PRIVACY POLICY FOR THE WEBSITE AND EXTERNAL SITES OF PORSCHE LIZENZ- UND HANDELSGESELLSCHAFT MBH & CO. KG
I. General
1. Body responsible for data processing („controller“)
Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG takes the protection of your personal data and the legal obligations to ensure data protection very seriously. The law requires full transparency regarding the processing of personal data. You as a data subject can only understand the details of the processing if you are duly informed about the purpose, nature and scope of the processing.
That is why our Privacy Policy explains in detail which personal data we process when you use our website (www.porsche-design.com) or other websites referring to our website or in the other cases described herein.
The body responsible for the data processing, i.e. the controller within the meaning of the General Data Protection Regulation (GDPR), the Bundesdatenschutzgesetz (German Federal Data Protection Act – “BDSG”) and other data protection regulations is
Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Grönerstraße 5
71636 Ludwigsburg
Germany
Telephone: +49(0)711/911 12911
Email: contact@porsche-design.com
- Referred to hereinafter as “controller” or “we” -
You can contact our data protection officer at:
Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
- Beauftragter für Datenschutz -
Grönerstrasse 5
71636 Ludwigsburg
Germany
Email: datenschutzbeauftragter@porsche-design.de
Please be aware that, if you click the links on our website, you may be redirected to other websites which are not run by us but by third parties. We either clearly mark these links or the redirection becomes clear by a change in the browser address bar. We are not responsible for compliance with the applicable data protection regulations and secure treatment of your personal data when you use the third-party websites.
2. Definitions
GDPR terminology
For the purposes of this Privacy Policy, we use the terms and wording of the GDPR. The definitions (Art. 4 GDPR) are available at
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679.
Cookies and similar technologies
Cookies are text files which a website places on your client and/or which are read there. They contain combinations of letters and numbers which enable us to recognise the user and user settings when the user comes back to the website which set the cookie; they also enable the user to stay logged-in to a customer account and enable us to statistically analyse a certain user behaviour.
The WebStorage technology enables local storage of variables and values in the user’s browser cache. The technology includes the so-called "sessionStorage" which remains stored until the browser tab is closed as well as the "localStorage" which remains stored in the browser cache until the cache is emptied by the user. The localStorage technology enables, among other things, recognition of the user and user settings when the user comes back to our website.
Pixel tags are small graphic files which are loaded from the severs of the respective service provider when a user accesses our website. This also includes loading of the program code which enables the collection of data (e.g. regarding your user behaviour while visiting our website).
Cookies / similar technologies can only be accessed from the Internet address where the cookie was set. This means that we cannot access the cookies set by the service providers involved (see above). The latter cannot access our cookies either. Third parties cannot access our cookies nor those of the involved service providers. Third parties may only gain access by technical attacks which we cannot control and for which we are not responsible.
Data categories
If we specify the data categories we process, they include but are not limited to the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. email addresses, telephone numbers, messenger services), content data (e.g. entered texts, photos, videos, contents of documents/files), contract data (e.g. contract purpose, contract terms, customer categories), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain contents, times of access, contact history and purchasing history), connection data (e.g. device information, IP addresses, URL referrer), position data (e.g. GPS data, IP geo-localisation, points of access).
3. Information on the data processing
We only process personal data to the extent permitted by law. We only disclose or transfer personal data to third parties in the cases described below. The personal data are protected by appropriate technical and organisational measures (e.g. pseudonymisation, encryption).
Except where we are obliged by law to store the data or disclose or transfer them to third parties (including but not limited to prosecuting authorities), the decision which personal data we process and for how long and to which extent we may disclose or transfer them to third parties depends on the specific website features you use from time to time.
4. Storage duration
The personal data are deleted as soon as the purpose of the processing or the prescribed storage period, if any, has expired unless the storage of the personal data needs to be continued for the purpose of entering into or performing a contract. If and to the extent we are obliged to inform you about the duration of storage of cookies and similar technologies, this information is made available in sec. II below and in our cookie consent tool.
5. Automated individual decision-making, including profiling
Automated individual decision-making including profiling only takes place with the following processing activities:
- Credit check in the case of payment by invoice (Pay Later) (see the information on “Klarna (Payment by invoice – Pay Later)”)
This decision-making is admissible for the following reason:
- The decision-making is necessary for entering into or performing a contract between you and us.
We implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on our part, to express your point of view and to contest the decision.
The decision-making is not based on special categories of personal data according to Art. 9 (1) GDPR.
