I. General
1. Body responsible for data processing („controller“)
Porsche Lifestyle GmbH & Co. KG takes the protection of your personal data and the legal obligations to ensure data protection very seriously. The law requires full transparency regarding the processing of personal data. You as a data subject can only understand the details of the processing if you are duly informed about the purpose, nature and scope of the processing.
That is why our Privacy Policy explains in detail which personal data we process when you use our website (www.porsche-design.com) or other websites referring to our website or in the other cases described herein.
The body responsible for the data processing, i.e. the controller within the meaning of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (German Federal Data Protection Act – “BDSG”) and other data protection regulations is
Porsche Lifestyle GmbH & Co. KG
Grönerstraße 5
71636 Ludwigsburg
Germany
Telephone: +49(0)711/911 12911
Email: contact@porsche-design.com
- Referred to hereinafter as “controller” or “we” -
You can contact our data protection officer at:
Porsche Lifestyle GmbH & Co. KG
- Beauftragter für Datenschutz -
Grönerstrasse 5
71636 Ludwigsburg
Germany
Email: datenschutzbeauftragter@porsche-design.de
Please be aware that, if you click the links on our website, you may be redirected to other websites which are not run by us but by third parties. We either clearly mark these links or the redirection becomes clear by a change in the browser address bar. We are not responsible for compliance with the applicable data protection regulations and secure treatment of your personal data when you use the third-party websites.
2. Definitions
GDPR terminology
For the purposes of this Privacy Policy, we use the terms and wording of the GDPR. The definitions (Art. 4 GDPR) are available at
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.
Cookies and similar technologies
Cookies are text files which a website places on your client and/or which are read there. They contain combinations of letters and numbers which enable us to recognise the user and user settings when the user comes back to the website which set the cookie; they also enable the user to stay logged-in to a customer account and enable us to statistically analyse a certain user behaviour.
The WebStorage technology enables local storage of variables and values in the user’s browser cache. The technology includes the so-called "sessionStorage" which remains stored until the browser tab is closed as well as the "localStorage" which remains stored in the browser cache until the cache is emptied by the user. The localStorage technology enables, among other things, recognition of the user and user settings when the user comes back to our website.
Pixel tags are small graphic files which are loaded from the severs of the respective service provider when a user accesses our website. This also includes loading of the program code which enables the collection of data (e.g. regarding your user behaviour while visiting our website).
Cookies / similar technologies can only be accessed from the Internet address where the cookie was set. This means that we cannot access the cookies set by the service providers involved (see above). The latter cannot access our cookies either. Third parties cannot access our cookies nor those of the involved service providers. Third parties may only gain access by technical attacks which we cannot control and for which we are not responsible.
Data categories
If we specify the data categories we process, they include but are not limited to the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. email addresses, telephone numbers, messenger services), content data (e.g. entered texts, photos, videos, contents of documents/files), contract data (e.g. contract purpose, contract terms, customer categories), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain contents, times of access, contact history and purchasing history), connection data (e.g. device information, IP addresses, URL referrer), position data (e.g. GPS data, IP geo-localisation, points of access).
3. Information on the data processing
We only process personal data to the extent permitted by law. We only disclose or transfer personal data to third parties in the cases described below. The personal data are protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Except where we are obliged by law to store the data or disclose or transfer them to third parties (including but not limited to prosecuting authorities), the decision which personal data we process and for how long and to which extent we may disclose or transfer them to third parties depends on the specific website features you use from time to time.
4. Storage duration
The personal data are deleted as soon as the purpose of the processing or the prescribed storage period, if any, has expired unless the storage of the personal data needs to be continued for the purpose of entering into or performing a contract. If and to the extent we are obliged to inform you about the duration of storage of cookies and similar technologies, this information is made available in sec. II below and in our cookie consent tool.
