NEWSLETTER SUBSCRIPTION | Porsche Design

I. General

1. Body responsible for data processing („controller“)

Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG takes the protection of your personal data and the legal obligations to ensure data protection very seriously. The law requires full transparency regarding the processing of personal data. You as a data subject can only understand the details of the processing if you are duly informed about the purpose, nature and scope of the processing.

That is why our Privacy Policy explains in detail which personal data we process when you use our website (www.porsche-design.com) or other websites referring to our website or in the other cases described herein.

The body responsible for the data processing, i.e. the controller within the meaning of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (German Federal Data Protection Act – “BDSG”) and other data protection regulations is

Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Grönerstraße 5
71636 Ludwigsburg
Germany
Telephone: +49(0)711/911 12911
Email: contact@porsche-design.com

- Referred to hereinafter as “controller” or “we” -

You can contact our data protection officer at:

Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
- Beauftragter für Datenschutz -
Grönerstrasse 5
71636 Ludwigsburg
Germany
Email: datenschutzbeauftragter@porsche-design.de

Please be aware that, if you click the links on our website, you may be redirected to other websites which are not run by us but by third parties. We either clearly mark these links or the redirection becomes clear by a change in the browser address bar. We are not responsible for compliance with the applicable data protection regulations and secure treatment of your personal data when you use the third-party websites.

2. Definitions

GDPR terminology
For the purposes of this Privacy Policy, we use the terms and wording of the GDPR. The definitions (Art. 4 GDPR) are available at
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.

Cookies and similar technologies
Cookies are text files which a website places on your client and/or which are read there. They contain combinations of letters and numbers which enable us to recognise the user and user settings when the user comes back to the website which set the cookie; they also enable the user to stay logged-in to a customer account and enable us to statistically analyse a certain user behaviour.

The WebStorage technology enables local storage of variables and values in the user’s browser cache. The technology includes the so-called "sessionStorage" which remains stored until the browser tab is closed as well as the "localStorage" which remains stored in the browser cache until the cache is emptied by the user. The localStorage technology enables, among other things, recognition of the user and user settings when the user comes back to our website.

Pixel tags are small graphic files which are loaded from the severs of the respective service provider when a user accesses our website. This also includes loading of the program code which enables the collection of data (e.g. regarding your user behaviour while visiting our website).

Cookies / similar technologies can only be accessed from the Internet address where the cookie was set. This means that we cannot access the cookies set by the service providers involved (see above). The latter cannot access our cookies either. Third parties cannot access our cookies nor those of the involved service providers. Third parties may only gain access by technical attacks which we cannot control and for which we are not responsible.

Data categories
If we specify the data categories we process, they include but are not limited to the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. email addresses, telephone numbers, messenger services), content data (e.g. entered texts, photos, videos, contents of documents/files), contract data (e.g. contract purpose, contract terms, customer categories), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain contents, times of access, contact history and purchasing history), connection data (e.g. device information, IP addresses, URL referrer), position data (e.g. GPS data, IP geo-localisation, points of access).

3. Information on the data processing

We only process personal data to the extent permitted by law. We only disclose or transfer personal data to third parties in the cases described below. The personal data are protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).

Except where we are obliged by law to store the data or disclose or transfer them to third parties (including but not limited to prosecuting authorities), the decision which personal data we process and for how long and to which extent we may disclose or transfer them to third parties depends on the specific website features you use from time to time.

4. Storage duration

The personal data are deleted as soon as the purpose of the processing or the prescribed storage period, if any, has expired unless the storage of the personal data needs to be continued for the purpose of entering into or performing a contract. If and to the extent we are obliged to inform you about the duration of storage of cookies and similar technologies, this information is made available in sec. II below and in our cookie consent tool.

5. Automated individual decision-making, including profiling

Automated individual decision-making including profiling only takes place with the following processing activities:

Credit check in the case of payment by invoice (Pay Later) (see the information on “Klarna (Payment by invoice – Pay Later)”)

This decision-making is admissible for the following reason:

The decision-making is necessary for entering into or performing a contract between you and us.

We implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.

The decision-making is not based on special categories of personal data according to Art. 9 (1) GDPR.

6. Data subjects’ rights

As a data subject you have the right of access/ right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The right of access/right to information and the right to erasure are subject to the restrictions under § 34, § 35 BDSG (Bundesdatenschutzgesetz - German Federal Data Protection Act).

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG, Bundesdatenschutzgesetz - German Federal Data Protection Act).

The supervisory authority responsible for our headquarters is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstraße 10a
70173 Stuttgart
Germany

You may however also lodge your complaint with another supervisory authority.

7. Controller’s notification obligation

We will communicate any rectification or erasure of your personal data or restriction of processing carried out in accordance with Art. 16, Art. 17 (1) and Art. 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.

8. Obligation to provide or disclose data

Unless stated otherwise in the explanations below regarding the applicable legal basis, you are not obliged to provide or disclose personal data to us. However, in the cases referred to in Art. 6 (1) point (b) GDPR, the personal data, the personal data are necessary for entering into or performing a contract. If you do not provide use with the relevant personal data, it will be impossible for us to enter into, or perform, the contract. If you do not provide us with the date in the cases referred to in Art. 6 (1) point (a) and (f) GDPR, you will not be able to use the parts of our website concerned thereby.

9. Right to object and withdrawal of consent

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Art. 6(1) GDPR, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

Pursuant to Art. 7 (3) sentence 1 GDPR, you have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. After you have withdrawn your consent, we will delete the personal data we have processed based on your consent unless there is another legal basis for the processing of these data.

Both objection and withdrawal are not subject to formal requirements and should be sent to our contact data stated above.

You can withdraw certain consents (for this, see the services listed in sec. II below) by using our consent tool, which you can find above in the chapter preceding this Privacy Policy. Please be aware that you have to withdraw your consent on every single device from which you have accessed our website and consented to the data processing.

II. Data processing in connection with the use of our website

Generally, the use of the website and its features necessarily involves the processing of personal data.

Google Tag Manager
We use the Google Tag Manager to embed contents of third-party providers (e.g. Google Analytics, Usercentrics). This is a technical solution which does not itself store or read cookies or similar technologies requiring consent, but merely controls the conditions under which the other programs used on our website and described below are activated.

Provision of the website
Essential features for the provision of the website and webshop

Purposes of data processing:
Functioning and optimisation of the website and ensuring the security of our information technology systems if our website is used for mere information purposes; integration and display of features and contents (e.g. diagrams) which we do not provide ourselves.

Technologies used
Cookies; other technologies where appropriate, such as WebStorage contents

Collected data
Usage data, connection data

Legal basis
Art. 6 (1) point (f) GDPR

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
IT service providers

Further information on the service
Information on the data processing is made available in this Privacy Policy

Cloudflare
This is a Content Delivery Network (CDN) and security and DNS service.

Purposes of data processing:
Individualised design and functioning of our website; ensuring the security of our website and information technology systems

Technologies used
Cookies

Processed data
Usage data, connection data

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Cloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA

Further information on the service
https://www.cloudflare.com/privacypolicy/

Information on products, events and offers (newsletter)
This is a service which allows you to receive individual and personalised information, via email or telephone, on products, events and offers from selected Porsche companies.

Data processing purposes:
Personalised information via telephone or email, on products, events and offers from the following Porsche companies: Porsche Design (Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG) (address, see above); Dr. Ing. h.c. F. Porsche AG, Porscheplatz 1, D-70435 Stuttgart, Germany; Porsche Deutschland GmbH, Porsche Strasse 1, D-74321 Bietigheim-Bissingen, Germany; Porsche Financial Services GmbH, Porschestrasse 1, D - 74304 Bietigheim-Bissingen, Germany; Porsche Smart Mobility GmbH, Porscheplatz 1, D-70435 Stuttgart, Germany; and, possibly, my local Porsche Centre (a list of Porsche Centres can be found here: https://www.porsche.com/germany/dealersearch; Creation of use and interest profiles; Proof of your consent; Guarantee of the security of our IT systems.

