We, the Porsche Engineering Group GmbH (hereinafter referred to as "we" or "PEG"), are pleased that you are visiting our social media pages (hereinafter referred to as the "social media pages") operated by us on the social media platforms Instagram, Twitter, YouTube, Xing and LinkedIn (hereinafter referred to as the "social media platforms"), in particular

our representation on the Instagram platform

  • „porsche.engineering“ (@porsche.engineering -

- https://www.instagram.com/porsche.engineering/),

(hereinafter as „Instagram page“),

our representation on the Xing platform

  • „Porsche Engineering Group GmbH“ (https://www.xing.com/pages/porscheengineeringgroupgmbh),

(hereinafter as „Xing page“),

as well as our representation on the LinkedIn platform

  • „Porsche Engineering“ (https://de.linkedin.com/company/porsche-engineering)

(hereinafter as „LinkedIn page“)

and about your interest in our company and our products. Therefore, you can be sure, that we handle your privacy as a priority. We take the protection of your personal data very seriously. Your personal data will be processed exclusively in accordance with the statutory provisions of data protection laws, in particular, the General Data Protection Regulation (hereinafter referred to as "GDPR"). With this Privacy Policy, we inform you about the processing of your personal data and about your rights as an affected data subject in connection with our social media pages. For information on other services and offers of other affiliates of the Porsche Group, please refer to the respective Privacy Policy of these services or affiliates of Porsche.

The separate data protection declaration concerning our fan pages on the Facebook platform can be found via the following link:

https://www.porscheengineering.com/peg/en/privacy/dataprivacypolicy/facebook-peg.

1. Controller and Data Protection Officer

Responsible for data processing within the meaning of the data protection laws is:

Porsche Engineering Group GmbH
Porschestraße
71287 Weissach
Germany
pe-datenschutz@porsche-engineering.de

In addition to us, the respective operator of the social media platforms (hereinafter referred to as the "provider") is also a Controller for data processing on our social media pages. In detail, these are:

  • for the Instagram platform: Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter also "Facebook"),
  • for the Xing platform, XING SE, Dammtorstraße 30, 20354 Hamburg, Germany (hereinafter also "Xing") and
  • for the LinkedIn platform, LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter also "LinkedIn").

You may contact our data protection officer via the following address:

Porsche Engineering Group GmbH
Porschestraße
71287 Weissach
Germany
pe-datenschutz@porsche-engineering.de

For Instagram:
You may contact Facebook's data protection officer via an online contact form provided here:
https://www.facebook.com/help/contact/540977946302970.

For Xing:
You may contact Xing's data protection officer via email at datenschutzbeauftragter@xing.com or by mail at the following address: [Name of data protection officer], c/o XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

For LinkedIn:
You may contact LinkedIn's data protection officer via an online contact form provided here: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

2. Subject of data protection

The subject of data protection is the safeguarding of personal data. This involves all information relating to an identified or identifiable natural person (so-called data subject). This includes information such as name, postal address, email address or telephone number, but also other information that may be generated when using our social media pages.

3. General information regarding the social media platform

We would like to emphasise that you use our social media pages and their functions, as well as the social media platform as a whole, on your own responsibility. This applies in particular to the use of the interactive functions (e.g. liking, following, commenting, sharing, rating).

For your utilisation of the Instagram platform as well as the data processing by Facebook, the Terms of Service of Instagramhttps://help.instagram.com/help/instagram/581066165581870/?locale=en_GB) as well as the Instagram Data Policy (https://help.instagram.com/help/instagram/519522125107875/?locale=en_GB) are decisive.

The General Terms and Conditionshttps://dev.xing.com/api/terms_and_conditions as well as the Data Policy https://privacy.xing.com/en/privacy-policy of Xing are decisive for your use of the Xing platform as well as the data processing by Xing.

For your utilisation of the LinkedIn platform as well as the data processing by LinkedIn, the Terms of Service of LinkedInhttps://www.linkedin.com/legal/user-agreement) as well as the LinkedIn Data Policyhttps://www.linkedin.com/legal/privacy-policy are decisive.

We would like to explicitly draw your attention to the fact that the provider stores the data of its registered users (hereinafter referred to as "users") and other interested visitors to the social media platforms (hereinafter referred to as "visitors"), e.g., personal information, IP address, cookies, etc., also outside the European Union (EU) or the European Economic Area (EEA) and uses them for its own business purposes.