6. Data subjects’ rightsAs a data subject you have the right of access/ right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR. The right of access/right to information and the right to erasure are subject to the restrictions under § 34, § 35 BDSG (Bundesdatenschutzgesetz - German Federal Data Protection Act).
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR in combination with § 19 BDSG, Bundesdatenschutzgesetz - German Federal Data Protection Act).
The supervisory authority responsible for our headquarters is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-WürttembergKönigstraße 10a
70173 Stuttgart
Germany
You may however also lodge your complaint with another supervisory authority.
7. Controller’s notification obligation We will communicate any rectification or erasure of your personal data or restriction of processing carried out in accordance with Art. 16, Art. 17 (1) and Art. 18 GDPR to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request it.
8. Obligation to provide or disclose data Unless stated otherwise in the explanations below regarding the applicable legal basis, you are not obliged to provide or disclose personal data to us. However, in the cases referred to in Art. 6 (1) point (b) GDPR, the personal data, the personal data are necessary for entering into or performing a contract. If you do not provide use with the relevant personal data, it will be impossible for us to enter into, or perform, the contract. If you do not provide us with the date in the cases referred to in Art. 6 (1) point (a) and (f) GDPR, you will not be able to use the parts of our website concerned thereby.
9. Right to object and withdrawal of consentYou have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (f) of Art. 6(1) GDPR, including profiling based on those provisions. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
Pursuant to Art. 7 (3) sentence 1 GDPR, you have the right to withdraw your consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. After you have withdrawn your consent, we will delete the personal data we have processed based on your consent unless there is another legal basis for the processing of these data.
Both objection and withdrawal are not subject to formal requirements and should be sent to our contact data stated above.
You can withdraw certain consents (for this, see the services listed in sec. II below) by using our consent tool, which you can find above in the chapter preceding this Privacy Policy. Please be aware that you have to withdraw your consent on every single device from which you have accessed our website and consented to the data processing.
II. Data processing in connection with the use of our websiteGenerally, the use of the website and its features necessarily involves the processing of personal data.
Google Tag ManagerWe use the Google Tag Manager to embed contents of third-party providers (e.g. Google Analytics, Usercentrics). This is a technical solution which does not itself store or read cookies or similar technologies requiring consent, but merely controls the conditions under which the other programs used on our website and described below are activated.
Provision of the websiteEssential features for the provision of the website and webshopPurposes of data processing:Functioning and optimisation of the website and ensuring the security of our information technology systems if our website is used for mere information purposes; integration and display of features and contents (e.g. diagrams) which we do not provide ourselves.
Technologies usedCookies; other technologies where appropriate, such as WebStorage contents
Collected dataUsage data, connection data
Legal basisArt. 6 (1) point (f) GDPR
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsIT service providers
Further information on the serviceInformation on the data processing is made available in this Privacy Policy
CloudflareThis is a Content Delivery Network (CDN) and security and DNS service. Purposes of data processing:Individualised design and functioning of our website; ensuring the security of our website and information technology systems
Technologies usedCookies
Processed dataUsage data, connection data
Legal basisArt. 6 (1) point (f) GDPR (legitimate interest)
Place of data processingUSA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsCloudflare, Inc., 101 Townsend Street, San Francisco, California 94107, USA
Further information on the servicehttps://www.cloudflare.com/privacypolicy/Information on products, events and offers (newsletter)This is a service which allows you to receive individual and personalised information, via email or telephone, on products, events and offers from selected Porsche companies.
Data processing purposes:Personalised information via telephone or email, on products, events and offers from the following Porsche companies: Porsche Design (Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG) (address, see above); Dr. Ing. h.c. F. Porsche AG, Porscheplatz 1, D-70435 Stuttgart, Germany; Porsche Deutschland GmbH, Porsche Strasse 1, D-74321 Bietigheim-Bissingen, Germany; Porsche Financial Services GmbH, Porschestrasse 1, D - 74304 Bietigheim-Bissingen, Germany; Porsche Smart Mobility GmbH, Porscheplatz 1, D-70435 Stuttgart, Germany; and, possibly, my local Porsche Centre (a list of Porsche Centres can be found here: https://www.porsche.com/germany/dealersearch; Creation of use and interest profiles; Proof of your consent; Guarantee of the security of our IT systems.
Technology usedSee the tools and plugins listed in this Privacy Statement.
Data collectedHistorical data, contact data, content data, contract details, usage data and communication data
Legal basisArticle 6 (1) (a) and (f) GDPR
Location of processingEU/EEA
Retention periodThe data is deleted as soon as it is no longer required for the processing purposes.