Technology used
See the tools and plugins listed in this Privacy Statement.

Data collected
Historical data, contact data, content data, contract details, usage data and communication data

Legal basis
Article 6 (1) (a) and (f) GDPR

Location of processing
EU/EEA

Retention period
The data is deleted as soon as it is no longer required for the processing purposes.

Data recipient
K3 Agency GmbH, Hoferstrasse 9a, 71636 Ludwigsburg; CleverReach GmbH & Co. KG, Schafjückenweg 2 26180 Rastede, Germany; the abovementioned Porsche companies

Further information about the service
You can find more information on the data processing in this data protection notice.

Customer account
This is our customer account for our webshop.

Purposes of data processing:
Use of a customer account; ensuring data and information security

Technologies used
Cookies and WebStorage technology where appropriate

Collected data
Master data, contact data, content data, contract data, payment data and connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
None

Further information on the service
Information on the data processing is made available in this Privacy Policy

Purchasing with a guest user account
This feature allows you to do purchases without a customer account.

Purposes of data processing:
Use of a customer account; ensuring data and information security

Technologies used
Cookies and WebStorage technology where appropriate

Collected data
Master data, contact data, content data, contract data, payment data and connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
None

Further information on the service
Information on the data processing is made available in this Privacy Policy

Request for purchase of timepieces (matching your vehicle)
This feature allows you to make a request for the purchase of custom-built timepieces matching your vehicle.

Purposes of data processing:
Request for the purchase of a custom-built timepiece matching your vehicle; ensuring data and information security

Technologies used
Cookies and WebStorage technology where appropriate

Collected data
Master data, contact data, content data, contract data, connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Depending on the watch model, your Porsche importer and your Porsche Centre as necessary.

Further information on the service
Information on the data processing is made available in this Privacy Policy

Online shop
The data processing is necessary for running our online shop.

Purposes of data processing:
Running the online shop; handling and executing your purchase orders and requests; ensuring the security of our online shop

Technologies used
Cookies; WebStorage technology where appropriate

Collected data
Master data, contact data, content data, payment data, contract data, usage data and connection data. If you have already created a customer account in our online shop, you only need to log in to your customer account. We will then use the personal data from your customer account.

Legal basis
Art. 6 (1) point (b) and (f) GDPR

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
None

Further information on the service
Information on the data processing is made available in this Privacy Policy

Usercentrics consent management platform
This is a service for the management of your consent settings.

Purposes of data processing:
Obtaining consent and controlling the withdrawal of consent regarding the use of tools and services requiring consent and of the related cookies and similar technologies on this website; processing of information to ensure that only those cookies and similar technologies are used and/or read by default which are technically indispensable for running our website or which you have accepted actively; maintaining proof of consent or withdrawal of consent by documentation of the control process

Technologies used
Cookies; WebStorage contents

Processed data
Usage data, connection data

Legal basis
Art. 6 (1) point (c) and (f) GDPR (legal obligation, legitimate interest)

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Usercentrics GmbH, Rosental 4, 80331 Munich, Germany

Further information on the service
https://usercentrics.com/privacy-policy/

AWIN (and Publisher)
This is an advertising network where our advertising measures are displayed.

Purposes of data processing
Display of (flash) ads within the AWIN advertising network on websites of third parties (so-called affiliates or publishers); tracking of the user path from the ad to our website to secure the commission claims of the publishers; preparation of cumulative statistical reports.

Technologies used
Cookies where appropriate; WebStorage technology; pixel tags where appropriate

Collected data
Usage data and connection data.

