Information for business and communication partners of Porsche Automobil Holding SE in Europe on the processing of their personal data
Porsche Automobil Holding SE ("Porsche SE" or the "Company" – hereinafter also referred to as "we" or "us") is committed to protecting the privacy of its business and communication partners1 when processing personal data.
The purpose of this information is to inform current and future business partners and communication partners in Europe about the processing of their personal data by Porsche SE. Porsche SE is obliged to provide such information under the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG").
"Business Partner" or "Communication Partner", as the case may be, refers to any natural person with whom Porsche SE maintains a business relationship or with whom Porsche SE is in a communication relationship (in particular by email, via any email or other message distribution service or by post), e.g. representatives and employees of service providers, media representatives or capital market participants.
The controller of your personal data is:
Porsche Automobil Holding SE
Porscheplatz 1
70435 Stuttgart
Telephone: +49 711 911 24420
Telefax: +49 711 911 11819
Email: investorrelations@porsche-se.com
You may contact our Data Protection Officer by email at datenschutzbeauftragter@porsche-se.com or by post by adding "Attn.: Data Protection Officer" to the address.
1. Categories of personal data
We process personal data that we receive directly from you or from third parties (e.g. your co-workers, superiors or other individuals through whom we have established contact with you) as well as from publicly accessible sources, such as homepages or published print media. Such personal data includes, without limitation,
2. How we use your personal data
Your personal data is processed to the extent that this is necessary for the purposes of the legitimate interests of Porsche SE (Art. 6 para. 1 sentence 1 lit. f GDPR), for example,
Moreover, personal data is processed for the purpose of initiating and performing contracts with individuals (natural persons) with whom we maintain business relationships, e.g. for the purpose of processing purchase orders, deliveries or payments or to prepare or reply to individual quotation requests as well as other inquiries and to determine the conditions of the contractual relationship (Art. 6 para. 1 sentence 1 lit. b GDPR).
Porsche SE is also subject to various legal obligations (Art. 6 para. 1 sentence 1 lit. c GDPR) that may require the processing of your personal data. Such legal obligations may follow, for example, from taxation laws, foreign trade laws or sanctions laws.
3. Recipient(s) of your personal data
Within the Company, only authorised staff of Porsche SE with relevant competencies will have access to your personal data.
We are authorised to mandate third parties to provide certain services, such as IT services. Furthermore, we engage, inter alia, legal advisors, management consultants and auditors. These third parties perform services on our behalf and under our supervision as well as in accordance with our instructions and may have access to personal data to the extent that this is required for them to render their services.
In addition, we can – to the extent legally permissible – transmit your personal data to authorities (such as social security institutions, tax authorities or law enforcement agencies) and domestic and foreign courts to comply with statutory duties or to act in the interests of Porsche SE.
Other recipients are listed below.
Insofar as there is a legal obligation (e.g. under the German Money Laundering Act (“GwG”)), we intend to carry out personal identification (as part of the so-called “know your customer checks”).
To carry out the know your customer check, we commissioned ALL AML GmbH, Am Hamburger Bahnhof 1, 10557 Berlin, as an external anti-money laundering (AML) officer within the meaning of § 6 para. 7 GwG.
To carry out the personal identification, we commissioned the service provider WebID Solutions GmbH, Unter den Linden 10, 10117 Berlin (“WebID”). This is a service provider bound by instructions, which is subject to data protection regulations and may not use the data for any other purpose.
A prerequisite for personal identification is the creation of a user profile with WebID, in which your data is recorded. You can then choose between identification via the “VideoID” or “TrueID” procedure. As part of the “VideoID” procedure, verification takes place live via video conference. As part of the “TrueID” procedure, identification is carried out by referring to data already collected for other entities subject to the GwG obligations, provided you have consented to its use for the new identification process. During the identification process, the data you provided for the creation of your user profile is compared with your identification document. Depending on the type of identification document/country of issue, not all data fields of the user profile are always available on the identification document (e.g., German passport without address). In this case, no value is transferred.
When performing personal identification, WebID collects the following data: first name, last name, date of birth, gender, nationality, street, house number, place of residence, postal code, country, email address, telephone number, mobile phone number, ID data (ID type, ID number, valid until, place of birth, date of issue, issuing authority, birth name, MRZ, screenshot of ID), IP address, photo (screenshot) of the user, audio recording of the call, video recording of the call, device, result of the biometric data comparison, and username of the video conferencing program used.
As part of the personal identification process, automated products for biometric data comparison may be used by a subcontractor of WebID. This involves comparing the photo on your ID (face position data) with the photo of you captured by the webcam during the video chat (measurement data). The aim is to better detect attempts at fraud, such as identity theft. The measurement data or biometric data collected for the comparison is not stored by the subcontractor; only the results of the comparison are stored. These do not contain any biometric data themselves, but only the information that the data comparison was successful.
If you have given your consent to this with WebID, your data will remain stored with WebID so that identification does not have to be repeated in the event of a new identification request. In this respect, WebID acts as the data controller within the meaning of Art. 4 No. 7 GDPR. If you have not consented to data storage by WebID, WebID will delete the data once the purpose for which it was collected no longer applies. The purpose for which the data was collected ceases to apply after the identification process and the subsequent transfer of the verification data records to us, usually after four weeks.