We do not have any influence on the collection of data and its further use by the provider. The extent to which the data is stored, where it is stored and for how long, the extent to which the provider complies with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on, is neither recognisable nor within our hands. We therefore ask you to carefully check which personal data you disclose as a user on the social media platforms.

Alternatively, if you want to find out more about our company without using the social media platforms, much of the information provided via our social media pages can also be found on our website https://www.porscheengineering.com/peg/en/ or our career portal https://www.porscheengineering.com/peg/en/jobs/vacancies/.

4. Type, scope, purposes, and legal bases of automated data processing

We operate our social media pages to inform users and visitors about our company and to exchange information with them.

Unless otherwise described below, your data is processed on the basis of our legitimate interests (Article 6 (1) (f) of the GDPR) in the economic operations, optimisation and usage analysis of our social media pages and in order to communicate with you as a user/visitor and to carry out advertising activities on the social media platform.

The use of our social media pages is to a certain extent possible without registering with the social media platforms. Even if you use our social media pages without logging in, personal data may be processed.

Below you will find an overview of the type, scope, purposes and, if applicable, specific legal bases of automated data processing in the context of the use of our social media pages.

4.1 Usage analysis

In connection with the operation of our social media pages, we use the "Insights" or "Analytics" functions provided by the social media platforms, of which we are provided with statistical data on the use of our social media pages by the provider. This data is anonymised for us, which means that the personal data of individual users or visitors is not visible to us. We do not know in detail which data the provider relies on for usage analysis in connection with our social media pages.

From Instagram, we receive aggregated data on the following areas in particular: "Activities" (e.g., interactions such as profile visits and website clicks or the number of people who see our content and where they found it), "Contents" (evaluations of posts, stories and promotions) as well es "Target group" (demographics of subscribers and other visitors).

From Xing, we receive aggregated data on the following categories in particular: "Scope" (Impressions), interactions such as links and clicks, likes, shares, comments), "Target group" (demographic/geographical information, previously visited websites).

From LinkedIn, we receive aggregated data on the following areas in particular: "Scope" (impressions, page views, unique users, sub-page views), "Target group" (demographics), "Interaction" (impressions, reactions, click-through rate, likes, shares, comments, clicked links, engagement rate).

4.2 Cookies

The provider uses cookies and cookie-like technologies, i.e., usually small files that are stored on your terminal device (hereinafter referred to collectively as "cookies"). These are used, among other things, to offer you a comprehensive range of functions, to make the useability more convenient and to be able to optimise its services. The data obtained by means of cookies is stored and processed directly by the provider. We have no access to these and no influence on how the provider deploys them.

The information obtained by means of cookies may be used by the provider within the social media platform as well as in other providers' services and in services of third parties that use the provider services to create use profiles for market research and advertising purposes. In particular, your use patterns and your resulting interests will be taken into account. In this context, the provider may, for example, allow partners or even third parties to use this data to place advertisements within and outside the social media platforms. If you use the social media platform on several devices, the collection and evaluation may also take place across those, especially if you are logged in as a user.

For more information on the type, scope, purposes, legal bases, and opt-out options when cookies are deployed by the respective provider, please refer to:

  • the Instagram Cookies Policy

(https://help.instagram.com/help/instagram/1896641480634370/?locale=en_GB),

If you do not wish to use cookies and/or cookie-like technologies, you can also disable their storage on your terminal device by making the appropriate settings on your terminal device and/or internet browser or by using separate opt-out options. Please note that the functionality and scope of functions of our social media pages may be limited as a result.

4.3 Direct contacting

If you contact us directly via our social media pages e.g., by means of a personal message, a messenger or a pre-filled form, the processing of your data provided therein, e.g., name, e-mail address, details of your vehicle, is only for the purpose of receiving and, if necessary, answering your customer/prospect enquiry. Your data may not be transferred to our internal Porsche systems.

To the extent of which the initiation of a contractual relationship is concerned, the processing of data transmitted in the context of a direct contact via the social media platform is based on Article 6 (1) (b) GDPR. Insofar as you are asked by us for consent to data processing, e.g., by means of a checkbox in connection with forms provided by us, the legal basis for data processing in this respect is Article 6 (1) (a) GDPR, if applicable.

Since we are not aware of the confidentiality of the information you provide when contacting us directly and how the social media platforms use this information, please refrain from transmitting sensitive data or other confidential information, such as application documents or bank/credit card details. We recommend that you use a more secure means of transmission, such as letter post or via our Career portal at https://www.porscheengineering.com/peg/en/jobs/vacancies/.

