We, Dr. Ing. h.c. F. Porsche AG (hereinafter referred to as “we” or “Porsche AG”) are pleased about your visit to our Porsche Motorsport Partner Portal as well as your interest in our company. Your privacy is important to us. We take the protection of your personal data and their confidential treatment very seriously. The processing of your personal data takes place exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter “GDPR”).
With this privacy policy we inform you about the processing of your personal data and your privacy rights in the context of the use of the Porsche Motorsport Partner Portal. For information on other services as well as offers from other companies of the Porsche Group, please refer to the respective privacy policy of these services or companies.
1. Data Controller and Data Protection Officer; Contact
Responsible for the data processing within the meaning of the data protection laws is the:
Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Germany
Tel: (+49) 0711 911-0
E-Mail: partnerportal@porsche.de
If you have any questions or comments about privacy, please feel free to contact us.
Our data protection officer can be reached as follows:
Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Germany
Contact: https://www.porsche.com/germany/privacy/contact
2. Subject of data protection
The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called affected person). These include e.g. Information such as name, postal address, e-mail address or telephone number, but also information that necessarily arises during the use of the Porsche Motorsport Partner Portal, such as information on the beginning, end and extent of use and the transmission of your IP address.
3. Type, scope, purpose and legal basis of automated data processing
The use of the Porsche Motorsport Partner Portal is generally possible without registration. Even if you use the Porsche Motorsport Partner Portal without registration, personal data can be processed.
Below you will find an overview of the type, scope, purposes and legal basis of the data processing of the Porsche Motorsport Partner Portal.
3.1 Provision of our online service
When accessing the Porsche Motorsport Partner Portal through your device, we automatically process the following data:
- date and time of access,
- duration of the visit,
- ser devices,
- used operating system,
- the features you use
- amount of sent data,
- type of event,
- IP adress,
- referrer URL,
- domain name
These data are processed on the basis of Article 6 (1) (f) of the GDPR to provide the service, to ensure the technical operation and to detect and eliminate interference. We are pursuing the interest of enabling and permanently securing the use of the Porsche Motorsport Partner Portal and its technical functionality. When the Porsche Motorsport Partner Portal is accessed, this data is processed automatically. Without this provision, you will not be able to use our services. We do not use this data for the purpose of drawing any conclusions about you or your identity.
3.2 Cookies
When you visit the Porsche Motorsport Partner Portal, so-called “cookies”, ie small files, can be stored on your device in order to offer you a comprehensive range of functions, to make your usage more comfortable and to optimize our offers. If you do not want to use cookies, you can prevent the storage of cookies on your device by by adjusting the settings of your internet browser or use of the separate contradiction option. Please note that the functionality of our offer may be limited. For detailed information on the nature, extent, purposes, legal bases and possibilities of contradicting the processing of cookies, please refer to our Cookie Policy.
4. Recipient of personal data
Internal recipients: Within Porsche AG, only those persons have access who need this for the purposes mentioned in sections above.
External recipients: We only forward your personal data to external recipients outside Porsche AG if this is necessary for the administering or processing of your issue, if another legal authorization exists, or if we have your consent to forward the data.
External recipients can be:
a) Processor
Group companies in Porsche AG or external service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the Porsche AG offering or the provision of content. We carefully select and regularly inspect these processors to make sure that your privacy is protected. The service providers may use the data only for the purposes we have specified and in accordance with our instructions.
b) Public bodies
Authorities and public institutions, such as public prosecutors, courts, or financial authorities to which we must transfer personal data for legal reasons. The data is transferred on the basis of Article 6 (1) (c) GDPR.
c) Private offices
Porsche dealers and service companies, cooperation partners, service providers or persons to whom the data is transferred on the basis of consent, to execute a contract with you or to safeguard legitimate interests, for example, other Porsche Dealerships and Porsche Service Centers, financing banks, providers of other services or transport service providers. The data is transferred on the basis of Article 6 (1) (a), (b) and/or (f) GDPR.
5. Data processing in third countries
If data is transferred to bodies whose headquarters or whose place of data processing is not located in a member state of the European Union or in another country outside of the European Union who is a signatory to the treaty, we ensure before forwarding the data that, outside of legally permitted exceptional cases pertaining to the recipient, either an appropriate level of data protection exists (e.g., through an adequacy decision of the European Commission, through suitable guarantees such as self-certification by the recipient for the EU-US Privacy Shield, or the agreement of EU standard contractual clauses between the European Union and the recipient) or you give sufficient consent for the transfer of the data.
We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. To obtain these, please contact the address specified in Section 1.
6. Duration of storage and deletion
If the description of the individual services and offers do not contain any specific information about the storage duration or deletion of data, the following applies:
We store your personal data only for the length of time necessary to fulfill the intended purposes, or – in the case of consent – until you withdraw your consent. If you withdraw your consent to process your personal data, we will delete it unless relevant legal provisions stipulate that it can be processed further. We will also delete your personal data if we are obliged to do so for other legal reasons.
In line with these general principles, we will usually delete your personal data immediately
- after the legal grounds cease to apply and provided that no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.
- if we no longer need the data for the purposes of preparing and executing a contract or legitimate interests and no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.
- if the purpose of collecting the data no longer applies and no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.
7. Rights of data subjects
As the data subject affected by the data processing, you have several rights. Specifically,
Right of access:: You have the right to obtain information from us about the data that we have stored about you.
Right of rectification and erasure: You have the right to demand that we rectify incorrect data and – provided the legal requirements are met – that we delete your data.
Restriction of processing: You have the right – provided the legal requirements are met – to demand that we restrict the processing of your data.
Data portability: If you have provided us with data on the basis of a contract or consent, you have the right, in accordance with the legal requirements, to obtain the data you have provided in a structured, standard, and machine-readable format or you can demand that we transfer this data to another controller.
Objection to the processing of data on the legal grounds of “legitimate interest”: You have the right to object at any time, on grounds relating to your particular situation, to our processing of your data, provided this objection is based on the legal grounds of “legitimate interest”. If you exercise your right to object, we will cease the processing of your data unless we can – pursuant to the legal requirements – prove compelling legitimate reasons for the further processing, which override your rights.
Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected up until the time of the withdrawal of consent.
Objection to cookies: You can also object to the use of cookies at any time. For details on how to object, please refer to our Cookie Policy.
Right to lodge a complaint with a supervisory authority: You can also submit a complaint to the competent supervisory authority if you believe that the processing of your data is in breach of the legislation. To do so, you can apply to the data protection authority that is responsible for your town/city or country or the data protection authority that is responsible for us.
Contacting us: Please do not hesitate to contact us if you have any questions regarding the processing of your personal data, your rights as a data subject, and any consent that you may have given. To exercise all of these previously mentioned rights, please contact us at https://www.porsche.com/germany/privacy/contact or the postal address specified above in Section 1. In doing so, please ensure that it is possible for us to uniquely define you.
8. Integration of third-party offerings
Websites and services delivered by other providers that are linked to the Motorsport Partner Portal have been and are structured and provided by third parties. We do not have any influence over the structure, content, or role of these third-party services. We explicitly distance ourselves from all content in all linked third-party offerings. Please note that the third-party offerings linked to the Motorsport Partner Portal may install their own cookies on your device or collect personal data. We have no influence over this. Please contact the providers of these linked third-party offerings as required for the relevant information.
9. Latest version
The latest version of this privacy policy applies.
Date: 25/05/18