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
In individual cases: Switzerland (Art. 45 (3) GDPR in combination with the Commission Decision 2000/518/EC), USA, Brazil and Australia (in every case based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany, and the publishers of the advertising network of AWIN (as joint controllers, Art. 26 GDPR – the key elements of the contract are available at https://s3.amazonaws.com/docs.awin.com/Legal/Publisher+terms+and+conditions+2019+DE.pdf (s. sec. 12.4))

Further information on the service
https://www.awin.com/de/dsgvo

Droid Marketing
This is a web analysis and marketing service.

Purposes of data processing
Sending individualised newsletters based on your user behaviour on the website, measurement of the success and optimisation of our offers and advertising campaigns

Technologies used
Cookies

Processed data
Usage data, connection data, contact data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).

Duration of storage
The maximum duration of data storage is one year. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Droid Marketing GmbH, Ungargasse 64-66/2/405, A-1030 Vienna, Austria

Further information on the service
https://droidmarketing.com/datenschutz.html

Facebook Custom Audiences (“Facebook pixel“)
This is an analysis service of Facebook.

Purposes of data processing
Display of individualised (flash) ads within the Facebook advertising network (Facebook ads) based on the pseudonymised documentation of your surf behaviour.

Technologies used
Cookies; WebStorage technology where appropriate; pixel tags

Collected data
Usage data and connection data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controllers according to Art. 26 GDPR with respect to the processing of event data for the targeting of ads, the improvement of ad display and the individualisation of features and contents and, where applicable, the delivery of commercial and transaction-related data); the key elements of the contract concluded for such purpose (including information on the implementation of your rights as a data subject) are available at:
https://www.facebook.com/legal/controller_addendum

Further information on the service
https://www.facebook.com/privacy/ (including information on the processing of personal data by Facebook, the legal basis on which Facebook relies for the processing and the exercise of data subjects’ rights in the relationship with Facebook)

Google Ads Conversion Tracking
This is a conversion marketing service. It helps measure the success of advertising campaigns.

Purposes of data processing:
Measuring the success of our Google Ads advertising campaigns.

Technologies used
Cookies; pixel tags where appropriate

Collected data
Usage data, connection data and, where applicable, position data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Google Ads Remarketing
This is a remarketing service of Google.

Purposes of data processing
Display of individualised (flash) ads within the Google advertising network based on the pseudonymised documentation of your surf behaviour.

Technologies used
Cookies; pixel tags where appropriate

Collected data
Usage data, connection data and, where applicable, position data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Google Analytics
This is a web analysis service.

Purposes of data processing
Statistical analysis; optimisation and customisation of our website design based on your clicks and user behaviour

Technologies used
Cookies; pixel tags

Processed data
Usage data, connection data and, where applicable, position data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Google Marketing Platform (Floodlight)
This is a conversion tracking service of Google.

Purposes of data processing
Measuring the success of our advertising campaigns

Technologies used
Cookies; pixel tags where appropriate

Processed data
Usage data, connection data and, where applicable, position data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Google Maps
This is a web mapping service.

Purposes of data processing
Integration of interactive maps and mapping features of Google Maps

Technologies used
Cookies

Processed data
Usage data, connection data, position data (depending on the specific use)

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interests)

Place of data processing
EU/EEA; in individual cases: USA

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Google reCAPTCHA
This is a service which makes sure that access is made by humans and not by bots.

Purposes of data processing
Preventing misuse of our website by verifying whether access is made by humans or by bots or similar programs; ensuring the security of our website and our information technology systems

Technologies used
Cookies

Processed data
Usage data, connection data, position data (depending on the specific use)

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Microsoft Advertising (formerly Bing Ads)
This is an advertising service.

Purposes of data processing
Analysis of the use of our website; display of individualised (flash) ads within the Microsoft Advertising network based on the pseudonymised documentation of your surf behaviour; measurement of the success and optimisation of our Microsoft Advertising campaigns.

