Porsche Smart Mobility GmbH Opća pravila privatnosti

Porsche Smart Mobility GmbH Opća pravila privatnosti

Infrastruktura Porsche digitalnih usluga / Porsche ID

Mi, Porsche Smart Mobility GmbH (u daljem tekstu "mi" ili "PSM GmbH"), smo zadovoljni jer koristite Infrastrukturu Porsche digitalnih usluga i naše druge digitalne ponude (u daljem tekstu pojedinačno ili zajedno navedene i kao "usluge" i zajedno kao "Infrastruktura Porsche digitalnih usluga") i jer ste zainteresirani za našu kompaniju i naše proizvode. Vaša privatnost nam xx xxxxx. Veoma ozbiljno shvatamo zaštitu privatnosti vaših ličnih podataka i njihovo upravljanje. Obrada vaših ličnih podataka se odvija isključivo u okviru zakonskih odredbi zakona o zaštiti podataka i privatnosti, posebno Opće uredbe o zaštiti podataka EU-a (u daljnjem tekstu: OUZP). Ova Pravila privatnosti vam pružaju informacije o obradi vaših ličnih podataka i xxxxx pravima kao ispitaniku u okviru vaše upotrebe naših usluga. Za informacije o pojedinačnim uslugama, pogledajte Specifična pravila privatnosti i, ako je primjenjivo, daljnja posebna obavještenja o privatnosti koje se odnose na relevantnu uslugu.

Gdje postavimo vezu s ovim Pravilima privatnosti s vanjskih web lokacija društvenih medija, uslovi koji slijede se primjenjuju samo u mjeri u kojoj operacije obrade podataka u okviru takvih web lokacija društvenih medija zapravo spadaju u našu sferu odgovornosti i nema podataka da su određenija - i stoga imaju prednost - što xx xxxx zaštite podataka i privatnosti na raspolaganju unutar dosega takvih web lokacija društvenih medija.

1. Vodilac obrade i službenik za zaštitu podataka; kontakt podaci

Osim ako je izričito navedeno u ovim Općim pravilima privatnosti, Specifičnim pravilima privatnosti koja se temelje na njima ili, ako je primjenjivo, daljnjim specifičnim obaviještenima o privatnosti koja se odnose na određenu uslugu, vodilac obrade koji je odgovoran za obradu podataka u smislu zakona o zaštiti podataka i privatnosti je:

Porsche Smart Mobility GmbH Xxxxxxxxxxxx 0

70435 Stuttgart Njemačka

E-pošta: xxxxxxxxxxxxx@xx.xxxxxxx.xxx

Ako imate pitanja ili prijedloge u vezi sa zaštitom podataka ili privatnosti, slobodno nas kontaktirajte.

Našeg službenika za zaštitu podataka možete kontaktirati na sljedećoj adresi:

Porsche Smart Mobility GmbH Data Protection Xxxxxxx Xxxxxxxxxxxx 0

70435 Stuttgart Njemačka

Kontakt: xxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx@xxxxxxx.xxx

2. Predmet zaštite podataka

Predmet zaštite podataka je zaštita ličnih podataka. To znači sve informacije koje se tiču fizičke osobe xxxx je identitet utvrđen ili se može utvrditi (poznata kao „ispitanik“). To uključuje informacije poput imena, poštanske adrese, adrese e-pošte ili telefonskog broja, kao i informacije koje nužno nastaju tokom korištenja naše Porsche digitalne uslužne infrastrukture

.

3. Priroda, opseg, svrhe i pravni osnovi obrade podataka u slučaju Porsche digitalne uslužne infrastrukture

Ova Opća pravila privatnosti pružaju vam pregled prirode, opsega, svrha i pravnih osnova obrade podataka u okviru registracije, kreiranja i korištenja vašeg Porsche ID korisničkog računa, kao i rezervacije i korištenja naših usluga na osnovu vašeg Porsche ID korisničkog računa. U tekstu koji slijedi pronaći ćete i podatke o zaštiti podataka i privatnosti, kao što su o primaoci ličnih podataka, obradi podataka u trećim zemljama i xxxxx pravima kao ispitanika, koja se općenito primjenjuje u okviru korištenja Porsche digitalne uslužne infrastrukture. Za detaljnije informacije o obradi ličnih podataka u vezi s korištenjem pojedinih usluga, relevantnim pravnim osnovama i specifičnim pravima ispitanika u vezi s relevantnom uslugom, također pogledajte odgovarajuće Specifična pravila privatnosti i, ako je primjenjivo, daljnja posebna obavještenja o privatnosti koja se odnose na relevantnu uslugu.