If you contact us directly as part of a job application via our Xing or LinkedIn pages, and provide us with information about yourself, we regularly delete such requests immediately from the respective social media platform.

4.4 Other user interactions

In accordance with how a social media platform works, it is possible for us to gain knowledge of the users who like, rate, comment on or share our social media page, provided that you have made your interactions accessible and have not explicitly marked it as "private". We analyse this information in aggregated form to provide our users and visitors with more relevant content that may be of greater interest to them. The information obtained in this way does not allow any conclusions to be drawn about a natural person.

In your social media profile, being a user means that you have the option to actively hide your "posts", "tweets", "rated videos", "subscriptions", "followers" or other profile details as well as to no longer follow our social media pages. You will then no longer appear in the list of followers/subscribers of this social media page.

4.5 Interest-based advertising

We can use demographic and geographic analyses of our target groups provided to us by the social media providers in order to display targeted interest-based advertisements on our social media pages or to highlight our posts. By doing so, we do not obtain explicit knowledge of the identity of the user or visitor to whom the advertisements are displayed. In this case, the display of advertisements or highlighting of posts on our social media pages is based on an analysis of previous usage behaviour by the social media providers, whereby we only have anonymised or pseudonymised information that does not allow us to identify you personally and which is never merged with any personal data that we may have stored.

In the context of interest-based advertising, if we exceptionally carry out a so-called extended comparison with customer lists, this will only be done after you have given us your consent (Article 6 (1) (a) GDPR).

If you as a user have linked your Instagram account to your Facebook account, you can control the extent to which your user behaviour may be collected and used by Facebook in the Facebook advertising preferences settings https://www.facebook.com/adpreferences/?entry_product=ad_preferences_delegation.

Being a user of the Xing platform, you can control the extent to which your user behaviour may be recorded and used by Xing in the settings for "Measurement and Optimisation of Advertising" https://login.xing.com/?dest_url=https%3A%2F%2Fwww.xing.com%2Fsettings%2Fprivacy%2Fprofile%2Ffindability

Being a user of the LinkedIn platform, in the LinkedIn advertising settings https://www.linkedin.com/psettings/advertising( you can control the extent to which your user behaviour may be collected and used by LinkedIn. For more information on managing ad settings on the LinkedIn platform, please click here: https://www.linkedin.com/help/linkedin/answer/65446/anzeigeneinstellungen-verwalten?lang=en

5. Recipients of personal data

Internal recipients: Within our company, only those persons have access to your personal data who need it for the purposes stated in the respective case.

External recipients: We only pass on your personal data to external recipients outside Porsche AG if this is necessary to process or respond to your request. Likewise, if there is another legal permission or if we have your consent to do so.

External recipients may be:

a) Processors: Porsche AG group companies or external service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the Porsche AG offering or the provision of content. These processors are carefully selected by us and regularly checked to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) Public authorities: Authorities and state institutions, such as public prosecutors' offices, courts or tax authorities, to which we have to transfer personal data for legally compelling reasons. The transfer is then made on the basis of Article 6 (1) (c) GDPR.

c) Private entities: Porsche dealers and service companies, cooperation partners, service providers or persons to whom data is transferred on the basis of consent for the performance of a contract with you or for the protection of legitimate interests, for example, Porsche Centres and Porsche Service Centres, financing banks, providers of other services or transport service providers. The transfer is then made on the basis of Article 6 (1) (a), (b) and/or (f) GDPR.

https://privacy.xing.com/en/privacy-policy or.

  • LinkedIn Privacy Policy

https://www.linkedin.com/legal/privacy-policy.

6. Data processing in third countries

If data is transferred to bodies whose registered office or place of data processing is not located in a member state of the European Union, another state party to the Agreement on the European Economic Area or a state for which an adequate level of data protection has been established by a decision of the European Commission, we will ensure prior to the transfer that the data transfer is either covered by a legal authorisation, by guarantees for an adequate level of data protection with regard to the transfer of data (e.g. by agreement on contractual guarantees or officially recognised regulations or binding internal data protection regulations at the recipient) or you have given your consent to the transfer of data

Where the data transfer is made on the basis of Article 46, 47 or 49 (1), second sub-paragraph of the GDPR, you may obtain from us a copy of the safeguards for the existence of an adequate level of data protection in relation to the data transfer or an indication of the availability of a copy of the safeguards. Please use the information under Section 1 for this purpose.

