We, Nardò Technical Center S.r.l. (hereinafter referred to as "we" or "NTC"), are glad you have decided to vist to our website, and we thank you for your interest in our company and our products. Your privacy is a high priority for us. We take the protection of your personal data very seriously and we process it adopting strict confidentiality principles. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation 2016/679 (hereinafter "GDPR").
The Data Controller within the meaning of the data protection laws is:
Nardò Technical Center S.r.l.
I-73050 Santa Chiara di Nardò (LE)
If you have any questions or comments regarding data protection, you can contact our Data Protection Officer using the details below:
Data Protection Officer (DPO)
Nardò Technical Center S.r.l.
I-73050 Santa Chiara di Nardò (LE)
As the Data Controller, we protect your personal data. Personal data is any information relating to an identified or identifiable natural person (so-called data subject). This information includes, but is not limited to name, address, e-mail address or telephone number, as well as other information, which is automatically collected during the use of our website, such as information about the beginning, the end and scope of use of the website, as well as the transmission of your IP address.
The use of our website is generally possible without registration. The use of individual services and functions may require prior registration. However, even if you use our website without registration, personal data can still be processed.
Below you will find an overview of the types, scope, purpose and legal basis of automatic data processing carried out through our website. Information on the processing of personal data in connection with the use of specific services and functions is provided in the following paragraphs.
3.1 Provision of our website
When you access our website through your device, we process the following data:
- date and time of access,
- duration of the visit,
- type of the device,
- operating system used,
- functions that you use,
- amount of data sent,
- type of event,
- IP address,
- reference URL,
- domain name.
We process this data on the basis of Section 6 paragraph 1 f) of the GDPR to provide the website, to ensure its technical functioning and identifying and remedying website malfunctions. In this way, we pursue the interest of making it possible to use our website and to ensure its technical functionality over time. When you visit our website, this data is processed automatically. If you do not make this data available, you cannot use our website. We do not use this data for the purpose of drawing conclusions about you or your identity.
3.2. Cookies, tracking technologies and related services
3.2.1 Scope and definition
3.2.2 Categories, purposes and legal basis of cookies
a) Technically required cookies
The use of technically required cookies is necessary to ensure the safe and proper operation of our website and its features, as well as to make our website fully available. These cookies are placed, for example, to:
- enable the use of basic functions of the website;
- save your data protection preferences;
- provide secure authentication through which you can access your user account;
- save the selection of the car configurator;
- provide multimedia content that also meets the technical requirements of the device;
- allow forms to be filled in.
The processing of personal data related to the use of technical cookies is carried out: (i) where there is an underlying contractual relationship, pursuant to Article 6 paragraph 1 b) of the GDPR, or (ii) if necessary to comply with a legal obligation, pursuant to Article 6 paragraph 1 c) of the GDPR, or (iii) in other cases, to pursue a legitimate interest of ours pursuant to Article 6 paragraph 1 f) of the GDPR. Our legitimate interest is related to the purposes set out herein in relation to the various types of cookies and to facilitate the operation of our website with certain basic functionalities. These cookies are stored automatically when our website is loaded or when a certain functionality is used, unless you have prevented their storage through the settings of your device and/or Internet browser. For further details on this, please refer to section 3.2.3. Further information on cookies of external providers and their services can be found in section 3.2.4. let. a).
b) Analytics and Performance cookies
Analytic cookies are used to evaluate and assess the use and the performance of the website. Some of these cookies are placed by third parties. By using such cookies, we can, for example, count the number of visits to our website and determine from what other website our pages were accessed. Moreover, we can find out which sections of our website are most popular, which are the least browsed ones and how visitors browse throughout our website.This enables us to assess the overall effectiveness of our website, to improve it and to optimise its content. By way of example, these cookies are used for the following purposes:
- understand what content is relevant for users in order to improve the quality of our website and to optimise the user experience,
- measure the autonomy and success of marketing measures,
- measure and improve the performance of our website, and
- adapt content to the needs of the user.
