Data protection notice for Porsche Classic Parts Explorer

We, Dr. Ing. h.c. F. Porsche AG (hereinafter referred to as "we" or "Porsche AG") are pleased about your visit to our Classic Parts Explorer as well as your interest in our company. Your privacy is important to us. We take the protection of your personal data and their confidential treatment very seriously. The processing of your personal data takes place exclusively within the framework of the statutory provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter "GDPR"). With this privacy policy we inform you about the processing of your personal data and your privacy rights in the context of the use of the Classic Parts Explorer. For information on other services as well as offers from other companies of the Porsche Group, please refer to the respective privacy policy of these services or companies.

1. Data Controller and Data Protection Officer; Contact

Responsible for the data processing within the meaning of the data protection laws is the:
Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Germany
Tel: (+49) 0711 911-0

If you have any questions or comments about privacy, please feel free to contact us.

Our data protection officer can be reached as follows:

Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Germany
Contact: https://www.porsche.com/germany/privacy/contact

2. Subject of data protection

The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called affected person). These include e.g. Information such as name, postal address, e-mail address or telephone number, but also information that necessarily arises during the use of the Classic Parts Explorer, such as information on the beginning, end and extent of use and the transmission of your IP address.

3. Type, scope, purpose and legal basis of automated data processing

The use of the Classic Parts Explorer is generally possible without registration. Even if you use the Classic Parts Explorer without registration, personal data can be processed. Below you will find an overview of the type, scope, purposes and legal basis of the data processing of the Classic Parts Explorer.

3.1 Provision of our online service

When accessing the Classic Parts Explorer through your device, we automatically process the following data:

- date and time of access,
- duration of the visit,
- user devices,
- used operating system,
- the features you use,
- amount of sent data,
- type of event,
- IP address,
- referrer URL
- domain name

These data are processed on the basis of Article 6 (1) (f) of the GDPR to provide the service, to ensure the technical operation and to detect and eliminate interference. We are pursuing the interest of enabling and permanently securing the use of the Classic Parts Explorer and its technical functionality. When the Classic Parts Explorer is accessed, this data is processed automatically. Without this provision, you will not be able to use our services. We do not use this data for the purpose of drawing any conclusions about you or your identity. We usually delete this data after 7 days, unless we exceptionally need it for the purposes mentioned above. In such a case, we will delete the data immediately after the purpose of processing ceases.

3.2 Cookies

When you visit the Classic Parts Explorer, so-called "cookies", ie small files, can be stored on your device in order to offer you a comprehensive range of functions, to make your usage more comfortable and to optimize our offers. If you do not want to use cookies, you can prevent the storage of cookies on your device by by adjusting the settings of your internet browser or use of the separate contradiction option. Please note that the functionality of our offer may be limited. For detailed information on the nature, extent, purposes, legal bases and possibilities of contradicting the processing of cookies, please refer to our Cookie Policy.

4. Recipient of personal data

Internal recipients: Within Porsche AG, only those persons have access who need this for the purposes mentioned in sections 3 and 4 above.

External recipients: We only pass on your personal data to external recipients outside of Porsche AG, if this is necessary for processing your request, if another legal authorization exists or if your consent is available.

External recipients can be:

a) Processor Group companies of Porsche AG or external service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance for Porsche AG's offer or the provision of content. These processors are carefully selected and regularly reviewed by us to ensure your privacy is maintained. The service providers may only use the data for the purposes specified by us and according to our instructions.

b) Public bodies Authorities and government institutions, such as Prosecutors, courts or tax authorities to whom we must transfer personal data for legally binding reasons. The transmission then takes place on the basis of Article 6 (1) (c) GDPR.

c) Private offices Dealers, cooperation partners or auxiliary persons to whom data are transmitted on the basis of a consent, for the execution of a contract with you or for the protection of legitimate interests, such as Porsche centers, financing banks, providers of other services or transport service providers. The transmission then takes place on the basis of Article 6 (1) (a), (b) and / or (f) GDPR.

5. Storage duration

The storage period for personal data can be found in the respective chapter on data processing in relation to certain services and functions in Section 3 and Section 4. In addition, we generally retain your personal data only as long as this is necessary for the fulfillment of the purpose or - case of consent - as long as you have not revoked the consent. In the event of an objection, we will delete your personal data, unless its further processing is permitted in accordance with the relevant statutory provisions. We delete your personal data even if we are obliged to do so for legal reasons.

6. Affected rights

As a data-processing person, you have many rights. In detail:

Right to information: You have the right to obtain information about the data we have stored about you.

Right of rectification and cancellation: You may demand the correction of incorrect data and - insofar as the legal requirements are met - the deletion of your data.

Restriction of processing: As far as the legal requirements are met, you can demand that we restrict the processing of your data.

Data portability: If you have provided us with data based on a contract or consent, you may, subject to the legal requirements, require that you receive the data you provide in a structured, common and machine-readable format, or that we transfer it to another person in charge to transfer.

Objection to data processing in the case of legal basis "legitimate interest": You have the right, for reasons arising from your particular situation, to object at any time to the processing of data by us, insofar as this is based on the legal basis "legitimate interest". If you make use of your right of objection, we will stop the processing of your data, unless we can - in accordance with the legal requirements - prove compelling legitimate reasons for further processing that outweigh your rights.

Opposition to cookies: You may also object to the use of cookies at any time. Details can be found in our Cookie Policy.

Revocation of consent: If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. The lawfulness of the processing of your data until the revocation remains unaffected.

Complaints to the supervisory authority: You can also file a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the data protection authority, which is responsible for your place of residence or your country, or the data protection authority responsible for us.

Your contact to us: Furthermore, if you have any questions about the processing of your personal data, your data subject rights and any consent given, you can contact us free of charge. To exercise all of your aforementioned rights, please contact us at https://www.porsche.com/germany/privacy/contact or by mail to the address indicated in 1. above. Please make sure that we can clearly identify you.

7. Links to offers from third parties

Websites and services of other providers to which the Classic Parts Explorer links are and have been designed and provided by third parties. We have no influence on the design, content and function of these third party services. We expressly dissociate ourselves from all contents of all linked offers of third parties. Please note that the offers of third parties linked from the Classic Parts Explorer may install own personal cookies on your device or collect personal data. We have no influence on this. If necessary, please inform yourself directly to the providers of these linked third-party offers.

8. Latest version

The latest version of this privacy policy applies. Date: 18/05/18