We, Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG (hereinafter ‘we’ or ‘PLH’), appreciate your use of our Calendar app and your interest in our company and our products. Your privacy is very important to us. We take the protection of your personal data and its confidential treatment very seriously. Your personal data will only be processed in accordance with the provisions of data protection legislation, in particular the EU General Data Protection Regulation (hereinafter ‘GDPR’). In this data protection notice, we inform you about the processing of your personal data and about your rights as a data subject within the scope of using our Calendar app. For information on other services and on offers from other companies in the Porsche Group, please refer to the respective privacy policy of these services or Porsche companies.
1. THE RESPONSIBLE PARTY FOR THE DATA PROCESSING AND DATA PROTECTION OFFICER; CONTACT
The responsible party for the data processing within the meaning of the data protection laws is:
Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Grönerstrasse 5
71636 Ludwigsburg
Germany
Phone: (+49) 0711 911-0
Email: contact@porsche-design.com
If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.
You can contact our data protection officer as follows:
Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Data Protection Officer
Grönerstrasse 5
71636 Ludwigsburg
Germany
Email: datenschutzbeauftragter@porsche-design.de
2. SUBJECT OF THE DATA PROTECTION
The subject of the data protection is personal data. This is any information that relates to an identified or identifiable natural person (so-called data subject). This includes, for example, information such as the name, postal address, email address or telephone number, but also information that is necessarily provided during the use of our Calendar app, such as information about the start, end and extent of its use as well as the transmission of your IP address.
3. TYPE, SCOPE, PURPOSES AND LEGAL BASIS OF AUTOMATED DATA PROCESSING
The use of our Calendar app is generally possible without registration. However, even if you use our app without registration, personal data can still be processed.
Below you will find an overview of the type, scope, purposes and legal basis of data processing via our Calendar app.
3.1 DISTRIBUTION OF OUR CALENDAR APP
When your end device accesses our Calendar app, we will automatically process the following data:
date and time of access,
duration of the visit,
type of end device,
operating system used,
IP address.
We process this data on the basis of article 6 paragraph 1 f) of the GDPR to provide the service, to ensure technical operation and for the purpose of identifying and rectifying faults. In doing so, we pursue the interest of enabling the use of the Calendar app and ensuring its technical functionality in the long term. When the Calendar app is opened, this data is processed automatically. Without this provision of data, you cannot use our services. We do not use this data for the purpose of drawing conclusions about your person or your identity.
As a rule, we delete this data at the latest within 14 days, unless we require it for a longer period in order to serve the aforementioned purposes. In such a case, we shall delete this data immediately once the purpose ceases to exist.
3.2 GOOGLE ANALYTICS
We use Google Analytics, a web analysis service from Google LLC. (‘Google’), in our Calendar app to analyse user behaviour so as to further improve the user experience. Google shall process, in particular, the following information:
the type of device used to start our Calendar app,
operating system used,
time and frequency of page impressions and interactions,
IP address.
The information will be used in particular to
evaluate the use of our Calendar app,
compile reports on the Calendar app activities.
Your IP address shall be anonymised to prevent individuals from being identified and making allocation impossible (so-called IP masking). The anonymisation through Google Analytics is activated.
The information about use generated by Google Analytics shall generally be transmitted to and stored by Google on a server at Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google will use this information on our behalf and on the basis of a contract for order processing so as to evaluate your use of the Calendar app, create reports on Calendar app activities for us and to provide further services associated with the use of the services and the Internet.
The legal basis for the use of Google Analytics is article 6 paragraph 1 f) of the GDPR; our legitimate interest arises in this respect from the purposes of use described above, in particular the analysis, optimisation and economic operation of the Calendar app.
We shall only use Google Analytics if the use has been approved by selecting the corresponding button when starting our Calendar app for the first time.
You, as a user of the Calendar app, can object to the processing of your data through Google at any time with future effect by deactivating the ‘Send user data’ button via the ‘Settings’ menu in the Calendar app.
The statistically prepared data shall be deleted in Google Analytics after 14 months. Reports created on behalf of Google Analytics no longer contain any personal references.
3.3 EMBEDDED YOUTUBE VIDEOS
Videos from the provider YouTube are embedded on some pages of our Calendar app to allow you direct access to videos through the Calendar app which are topically associated with our Calendar app. The operator of the corresponding plug-ins is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (hereinafter ‘YouTube’), a Google company. If you visit a page with a YouTube plug-in, a connection to YouTube servers will be made. As a result, YouTube will be informed of the videos that you watch. If you are logged into your YouTube account, YouTube can assign the call of the videos to you personally. Should this not be desired, you can log out of your YouTube account before you call up pages with embedded videos.
If you watch an embedded YouTube video, YouTube will use cookies with which Google collects information about your user behaviour. Further information on the purpose and scope of data collection and processing through YouTube and Google can be found in YouTube’s privacy policy. Here you will also find further information on your corresponding rights and settings options on protecting your privacy (https://policies.google.com/privacy). The information about your use of the Calendar app collected by YouTube and Google will be transmitted to and stored on a server in the United States.
The legal basis for the integration of YouTube plug-ins and the related transfer of data to YouTube and Google is article 6 paragraph 1 f) of the GDPR; our legitimate interest arises in this respect from the purposes of use described above, in particular, the provision of a seamless user experience for our Calendar app.