The processing of personal data by means of this type of cookie is carried out exclusively on the basis of your consent pursuant to Article 6 paragraph 1 a) of the GDPR. When you provide you consent, cookies are placed during the loading of our website or a related offer. You have the option to extend your consent either to individual cookies or to all cookies in this category. You have the right to withdraw your consent at any time with immediate effect. For information on the withdrawal options and possible cookie settings, please refer to section 3.2.3. Further information on the services and external providers used can be found in section 3.2.4. let. b).
c) Marketing cookies
Marketing cookies are placed in order to provide content and visualizations based on the interests of the users and to obtain accurate reports on the effectiveness of our marketing campaigns. Some of these cookies are placed by selected third party suppliers in connection with marketing and social media activities. These parties, therefore, receive information about the use of our website and may combine it with other data that they may have obtained from you also by other means.
This enables us to provide users who are interested in the content and offers on our website, with offers from other social media and websites of the Porsche Group in cooperation with selected partners by means of targeted, interest-based advertising (retargeting/remarketing). The placement of advertisements on the websites of our marketing and social media partners is based on an analysis of how users use our website. The creation of such usage profiles, based on the information provided by the operators of the retargeting/remarketing services we use, is for some part anonymised or pseudonymised. The data we collect in this way is not used to identify you personally and is in no way combined with your other personal data collected by us through the website.
For example, we use these cookies:
- for the continuous optimisation of marketing communication with visitors of our website;
- to address interested users with the right information and
- make use of the advertising content that is relevant to you – also outside of our website.
Data processing through this category of cookies is carried out exclusively on the basis of your consent pursuant to Article 6, paragraph 1, letter a) of the GDPR. When you provide your consent, cookies for marketing purposes are placed when loading our website or a related offer and you will also be able to view our advertisements based on your interests via social media and other websites. You have the option of extending your consent to individual cookies or to all cookies in this category. You have the right to withdraw your consent at any time with immediate effect. For information on the withdrawal options and possible cookie settings, please refer to section 3.2.3. Further information on the services and external providers used can be found in section 3.2.4. let. c).
If you do not want to allow the use of certain cookies or of cookies in general, you can also prevent these from being stored on your device by configuring the settings of your device and/or Internet browser accordingly.
You can deactivate the option to accept cookies in the settings of your Internet browser. With regard to the procedures related to the management and deletion of cookies in the settings of your Internet browser, please refer to the help guide of your browser and to the other information on the use of your browser. In addition, you can deactivate all cookies by using free Internet browser Add-Ons, such as "Adblock Plus" (https://adblockplus.org/en/chrome) in combination with the "EasyPrivacy" (easylist.to) or "Ghostery" (ghostery.com) list.
3.2.4. Services and third-party providers
a) Services of third-party providers as part of technically required cookies
On our website we use the cookie consent technology of Usercentrics GmbH, Rosental 4, 80331, Munich, Germany (hereinafter referred to as "Usercentrics"), to obtain your consent to the storage of certain cookies on your device and to document this in accordance with data protection legislation. Usercentrics uses a cookie for the purpose of associating the user with the granted and/or revoked consents.
The data collected by Usercentrics is processed on our behalf and on the basis of a contractual relationship.
For further information, please consult the Usercentrics website: https://usercentrics.com.
b) Services of third-party providers for analysis of reach and performance
We only use Google Analytics with the functionality that anonymises the IP address. This means that your IP address is cut by Google in the European Union or the European Economic Area. Only in exceptional cases, the IP address will be transmitted in full to a Google server in the USA and cut there. The IP address transmitted by your Internet browser will not be merged with other data held by Google.
- https://tools.google.com/dlpage/gaoptout?hl=en ("Use of data by Google when using website or apps of our partners"),
- https://www.google.com/policies/technologies/ads ("Use of data for promotional purposes").
Google Tag Manager
We use the "Google Tag Manager" of Google Ireland Limited, Gordon House, Barrrow Street, Dublin 4, Ireland, to manage the Google Services to manage the Google services on our site; no data processing is done by the Google Tag Manager.
