Privacy Policy Social media pages of Porsche Engineering Group GmbH

We, the Porsche Engineering Group GmbH (hereinafter referred to as "we" or "PEG"), appreciate your inter-est in our products and services. We take the protection of your personal data very seriously. Your personal data is processed exclusively within the framework of the statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter "GDPR"). With this data protection declaration, we inform you about the processing of your personal data and about your rights as a data subject in the area of our social media pages.

This privacy policy applies to all of our appearances on the following social media platforms:

Facebook
„Porsche Engineering (@PorscheEngineering - https://de-de.facebook.com/PorscheEngineering/),
(hereinafter as „Facebook page“),

Instagram
„porsche.engineering“ (@porsche.engineering - https://www.instagram.com/porsche.engineering/?hl=de),
(hereinafter as „Instagram page“),

Xing
„Porsche Engineering Group GmbH“ (https://www.xing.com/pages/porscheengineeringgroupgmbh),
(hereinafter as „Xing page“),

LinkedIn
„Porsche Engineering“ (https://de.linkedin.com/company/porsche-engineering)
((hereinafter as „LinkedIn page“)

1. Controller and data protection officer

Responsible for data processing within the meaning of the data protection laws is:

Porsche Engineering Group GmbH
Porschestraße
71287 Weissach
Germany
E-mail: datenschutz@porsche-engineering.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us. You can reach our data protection officer as follows:

Porsche Engineering Group GmbH
Porschestraße
71287 Weissach
Germany
Contact: datenschutz@porsche-engineering.de

In addition to us, the respective operator of the social media platform (hereinafter referred to as the "provid-er") is also responsible for the data processing on our social media pages. In detail, these are:

  • for the Facebook and Instagram platform, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also "Meta Platforms" or "Facebook"),
  • for the Xing platform, XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter also "Xing") and
  • for the LinkedIn platform, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter also "LinkedIn"),

In an agreement on joint responsibility pursuant to Article 26 of the GDPR, we have defined with Facebook how the respective tasks and responsibilities for the processing of personal data are structured and who fulfils which data protection obligations. In particular, we have determined how an appropriate level of security and your data subject rights can be ensured, how we can jointly fulfil the information obligations under data protection law and how we can monitor potential data protection incidents. This also includes how we can ensure compliance with our reporting and notification obligations. For more information on the "Page Insights" function and the main content of our agreement with Facebook, please see section 4.1.

You can reach the respective data protection officer of the persons jointly responsible with us as follows:

The operators of the social media platforms are available to you as a single point of contact. However, you can also assert your rights in relation to the processing operations under joint responsibility vis-à-vis us. Insofar as you contact us, we will coordinate with the respective provider in order to answer your request and ensure your data subject rights.

2. Subject of data protection

The object of data protection is the protection of personal data. This is all information that relates to an identified or identifiable natural person (so-called data subject). This includes information such as name, postal address, e-mail address or telephone number, but also other information about your person that arises in the context of the use of our social media pages (e.g. connection and usage data).

3. General information on social media pages

We would like to point out that you use our social media pages and their functions as well as social media platforms as a whole on your own responsibility. This applies in particular to the use of interactive functions (e.g. liking, commenting, sharing, rating).

The terms of use (https://de-de.facebook.com/legal/terms/) as well as the data policy (https://de-de.facebook.com/about/privacy) of Facebook as well as the terms of use (https://help.instagram.com/581066165581870) as well as the privacy policy (https://help.instagram.com/519522125107875) of Instagram are primarily decisive for your use of the Instagram platform as well as the data processing by Facebook.

The General Terms and Conditions (https://www.xing.com/terms) as well as the data protection declaration (https://privacy.xing.com/en/privacy-policy) of Xing are primarily decisive for your use of the Xing platform as well as the data processing by Xing.

Decisive for your use of the LinkedIn platform as well as the data processing by LinkedIn are primarily the user agreement (https://www.linkedin.com/legal/user-agreement) as well as the privacy policy (https://www.linkedin.com/legal/privacy-policy) of LinkedIn.