4. INDIVIDUAL SERVICES AND FUNCTIONALITIES
Our Calendar app may only access data saved on your end device and the functions of your end device described below with your consent. To use these functionalities, you must grant the Calendar app the appropriate authorisation.
Note: for the services and functionalities described below, your data shall be processed exclusively on your end device. At no point can we access your data.
If you have granted the corresponding authorisations when using the Calendar app, the Calendar app may access the following functions of your end device:
4.1 CALENDAR FUNCTION
The calendar function supports creating, reading, updating and deleting events on the end device. Therefore, the calendar function can prompt you to grant authorisation to access your calendar on the end device.
4.2 PUSH NOTIFICATIONS
The push function supports the display of push notifications on the end device. Therefore, the push function can prompt you to grant authorisation to receive push notifications on the end device.
4.3 IMAGE DOWNLOAD
The image download function supports the storage of images on the end device. Therefore, the image download function can prompt you to grant authorisation for access to your image library on the end device.
The Calendar app can also be used on the end device without the aforementioned access authorisations. However, in this case it is possible that not all functionalities in the Calendar app may be used fully.
Any authorisation granted shall remain active for so long as it is not deactivated on the end device.
5. RECIPIENTS OF PERSONAL DATA
Internal recipients: within Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG, only those persons have access who require this for the purposes stated under clauses 3 and 4.
External recipients: we will only pass on your personal data to external recipients outside Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG if this is necessary in order to process your request, if we have another form of legal permission or if we have your consent to do so.
External recipients can be:
a) contract processors
Companies of the Dr. Ing. h.c. F. Porsche AG group or external providers which we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the services offered by Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG or the provision of content. These contractors are carefully selected and regularly reviewed by us to ensure that your privacy is protected. The service providers may only use the data for the purposes specified by us and in accordance with our instructions.
b) public authorities
Authorities and state institutions, such as public prosecutor's offices, courts or tax authorities, to which we must transmit personal data for mandatory legal reasons. The transmission then takes place on the basis of article 6 paragraph 1 c) of the GDPR.
c) private bodies
Porsche dealers, cooperation partners or auxiliaries to whom data is transmitted on the basis of consent, for the execution of a contract with you or to safeguard legitimate interests, for example Porsche Centres, financing banks, providers of other services or transport service providers. The transfer then takes place on the basis of article 6 paragraph 1 a), b) and/or f) of the GDPR.
6. DATA PROCESSING IN NON-EU COUNTRIES
If data is transferred to bodies whose registered office or data processing facilities are not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we ensure that the recipient either has an adequate level of data protection before the transfer, outside of exceptional cases permitted by law (e.g. by an adequacy decision of the European Commission, by appropriate guarantees such as a self-certification of the recipient for the EU-US Privacy Shield or the agreement of so-called EU standard contract clauses of the European Union with the recipient) or if you give your consent to the data transmission.
We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. Please see the information in clause 1.
7. STORAGE DURATION AND DELETION
We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or – in the case of a consent – as long as you have not revoked the consent. In addition, we store your data if necessary for commercial and tax-based retention requirements.
We shall delete your personal data without delay
after the legal basis has ceased to apply and no other legal basis (e.g. commercial and tax retention periods) requires its retention. If the latter is the case, we will delete the data once the other legal basis no longer applies.
if it is no longer necessary for the purposes of preparing and executing a contract and if no other legal basis intervenes. If the latter is the case, we will delete the data once the other legal basis no longer applies.
in the event that you object, we will delete your personal data unless further processing is permitted by the relevant legal provisions.
if we are obliged to do so for other legal reasons.
8. RIGHTS OF THE DATA SUBJECT
As a data subject you have a number of rights. These include:
Right to information: you have the right to receive information about your personal data stored by us.
Right of correction and deletion: you may request us to correct incorrect data and – insofar as the legal requirements are fulfilled – to delete your data.
Restriction of processing: you may require us to restrict the processing of your data, provided that the legal requirements are met.
Data transferability: if you have provided us with data on the basis of a contract or consent, you can request that you receive the data provided by you in a structured, current and machine-readable format or that we transmit it to another responsible party, provided that the legal requirements are met.
Objection to data processing on the legal basis of "legitimate interest": you have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of "legitimate interest". If you make exercise your right of objection, we will stop the processing of your data, unless we can – in accordance with applicable statutory provisions – prove compelling reasons worthy of protection for further processing which outweigh your rights.
Objection to cookies: you can also object to the use of cookies at any time. Please refer to our cookie policy for details.
Revocation of consent: if you have given us consent to the processing of your data, you can revoke this at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected by this.
Right of appeal to the supervisory authority: you can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.
Your contact with us: furthermore, you can contact us free of charge with questions about the processing of your personal data, your rights as a data subject and any consent given. To exercise all your aforementioned rights, please contact datenschutzbeauftragter@porsche-design.de or contact by post at the address given in clause 1. Please make sure that we are able to identify you clearly.
Contact
https://www.porsche.com/germany/privacy/contact
9. LINKS TO THIRD-PARTY OFFERS
The websites and services of other providers to which our Calendar app links have been and are designed and provided by third parties. We have no influence on the design, content and function of these third-party services. We dissociate ourselves expressly from all contents of all linked offers from third parties. Please note that the offers of third parties linked from our Calendar app may install their own cookies on your end device or collect personal data. We have no influence on this. In this respect, please refer to the providers of these linked third-party offers.
10. VALIDITY
The latest version of this privacy policy applies. Valid from 17.09.2018.
