Data Privacy Policy

We, Porsche Engineering Group GmbH (hereinafter referred to as "we" or "Porsche Engineering"), welcome your visit to our website porscheengineering.com/peg/en/ (hereinafter referred to as "website"), as well as your interest in our company and our products. Your privacy is very important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation (hereinafter "GDPR").

With this Privacy Policy, we inform you about the processing of your personal data and about your rights as a data subject within the scope of using our website. For information about other services as well as offers from other companies in the Porsche Group, please refer to the respective privacy policy of these particular services or Porsche companies.

If we link to this Privacy Policy from external social media sites, the following conditions only apply insofar as the data processing procedures within the framework of such social media sites are actually within our area of responsibility and no further specific and, therefore, primarily applicable information on data protection is made available within the framework of such social media sites.

1. The responsible party for the data processing and data protection officer; Contact

The responsible party for the data processing within the meaning of the data protection laws is:

Porsche Engineering Group GmbH
Porschestrasse 911
71287 Weissach
Deutschland

Tel: (+49) 0711 911-0
E-Mail: info@porsche-engineering.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us. You can contact our data protection officer as follows:

Porsche Engineering Group GmbH
Beauftragter für Datenschutz
Porschestrasse 911
71287 Weissach
Deutschland
Kontakt: pe-datenschutz@porsche-engineering.de

2. Subject matter of data protection

The subject matter of data protection is the protection of personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, e-mail address or telephone number, but also information that is necessarily provided during the use of our website, such as information about the start, end and extent of its use as well as the transmission of your IP address.

3. Type, scope, purposes of, and legal basis for automated data processing

The use of our website is generally possible without registration. The use of individual services and functions may require prior registration. However, even if you use our website without registration, personal data can still be processed.

Below you will find an overview of the type, scope, purposes and legal basis of automated data processing within the scope of using our website. Information on the processing of personal data when using the individual services and functions can be found in the following paragraphs.

3.1 Provision of our website

When your end device accesses our website, we will process the following data:

  • date and time of access,
  • duration of the visit,
  • type of end device,
  • operating system used,
  • the functions that you use,
  • quantity of data sent,
  • type of event,
  • IP address,
  • referrer URL,
  • domain name.

We process this data on the basis of article 6 paragraph 1 f) of the GDPR to provide the website, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so, we pursue the interest of enabling the use of our website and ensuring its technical functionality in the long term. When our website is opened, this data is processed automatically. Without the provision of data, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your person or your identity.

3.2. Cookies, tracking technokogies and services based on

3.2.1 Scope and definition

We use cookies and cookie-like technologies on our website (hereinafter jointly referred to as "cookies"). These are usually small files that are stored on your device using your Internet browser, to provide you with comprehensive features, make the site easier to use and optimise our offers for you.

3.2.2 Categories, purposes and legal basis of cookies

The cookies used on our website can be divided into three categories: technically required cookies, cookies for analysis of reach and performance, and marketing cookies. You have the opportunity here to decide whether or not to allow the use of cookies for each of the specified purposes. You can change your settings at any time. Please note that blocking certain types of cookies can impact on your experience of our website and/or the services and functions available there.

For more details about the cookies used, please refer to the following sections, as well as our cookie policy.

a) Technically required cookies

The use of technically required cookies is necessary to ensure the safe and proper operation of our website and its features, as well as to make our website as a whole available. These cookies are placed, for example, to

  • enable basic functions of the website,
  • save your data protection preferences,
  • provide you with multimedia content that meets the technical requirements of your end device, and
  • enable the completion of forms.

Provided an appropriate contractual agreement is in place, data is processed using technically required cookies based on article 6 paragraph 1 b) of the GDPR, as well as on our legitimate interest in accordance with article 6 paragraph 1 f) of the GDPR. Our legitimate interest arises from the described purpose of use of the specific cookie, as well as ensuring the technical operation of our website and certain basic features. These cookies are automatically placed when accessing our website or a specific feature, unless you have prevented the placement of cookies in your device and/or Internet browser settings. For more details, please refer to clause 3.2.3. More information about the services used and third-party providers is available in clause 3.2.4. a).

b)

Cookies for analysis are used to allow an evaluation of website usage. These cookies are partly set by third parties. By using such cookies, we can, for example, count the number of visits to our website and determine from which other websites our pages were accessed. We can therefore find out which sections of our website are most popular, which are the least frequented and how visitors navigate our website. This allows us to measure and improve the overall performance of our website and optimise the content. For example, we use these cookies to

  • understand what content is relevant for users to continue improving the quality of our website and optimise the user experience,
  • measure the reach and success of measures,
  • measure and improve the performance of our website, and
  • adapt content to the needs of the user.

