By checking the relevant box during the registration process for your Porsche ID user account or on My Porsche, you grant the following consent:
I hereby consent to the transfer and use of my data stored in information systems of Porsche Connect GmbH to and by Porsche Connect GmbH and authorized dealers selected by me as controllers in their own right for the purpose of interest-driven individual care, conducting surveys regarding my satisfaction, information regarding my vehicle, and for vehicle-related services. The data in question are as follows: master data (such as my username (Porsche ID), name, elements of name, and contact information), vehicle data, information about transactions, active online services, and, where applicable, information voluntarily provided by me regarding company contact data, my date of birth and license plate number, and information on interests and preferences (for detailed information on this, please see Sec. 4.1 and 6 of the “General Data Protection and Privacy Statement for My Porsche and the Porsche Connect Store” and Sec. 2 of the Specific Data Protection and Privacy Statement for My Porsche Services and Porsche Connect Services). I am aware that I can revoke my consent at any time with effect for the future by notifying email@example.com.
We, Porsche Connect GmbH (hereinafter “we” or “PC GmbH”), are pleased that you are visiting our website and pleased about your interest in our company and our products. Protecting your privacy when processing data is important to us. We take protecting your personal data and handling them confidentially very seriously. Collection and use of your personal data take place exclusively within the scope of the statutory provisions of data protection and privacy law of the European Union. This data protection and privacy statement provides you with information on which personal data we collect, process, and use within the scope of your use of My Porsche, our Porsche Connect store, and the Porsche Connect services (hereinafter “Porsche Digital Service Infrastructure”) and for what purpose this occurs.
The controller within the meaning of data protection and privacy laws is:
Porsche Connect GmbH
If you have questions or suggestions regarding data protection and privacy, please feel free to contact us by e-mail at firstname.lastname@example.org or contact the data protection officer at the address shown below or the above e-mail address.
Porsche Connect GmbH
Data Protection Officer
The subject matter of data protection is personal data. This means any information concerning an identified or identifiable individual (the data subject). This includes information such as the person’s name, mailing address, e-mail address, and phone number, but also information that necessarily arises during and as a result of the use of My Porsche, our Porsche Connect store, and the Porsche Digital Service Infrastructure, such as information on the start, end, and scope of the use of our website and login information.
Even if you use our website without logging in, data will be or may be collected. The text below provides an overview of the different types of collection and processing of data and the respective purposes of processing and legal bases.
3.1 Automated data collection
When you access our website, your Internet browser automatically transfers data for technical reasons. The following data are stored separately from other data that you may transmit to us:
• date and time of access
• duration of the visit to our website
• type of Web browser / Web browser version
• operating system used
• the pages you visit on our website
• volume of data transmitted
• nature of event
• IP address
These data are stored for 13 months to ensure technical operation and are not associated with a specific person except when prompted by certain events. The legal basis for this is the fulfillment of our legal obligations in the area of data security and our legitimate interest in eliminating disruptions and guaranteeing the security of our offerings.
These data are also – without being associated with a specific person – processed for analytical purposes. For further information on this, see Sec. 3.3 below.
3.3 Google Analytics
PC GmbH uses Google Analytics, a Web analytics service of Google Inc. (“Google”). Google Analytics uses “cookies,” text files that are stored on your computer and enable analysis of your use of the website. The information regarding your use of this website that is generated by the cookie (including your truncated IP address) is transferred to a Google server in the United States and stored there. Google will use this information to analyze your use of the website, compile reports on website activity for us, and perform further services associated with website use and Internet use. Google may also transmit this information to third parties where required by law or to the extent that third parties process these data on behalf of Google.
You can deactivate Google Analytics using a browser add-on if you do not wish the website analysis to take place. You can download the add-on here:
The legal basis for the processing of your data in connection with Google Analytics is our legitimate interest in analyzing the use behavior of visitors to our website.
When you register for and use My Porsche, the Porsche Connect store, and the Porsche Digital Service Infrastructure, personal data are collected, processed, and used, and may be transmitted to third parties as described below, in order to provide you with all services with regard to My Porsche, the Porsche Connect store, and the Porsche Digital Service Infrastructure and to fulfill our contractual obligations that exist in this context. We perform all of the data processing described in this section either - to the extent indicated - based on your consent or to fulfill our contract with you.