5. Automated individual decision-making, including profiling
Automated individual decision-making including profiling only takes place with the following processing activities:
Credit check in the case of payment by invoice (Pay Later) (see the information on “Klarna (Payment by invoice – Pay Later)”)
This decision-making is admissible for the following reason:
The decision-making is necessary for entering into or performing a contract between you and us.
We implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
The decision-making is not based on special categories of personal data according to Art. 9 (1) GDPR.
6. Data subjects’ rights
As a data subject you have the right of access/ right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The right of access/right to information and the right to erasure are subject to the restrictions under § 34, § 35 BDSG (Bundesdatenschutzgesetz - German Federal Data Protection Act).
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG, Bundesdatenschutzgesetz - German Federal Data Protection Act).
The supervisory authority responsible for our headquarters is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart
Germany
You may however also lodge your complaint with another supervisory authority.
7. Controller’s notification obligation
We will communicate any rectification or erasure of your personal data or restriction of processing carried out in accordance with Art. 16, Art. 17 (1) and Art. 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.
8. Obligation to provide or disclose data
Unless stated otherwise in the explanations below regarding the applicable legal basis, you are not obliged to provide or disclose personal data to us. However, in the cases referred to in Art. 6 (1) point (b) GDPR, the personal data, the personal data are necessary for entering into or performing a contract. If you do not provide use with the relevant personal data, it will be impossible for us to enter into, or perform, the contract. If you do not provide us with the date in the cases referred to in Art. 6 (1) point (a) and (f) GDPR, you will not be able to use the parts of our website concerned thereby.
9. Right to object and withdrawal of consent
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Art. 6(1) GDPR, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Pursuant to Art. 7 (3) sentence 1 GDPR, you have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. After you have withdrawn your consent, we will delete the personal data we have processed based on your consent unless there is another legal basis for the processing of these data.
Both objection and withdrawal are not subject to formal requirements and should be sent to our contact data stated above.
You can withdraw certain consents (for this, see the services listed in sec. II below) by using our consent tool, which you can find above in the chapter preceding this Privacy Policy. Please be aware that you have to withdraw your consent on every single device from which you have accessed our website and consented to the data processing.
10. Information on events of Porsche Lifestyle GmbH & Co. KG
Registration and conducting of events
Purposes of data processing:
Registration for our events; conducting of our events; ensuring the security of our IT systems
Data processed:
Master data, contact data, connection data
Legal basis:
Article 6 (1) (b) and (f) GDPR
Place of processing:
EU/EEA
Storage duration:
The data will be deleted once the event has completely ended. In exceptional cases, the data will be processed further if another processing purpose exists (e.g. if you wish to be contacted after the event).
Data recipients:
Depending on the event, and where necessary, group companies of Dr. Ing. h.c. F. Porsche AG, IT service provider(s), operator(s) of event sites, public authorities
Recording of participants at events
Purposes of data processing:
If announced for the respective event, recordings of the entire event or of parts of the event in the form of photos and/or videos will be made for the purpose of marketing and training
Data categories:
Master data, content data
Legal basis:
Article 6 (1) (a) and (f) GDPR
Place of processing:
EU/EEA, in individual cases the USA and other third countries (based on your consent, an adequacy decision pursuant to Art. 45 GDPR or standard data protection clauses pursuant to Art. 46 GDPR)
Storage duration:
Dependent on the reason for recording; the data will be deleted once the respective processing purpose has been completed
Data recipients:
Depending on the event, and where necessary, group companies of Dr. Ing. h.c. F. Porsche AG, IT service provider(s), media, social networks
Recording of speakers at events
Purposes of data processing:
If agreed with you, your speaker contributions at our events or parts thereof will be recorded with photos and/or videos for the purpose of marketing and training
Data categories:
Master data, content data
Legal basis:
Article 6 (1) (a) and (b) GDPR
Place of processing:
EU/EEA, in individual cases the USA and other third countries (based on your consent, an adequacy decision pursuant to Art. 45 GDPR or standard data protection clauses pursuant to Art. 46 GDPR)
Storage duration:
Dependent on the reason for recording; the data will be deleted once the respective processing purpose has been completed
Data recipients:
Depending on the event, and where necessary, group companies of Dr. Ing. h.c. F. Porsche AG, IT service provider(s), media, social networks
II. Data processing in connection with the use of our website
Generally, the use of the website and its features necessarily involves the processing of personal data.