Data recipient K3 Agency GmbH, Hoferstrasse 9a, 71636 Ludwigsburg; CleverReach GmbH & Co. KG, Schafjückenweg 2 26180 Rastede, Germany; the abovementioned Porsche companies
Further information about the serviceYou can find more information on the data processing in this data protection notice.
Customer accountThis is our customer account for our webshop.Purposes of data processing:Use of a customer account; ensuring data and information security
Technologies usedCookies and WebStorage technology where appropriate
Collected dataMaster data, contact data, content data, contract data, payment data and connection data
Legal basisArt. 6 (1) point (b) and (f) GDPR
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsNone
Further information on the serviceInformation on the data processing is made available in this Privacy Policy
Purchasing with a guest user accountThis feature allows you to do purchases without a customer account.Purposes of data processing:Use of a customer account; ensuring data and information security
Technologies usedCookies and WebStorage technology where appropriate
Collected dataMaster data, contact data, content data, contract data, payment data and connection data
Legal basisArt. 6 (1) point (b) and (f) GDPR
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsNone
Further information on the serviceInformation on the data processing is made available in this Privacy Policy
Request for purchase of timepieces (matching your vehicle)This feature allows you to make a request for the purchase of custom-built timepieces matching your vehicle.Purposes of data processing:Request for the purchase of a custom-built timepiece matching your vehicle; ensuring data and information security
Technologies usedCookies and WebStorage technology where appropriate
Collected dataMaster data, contact data, content data, contract data, connection data
Legal basisArt. 6 (1) point (b) and (f) GDPR
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsDepending on the watch model, your Porsche importer and your Porsche Centre as necessary.
Further information on the serviceInformation on the data processing is made available in this Privacy Policy
Private shoppingWe offer you personalised products and services in store or via video conference, and can make your order a personal shopping experience.
Data processing purposes:Carrying out personalized shopping; taking and handling your order; ensuring the security of our IT systems.
Used technologiesThe tools and plug-ins mentioned in this privacy statement; online scheduling and video conference solutions
Collected dataMaster data, contact data, content data, contract data, usage data, and connection data
Legal basisArticle 6, paragraph 1, letter b), f) of the GDPR
Processing locationEU/EEA, USA in individual cases (conclusion of the EU standard contractual clauses)
Duration of storageData is deleted as soon as it is no longer required for processing purposes.
Data recipientsMicrosoft Ireland Operations Limited, Dublin, Ireland, and their service providers
Further information regarding the serviceData processing information can be found in these privacy notices
Online shopThe data processing is necessary for running our online shop.Purposes of data processing:Running the online shop; handling and executing your purchase orders and requests; ensuring the security of our online shop
Technologies usedCookies; WebStorage technology where appropriate
Collected dataMaster data, contact data, content data, payment data, contract data, usage data and connection data. If you have already created a customer account in our online shop, you only need to log in to your customer account. We will then use the personal data from your customer account.
Legal basisArt. 6 (1) point (b) and (f) GDPR
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsNone
Further information on the serviceInformation on the data processing is made available in this Privacy Policy
Usercentrics consent management platformThis is a service for the management of your consent settings.Purposes of data processing:Obtaining consent and controlling the withdrawal of consent regarding the use of tools and services requiring consent and of the related cookies and similar technologies on this website; processing of information to ensure that only those cookies and similar technologies are used and/or read by default which are technically indispensable for running our website or which you have accepted actively; maintaining proof of consent or withdrawal of consent by documentation of the control process
Technologies usedCookies; WebStorage contents
Processed dataUsage data, connection data
Legal basisArt. 6 (1) point (c) and (f) GDPR (legal obligation, legitimate interest)
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsUsercentrics GmbH, Rosental 4, 80331 Munich, Germany
Further information on the servicehttps://usercentrics.com/privacy-policy/AWIN (and Publisher)This is an advertising network where our advertising measures are displayed. Purposes of data processingDisplay of (flash) ads within the AWIN advertising network on websites of third parties (so-called affiliates or publishers); tracking of the user path from the ad to our website to secure the commission claims of the publishers; preparation of cumulative statistical reports.
Technologies usedCookies where appropriate; WebStorage technology; pixel tags where appropriate
Collected dataUsage data and connection data.