4.1 Registration process
To use My Porsche, registration on the Porsche infrastructure is required. Registration can take place in two ways, and you are free to choose the method of registration:
1. Invitation to register from authorized dealer
If you wish, your authorized dealer will enter the data you have communicated to the dealer for you via the dealer’s access to our systems. In this case, you will then receive, for example, a link sent by e-mail via which you are required to confirm your registration. Please note that the authorized dealers are independent companies, and we have no influence over them. A second feature will be used for additional verification. One example is a code sent via text message that you then enter in My Porsche.
In the event that registration has not taken place via an authorized dealer, you can register yourself and enter your data on your own. In selected countries, you can also add a vehicle and use additional digital services that require vehicle ownership. To do this, you will also have to upload a copy of an identification document and proof of ownership and – if you are not the owner of the vehicle – a power of attorney from the vehicle owner after entering your vehicle identification number. These documents will be reviewed based on our verification criteria. As proof of successful verification, we will also store the names, dates of birth, places of birth, addresses, and validity information of the documents shown in the respective identification documents and the vehicle identification numbers, owner names, and addresses shown in the ownership documentation. After the verification process is complete, the copies of the documents will be deleted. Following successful verification, you will receive, for example, a link sent by e-mail via which you are required to confirm your registration. A second feature will be used for additional verification. One example is a code sent via text message that you then enter in My Porsche.
(a) Required information during registration
When you register on My Porsche, you will be required – in case of self-registration – to enter your e-mail address (Porsche ID), a password, your name and any titles and suffixes, contact and address information, mobile phone number, e-mail address, and, where applicable, the language in which you wish to communicate with us or – in case of registration through an authorized dealer – to confirm this information in My Porsche. This information is necessary in order to set up and manage a Porsche ID user account for you so that you can use the full range of services and functions offered by My Porsche and the Porsche Connect store. In selected countries, you can also use our offerings as a potential customer. In this case, you are only required to state your name, e-mail address, and a password. We need this information – and, where applicable, further information – not least in order to be able to respond to requests, questions, and criticism.
We also store the time of your last login.
During registration, we will perform a plausibility check of your name and address information.
(b) Voluntary information during registration
Within the scope of your registration, you will also have the opportunity to enter additional voluntary information, such as additional name information (e.g. academic titles, etc.), company contact information, date of birth, additional phone numbers, credit card information (this information is stored exclusively by the payment service provider), and your vehicle license plate number and a personal vehicle name. You can also provide information on your interests and preferences and your desired contact channels. Please note that this information is not required in order to register, and that it is entirely up to you to decide whether you wish to communicate this information to us.
4.2 Porsche Digital Service Infrastructure: data processing after registration
If you have selected an authorized dealer within the scope of registration and have given your consent, this dealer can access your data stored with Porsche Connect in order to be able to provide you with interest-driven individual care, conduct surveys regarding your satisfaction, and send you information regarding vehicles or vehicle-related services. The legal basis for the processing of your data in this context is your consent.
To process payments for paid services within the scope of My Porsche and Porsche Connect, we use the payment service provider Arvato distribution GmbH, Gottlieb-Daimler-Str. 1, 33428 Harsewinkel, Germany (“Arvato”). The management of your credit card information and processing of payments are performed exclusively via systems of the payment service provider. If you enter your credit card information, this takes place directly via an entry field of the payment service provider, which stores this information independently and uses it for your payments. We do not collect or store any of your credit card information whatsoever. Therefore, please consult the payment service provider for information on the nature, scope, and purpose of the collection and use of your credit card information.
Exclusively for the purpose of receivable management (including compliance checks, to the extent legally required) and to perform credit checks, the payment service provider will process your customer and contact information (name, address, e-mail address, Porsche Connect customer number, if applicable company name and affiliated companies) and your vehicle identification number on our behalf. The legal basis for the processing of your data for the foregoing purposes is the fulfillment of a legal obligation that applies to us and/or our legitimate interest in complying with statutory requirements.
We disclose your personal data to third parties only if this is necessary in order to provide the respective Porsche Digital Service offering or is otherwise allowed by law, or if we have your consent to do so.