Google Tag Manager
We use the Google Tag Manager to embed contents of third-party providers (e.g. Google Analytics, Usercentrics). This is a technical solution which does not itself store or read cookies or similar technologies requiring consent, but merely controls the conditions under which the other programs used on our website and described below are activated.
Provision of the website
Essential features for the provision of the website and webshop
Purposes of data processing:
Functioning and optimisation of the website and ensuring the security of our information technology systems if our website is used for mere information purposes; integration and display of features and contents (e.g. diagrams) which we do not provide ourselves.
Technologies used
Cookies; other technologies where appropriate, such as WebStorage contents
Collected data
Usage data, connection data
Legal basis
Art. 6 (1) point (f) GDPR
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
IT service providers
Further information on the service
Information on the data processing is made available in this Privacy Policy
Cloudflare
This is a Content Delivery Network (CDN) and security and DNS service.
Purposes of data processing:
Individualised design and functioning of our website; ensuring the security of our website and information technology systems
Technologies used
Cookies
Processed data
Usage data, connection data
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA
Further information on the service
https://www.cloudflare.com/privacypolicy/
Information on products, events and offers (newsletter)
This is a service which allows you to receive individual and personalised information, via email or telephone, on products, events and offers from selected Porsche companies.
Data processing purposes:
Personalised information via telephone or email, on products, events and offers from the following Porsche companies: Porsche Design (Porsche Lifestyle GmbH & Co. KG) (address, see above); Dr. Ing. h.c. F. Porsche AG, Porscheplatz 1, D-70435 Stuttgart, Germany; Porsche Deutschland GmbH, Porsche Strasse 1, D-74321 Bietigheim-Bissingen, Germany; Porsche Financial Services GmbH, Porschestrasse 1, D - 74304 Bietigheim-Bissingen, Germany; Porsche Smart Mobility GmbH, Porscheplatz 1, D-70435 Stuttgart, Germany; and, possibly, my local Porsche Centre (a list of Porsche Centres can be found here: https://www.porsche.com/germany/dealersearch; Creation of use and interest profiles; Proof of your consent; Guarantee of the security of our IT systems.
Technology used
See the tools and plugins listed in this Privacy Statement.
Data collected
Historical data, contact data, content data, contract details, usage data and communication data
Legal basis
Article 6 (1) (a) and (f) GDPR
Location of processing
EU/EEA
Retention period
The data is deleted as soon as it is no longer required for the processing purposes.
Data recipient
K3 Agency GmbH, Hoferstrasse 9a, 71636 Ludwigsburg; CleverReach GmbH & Co. KG, Schafjückenweg 2 26180 Rastede, Germany; the abovementioned Porsche companies
Further information about the service
You can find more information on the data processing in this data protection notice.
Customer account
This is our customer account for our webshop.
Purposes of data processing:
Use of a customer account; ensuring data and information security
Technologies used
Cookies and WebStorage technology where appropriate
Collected data
Master data, contact data, content data, contract data, payment data and connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
None
Further information on the service
Information on the data processing is made available in this Privacy Policy
Purchasing with a guest user account
This feature allows you to do purchases without a customer account.
Purposes of data processing:
Use of a customer account; ensuring data and information security
Technologies used
Cookies and WebStorage technology where appropriate
Collected data
Master data, contact data, content data, contract data, payment data and connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
None
Further information on the service
Information on the data processing is made available in this Privacy Policy
Request for purchase of timepieces (matching your vehicle)
This feature allows you to make a request for the purchase of custom-built timepieces matching your vehicle.