We expressly draw your attention to the fact that the respective providers may also store the data of their registered users (hereinafter "users") and other interested visitors to the social media platforms (hereinafter "visitors"), e.g. personal information, IP address, cookies, etc., outside the European Union (EU) or the European Economic Area (EEA) and use it for their own business purposes.

We generally have no influence on the collection of data and its further use by the providers. The extent to which the data is stored, where it is stored and for how long, the extent to which the providers comply with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on, is neither recognisable nor influenceable for us. We therefore ask you to carefully check which personal data you disclose as a user on the social media platforms.

Alternatively, if you want to find out about our company without using social media platforms, you can access much of the information provided on our social media pages on our website https://www.porscheengineering.com/peg/en/.

4. Purposes and legal bases of data processing

Below you will find an overview of the purposes and legal basis of data processing. We operate our social media sites in order to inform users and visitors about our company and to exchange information with them.

Unless otherwise described below, your data is processed on the basis of our legitimate interests (Article 6(1)(f) GDPR) in the economic operation, optimisation and usage analysis of our social media pages and in order to communicate with you as a user/visitor and to carry out advertising activities on the social media platforms.

The use of our social media pages is partly possible without registration with the social media platforms. Even if you use the social media sites without registering, personal data may be processed.

Below you will find an overview of the type, scope, purposes and, if applicable, specific legal bases of automated data processing in the context of the use of our social media pages.

4.1 Usage analysis

In connection with the operation of our social media pages, we use the "Insights" or "Analytics" function of the social media platforms, by means of which the provider provides us with statistical data on the use of our social media pages, which are anonymous for us, i.e. the personal data of individual users or visitors are not visible to us. We do not know in detail which data the provider uses for usage analysis in connection with our social media pages.

In connection with the operation of our Instagram pages and Facebook pages, we use the "Page Insights" function of Facebook (the provider of the services), by means of which Facebook provides us with statistical data on the use of our Instagram page, which are anonymous for us, i.e. the personal data of individual users or visitors are not visible to us. You can find out which data Facebook uses for usage analysis in connection with our Instagram page ("Page Insights data") and which information Facebook provides on data processing in connection with the Page Insights function here: https://de-de.facebook.com/legal/terms/information_about_page_insights_data.

With respect to Page Insights Data, we are jointly responsible for data processing with Facebook and have entered into a Joint Controller Agreement ("Page Insights Supplement" - https://de-de.facebook.com/legal/terms/page_controller_addendum) which sets out our respective obligations under the GDPR. We have agreed therein that

  • we are jointly responsible with Meta Platforms for the processing of Page Insights data;
  • Meta Platforms takes primary responsibility and is primarily responsible for providing you with information about the joint processing and enabling you to exercise your rights under the GDPR (see section 8 below);
  • Meta Platforms alone can make and, if necessary, implement decisions regarding the processing of Page Views data and the fulfilment of its obligations under data protection law;
  • Meta Platforms is solely responsible for the processing of other personal data in connection with Page Insights that is not covered by the Page Insights Supplement; we may not require disclosure in this regard;
  • the Irish Data Protection Commission (https://www.dataprotection.ie) is the lead authority for the supervision of processing under shared responsibility.

In particular, we receive aggregated data from LinkedIn in the following areas: Reach (impressions, page views, unique users, access to subpages), target group (demographic information), interaction (impressions, reactions, click rate, likes, shares, comments, (link) clicks, engagement rate), target group (demographic/geographic information).

With respect to Page Insights Data, we are jointly responsible for data processing with LinkedIn and have entered into a Joint Controller Agreement ("Page Insights Supplement" - https://legal.linkedin.com/pages-joint-controller-addendum) which sets out our respective obligations under the GDPR. We have agreed therein that

  • we are jointly responsible with LinkedIn for the processing of Page Insights data;
  • LinkedIn takes primary responsibility and is primarily responsible for providing you with information about the joint processing and enabling you to exercise the rights available to you under the GDPR (see section 8 below);
  • the Irish Data Protection Commission (https://www.dataprotection.ie) is the lead authority for the supervision of processing under shared responsibility.

We receive aggregated data from Xing inparticular in the following areas: Reach (impressions), interactions ((link) clicks, likes, shares, comments), target group (demographic/geographical information, previously visited websites).