We occasionally rely on affiliates of Porsche AG, third-party companies, and external service providers with which we have contracts in place to perform the services, for example in the areas of technical infrastructure and service/maintenance for the offerings of PC GmbH, the provision of content, transmission of advertisements (only to the extent that you have given your express consent thereto beforehand), customer service, and processing of payments. In cases like these, information is disclosed to these companies and/or individuals in order to enable them to engage in further processing. We select these external service providers carefully and review them regularly to ensure that your privacy remains protected. The service providers are permitted to use the data exclusively for the purposes stipulated by us.
If individual functions within the Porsche Digital Service Infrastructure are performed on our behalf by service providers whose registered location or place of data processing is not located in a Member State of the European Union or another state that is a signatory to the Agreement on the European Economic Area, we ensure before disclosure that there is either an adequate level of data protection and privacy within the recipient’s organization (e.g. through self-certification on the recipient’s part for the EU-US Privacy Shield or agreement of “EU standard contractual clauses” with the recipient) and/or that your consent has been received in sufficient form.
You can contact us to receive an overview of the recipients in third countries and a copy of the specific contractual provisions that have been agreed to ensure an adequate level of data protection and privacy. To do this, please use the information stated in Sec. 1.
You have the option of receiving support from our Contact Center when using the Porsche Digital Service Infrastructure. You can use this option to make changes in your personal customer information, request online services, and, where applicable, have further services performed by our telephone Contact Center, for example. To this end, you are required to provide your Porsche ID to the Contact Center. After you have identified yourself by providing your Porsche ID or other security features, the Contact Center will access your Porsche ID or My Porsche user account directly and make the desired changes/perform the desired activities there on your behalf. The employees of the Contact Center will only perform the tasks you explicitly request. Furthermore, the Contact Center may actively contact you by phone/text message/e-mail/instant messaging as needed, provided that you have consented to be contacted via the relevant channels, in order to assist you with registration and with activating and using the services.
The legal basis for the processing of your data by the Contact Center is contractual fulfillment.
If you delete your Porsche ID user account, your My Porsche profile will be deleted as well. To the extent that data must be stored for legal reasons, these data will be blocked (termed “restriction of processing”). The data will then no longer be available for further use, particularly for the use of services. The functionality of the services may be restricted or eliminated by this. My Porsche will then also no longer be available to you. To the extent that further responsible parties within the Porsche Group and its sales and distribution organization process personal data on their own responsibility, the processing of such data will not be affected by this. To the extent that data have been exchanged with a dealer chosen by you based on your consent, we will inform the dealer of the deletion of your Porsche ID user account.
As the subject of data processing, you have numerous rights. Specifically:
Right to information: You have the right to receive information regarding the data we store regarding you personally.
Right of correction and erasure: You can demand that we correct incorrect data and, to the extent that the legal prerequisites for this are met, complete incomplete data or erase your data. To the extent that statutory storage obligations conflict with the erasure of data, the processing thereof will be restricted (see below).
Restriction of processing: You can demand that we restrict the processing of your data, to the extent that the legal prerequisites for this are met.
Objection to data processing in the case of “legitimate interest” as the legal basis: You have the right to object to our processing of data at any time to the extent that such processing is based on “legitimate interest” as the legal basis. We will then stop processing your data unless we can show that there are, in accordance with the statutory stipulations, compelling legitimate interests for continued processing thereof that override your rights.
Objection to direct marketing: In addition, you can file an objection to the processing of your personal data for advertising purposes at any time (“advertising objection”).
Revocation of consent: To the extent that you have issued a statement of consent to the processing of your data to us, you can revoke it at any time, with effect for the future. The legality of the processing of your data up until the time of revocation will be unaffected by this.
Right to complain to the supervisory authority: You can also file a complaint with the relevant supervisory authority if you believe the processing of your data violates applicable law. To do this, you can contact the data protection authority with jurisdiction over your place of residence or country or the data protection authority that has jurisdiction over us.
In addition, you can contact us free of charge if you have any questions regarding the collection and/or processing of your personal data, your rights as a data subject, and/or any consent that may have been granted. To exercise any of the rights mentioned above, please contact email@example.com or use the mailing address specified in Sec. 1 above. When contacting us, please make sure we are able to clearly identify you personally.
We provide for all necessary technical and organizational measures, in accordance with the state of the art, in order to ensure a level of protection appropriate to the risk in compliance with the applicable statutory requirements.