The processing of data for the analysis of the scope of use and performance of our website, including processing by the external providers mentioned above, only takes place after the optional consent of the user has been granted pursuant to Article 6 paragraph 1 a) of the GDPR. For further information on this, please refer to section 3.2.2, let. b). In addition, please see section 3.2.3 on how to revoke consent and the possibility of deactivating cookies relating to the analysis of the scope of use and performance of our website individually or in general.
c) Marketing services of third-party providers (retargeting/remarketing)
The processing of data for marketing purposes, including processing by any external providers, only takes place after the optional consent of the user has been granted pursuant to Article 6 paragraph 1 a) of the GDPR. For further information in this regard, please refer to section 3.2.2, let. c). In addition, please see section 3.2.3 on how to withdraw consent and the possibility of deactivating individually or in general all cookies for marketing purposes.
3.3. Integration of third-party content and videos
We also use services of external providers on our website to supplement our offers and content (hereinafter the "Content"). Unless otherwise specified below in relation to individual services of external providers, data processing is carried out on the basis of Article 6 paragraph 1 f) of the GDPR, in light of our legitimate interest ito use the Content and services of third-party providers to enable effective and optimised operation of our website.
Third-party providers of these Contents have access to the IP address, as without an IP address they would not be able to transfer the Contents to your device. The IP address is necessary for viewing the content. It is also possible that third-party providers place cookies on your device.
Videos are integrated on our website via vimeo.com. This is a service of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA ("Vimeo"), through which Vimeo processes your data for its own purposes and not on our behalf. In connection with this service, a connection is established to the Vimeo servers in the USA. In this way, certain information (e.g. your IP address) is transmitted to Vimeo. It is also possible that Vimeo places cookies on your device. We have no knowledge of the type and extent of the data collected by Vimeo and have no influence on its processing. Through integration, Vimeo can also receive information that your browser has called up on the corresponding page of this website, even if you do not have a Vimeo user account or are not logged into Vimeo.
Videos from the YouTube platform are also integrated into our website. YouTube is operated by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). The YouTube videos on our website, which are stored on http://www.youtube.com and which can be accessed directly via this website, are integrated with the "advanced data protection mode"; this means that, in accordance with YouTube's instructions, no personal data relating to you as a user of our website will be transferred to YouTube if you do not play the videos. However, when videos are played, a connection is established to the providers of the YouTube servers in the USA and certain information (e.g. IP address) is sent to the provider, even if you have not accessed these servers. We are not aware of the type and extent of the data collected by YouTube and have no influence on its processing.
For the publication of maps on our website, we use the "Google Maps" service of the external provider Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). The data transmitted to Google may include, in particular, IP addresses, the URL (Internet address) of our website and the date/time of use. We will transmit this data on the basis of our contract with Google Ireland Ltd. (https://www.google.com/intl/en_US/help/terms_maps/) in connection with the Controller Terms available at the following link: https://privacy.google.com/intl/en/businesses/mapscontrollerterms/.
When using Google Maps, users have a direct relationship with Google. For further information on data protection by Google, please visit the Google website at the following link: https://policies.google.com/privacy?hl=en&gl=en.
For further information on how you can prevent the storage of cookies, please refer to section 3.2.3.
Certain functions of our website require that you grant permission to access your device (e.g. access to location data).
Granting authorisations is optional. However, if you wish to use the corresponding functionalities, you must grant authorisations, otherwise you will not be able to use this functionality.
The authorisations will remain active until you cancel them in your device and/or Internet browser by deactivating the corresponding setting.
You may voluntarily provide personal data or register for services or features with an individual profile on various pages of our website.
5.1 Registration process and creation of a user profile
The mandatory information required for registration is marked with an "*" on the respective input field and generally consists of, at least, the following data: title, first and last name, e-mail address and customer number. If you do not provide the mandatory information, you will not be able to proceed with the registration and create a user profile. During the registration and user profile creation process, you have the option of providing additional information on a voluntary basis, such as: company contact information, job, date of birth, etc. Please note that this information is not required for registration and you will have the discretion to decide whether or not to provide this information to us. If you do not provide this optional information, you will not suffer any adverse consequences, but it may not be possible to provide you with certain services (including the online booking service).
The personal data you provide during registration will be used by us to create your profile and identify you following each login. The applicable legal basis for these data processing operations is Section 6 paragraph 1 b) of the GDPR. Depending on the service for which you register, additional data may be collected and thus linked to your profile data. In addition, when you use the services and offers below, further personal data may be collected and processed to provide these services and offers.