Purposes of data processing:
Request for the purchase of a custom-built timepiece matching your vehicle; ensuring data and information security
Technologies used
Cookies and WebStorage technology where appropriate
Collected data
Master data, contact data, content data, contract data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Depending on the watch model, your Porsche importer and your Porsche Centre, a Porsche Design Store or a selected watch retailer as necessary.
Further information on the service
Information on the data processing is made available in this Privacy Policy
Shopping Events
We present products and services to you individually in the store or via audio and/or video conferencing (e.g. private shopping, timepieces online). If desired, we enable you to place your order as a personal shopping experience. Alternatively, the order can be placed in our online shop or in one of our stores.
Data processing purposes:
Carrying out the shopping event; if necessary, receipt and processing of your order; Ensuring the security of our information technology systems.
Used technologies
The tools and plug-ins mentioned in this privacy policy; Online scheduling and audio/video conferencing solution.
Collected data
Master data, contact data, content data, contract data, usage data, and connection data
Legal basis
Article 6, paragraph 1, letter b), f) of the GDPR
Processing location
EU/EEA, USA in individual cases (conclusion of the EU standard contractual clauses)
Duration of storage
Data is deleted as soon as it is no longer required for processing purposes.
Data recipients
Microsoft Ireland Operations Limited, Dublin, Ireland, and its service providers; possibly other IT service providers and/or companies affiliated with us.
Further information regarding the service
Information on data processing with the tools and plugins can be found in this privacy policy.
Online shop
The data processing is necessary for running our online shop.
Purposes of data processing:
Running the online shop; handling and executing your purchase orders and requests; ensuring the security of our online shop
Technologies used
Cookies; WebStorage technology where appropriate
Collected data
Master data, contact data, content data, payment data, contract data, usage data and connection data. If you have already created a customer account in our online shop, you only need to log in to your customer account. We will then use the personal data from your customer account.
Legal basis
Art. 6 (1) point (b) and (f) GDPR
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
None
Further information on the service
Information on the data processing is made available in this Privacy Policy
Usercentrics consent management platform
This is a service for the management of your consent settings.
Purposes of data processing:
Obtaining consent and controlling the withdrawal of consent regarding the use of tools and services requiring consent and of the related cookies and similar technologies on this website; processing of information to ensure that only those cookies and similar technologies are used and/or read by default which are technically indispensable for running our website or which you have accepted actively; maintaining proof of consent or withdrawal of consent by documentation of the control process
Technologies used
Cookies; WebStorage contents
Processed data
Usage data, connection data
Legal basis
Art. 6 (1) point (c) and (f) GDPR (legal obligation, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Usercentrics GmbH, Rosental 4, 80331 Munich, Germany
Further information on the service
https://usercentrics.com/privacy-policy/
AWIN (and Publisher)
This is an advertising network where our advertising measures are displayed.
Purposes of data processing
Display of (flash) ads within the AWIN advertising network on websites of third parties (so-called affiliates or publishers); tracking of the user path from the ad to our website to secure the commission claims of the publishers; preparation of cumulative statistical reports.
Technologies used
Cookies where appropriate; WebStorage technology; pixel tags where appropriate
Collected data
Usage data and connection data.
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
In individual cases: Switzerland (Art. 45 (3) GDPR in combination with the Commission Decision 2000/518/EC), USA, Brazil and Australia (in every case based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany, and the publishers of the advertising network of AWIN (as joint controllers, Art. 26 GDPR – the key elements of the contract are available at https://s3.amazonaws.com/docs.awin.com/Legal/Publisher+terms+and+conditions+2019+DE.pdf (s. sec. 12.4))
Further information on the service
https://www.awin.com/de/dsgvo
Droid Marketing
This is a web analysis and marketing service.
Purposes of data processing
Sending individualised newsletters based on your user behaviour on the website, measurement of the success and optimisation of our offers and advertising campaigns
Technologies used
Cookies
Processed data
Usage data, connection data, contact data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).