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingIn individual cases: Switzerland (Art. 45 (3) GDPR in combination with the Commission Decision 2000/518/EC), USA, Brazil and Australia (in every case based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsAWIN AG, Eichhornstraße 3, 10785 Berlin, Germany, and the publishers of the advertising network of AWIN (as joint controllers, Art. 26 GDPR – the key elements of the contract are available at
https://s3.amazonaws.com/docs.awin.com/Legal/Publisher+terms+and+conditions+2019+DE.pdf (s. sec. 12.4))
Further information on the servicehttps://www.awin.com/de/dsgvoDroid MarketingThis is a web analysis and marketing service.Purposes of data processingSending individualised newsletters based on your user behaviour on the website, measurement of the success and optimisation of our offers and advertising campaigns
Technologies usedCookies
Processed dataUsage data, connection data, contact data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR).
Duration of storageThe maximum duration of data storage is one year. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsDroid Marketing GmbH, Ungargasse 64-66/2/405, A-1030 Vienna, Austria
Further information on the servicehttps://droidmarketing.com/datenschutz.htmlFacebook Custom Audiences (“Facebook pixel“)This is an analysis service of Facebook.Purposes of data processingDisplay of individualised (flash) ads within the Facebook advertising network (Facebook ads) based on the pseudonymised documentation of your surf behaviour.
Technologies usedCookies; WebStorage technology where appropriate; pixel tags
Collected dataUsage data and connection data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsFacebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controllers according to Art. 26 GDPR with respect to the processing of event data for the targeting of ads, the improvement of ad display and the individualisation of features and contents and, where applicable, the delivery of commercial and transaction-related data); the key elements of the contract concluded for such purpose (including information on the implementation of your rights as a data subject) are available at:
https://www.facebook.com/legal/controller_addendumFurther information on the servicehttps://www.facebook.com/privacy/ (including information on the processing of personal data by Facebook, the legal basis on which Facebook relies for the processing and the exercise of data subjects’ rights in the relationship with Facebook)
Google Ads Conversion TrackingThis is a conversion marketing service. It helps measure the success of advertising campaigns.Purposes of data processing:Measuring the success of our Google Ads advertising campaigns.
Technologies usedCookies; pixel tags where appropriate
Collected dataUsage data, connection data and, where applicable, position data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsGoogle Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the servicehttp://www.google.de/intl/de/policies/privacyGoogle Ads RemarketingThis is a remarketing service of Google.Purposes of data processingDisplay of individualised (flash) ads within the Google advertising network based on the pseudonymised documentation of your surf behaviour.
Technologies usedCookies; pixel tags where appropriate
Collected dataUsage data, connection data and, where applicable, position data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsGoogle Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the servicehttp://www.google.de/intl/de/policies/privacy Google AnalyticsThis is a web analysis service.Purposes of data processingStatistical analysis; optimisation and customisation of our website design based on your clicks and user behaviour
Technologies usedCookies; pixel tags
Processed dataUsage data, connection data and, where applicable, position data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsGoogle Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the servicehttp://www.google.de/intl/de/policies/privacyGoogle Marketing Platform (Floodlight)This is a conversion tracking service of Google.Purposes of data processingMeasuring the success of our advertising campaigns
Technologies usedCookies; pixel tags where appropriate
Processed dataUsage data, connection data and, where applicable, position data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingEU/EEA; in individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsGoogle Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the servicehttp://www.google.de/intl/de/policies/privacy Google MapsThis is a web mapping service.Purposes of data processingIntegration of interactive maps and mapping features of Google Maps
Technologies usedCookies
Processed dataUsage data, connection data, position data (depending on the specific use)
Legal basisArt. 6 (1) point (f) GDPR (legitimate interests)
Place of data processingEU/EEA; in individual cases: USA
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsGoogle Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland
Further information on the servicehttp://www.google.de/intl/de/policies/privacyMicrosoft Advertising (formerly Bing Ads)This is an advertising service.Purposes of data processingAnalysis of the use of our website; display of individualised (flash) ads within the Microsoft Advertising network based on the pseudonymised documentation of your surf behaviour; measurement of the success and optimisation of our Microsoft Advertising campaigns.
Technologies usedCookies; pixel tags where appropriate
Processed dataUsage data, connection data
Legal basisArt. 6 (1) point (a) GDPR (consent)
Place of data processingUSA
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsMicrosoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft“)
Further information on the servicehttps://privacy.microsoft.com/de-de/privacystatementTrusted Shops (trustbadge)This is a service of Trusted Shops for the integration of the trustmark/trustbadge (buyer protection) and customer reviewsPurposes of data processingDisplay of the Trusted Shops trustmark (trustbadge); integration of the collected reviews; integration of the Trusted Shops products (buyer protection).