We perform the processing operations described in this paragraph based on your consent and/or to perform the contract entered into with you and/or based on our legitimate interests.
5.2. Other forms of contact
If you provide us with personal data by e-mail or via a contact form, this will always be done on a voluntary basis. Your information will be processed by us to process your contact request and in accordance with Article 6 paragraph 1 b) (if your request relates to a possible contract to be entered into with us or a contract already entered into with us) or (f (for any other type of request) of the GDPR, and in this context may also be transmitted to third parties.
We process your personal data in order to protect our legitimate interests. In addition to those indicated in the description of the individual services and offers in section 3 and in the other sections of this policy, data processing operations in the context of our website or after registration are carried out to pursue the following legitimate interests of ours:
- ensuring the availability, operation and security of technical systems as well as technical data management;
- development of additional products, services and service offerings and elimination of errors and defects;
- data processing in a central service platform for upstream and downstream systems for customer loyalty and support of existing and potential customers;
- analysis of customer needs, e.g. assessments of affinities, preferences and potential interests;
- processing of warranty claims, as well as non-contractual questionnaires to stakeholders and customers;
- risk management and coordination of recall campaigns;
- prevention of violations of law and protection against violations of law (in particular in the case of offences), actions relating to legal claims;
- ensuring the availability, operation and security of IT systems as well as technical data management
Data processing for the pursuit of legitimate interests is carried out on the basis of Article 6 paragraph 1 f) of the GDPR. We will inform you if the provision of data is necessary. In this case, if the data is not provided, it may not be possible to answer your questions, fulfil your requests or execute the underlying contract.
If you give us consent to certain data processing operations, the processing of the relevant data will take place on the basis of your consent; the purposes of processing will in any case derive from the content of the specific declaration of consent. The data processing in this case is based on Article 6 paragraph 1 a) of the GDPR. Without your consent, we cannot fulfil your request related to the consent itslef. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before the withdrawal.
Please find below a list of data processing activities that is based on consent:
With your free and optional consent (Article 6, paragraph 1, letter a) of the GDPR) that we may request, we may process your data for marketing purposes (direct sales, sending advertising material, carrying out market research, commercial communication and customer satisfaction surveys), sending you information and offers relating to our products and services. The consent to the processing of your personal data is free and optional and in case of failure to provide consent you will not suffer any prejudicial consequences. You may revoke your consent to the processing of your data for marketing purposes, including selectively, at any time, free of charge and without any consequences, in the manner indicated in paragraph 13 below by informing us that you no longer wish to be contacted through one or more contact methods.
7.2 Cookie consent
External recipients: we only transfer personal data to external recipients if this is necessary to fulfil your request, to provide a service, for the performance of a contractual relationship, if you have provided your consent to do so, if there is another suitable legal basis and/or if it is otherwise permitted under applicable law.
External recipients can be:
a) Data Processors
Porsche Engineering Group GmbH, Dr. Ing. h.c.F. Porsche AG, the other companies of the Porsche Group or other third parties we use for the provision or maintenance of our technical infrastructure or for the provision of other services to our company. These data processors are carefully selected and regularly audited by us to ensure that your privacy is preserved. They may only process the data we hold about you for the purposes specified by us and in accordance with our instructions.
b) Public authorities
Authorities and governmental institutions, such as tax authorities or courts, to which we must transmit personal data to comply with a legal obligation. The transfer takes place on the basis of Section 6 paragraph 1, letter c) of the GDPR.
c) Private Entities
In addition to point a) above, we will only communicate your data to parties outside the Porsche Group if this is necessary to fulfil your request, execute a contract, if you have given us your consent or if there is another legal basis that justifies such disclosure.
If a data transfer takes place to entities whose registered office or data processing facilities are not located in a Member State of the European Union or in another State party to the Agreement on the European Economic Area, we ensure prior to the transfer that, except where permitted by law, the recipient ensures an adequate level of data protection (e.g., through an adequacy decision of the European Commission pursuant to Section 45 of the GDPR, through the execution of the EU standard contractual clauses with the data importer, pursuant to Section 46 paragraph 2 c) of the GDPR, or that you have given your consent to such data transfer pursuant to Section 49 paragraph 1 a) of the GDPR.