Data is processed using cookies exclusively on the basis of your consent in accordance with article 6 paragraph 1 a) of the GDPR. If you give us your consent to this, cookies are set for analysis when our website is accessed or when an offer made available via the website is accessed. You can extend your consent either to individual cookies or to all cookies in this category. You may withdraw your consent at any time with future effect. For details of how to change your settings and/or object, please refer to clause 3.2.3. More information about the services used and third-party providers is available in clause 3.2.4. b).

c) Marketing cookies

Marketing cookies are used to provide interest-based content and advertising, and to receive more accurate reports on campaign performances. These cookies are sometimes placed by third-party providers, i.e. by our selected marketing and social media partners. They therefore receive information about your use of our website and may collate this information with other data they may have received about you elsewhere.

This enables us to deliver interest-focused advertising on other online and social media platforms to users interested in content and offers on our website, with the help of selected partners (retargeting/remarketing). Advertising is inserted on the websites of our marketing and social media partners based on an analysis of your Internet previous usage behaviour on our website. Such usage profiles are created based on information supplied by the providers of the retargeting/remarketing services we use, sometimes anonymously or using pseudonyms. We will not use your data collected in this way to personally identify you, and never merge it with the personal data we hold about you.

For example, we use these cookies to

  • for the continuous optimisation of marketing communication with visitors to our website
  • address interested users with the right information and
  • display advertising content that is relevant to you – including outside of the Porsche websites.

Data is processed exclusively on the basis of your consent in accordance with article 6 paragraph 1 a) of the GDPR. If you give your consent, marketing cookies will be placed when you visit our website or access one of the services provided, allowing you to experience interest-based advertising also on other websites and social media platforms. You can extend your consent either to individual cookies or to all cookies in this category. You may withdraw your consent at any time with future effect. For more details, please refer to clause 3.2.3. More information about the creation of such usage profiles, as well as the services and third-party providers used, is available in clause 3.2.4. c).

3.2.3. Consent and options for objecting to the use of cookies

In the cookie settings of our website, you have the option to consent to the use of cookies for analysis as well as marketing cookies individually or in general and revoke them at any time for the future. We also use cookies as a synonym for other technologies and the use of third-party providers for such technologies.

If you do not want to allow the use of certain cookies or cookies in general, you can also prevent these from being stored on your device by adjusting the settings of your device and/or Internet browser accordingly.

You can select “Do not accept cookies” in your Internet browser settings. The process for managing and deleting cookies in your Internet browser settings is detailed in the help menu of your Internet browser. You can also disable all cookies using free Internet browser add-ons such as "Adblock Plus" (adblockplus.org/de) in combination with the "EasyPrivacy" list (easylist.to) or "Ghostery" (ghostery.com).

Stored cookies can be deleted at any time in the system settings of your device and/or Internet browser.

Please note that the functionality and functional scope of our website may be limited if you block or do not consent to the use of cookies.

3.2.4. Services and third-party providers used

a) Services of third-party providers as part of technically required cookies

Usercentrics

We use cookie consent technology provided by Usercentrics GmbH, Rosental 4, 80331 Munich, Germany (hereinafter referred to as “Usercentrics”) on our website, in order to obtain your consent to the storage of certain cookies on your device and document this in accordance with data protection regulations. Usercentrics uses a cookie to be able to assign the granted consent to you, as well as its withdrawal.

The data collected via Usercentrics is processed on our behalf and on the basis of an order processing contract.

Usercentrics is used to obtain and manage the legally required consent to the use of cookies. The legal basis for this is article 6 paragraph 1 c) of the GDPR.

For more information, please refer to the Usercentrics website: https://usercentrics.com/de/

b) Services of third-party providers for analysis of reach and performance

Google Analytics

We use Google Analytics, a web analysis service provided by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). Google Analytics uses cookies to identify the frequency of use of certain areas of our website and preferences. The information generated by the cookie about your use of our website (including your encrypted IP address) is transmitted to a Google server in the USA, where it is stored. Google will use this information on our behalf and on the basis of an order processing contract to evaluate your use of our website, compile reports on website activities for us and provide other services related to the use of the website and of the Internet.

Google is certified under the Privacy Shield agreement and therefore guarantees to comply with European data protection law. More information about data processing in non-EU countries is available in clause 9.