Duration of storage
The maximum duration of data storage is one year. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Droid Marketing GmbH, Ungargasse 64-66/2/405, A-1030 Vienna, Austria
Further information on the service
https://droidmarketing.com/datenschutz.html
Facebook Custom Audiences (“Facebook pixel“)
This is an analysis service of Facebook.
Purposes of data processing
Display of individualised (flash) ads within the Facebook advertising network (Facebook ads) based on the pseudonymised documentation of your surf behaviour.
Technologies used
Cookies; WebStorage technology where appropriate; pixel tags
Collected data
Usage data and connection data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controllers according to Art. 26 GDPR with respect to the processing of event data for the targeting of ads, the improvement of ad display and the individualisation of features and contents and, where applicable, the delivery of commercial and transaction-related data); the key elements of the contract concluded for such purpose (including information on the implementation of your rights as a data subject) are available at:
https://www.facebook.com/legal/controller_addendum
Further information on the service
https://www.facebook.com/privacy/ (including information on the processing of personal data by Facebook, the legal basis on which Facebook relies for the processing and the exercise of data subjects’ rights in the relationship with Facebook)
Google Ads Conversion Tracking
This is a conversion marketing service. It helps measure the success of advertising campaigns.
Purposes of data processing:
Measuring the success of our Google Ads advertising campaigns.
Technologies used
Cookies; pixel tags where appropriate
Collected data
Usage data, connection data and, where applicable, position data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the service
http://www.google.de/intl/de/policies/privacy
Google Ads Remarketing
This is a remarketing service of Google.
Purposes of data processing
Display of individualised (flash) ads within the Google advertising network based on the pseudonymised documentation of your surf behaviour.
Technologies used
Cookies; pixel tags where appropriate
Collected data
Usage data, connection data and, where applicable, position data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the service
http://www.google.de/intl/de/policies/privacy
Google Analytics
This is a web analysis service.
Purposes of data processing
Statistical analysis; optimisation and customisation of our website design based on your clicks and user behaviour
Technologies used
Cookies; pixel tags
Processed data
Usage data, connection data and, where applicable, position data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the service
http://www.google.de/intl/de/policies/privacy
Google Marketing Platform (Floodlight)
This is a conversion tracking service of Google.
Purposes of data processing
Measuring the success of our advertising campaigns
Technologies used
Cookies; pixel tags where appropriate
Processed data
Usage data, connection data and, where applicable, position data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the service
http://www.google.de/intl/de/policies/privacy
Google Maps
This is a web mapping service.
Purposes of data processing
Integration of interactive maps and mapping features of Google Maps
Technologies used
Cookies
Processed data
Usage data, connection data, position data (depending on the specific use)
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interests)
Place of data processing
EU/EEA; in individual cases: USA
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the service
http://www.google.de/intl/de/policies/privacy
Hotjar
This is a web analysis service.
Purposes of data processing
Analysis of your surface and click behaviour on our website; creation of heat, click, move and scroll maps on the basis of this analysis; optimisation and needs-based design of the website.
Technologies used
Cookies, if applicable WebStorage technology, if applicable pixel tags
Data processed
Usage data, connection data and location data (only the country)
Legal basis
GDPR Article 6 [1] (a) (consent)
Place of processing
EU/EEA; USA and other third countries (on the basis of the standard privacy clauses of the EU Commission, GDPR Article 46 [2] (c) or if applicable on the basis of adequacy decisions (GDPR Article 45))
Storage duration
The maximum storage duration is two years. Other than that, the data is deleted as soon as it is no longer needed for the specified processing purposes.
Data recipient
Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta
Further information on the service
https://www.hotjar.com/privacy/
Microsoft Advertising (formerly Bing Ads)
This is an advertising service.
Purposes of data processing
Analysis of the use of our website; display of individualised (flash) ads within the Microsoft Advertising network based on the pseudonymised documentation of your surf behaviour; measurement of the success and optimisation of our Microsoft Advertising campaigns.