The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c and Art. 9 para. 2 lit. g GDPR in conjunction with § 11a para. 1 GwG in conjunction with §§ 10 para. 1 No. 1, 11 para. 1 and 4 as well as § 12 para. 1 and 2 GwG.
The identification of business partners is required under anti-money laundering regulations. If the identification process is refused, the business relationship cannot be established, and the transaction cannot be carried out. If only identification via WebID is refused, identification in accordance with anti-money laundering requirements can also be carried out in other ways, e.g. through personal or notarial verification of identity.
1. General Information
We process your personal data in accordance with Art. 6 para. 1 sentence 1 lit. b GDRP, insofar as this is necessary for the processing of the registration and for the performance and handling of events of Porsche SE, in particular for correspondence, the transmission of event documents and for invoicing. This includes in particular first name, surname, job, a valid e-mail address and a phone number (landline and/or mobile).
Your personal data will only be passed on to third parties if this is necessary for the implementation and processing of your participation (Art. 6 para. 1 sentence 1 lit. b GDRP), for example to the respective event hotel or if you are interested in or have registered for other offers at the event.
2. Special information regarding virtual events
In the case of a virtual event via an online webcast, we also process your personal data in particular for the purpose of:
For the registration for the online webcast and its implementation, we use external service providers who are bound by our instructions, who have been obligated in accordance with data protection regulations and are not permitted to process the data for any other purpose.
a. Server log files
When you register for the online webcast and use it as part of the Annual Press and Analyst Conference, we process the following information which your browser automatically transmits to us for technical reasons:
This is necessary in order to retrieve website content and display it correctly on your device. The data requests from your browser are automatically stored in so-called "server log files". The data processing described is absolutely necessary to ensure the retrievability and correct display of our websites on your device (Art. 6 para. 1 sentence 1 lit. b GDPR).
b. Cookies
Furthermore, it is necessary both for the registration and the operation of the online webcast that cookies are stored on your device. We only use cookies that are necessary for the registration and use of the online webcast. You can prevent the setting of a cookie by setting your browser so that it does not allow cookies to be stored. However, blocking all cookies may prevent you from using the online webcast. The legal basis for this data processing is § 25 para. 2 No. 2 TDDDG. In detail, these are the following cookies:
3. Note on the Recording and Publishing of image and sound recordings as well as transcripts of the event
During our event, image and sound recordings may be made and stored and transcripts of the event may be created. These image and sound recordings as well as excerpts from the transcripts created may in particular be published on our website www.porsche-se.com and on our company website at LinkedIn for the purpose of reporting and advertising our services.
We would like to point out that information on the Internet is accessible worldwide, can be found with search engines and linked to other information, from which personality profiles can possibly be created. Information posted on the Internet, including photographs, can be easily copied and distributed, and there are specialised archiving services whose aim is to permanently document the state of certain websites on certain dates. As a result, information published on the Internet may still be found elsewhere even after it has been deleted on the original website.
Legal basis:
We have a legitimate interest in the creation and storage of the image and sound recordings and transcripts in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.
By participating, you consent to the publication of image and sound recordings of the event on which you are also pictured, as well as the publication of transcripts of the event, which contain statements by you with your name mentioned.
If you do not agree, please inform the photographer or one of our employees. You have the right to withdraw your consent at any time. However, even if you withdraw your consent, the recordings may still be published and displayed for reporting purposes in accordance with § 23 para. 1 No. 3 of the German Art Copyright Act if the event itself is clearly in the foreground of the recordings.
Subject to the statutory requirements you have the right to access information (Art. 15 GDPR) about your processed personal data, to require rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR) of your personal data or the restriction of the processing (Art. 18 GDPR) and to receive your personal data in a structured, commonly used and machine-readable format (data portability, Art. 20 GDPR).
Right to object (Art. 21 GDPR): If we process your data for the purposes of the legitimate interests pursued by us (Art. 6 para. 1 sentence 1 lit. f GDPR), you may object to such processing at any time with effect for the future on grounds relating to your particular situation that oppose such data processing. Please submit your objection to the contact address indicated above.
We would also like to draw your attention to your right of appeal to a supervisory authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg, Lautenschlagerstraße 20, 70173 Stuttgart.
Each of our employees as well as all staff of third party service providers who have access to and/or process personal data are obliged to treat such data confidentially.
Porsche SE also uses suitable technical and organisational security measures in order to protect personal data stored against manipulation, partial or total loss, as well as against unauthorised access by third parties. The security measures taken by Porsche SE are continuously improved in line with developments in technology.
All personal data will be stored in accordance with applicable statutory regulations.
Our general policy is to delete personal data once it does no longer need to be stored in order to fulfil our contractual obligations or to safeguard the legitimate interests outlined in this information letter or if they are no longer needed for any court or administrative proceedings and if no statutory retention obligations apply. We restrict the processing of such data in the event that statutory retention obligations apply.
If you have any questions, comments or suggestions about this information or our personal data protection policies, please contact investorrelations@porsche-se.com or Porsche SE's Data Protection Officer at datenschutzbeauftragter@porsche-se.com.
This information was last updated in October 2025.
In the event our business activities and/or our services change or as a result of amended legal and/or administrative requirements, it may become necessary to amend this information. The most recent version of this information can be accessed, saved and printed at any time via the link in our email signature.