We only use Google Analytics with enabled IP anonymisation. This means that Google will encrypt the user's IP address within the Member States of the European Union (EU) or in other nations party to the Agreement on the European Economic Area (EEA). Only in exceptional cases is the full IP address be transmitted to a Google server in the USA, where it will be encrypted. The IP address transmitted by your Internet browser will not be merged with other Google data.

If you do not want Google Analytics to perform an analysis and reach measurement, you can specifically disable the use of Google Analytics cookies by means of an Internet browser add-on as an alternative to the options described in clause 3.2.3. You can download this here: http://tools.google.com/dlpage/gaoptout?hl=de In this case, so-called “opt-out” information will be stored on your device that serves to assign your deactivation of Google Analytics. Please note that such “opt-out” information will only disable Google Analytics for the device and Internet browser from which it was placed. You may also need to reset this if you delete cookies from your device. As an alternative to this browser add-on, on mobile devices for example, you can also prevent this analysis by Google Analytics by clicking the following link. An "opt-out cookie" will then be placed that prevents the future analysis of your data. This opt-out cookie only applies to the Internet browser used to place it - and only for our website - and is stored on your device. If you delete the cookies in your Internet browser, you must reset the opt-out cookie.

More information about Google’s data usage, settings and objection options is available on the Google website under the following links:

  • https://www.google.com/intl/de/policies/privacy/partners (“Google's data usage when using our partners’ websites or apps”),
  • https://www.google.com/policies/technologies/ads (“The use of data for advertising purposes”).

Google Tag Manager

We use the "Google Tag Manager" of Google Ireland Limited, Gordon House, Barrrow Street, Dublin 4, Ireland, to manage the Google Services. This is used to manage the Google services on our site, no data processing is done by the Google Tag Manager.

The aforementioned third-party providers will only process data to analyse the reach and performance of our website after you have given your voluntary consent in accordance with article 6 paragraph 1 a) of the GDPR. For more details, please refer to clause 3.2.2 b). To find out how to withdraw your consent and disable analysis cookies individually or in general, please refer to clause 3.2.3.

c) Marketing services of third-party providers (retargeting/remarketing)

The aforementioned third-party providers will only process data for marketing purposes after you have given your voluntary consent in accordance with article 6 paragraph 1 a) of the GDPR. For more details, please refer to clause 3.2.2 c). To find out how to withdraw your consent and disable cookies for marketing purposes individually or in general, please refer to clause 3.2.3.

3.3. Integration of third-party content and videos

Our website also uses third-party services to integrate their offers and content (hereinafter referred to as “Content”). Unless the third-party provider is stated separately in the following as part of the individual services, data is processed based on article 6 paragraph 1 f) of the GDPR, as we have a legitimate interest in using third-party content and services for the efficient operation and optimisation of our website.

The providers of this third-party content are therefore notified of your IP address, as they would be unable to transfer the content to your device without this. The IP address is required to display the content. The third-party provider may also store cookies on your device.

Vimeo

Videos are integrated into this website via vimeo.com. This is a service of Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”) for which Vimeo will process your data for its own purposes and not on our behalf. To do this, a connection is established to Vimeo servers in the USA. Certain information (e.g. your IP address) is therefore transmitted to Vimeo. Vimeo may also store cookies on your device. We are unaware of the nature and extent of the data collected by Vimeo and have no control over its use. During integration, Vimeo may also be notified that your browser has accessed the corresponding page of this website, even if you do not have an account with Vimeo or are not logged into Vimeo.

The connection to Vimeo is only established after clicking on "View video".  The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO. The consent is only valid for the loading and display process of the video. If you visit the site again, you will be asked for your consent again. More information about the collection and use of your data by Vimeo, as well as your rights in this regard, is available in Vimeo’s Privacy Policy at https://vimeo.com/privacy

You can technically disable the storage and use of cookies by Vimeo in your browser settings and/or using browser add-ons; pleased be advised, however, that in this case you may not be able to fully use all the features of our website. For more information on how to prevent the storage of cookies, please refer to clause 3.2.3.

YouTube

YouTube videos are also integrated into our website. YouTube is operated by Google Ireland Ltd., Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”). The YouTube videos integrated into our website, which are stored at http://www.youtube.com and can be played directly from this website, are integrated in “extended data protection mode”, i.e. according to YouTube, no data about you as a user will be transmitted to YouTube if you do not watch these videos. When accessing the integrated videos, a connection is established to YouTube’s servers in the USA and certain information (e.g. your IP address) sent to the provider, even if you are not registered with them. We are unaware of the nature and extent of the data collected by YouTube and have no control over its use.