Technologies used
Cookies; pixel tags where appropriate
Processed data
Usage data, connection data
Legal basis
Art. 6 (1) point (a) GDPR (consent)
Place of data processing
USA
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft“)
Further information on the service
https://privacy.microsoft.com/de-de/privacystatement
Trusted Shops (trustbadge)
This is a service of Trusted Shops for the integration of the trustmark/trustbadge (buyer protection) and customer reviews
Purposes of data processing
Display of the Trusted Shops trustmark (trustbadge); integration of the collected reviews; integration of the Trusted Shops products (buyer protection).
Technologies used
Cookies where appropriate; WebStorage technology where appropriate; pixel tags where appropriate
Processed data
Usage data, connection data
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
In individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Trusted Shops GmbH, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne, Germany
Further information on the service
https://privacy.microsoft.com/de-de/privacystatement
Klarna
This is a payment service.
Purposes of data processing
Inclusion of payment by invoice (Pay Later); carrying out identity checks and credit checks based on generally accepted statistical-mathematical methods and on data from credit enquiry agencies in order to determine the bad debt risk. In the case of bad rating, the purchaser must choose another payment mode. The checks also support our legitimate interest in fraud prevention.
Technologies used
-
Processed data
Master data, contact data, contract data, payment data, usage data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Klarna Bank AB (publ) Sveavägen 46 111 34 Stockholm Sweden; credit enquiry agencies
Further information on the service
https://www.klarna.com/de/datenschutz/
PayPal
This is a payment service.
Purposes of data processing
Enabling payment via the PayPal payment service
Technologies used
-
Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg (“PayPal“)
Further information on the service
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Sofort Überweisung (instant bank transfer)
This is a payment service.
Purposes of data processing
Payment processing via the payment service “Sofortüberweisung“ (instant bank transfer).
Technologies used
-
Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany
Further information on the service
https://www.sofort.de/datenschutz.html
III. Information on external sites of Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Facebook
This is a social network where we run a site about our company.
Purposes of data processing
We established a site about our company on the “Facebook” platform under https://www.facebook.com/porschedesign (“Facebook site”). When you access that site, Facebook processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:
https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.
Further information on the operator:
https://www.facebook.com/policy.php
Instagram
This is a social network where we run a site about our company.
Purposes of data processing
We established a site about our company on the "Instagram" platform of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook") under https://www.instagram.com/porschedesign/ (“Instagram site”). When you access that site, Facebook processes personal data concerning you.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:
https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.
Further information on the operator:
https://de-de.facebook.com/help/instagram/
LinkedIn (Profile)
This is a social network for maintaining professional and business contacts, where we run a site about our company.
Purposes of data processing:
We established a site about our company on the “LinkedIn” platform under https://de.linkedin.com/company/porsche-design-group. When you access that site, LinkedIn processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://legal.linkedin.com/pages-joint-controller-addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of LinkedIn. LinkedIn informs you about your rights as a data subject at: https://www.linkedin.com/legal/privacy-policy. You may also send any request regarding your rights to us, we will promptly pass it on to LinkedIn.
Further information on the operator:
https://www.linkedin.com/legal/privacy-policy
Twitter
This is a social network where we run a site about our company.
Purposes of data processing:
We established a profile on the “Twitter” platform under https://twitter.com/PorscheDesign.
When you access that site, Twitter processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”)
Further information on the operator:
https://twitter.com/de/privacy
IV. Information on competitions from Porsche Lifestyle GmbH & Co. KG
We hold competitions occasionally. In the case of individual competitions, it may be necessary for you to grant us and other selected Porsche companies (Dr. Ing. h.c. F. Porsche AG, Porsche Deutschland GmbH, Porsche Financial Services GmbH, Porsche Smart Mobility GmbH and, if applicable, your local Porsche Centre) your permission to provide you with customised and personalised information about new products, events and offers by telephone and/or email in return for entering a competition or receiving a prize.