Technologies usedCookies where appropriate; WebStorage technology where appropriate; pixel tags where appropriate
Processed dataUsage data, connection data
Legal basisArt. 6 (1) point (f) GDPR (legitimate interest)
Place of data processingIn individual cases: USA (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storageThe maximum duration of data storage is two years. In all other cases, the data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsTrusted Shops GmbH, Colonius Carré, Subbelrather Straße 15c, 50823 Cologne, Germany
Further information on the servicehttps://privacy.microsoft.com/de-de/privacystatementKlarnaThis is a payment service.Purposes of data processingInclusion of payment by invoice (Pay Later); carrying out identity checks and credit checks based on generally accepted statistical-mathematical methods and on data from credit enquiry agencies in order to determine the bad debt risk. In the case of bad rating, the purchaser must choose another payment mode. The checks also support our legitimate interest in fraud prevention.
Technologies used-
Processed dataMaster data, contact data, contract data, payment data, usage data, connection data
Legal basisArt. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processingEU/EEA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsKlarna Bank AB (publ) Sveavägen 46 111 34 Stockholm Sweden; credit enquiry agencies
Further information on the servicehttps://www.klarna.com/de/datenschutz/PayPalThis is a payment service.Purposes of data processing
Enabling payment via the PayPal payment service
Technologies used
-
Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Luxembourg (“PayPal“)
Further information on the service
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Sofort Überweisung (instant bank transfer)
This is a payment service.
Purposes of data processing
Payment processing via the payment service “Sofortüberweisung“ (instant bank transfer).
Technologies used
-
Processed data
Contact data, master data; contract data if applicable; payment data, usage data, connection data
Legal basis
Art. 6 (1) point (b) and (f) GDPR (contract performance, legitimate interest)
Place of data processing
EU/EEA
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany
Further information on the service
https://www.sofort.de/datenschutz.html
III. Information on external sites of Porsche Lizenz- und Handelsgesellschaft mbH & Co. KG
Facebook
This is a social network where we run a site about our company.
Purposes of data processing
We established a site about our company on the “Facebook” platform under https://www.facebook.com/porschedesign (“Facebook site”). When you access that site, Facebook processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:
https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.
Further information on the operator:
https://www.facebook.com/policy.php
Instagram
This is a social network where we run a site about our company.
Purposes of data processing
We established a site about our company on the "Instagram" platform of Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook") under https://www.instagram.com/porschedesign/ (“Instagram site”). When you access that site, Facebook processes personal data concerning you.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR and on the basis of adequacy decisions (Art. 45 GDPR))
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook“) (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://www.facebook.com/legal/terms/page_controller_addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of Facebook. Facebook informs you about your rights as a data subject at:
https://www.facebook.com/legal/terms/information_about_page_insights_data. You may also send any request regarding your rights to us, we will promptly pass it on to Facebook.
Further information on the operator:
https://de-de.facebook.com/help/instagram/
LinkedIn (Profile)
This is a social network for maintaining professional and business contacts, where we run a site about our company.
Purposes of data processing:
We established a site about our company on the “LinkedIn” platform under https://de.linkedin.com/company/porsche-design-group. When you access that site, LinkedIn processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used
-
Processed data
Master data, contact data, content data, usage data, connection data; position data where applicable
Legal basis
Art. 6 (1) point (f) GDPR (legitimate interest)
Place of data processing
EU/EEA; in individual cases: USA and other third countries (based on the standard data protection clauses of the European Commission, Art. 46 (2) point (c) GDPR)
Duration of storage
The data are deleted as soon as they are no longer needed for the processing purposes.
Data recipients
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (as a joint controller, Art. 26 GDPR); the key elements of the contract are available at https://legal.linkedin.com/pages-joint-controller-addendum
Data subjects’ rights: The implementation of your rights as a data subject is the responsibility of LinkedIn. LinkedIn informs you about your rights as a data subject at: https://www.linkedin.com/legal/privacy-policy. You may also send any request regarding your rights to us, we will promptly pass it on to LinkedIn.
Further information on the operator:https://www.linkedin.com/legal/privacy-policyTwitterThis is a social network where we run a site about our company.Purposes of data processing:We established a profile on the “Twitter” platform under
https://twitter.com/PorscheDesign.When you access that site, Twitter processes personal data concerning you. We receive statistics regarding the use of that site which are derived from your data.
Technologies used-
Processed dataMaster data, contact data, content data, usage data, connection data; position data where applicable
Legal basisArt. 6 (1) point (f) GDPR (legitimate interest)
Place of data processingEU/EEA; in individual cases: USA
Duration of storageThe data are deleted as soon as they are no longer needed for the processing purposes.
Data recipientsTwitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”)
Further information on the operator:https://twitter.com/de/privacy