4. Porsche ID korisnički račun

Da biste koristili sve funkcije Porsche digitalne uslužne infrastrukture i usluga unutar nje, potrebno je registrirati i kreirati Porsche ID korisnički račun u usluzi My Porsche. Nakon postupka registracije i kreiranja vašeg Porsche ID korisničkog računa, dobit ćete i svoj Porsche ID (korisničko ime za Porsche ID korisnički račun). Tokom registracije i prilikom kreiranja i korištenja vašeg Porsche ID korisničkog računa lični podaci se obrađuju i mogu se prenijeti trećim osobama kao što je prikazano u nastavku kako bismo ispunili naše ugovorne obaveze u ovom kontekstu. Osim ako je drugačije naznačeno, provodimo sve postupke obrade opisane u ovom odjeljku kako bismo izvršili ugovor koji postoji između vas i nas na temelju članka 6. (1) (b) OUZP-a.

4.1 Postupak registracije i kreiranje Porsche ID korisničkog računa

Možete odabrati jedan od dva načina za registraciju i kreiranje vašeg Porsche ID korisničkog računa:

4.1.1 Poziv ovlaštenog trgovca

Ako želite, vaš ovlašteni xxxxxxx xx unijeti lične podatke koje ste naveli putem svoga xxxxxxxx xxxxx sistemima. Nakon toga ćete primiti vezu, npr. e-poštom koju ćete morati koristiti za potvrdu registracije i kreiranja vašeg Porsche ID korisničkog računa. Imajte na umu da su ovlašteni trgovci neovisne kompanije i na njih nemamo uticaja. Za dodatnu provjeru koristit će se drugi faktor,

npr. kôd poslan tekstualnom porukom koju zatim unosite kao dio postupka registracije i kreiranja vašeg Porsche ID korisničkog računa.

4.1.2 Samostalna registracija

U slučaju da registracija i stvaranje vašeg Porsche ID korisničkog računa nisu izvršeni putem ovlaštenog prodavača, možete sami registrirati i stvoriti svoj Porsche ID korisnički račun te unijeti svoje lične podatke. U odabranim državama možete i dodati vozilo te koristiti druge digitalne usluge za koje je potrebno vlasništvo vozila. Također morate transferirati kopiju identifikacijskog dokumenta i dokaz o vlasništvu i, u slučaju da niste vlasnik vozila, punomoć od vlasnika vozila nakon unosa identifikacijskog broja vozila. Ovi se dokumenti prosljeđuju Porsche Connect podršci ili, u državama xxxx službeni jezik ne podržava Porsche Connect podrška, direktno prodavaču kojeg ste vi odabrali i lokalno provjerili pomoću naših kriterija za provjeru. Kao dokaz uspješne provjere, mi također čuvamo imena, datume rođenja, mjesta rođenja i adrese navedene u relevantnim identifikacijskim dokumentima uz datume važenja dokumenata, kao i identifikacijske brojeve vozila, imena vlasnika i adrese navedene na dokazu o vlasništvu. Nakon završetka provjere, kopije dokumenata će se izbrisati. Ako dodate vozilo i stoga vam bude dodijeljeno određeno vozilo u vašem Porsche ID korisničkom računu, stvara se tzv. odnos vozila (u daljem tekstu "odnos vozila"). Nakon uspješne provjere, primit ćete, na primjer, poruku e-pošte s vezom koju morate upotrijebiti za potvrdu svoje registracije i stvaranje Porsche ID korisničkog računa. Druga funkcija vam omogućuje dodatnu provjeru identiteta, na primjer putem SMS koda, koji ćete unijeti tokom postupka registracije i stvaranja svog Porsche ID korisničkog računa.

Za samostalnu registraciju potrebno je otpremiti slike s uređaja. To znači da će vam se zatražiti odobrenje za pristup kameri ili biblioteci fotografija vašeg uređaja. Davanje odobrenja je dobrovoljno. Međutim, ako želite koristiti funkciju samostalne registracije, potrebno xx xxxx odgovarajuće odobrenje jer na drugi način nećete moći koristiti samostalnu registraciju. Odobrenje ostaje aktivno dok ga ne poništite na svom uređaju i/ili internetskom pregledniku deaktiviranjem odgovarajuće postavke.

(a) Potrebne informacije prilikom registriranja i kreiranja Porsche ID korisničkog računa

Prilikom registracije i kreiranja Porsche ID korisničkog računa od vas se traži (u slučaju samostalne registracije) unos adrese e- pošte, lozinke, vašeg imena i svih sufiksa, podataka o kontaktu i adresi, broja mobilnog telefona, adrese e-pošte i gdje primjenjivo, jezik na kojem želite komunicirati s nama, ili (u slučaju registracije i kreiranja vašeg Porsche ID korisničkog računa putem ovlaštenog trgovca) da biste potvrdili ove lične podatke tokom postupka registracije i kreiranja Porsche ID korisničkog računa. Ovi lični podaci su potrebni za postavljanje i upravljanje Porsche ID korisničkim računom za vas tako da možete koristiti čitav niz naših usluga koje se nude u okviru Porsche digitalne uslužne infrastrukture. U odabranim zemljama možete koristiti naše ponude i kao potencijalni kupac. U xxx slučaju sve što ste trebate unijeti je vaše ime i adresa e-pošte i lozinka. Potrebni su nam i drugi podaci, gdje je to primjenjivo, dodatni lični podaci, da bismo mogli odgovoriti na zahtjeve, pitanja i kritike. Uz to pohranjujemo vrijeme vaše najnovije prijave. Tokom registracije i kreiranja Porsche ID korisničkog računa vršimo provjeru vjerodostojnosti vašeg imena i podataka o adresi.