Purposes of data processing
Holding the competition and (as far as can be seen from the competition terms and conditions) personalised and individual information by telephone and/or email about products, events and offers from the following Porsche companies: Porsche Lifestyle GmbH & Co. KG (see above for address); Dr. Ing. h.c. F. Porsche AG, Porscheplatz 1, 70435 Stuttgart, Germany; Porsche Deutschland GmbH, Porsche Strasse 1, 74321 Bietigheim-Bissingen, Germany; Porsche Financial Services GmbH, Porschestrasse 1, 74304 Bietigheim-Bissingen, Germany; Porsche Smart Mobility GmbH, Porscheplatz 1, 70435 Stuttgart, Germany; and, if applicable, your local Porsche Centre – a list of the Porsche Centres can be accessed here: https://www.porsche.com/germany/dealersearch; creation of usage and interest profiles.
Technology used
When holding the competition on the Internet through our website: see the tools and plug-ins named in this privacy policy.
Processed data
Master data, contact data, content data, contract data, usage data and connection data
Legal basis
Article 6 Paragraph 1 Clause 1(b), (f) of the General Data Protection Regulation (GDPR)
Place of processing
EU/EEC
Retention period
The data will be erased as soon as it is no longer required for processing purposes.
Data recipients
K3 Agency GmbH, Hoferstrasse 9a, 71636 Ludwigsburg, Germany; CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany; the aforementioned Porsche companies
Unsubscribing from information about products, events and offers (newsletter):
You can stop receiving the information at any time with effect for the future by withdrawing your consent. The statements above on withdrawing consent in this privacy statement apply to your permission to receive the information when participating in the competition.
V. Data processing for advertising purposes (without cookies or tracking data)
5.1 Data processing for advertising purposes (personalisation)
Porsche Lifestyle GmbH & Co. KG intends to store data about you and your purchases, such as the categories of goods purchased from Porsche Lifestyle GmbH & Co. KG within the meaning of product categories (e. g. 'Bags & Luggage'), for the personalisation of advertising materials (e. g. email and print).
This data is used for this purpose exclusively in a highly pseudonymised form. For this purpose, only the product categories are used – not the exact purchases. The aim of Porsche Lifestyle GmbH & Co. KG is to provide you with advertising that is tailored to your actual or perceived needs.
Legal basis:
Article 6 Paragraph 1 Letter f of the GDPR (legitimate interests)
Data processed:
Master data, contact data, purchase data, usage data and shopping cart data
Place of processing:
EU/EEA
5.2 Postal advertising/direct advertising
In principle, Porsche Lifestyle GmbH & Co. KG has a legitimate interest in using your data for marketing purposes, which Porsche Lifestyle GmbH & Co. KG has collected, for example, by entering into a contractual relationship with you.
Porsche Lifestyle GmbH & Co. KG processes the following data for its own marketing purposes: first name, surname, postal address and, if applicable, year of birth.
Porsche Lifestyle GmbH & Co. KG is also entitled to store additional personal data collected about you alongside the data mentioned above for its own marketing purposes, in compliance with legal requirements. This additionally stored data may include the categories of goods (such as 'Bags & Luggage') that you have purchased from Porsche Lifestyle GmbH & Co. KG.
The aim of Porsche Lifestyle GmbH & Co. KG is to provide you with advertising that is tailored to your actual or perceived needs.
Legal basis:
Article 6 Paragraph 1 Letter f of the GDPR (legitimate interests)
Data processed:
Master data, contact data, purchase data, usage data, contractual data and shopping cart data
Place of processing:
EU/EEA
Note on the right to object
You can object to the use of your personal data for the above-mentioned marketing purposes at any time, free of charge and with effect for the future, at datenschutzanwalt@porsche-design.de.
If you object, your data will be blocked from further data processing for advertising purposes; this blocking will take effect to the extent that it is still necessary to continue storing the data for purposes other than use for marketing purposes.
We would like to point out that in exceptional cases, advertising material may be temporarily sent even after your objection has been received. This is for technical reasons owing to the necessary lead time during the selection and does not mean that your objection has not been implemented.