4.2 Direct contact

If you contact us directly via our social media pages (e.g. by means of a personal message, messenger or a pre-filled form), the data you provide (e.g. name, e-mail address, details of your vehicle) will only be processed for the purpose of recording and, if necessary, responding to your customer/prospect enquiry. We will not transfer this data to Porsche's internal systems.

As far as the initiation of a contractual relationship is concerned, the processing of data transmitted in the context of a direct contact via the social media platform is based on Article 6(1)(b) GDPR. Insofar as you are asked by us for consent to data processing, e.g. by means of a checkbox in connection with forms provided by us, the legal basis for data processing in this respect is Article 6(1)(a) GDPR, if applicable.

Since we are not aware of the confidentiality of the information you provide when contacting us directly and how it is used by the provider itself, please refrain from transmitting sensitive data or other confidential information, such as application documents or bank or credit card details, via this channel. We recommend that you use a more secure means of transmission, such as letter post or our careers portal at https://www.porscheengineering.com/peg/en/jobs/vacancies/.

If you contact us directly as part of a job application, in particular via our Xing or LinkedIn page, and provide us with information about yourself, we regularly delete such requests immediately from the respective social media platform.

4.3 Other user interactions

We may, by the nature of a social media platform, learn about users who like, subscribe to, rate, comment on or share our social media pages and posts, provided that you have made your interaction on the social media platform public and have not explicitly marked it as "private" through the social media platform's settings, if applicable. We analyse this information in aggregate form in order to provide our users and visitors with more relevant content that may be of greater interest to them. The information obtained in this way does not allow any conclusions to be drawn about a natural person.

In your respective social media profile, you as a user have the option, for example, to actively hide your "posts", "tweets", "rated videos", "subscriptions", "followers", "pins" or other profile information or to no longer follow or subscribe to our social media pages. You will then no longer appear in the list of followers or subscribers of this social media page.

4.4 Interest-based advertising

We are able to use demographic and geographic analyses of our target groups provided to us by the provider in order to place targeted interest-based advertisements on our social media pages or to highlight our posts without, however, obtaining direct knowledge of the identity of the user or visitor to whom the advertisements are displayed. In this case, the display of advertisements or highlighting of posts on our social media pages is carried out on the basis of an analysis of the previous usage behaviour by the provider, whereby, however, we only have anonymised or pseudonymised information that regularly does not allow us to identify you personally and is not merged with any personal data stored by us at any time.

If, in the context of interest-based advertising, we exceptionally carry out a so-called extended comparison with customer lists, this will only be done after you have given us your consent (Article 6(1)(a) GDPR).

If you as a user have linked your Instagram account to your Facebook account, you can control the extent to which your user behaviour may be collected and used by Facebook (on Facebook and Instagram pages) in Facebook's advertising preferences settings (https://de-de.facebook.com/ads/preferences).

As a user of the Xing platform, you can control the extent to which your user behaviour may be recorded and used by Xing in the settings for "Measurement and Optimisation of Advertising" (https://privacy.xing.com/de/datenschutzerklaerung/informationen-die-wir-auf-grund-ihrer-nutzung-von-xing-automatisch-erhalten/messung-und-optimierung-von-werbung).

As a user of the LinkedIn platform, you can control the extent to which your user behaviour may be collected and used by LinkedIn in the LinkedIn advertising settings (https://www.linkedin.com/psettings/advertising). Further information on managing ad settings on the LinkedIn platform can be found here: https://www.linkedin.com/help/linkedin/answer/65446/anzeigeneinstellungen-verwalten?lang=en.

5. 5. Recipients of personal data

Within our company, only those persons have access to your personal data who need it for the purposes stated in each case. Your personal data will only be passed on to external recipients if this is permitted by law or we have your consent. Below you will find an overview of the relevant recipients:

  • Private posts: The provider of the respective social media platforms.

