to your right of appeal to a supervisory authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.

 

 

 

 

1 The provisions of the German Stock Corporation Act apply to the company pursuant to Art. 9 para. 1 lit. c) (ii) of Council Regulation (EC) No 2157/2001 of 8 October 2001 on the Statute for a European company (SE) (the "SE Regulation").

2 The provisions of the German Stock Corporation Act apply to the company pursuant to Art. 9 para. 1 lit. c) (ii) of Council Regulation (EC) No 2157/2001 of 8 October 2001 on the Statute for a European company (SE) (the SE Regulation).