Privacy Policy for the Event [SCOPES Driven by Porsche]

We, Dr. Ing. h.c. F. Porsche AG (hereinafter: “we” or “Porsche AG“), are pleased that you are taking part in [SCOPES Driven by Porsche].
Your privacy is important to us, and we take the protection of your personal data and their confidential treatment very seri-ously. Your personal data will be processed exclusively within the legal framework of data privacy provisions, particularly the EU General Protection Regulation (hereinafter: “GDPR”).

This Privacy Policy provides you with information about the way we process your personal data and about your data priva-cy rights relating to [SCOPES Driven by Porsche].

1. Data Processor and Data Protection Officer – contact details

The Processor as defined in data protection legislation is:

Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Germany
Phone: (+49) 0711 911-0

If you have any questions or suggestions about data protection, please feel free to contact us. Please note the following contact details of our Data Protection Officer:

Dr. Ing. h.c. F. Porsche AG
Data Protection Officer
Porscheplatz 1
70435 Stuttgart
Germany
Contact: http://por.sc/privacycontact

2. Object of data protection

The object of data protection is the protection of personal data in the sense of any information relating to an identified or identifiable natural person (a so-called data subject). This includes details such as names, postal addresses, email ad-dresses and phone numbers as well as other details which need to be created as part of [SCOPES Driven by Porsche], such as video recordings and photos.

3. Purposes and legal bases for data processing

Below, you will find a list of the purposes and legal bases for data processing conducted as part of [SCOPES Driven by Porsche].

3.1 Fulfilment of contractual and pre-contractual duties (GDPR Article 6 (1) point b)

We process the personal data required to carry out [SCOPES Driven by Porsche]. Such purposes include, in particular:

  • the processing of ticket orders and checks
  • communication with visitors about the event
  • the planning and implementation of the event
Data processing takes place on the basis of GDPR Article 6 (1) point b. You will need to specify the personal data required for organising [SCOPES Driven by Porsche] and/or your par-ticipation. Unless we received those data, we are unable to warrant your participation.

3.2 Fulfilment of legal duties (GDPR Article 6 (1) point c) or processing of personal data in the public interest (GDPR Article 6 (1) point e)

One purpose for which we process your personal data is to comply with our legal duties. Such duties may arise, for exam-ple, from commercial law, tax law, money laundering law, fiscal law or criminal law. The purposes of processing are derived from the relevant legal duty, and processing generally serves the purpose of meeting monitoring and information duties specified by the state.

Data processing takes place on the basis of GDPR Article 6 (1) points c and/or e). When we collect data on account of a legal duty or in the public interest, you need to enter the personal data we require to fulfil the relevant duty. Unless we receive those data, we are unable to warrant your participation.

3.3 Safeguarding legitimate interests (GDPR Article 6 (1) point f)

We also process your personal data in order to safeguard our own legitimate interests or those of third parties. Such purpos-es include, in particular:

Reporting on [SCOPES Driven by Porsche] in online and offline corporate media of Porsche AG, using video recordings and photographs, and the documentation for the corporate archives

Data processing takes place on the basis of GDPR Article 6 (1) point f. Should you be required to provide data for this purpose, we will expressly point this out to you.

3.4 Consent (GDPR Article 6 (1) point a)

Should you have given your consent for specific purposes, then those purposes are made clear in the relevant declaration of consent.

Data processing takes place on the basis of GDPR Article 6 (1) point a. Should you be required to provide data for this purpose, we will expressly point this out to you. You can re-voke your consent at any time, yet your consent will not affect the legitimacy of processing conducted under your consent prior to the date of your revocation.

4. Recipients of personal data

Internal recipients: Within Porsche AG, access is only limited to persons requiring data for the purposes specified under clause 3 above.

External recipients: We only disclose your personal data to external recipients outside Porsche AG if this is required for the processing of [SCOPES Driven by Porsche] and for report-ing on the same, or if some different legitimate permission or obligation is in place, or if we have received your consent. External recipients may be:

a) Processors: affiliates of Porsche AG or external contractors used by us for the purpose of supplying services. We carefully select such processors and regularly check them to ensure the safety and confidentiality of your personal data. Service pro-viders may only use data for the purposes we specify.

b) Public bodies: public authorities and state institutions, such as public prosecutors, courts of law and fiscal authorities, to which we need to send personal data for mandatory legal reasons. Data transmission takes place on the basis of GDPR Article 6 (1) point c.

c) Private bodies: cooperation partners or auxiliaries to whom data are transmitted because they are required to carry out [SCOPES Driven by Porsche], or to safeguard legitimate interests, or because they are based on your consent. Data transmission takes place on the basis of GDPR Article 6 (1) points a, b and/or f.