7. Storage period, deletion

If no information is provided in the description of the individual services and functions regarding the specific storage period or deletion of the data, the following may apply:

We store your personal data only as long as it is necessary for the fulfilment of the specified purposes or - in the case of consent - as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data unless further processing is still permitted under the statutory provisions. We will also delete your personal data if we are obliged to do so for other legal reasons.

Applying these general principles, we usually delete your personal data immediately:

  • after the legal basis ceases to apply and provided that no other legal basis (e.g., retention periods under commercial and tax law) applies. If the latter applies, we delete the data after the other legal basis ceases to apply;
  • if the data is no longer required for the purposes pursued by us for the preparation and execution of a contract or legitimate interests and no other legal basis (e.g., retention periods under commercial and tax law) applies; if the latter applies, we delete the data after the other legal basis ceases to apply;
  • if the purpose of the collection pursued by us ceases to apply and no other legal basis (e.g., retention periods under commercial and tax law) applies; if the latter applies, we delete the data after the other legal basis ceases to apply.

We review the necessity of the personal data stored by us on social media platforms at least once a year and carry out corresponding deletion routines. In this context we, for example, initiate the removal of Messenger messages. However, due to the lack of technical control over the social media platforms, we cannot ensure that the social media platforms will actually delete the data.

In generally, we have no effect on how the providers store or delete your data on the social media platforms. For details, please refer to the:

https://privacy.xing.com/en/privacy-policy or

  • LinkedIn Privacy Policy

https://www.linkedin.com/legal/privacy-policy.

8. Data subjects’ rights

As a data subject, there are a variety of rights available to you. In detail:

Right to information: You have the right to receive information about the data we have stored about you.

Right of correction and deletion: You can demand that we correct incorrect data and - insofar as the legal requirements are met - delete your data.

Restriction of processing: You can request us - provided the legal requirements are met - to restrict the processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another responsible party.

Objection: You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the protection of legitimate interests. If you exercise your right to object, we will stop processing unless we can demonstrate compelling legitimate grounds for further processing that override your rights and interests.

Objection to direct marketing: If we process your personal data for the purpose of direct marketing, you have the right to object to our processing of your data for this purpose at any time. If you exercise your right to object, we will stop the processing for this purpose.

Revocation of consent: If you have given us consent to process your personal data, you can revoke this consent at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.

Right to lodge a complaint with thesupervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can do this by contacting the data protection authority responsible for your place of residence or country or the data protection authority responsible for us or the social media platforms.

Contacting us and exercising your rights: Furthermore, you can contact us free of charge if you have any questions regarding the processing of your personal data and your data subject rights. Please contact us at pe-datenschutz@porsche-engineering.de or by post at the address given in Section 1 above.

However, we recommend that you address requests for information and the assertion of other data subject rights directly to the social media platform providers. Regarding the social media platforms, the providers solely have direct access to the necessary information and can take any necessary measures and provide information.

https://privacy.xing.com/en/privacy-policy or.

  • LinkedIn Privacy Policy

https://www.linkedin.com/legal/privacy-policy.

We also recommend that you regularly check your privacy settings on the social media platforms.

Being a user of Instagram, you can adjust the Privacy Settings of Instagram here: https://www.instagram.com/accounts/privacy_and_security.

You can find more information on this via the Instagram platform: https://help.instagram.com/116024195217477.

Being a user of Xing, you can adjust the Privacy Settings regarding your appearance, findability, disclosure of activities, contact lists and messages in the Xing Data Protection Settings via this link:

https://www.xing.com/settings/privacy/profile.

Being a user of LinkedIn, you can adjust the Privacy Settings of LinkedIn here:

9. Links to third-party services

Social media pages, websites as well as services of third-party providers linked to our social media pages are designed and provided by third parties. We have no effect on the design, content and function of these third-party services. We therefore disclaim any responsibility for the content of any such linked third-party services. Please note that the third-party services linked from our social media pages may install their own cookies on your terminal device or collect personal data. We have no effect on this. If necessary, please seek information from the provider of these linked third-party offers directly. The respective provider and responsible party can be found in the imprint and the respective data policy of the corresponding social media pages or websites.

10. Status

The most current version of this Privacy Policy applies We recommend that you check the latest version when you next visit our social media pages.

(This version dates from: 25th October 2021)