6. Data processing in third countries

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union, another state party to the Agreement on the European Economic Area or a state for which an adequate level of data protection has been established by a decision of the European Commission, we will ensure prior to the transfer that the transfer of data is either covered by a legal authorisation, guarantees exist for an adequate level of data protection with regard to the transfer of data (e.g. by agreement on contractual guarantees or officially recognised regulations or binding internal data protection regulations at the recipient or you have given your consent to the transfer of data.(e.g. through the agreement of contractual guarantees, officially recognised regulations or binding internal data protection regulations at the recipient) or you have given your consent to the data transfer.

Where the data transfer is based on Article 46, 47 or 49(1), second subparagraph, of the GDPR, you may obtain from us a copy of the safeguards for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of the safeguards. Please use the information under point 1 for this purpose.

7. Storage period, deletion

We store your personal data, if a legal permission exists for this, only as long as necessary to achieve the purposes pursued or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data unless further processing is still permitted under the statutory provisions. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we usually delete your personal data immediately

  • after the legal basis ceases to apply and provided that no other legal basis (e.g. retention periods under commercial and tax law) applies. If the latter applies, we delete the data after the other legal basis ceases to apply;
  • if your personal data is no longer required for the purposes pursued by us and no other legal basis (e.g. retention periods under commercial and tax law) applies. If the latter applies, we delete the data after the other legal basis no longer applies.

We review the necessity of the personal data stored by us on the social media platforms at least once a year and carry out corresponding deletion routines, in the context of which we, for example, initiate the removal of messenger messages. However, due to the lack of technical control over the social media platforms, we cannot ensure that the social media providers will actually delete the data.

In principle, we have no influence on how the providers of the social media platforms store or delete your data on their platforms. For details, please refer to the

8. Data subjects' rights

Right to information: You have the right to receive information about the data we have stored about you.

Right of correction and deletion: You can demand that we correct incorrect data and - insofar as the legal requirements are met - delete your data.

Restriction of processing: You can request us - provided the legal requirements are met - to restrict the processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another responsible party.

Objection: You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the protection of legitimate interests. If you exercise your right to object, we will stop processing unless we can demonstrate compelling legitimate grounds for further processing that override your rights and interests.

Objection to direct marketing: If we process your personal data for the purpose of direct marketing, you have the right to object to our processing your data for this purpose at any time. If you exercise your right to object, we will stop processing for this purpose.

Revocation of consent: If you have given us consent to process your personal data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.

Right to lodge a complaint with the supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us or the respective social media platform operator. For Facebook, Instagram and LinkedIn this is the Irish Data Protection Commission (https://www.dataprotection.ie), for Xing the Hamburg Commissioner for Data Protection and Freedom of Information (https://datenschutz-hamburg.de/).

Contacting us and exercising your rights: Furthermore, you can contact us free of charge if you have any questions regarding the processing of your personal data and your data subject rights. Please contact us at datenschutz@porsche-engineering.de or by post at the address given in point 1 above. Please ensure that we are able to clearly identify you. When revoking consent, you can alternatively also choose the contact method you used when giving your consent.

However, we recommend that you address requests for information and the assertion of other data subject rights regarding our social media sites directly to the respective provider. As the operators of the social media platforms, only the providers have direct access to the necessary information and can take any necessary measures and provide information.

You can find out how to exercise your rights as a data subject against the respective provider in the

We also recommend that you regularly check your privacy settings on social media platforms.

As a Facebook user, you can control the extent to which your user behaviour may be recorded and used by Facebook in the settings for advertising preferences (https://de-de.facebook.com/ads/preferences), make further objection/opt-out and setting options in the general Facebook settings (https://de-de.facebook.com/settings - in particular under "Privacy").

As a user of Instagram, you can in particular make adjustments in the privacy settings of Instagram (https://www.instagram.com/accounts/privacy_and_security). You can find more information on this directly on the Instagram platform: https://help.instagram.com/116024195217477.

As a user of LinkedIn, you can in particular make adjustments in the privacy settings of LinkedIn (https://www.linkedin.com/psettings/privacy).

As a user of Xing, you can in particular make adjustments to the display, findability, activity visibility, contact lists and messages in the data protection settings of Xing (https://www.xing.com/settings/privacy/profile).

9. Status

The most current version of this privacy policy applies. Status 2022/01/05.