Technologies used
Cookies; pixel tags where appropriate

Processed data
Usage data, connection data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
USA

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft“)

Further information on the service
https://privacy.microsoft.com/de-de/privacystatement

Trusted Shops (trustbadge)
This is a service of Trusted Shops for the integration of the trustmark/trustbadge (buyer protection) and customer reviews

Purposes of data processing
Display of the Trusted Shops trustmark (trustbadge); integration of the collected reviews; integration of the Trusted Shops products (buyer protection).

Technologies used
Cookies where appropriate; WebStorage technology where appropriate; pixel tags where appropriate

Processed data
Usage data, connection data

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
In individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Trusted Shops GmbH, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne, Germany

Further information on the service
https://privacy.microsoft.com/de-de/privacystatement

YouTube Video
This is a video player service.

Purposes of data processing
Integration of product videos via the video plug-in of YouTube; individualised design of our website

Technologies used
Cookies

Processed data
Usage data, connection data

Legal basis
Art. 6 (1) point (a) GDPR (consent)

Place of data processing
EU/EEA; in individual cases: USA

Duration of storage
The maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Further information on the service
http://www.google.de/intl/de/policies/privacy

Klarna
This is a payment service.

Purposes of data processing
Inclusion of payment by invoice (Pay Later); carrying out identity checks and credit checks based on generally accepted statistical-mathematical methods and on data from credit enquiry agencies in order to determine the bad debt risk. In the case of bad rating, the purchaser must choose another payment mode. The checks also support our legitimate interest in fraud prevention.

Technologies used
-

Processed data
Master data, contact data, contract data, payment data, usage data, connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Klarna Bank AB (publ) Sveavägen 46 111 34 Stockholm Sweden; credit enquiry agencies

Further information on the service
https://www.klarna.com/de/datenschutz/

PayPal
This is a payment service.

Purposes of data processing
Enabling payment via the PayPal payment service

Technologies used
-

Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg (“PayPal“)

Further information on the service
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Sofort Überweisung (instant bank transfer)
This is a payment service.

Purposes of data processing

Payment processing via the payment service “Sofortüberweisung“ (instant bank transfer).

Technologies used
-

Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data

Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)

Place of data processing
EU/EEA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany

Further information on the service
https://www.sofort.de/datenschutz.html

III. Information on external sites of Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG

Facebook
This is a social network where we run a site about our company.

Purposes of data processing

We established a site about our company on the “Facebook” platform under https://www.facebook.com/porschedesign (“Facebook site”). When you access that site, Facebook processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.

Technologies used
-

Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum

Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:

https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.

Further information on the operator:
https://www.facebook.com/policy.php

Instagram
This is a social network where we run a site about our company.

Purposes of data processing

We established a site about our company on the "Instagram" platform of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook") under https://www.instagram.com/porschedesign/ (“Instagram site”). When you access that site, Facebook processes personal data concerning you.

Technologies used
-

Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum

Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:

https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.

Further information on the operator:
https://de-de.facebook.com/help/instagram/

LinkedIn (Profile)
This is a social network for maintaining professional and business contacts, where we run a site about our company.

Purposes of data processing:
We established a site about our company on the “LinkedIn” platform under https://de.linkedin.com/company/porsche-design-group. When you access that site, LinkedIn processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.

Technologies used
-

Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://legal.linkedin.com/pages-joint-controller-addendum

Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of LinkedIn. LinkedIn informs you about your rights as a data subject at: https://www.linkedin.com/legal/privacy-policy. You may also send any request regarding your rights to us, we will promptly pass it on to LinkedIn.

Further information on the operator:
https://www.linkedin.com/legal/privacy-policy

Twitter
This is a social network where we run a site about our company.

Purposes of data processing:
We established a profile on the “Twitter” platform under https://twitter.com/PorscheDesign.

When you access that site, Twitter processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.

Technologies used
-

Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable

Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)

Place of data processing
EU/EEA; in individual cases: USA

Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.

Data recipients
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”)

Further information on the operator:
https://twitter.com/de/privacy