We can provide you with an overview of the recipients in third countries and a copy of the regulations specifically agreed to ensure the appropriate level of data protection. To obtain such information, you can contact us as indicated in paragraphs 1 and 12.
Through our website, we only process personal data that we collect directly from users. We do not collect personal data through intermediaries or other third parties.
We do not use any automated decision-making processes that produce legal effects on an individual or that similarly affects you significantly, within the meaning of Section 22 of the GDPR.
If the description of the specific services contained in this policy does not provide more specific information on the period of retention or deletion of data, the following principles generally apply.
We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or – in the case of consent – as long as you have not revoked the consent. In the event that you object to the processing, we will delete your personal data unless further processing is necessary to pursue different legitimate processing purposes. We will also delete your personal data if we are obliged to do so due to a legal obligation.
By applying these general principles, we delete your personal data immediately:
- in the event that the legal basis on which the processing is based should cease to exist, unless further storage is necessary to comply with legal obligations or to pursue other legitimate processing purposes. If the latter is the case, we will delete the data after the additional legal basis has also ceased to exist;
- if the data are no longer necessary for the purposes of preparing and fulfilling a contract or legitimate interests and no other legal basis exists (as in the case where further storage is necessary to comply with legal obligations regarding taxation or the retention of business records). If there is another legal basis, we will delete the data when the other legal basis ceases to exist;
- if the processing purpose pursued by us ceases and there is no other legal basis to rely on (such as where further storage is necessary to comply with legal obligations relating to taxation or the retention of business records). If there is another legal basis, we will delete the data when the other legal basis ceases to exist.
As a data subject, you have the right to request access to and rectification or deletion of your personal data or restriction of processing of data concerning you or to object to the processing of your data, as well as the right to data portability. In detail:
Right of access: you have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and if so, to obtain access to the personal data and to the information specified in Section 15 of the GDPR;
Right of rectification and right to deletion: you have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing an additional notice. You also have the right to obtain the deletion of personal data concerning you without undue delay if there is one of the reasons indicated in Section 17 of the GDPR;
Right to restrict processing: you have the right to obtain the restriction of processing when one of the conditions indicated in Section 18 of the GDPR applies;
Right to data portability: if the processing of your data is based on consent or on a contract and is carried out by automated means, you have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you and you have the right to transmit such data to another data controller without impediments;
Right to object: you have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you pursuant to Section 6 paragraph 1 f) (processing based on legitimate interest), including profiling on the basis of this provision. If the personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing;
Withdrawal of consent: if you have given us consent to the processing of your data, you can withdraw your consent at any time with immediate effect without affecting the lawfulness of processing based on consent before its withdrawal;
Right to lodge a complain to the supervisory authority: you can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the Italian Data Protection Authority (www.garanteprivacy) or such supervisory of the European Union Member State where you reside or work;
How to contact us: you can contact us free of charge for any questions relating to the processing of personal data and to exercise your rights. Please contact us by e-mail at firstname.lastname@example.org or by ordinary mail at the address indicated in point 1 above. Please make sure you identify yourself clearly. NTC has appointed a Data Protection Officer (DPO), who can be contacted by mail at NTC's address indicated above (at the DPO's attention) or by e-mail at email@example.com.
The websites and services of other parties to which links are provided on our website have been designed and provided by third parties. We have no influence on the design, content and function of these third-party websites and services. We accept no responsibility for the content of these sites and services and their data processing. Please note that these third parties whose websites and services are linked on our website may install their own cookies on your device or collect personal data when you use the links. We have no influence on this possibility. If necessary, please inquire directly with the providers of these sites and services.
In principle, third-party offers also include those of other companies in the Porsche Group, that are connected through links on our website or are otherwise incorporated into our website.
The above also applies to the ability to click on the icons of various social media providers such as Facebook, Twitter, LinkedIn or Pinterest that have been placed in order to achieve an appropriate presence on the social media or to help share content from our website. If you select a specific provider, you will be taken directly to their external page via a link. In this case, the terms and conditions of use and the data protection information of the relevant provider, which are available on the respective websites of the third parties, shall apply.
Last update: 10.12.2020