The connection to YouTube is only established after clicking on "View video".  The legal basis for data processing is your consent in accordance with Art. 6 para. 1 lit. a DSGVO. The consent is only valid for the loading and display process of the video. If you visit the site again, you will be asked for your consent again. The terms of use of YouTube (https://www.youtube.com/static?gl=DE&template=terms&hl=de) apply. Further information on data protection can be found in the detailed privacy policy of Google https://www.google.com/policies/privacy/.

Further information on how you can prevent the storage of cookies can be found in section 3.2.3.

Google Maps

We use Google Maps for embedding maps. Here an interface (API) is used to connect to servers of Google Ireland Ltd. At least IP address, URL (Internet address) of our website and date/time of use are transmitted to Google. Legal basis for the transmission is our contract with Google Ireland Ltd. (https://www.google.com/intl/de_US/help/terms_maps.html) in accordance with Art. 6 para. 1 lit. b) GDPR in connection with a contract on joint responsibility in accordance with Art. 26 GDPR, which you can download here: https://privacy.google.com/intl/de/businesses/mapscontrollerterms.

In this respect, visitors enter into a direct user relationship with Google when using Google Maps. Further information on this can be found in Google's detailed privacy policy https://www.google.com/policies/privacy. For more information on how to prevent the storage of cookies, please refer to clause 3.2.3.

4. Access authorisations in the end device

Some functions of our website require you to grant access to your end device (e.g. access to location data).

Granting authorisation is voluntary. However, if you wish to use the corresponding functions, you must grant the corresponding authorisations, otherwise you will not be able to use these functions. The authorisations remain active as long as you have not reset them in your end device and/or Internet browser by deactivating the respective setting.

5. Individual services and functionalities

5.1. Other forms of contact

If you share personal data with us via e-mail or on a contact form, this is always on a voluntary basis. We will process your data to fulfil your contact request and its handling in accordance with article 6 paragraph 1 b) or f) of the GDPR and may also disclose it to third parties (e.g. Porsche AG) in this context.

6. Safeguarding legitimate interests

We process your personal data with a view to safeguarding our legitimate interests. As well as the interests specified in the description of the individual services and functions under clauses 3 and 5, data is also processed on our website and/or after successful registration, especially in light of the following interests:

  1. further development of products, services, service provision and support services, as well as other measures for managing business transactions and processes;
  2. improvement of product quality, elimination of errors and faults, etc., by analysing vehicle data and customer feedback;
  3. processing data on a central prospect and customer care platform, as well as in up and downstream systems for customer loyalty and sales purposes;
  4. needs analysis and customer segmentation, e.g. calculating and evaluating affinities, preferences and potentials;
  5. handling warranty and goodwill cases, processing non-contractual inquiries and concerns from prospects and customers;
  6. risk management and coordination of recalls;
  7. ensuring the legally compliant handling, prevention of and protection against statutory violations (especially criminal offences), assertion of and defence against legal claims;
  8. guaranteeing the availability, operation and security of technical systems and technical data management.

The respective data is processed on the basis of article 6 paragraph 1 f) of the GDPR. We will expressly point out cases in which data must be provided. Without providing this data, we may not be able to process your enquiry or request or fulfil the underlying contract.

7. Consent

If you give us consent to certain data processing operations, this is always earmarked; the purposes result from the content of the concrete declaration of consent. In this case, the data processing takes place on the basis of article 6 paragraph 1 a) of the GDPR. Without your consent, we cannot comply with your request as expressed in your consent. You may revoke your consent at any time, without affecting the legality of the processing carried out on the basis of your consent until revocation.

On the basis of the consent you may have given, the companies listed in the declaration of consent may use the data for individual customer and prospective customer support, for example, and contact you for these purposes via the communication channels you have requested. We use your data in this context to offer you an inspiring brand and support experience with Porsche and to make communication and interaction with you as personal and relevant as possible.

Which of your data is specifically used for individual customer and prospective customer support depends in particular on which data was collected on the basis of enquiries, orders and consultations (e.g. when purchasing or servicing Porsche products) and which data you provided (e.g. your personal interests) at the respective contact points.

The scope of the consent given by you then results concretely from the formulation of the declaration of consent at the contact point.

You can grant us consent for the use of cookies to analyse reach and performance as well as marketing cookies and the use of retargeting/remarketing services individually or generally. For details on the scope and revocation of this consent(s), please refer to clause 3.2.2 b) and c), clause 3.2.3 and clause 3.2.4.