5. Data processing by third parties

The implementation of [SCOPES Driven by Porsche] and reporting on the same may also involve the processing of your personal data by other controllers. Where reporting involves the use of video recordings and photos, this applies to the following entities, in particular, who are each responsible for their own data processing:

  • Boiler Room (UK) Limited] conducts live streaming of video footage of [SCOPES Driven by Porsche] at [www.boilerroom.tv]. See also the relevant privacy policy at https://boilerroom.tv/privacy-policy/.
  • [VICE Media GmbH] reports on [SCOPES Driven by Porsche] in its media, including at [www.vice.com/de/]. See also the relevant privacy policy at https://www.vice.com/de/page/datenschutzerklarung.
  • [Other event partners] may report on [SCOPES Driven by Porsche] in their media.
  • [A variety of influencers/bloggers] may use their channels to report on [SCOPES Driven by Porsche].

6. Data processing in third countries

If data are transmitted to bodies that have their head offices or data-processing locations outside EU member states and outside states forming part of the EEA, we ensure before disclosure that – except for certain legally permitted exceptions – the recipients either have your adequate consent or they provide an adequate level of data protection (for example, through an adequacy decision taken by the European Com-mission, through suitable guarantees such as the recipient’s self-certification for the EU-US Privacy Shield or through the agreement of so-called standard EU contractual clauses with the recipient), or on the basis of your consent.

You can request from us a list of recipients in third countries and a copy of the provisions that have been agreed in each case to ensure an adequate level of data protection. Please use the contact details given in clause 1.

7. Automated decision-making and profiling

To conduct [SCOPES Driven by Porsche], we do not use either automated decision-making or profiling.

8. Retention period and erasure

We only store your personal data for as long as they are re-quired to fulfil the purposes specified in this document or – if you have given your consent – until you revoke your consent. In addition, we also store your data within the required param-eters specified under retention duties detailed in commercial and tax law.

We will erase your personal data without undue delay

  • if they are no longer required for the purposes pursued by us in carrying out, reporting on and documenting [SCOPES Driv-en by Porsche], and if there is no other legal basis for keeping your data. In the latter case we shall erase all data as soon as that other legal basis ceases to be applicable.
  • if you revoke your consent, unless further processing is permitted under the relevant applicable statutory provisions.
  • if we are under some other legal duty to continue processing your data.

9. Rights of data subjects

As a data subject you are entitled to numerous rights. For example:

Right to information:

You have a right to access the data we have stored about you as a person.

Right to rectification and erasure

Provided that the legal grounds are in place, you can require us to restrict the processing of your data.

Restriction of processing

Provided that the legal grounds are in place, you can require us to restrict the processing of your data.

Data portability

If you have provided us with data on the basis of a contract or your consent, and as long as there are legal grounds, you can require us to send you the data you gave us in a structured, commonly used and machine-readable format, or you can require us to send your data to a different controller.

Objection to data processing where the legal basis is a “legitimate interest”:

If there are reasons arising from your specific situation, you are entitled to object to our processing of your data at any time, provided that such an objection has its legal basis in a “legitimate interest”. If you make use of your right to object, we shall discontinue the processing of your data, unless we can – within the parameters of the law – demonstrate compelling legal grounds for further processing, which outweigh your own rights.

Revocation of consent:

If you have given us your consent to the processing of your data, you can revoke the same at any time with future effect. This, however, does not affect the legitimacy of processing your data until the date of revocation.

Right to lodge a complaint with the supervisory authority:

You can also lodge a complaint with the competent superviso-ry authority, if you believe that the processing of your data has breached the latest applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for ourselves.

Your contact with us and the exercise of your rights:

In addition, if you have any questions about the processing of your personal data, your rights as a data subject or any con-sent you may have given, please feel free to contact us without incurring any charges. To exercise any of the aforementioned rights, please contact http://por.sc/privacycontact or write to the postal address specified in clause 1. When you do so, please make sure we can clearly identify you as a person. To revoke your consent, you can also contact us in the same way as you did when you gave your consent.

Last amended: 2 October 2018

Turn the phone to continue
using the app