8. Recipients of personal data

Internal recipients: within Porsche Engineering, only those persons have access who require this for the purposes stated.

External recipients: we will only pass on your personal data to external recipients outside Porsche Engineering if this is necessary in order to process your request or to fulfil the underlying contract, if we have another form of legal permission or if we have your consent to do so.

External recipients can be:

a) contract processors

Dr. Ing. h.c.F. Porsche AG or companies of the group or external providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche Engineering or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that the safety and confidentiality of your personal data is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) public authorities

Authorities and state institutions, such as tax authorities, public prosecutor's offices or courts, to which we (must) transmit personal data for mandatory legal reasons or to protect legitimate interests. The transfer then takes place on the basis of article 6 paragraph 1 c) and/or f) of the GDPR.

9. Data processing in non-EU countries

If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission, by appropriate guarantees such as a self-certification of the recipient for the EU-US Privacy Shield or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission.

We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. Please see the information in clause 1.

10. Sources and categories of data collected by third parties

If you provide us with additional personal data via live chat, this is carried out on a voluntary basis. We do not actively request personal data from you. The texts you enter into the input form during the live chat are stored on our behalf on the server of an external service provider. The legal basis for this data processing is article 6 paragraph 1 b) and f) of the GDPR, as we have a legitimate interest in providing you with optimum customer and prospect support as part of a (pre) contractual relationship.

11. Automated decision-making and profiling

We do not use automated decision-making in accordance with article 22 of the GDPR to prepare, justify and conduct business relationships. We only undertake profiling to safeguard our legitimate interests in the context of the processing purposes described in this document.

12. Storage duration and deletion

If the description of the individual services and functions does not include information on the specific storage period or deletion of the data, the following applies:

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or – in the case of consent – as long as you have not revoked the consent. In the event that you object to the processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We will also delete your personal data if we are obligated to do so for other legal reasons.

By applying these general principles, we generally delete your personal data immediately

  • after the legal basis has ceased to apply and no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.
  • if it is no longer necessary for the purposes of preparing and executing a contract or legitimate interests and if no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.
  • if the purpose for which we are pursuing the collection no longer applies and no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.

Information on the storage period of cookies can be found in our Cookie Policy.

13. Rights of the data subject

As a data subject you have a number of rights. Specifically:

Right to information: you have the right to receive information about your personal data stored by us.

Right of correction and deletion: you may request us to correct incorrect data and – insofar as the legal requirements are fulfilled – to delete your data.

Restriction of processing: you may require us to restrict the processing of your data, provided that the legal requirements are met.

Data portability: if you have provided us with data on the basis of a contract or consent, you can request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another responsible party, provided that the legal requirements are met.

Objection to data processing on the legal basis of “legitimate interest”: you have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of ‘legitimate interest’. If you exercise your right of objection, we will stop the processing of your data, unless we can – in accordance with applicable statutory provisions – prove compelling reasons worthy of protection for further processing which outweigh your rights.

Objection to data processing for direct advertising purposes: if we will process your personal data on the legal basis of "legitimate interest" in order to conduct direct advertising, you have the right to object to this processing at any time.

Withdrawal of consent: if you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.

Objection to cookies and withdrawal of consent to cookies: if we use cookies on the legal basis of "legitimate interest", you can also object to the use of these cookies at any time. If you have given us consent to use cookies for analysis of reach and performance and/or marketing cookies, you can revoke this individually or generally at any time with future effect. For more details, please refer to clause 3.2 et seq. and our cookie policy.

Right to complain to the supervisory authority: you can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

Your contact with us and exercising your rights: furthermore, you can contact us free of charge with questions about the processing of your personal data, your rights as a data subject and any consent given. To exercise all your aforementioned rights, please contact https://www.porsche.com/privacy-contact/ or the postal address specified in clause 1 above. Please make sure that we are able to identify you clearly. If you withdraw your consent, you can also choose the contact method that you used when you gave your consent.

14. Links to third-party offers

The websites and services of other providers to which our website is linked have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our website may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers.

The above also applies to the possibility of accessing the corresponding page of a(nother) Porsche company on the respective social medium or sharing an article from our website (share page) by clicking icons of various social media providers, such as Facebook, Twitter, LinkedIn or Pinterest, for example. By selecting the individual provider, a link instantly takes you to the respective offer. The terms of use and privacy policy of the respective provider apply, which are available to view on the website of the respective third-party provider.

15. Version

The latest version of this privacy policy applies.
Edition: 01.07.2020

Further information regarding data privacy policy can be found at: porscheengineering.com/dataprivacypolicy