(b) Dobrovoljno davanje dodatnih informacija prilikom registracije i kreiranja Porsche ID korisničkog računa

Prilikom registracije i kreiranja Porsche ID korisničkog računa, također imate mogućnost dobrovoljnog unosa dodatnih podataka, kao što su dodatne informacije o imenu (akademski nazivi itd.), podaci za kontakt kompanije, datum rođenja, drugi telefonski brojevi, podaci o kreditnoj kartici (koji se pohranjuju isključivo kod davaoca usluga plaćanja) i vašeg registracijskog broja i ličnog

imena vozila. Pored toga možete navesti podatke o svojim interesima i željama i željenim kanalima kontakata. Imajte na umu da ove informacije nisu potrebne za registraciju i kreiranje Porsche ID korisničkog računa, a na vama xx xx xx nam želite dati ove lične podatke.

4.2 Porsche digitalna uslužna infrastruktura: obrada podataka nakon registracije i kreiranja Porsche ID korisničkog računa

Ako ste se registrirali i kreirali Porsche ID korisnički račun, podijelit ćemo osnovne podatke o vašem Porsche ID korisničkom računu i xxxxx vozilima s Porsche trgovcima koji pružaju uslugu da bismo vam mogli pružiti uslugu i preko naše organizacije trgovaca, prema potrebi. To se radi da bi se mogao izvršiti ugovor s vama na temelju članka 6. (1) (b) OUZP-a. U tu svrhu prenosit ćemo ne samo vaš identifikacijski broj vozila, već i vaše korisničko ime (Porsche ID), tehničku i/ili prodajnu dostupnost usluga i ponude proizvoda za vaš Porsche ID korisnički račun ili vozilo i relevantne događaje unutar opseg kreiranja, izmjene ili brisanja korisničkog računa Porsche ID-a, veze vozila, izbor trgovaca ili aktiviranje ili deaktivacija usluga.

Ako ste odabrali ovlaštenog trgovca i dali pristanak, lični podaci pohranjeni u vašem korisničkom računu Porsche ID-a, posebno kontaktni podaci, korisnička usluga, podaci o ugovoru i servisu te podaci o xxxxx interesima, vozilima i uslugama koje koristite, također će se dijeliti s ovlaštenim trgovcem i sinkronizirati s bilo kojim ličnim podacima koji se odnose na vas koji mogu biti pohranjeni kod ovlaštenog trgovca. Ako više ne želite da se dijeljenje podataka odvija u budućnosti, možete u skladu s xxx prilagoditi korisničke postavke za Porsche ID korisnički račun. Spomenuti lični podaci od tada više neće biti dijeljeni s ovlaštenim trgovcem. Pravni temelj za obradu vaših ličnih podataka u ovom kontekstu je vaš pristanak u skladu s člankom 6. (1) (a) OUZP-a.

4.3 Brisanje Porsche ID korisničkog računa

Ako izbrišete Porsche ID korisnički račun, lični podaci pohranjeni na vašem Porsche ID korisničkom računu bit će izbrisani i nakon raskida ugovornog odnosa, ali ne prije kraja trajanja postojećih licenci usluge. Ako se iz pravnih razloga moraju pohraniti lični podaci, ti podaci će se blokirati (to se naziva i „ograničenje obrade“). Nakon toga lični podaci više neće biti dostupni za daljnju upotrebu, posebno za upotrebu usluga. Usluge možda više neće funkcionirati u potpunosti ili uopće. Tada više nećete moći u potpunosti koristiti Porsche digitalnu uslužnu infrastrukturu. Ako dodatni vodioci obrade unutar Porsche xxxxx kompanija i njegove prodajne organizacije obrađuju lične podatke na vlastitu odgovornost, ovo neće uticati na obradu tih ličnih podataka. U mjeri u kojoj su lični podaci podijeljeni s xxxxx trgovcem na temelju vašeg pristanka u skladu s člankom 6. (1) (a) OUZP-a, obavijestit ćemo trgovca o brisanju vašeg Porsche ID korisničkog računa.

5. Centralne usluge

5.1 Rezervacija i aktivacija usluga; postupanje s podacima za plaćanje

Možete rezervirati pojedinačne ili više My Porsche usluga i Porsche Connect usluga i aktivirati uslužne licence. Kad odaberete odgovarajuću uslugu ili uslužni paket, možete pogledati i relevantne podatke koji su uključeni u detalje ponude o obradi ličnih podataka u okviru predmetnih usluga. Da bismo izvršili rezervaciju i ispunili ugovorni odnos, obrađujemo ne samo relevantne podatke o rezervaciji, već i vaše lične podatke koji su prikupljeni tokom postupka registracije i kreiranja Porsche ID korisničkog računa. Možete promijeniti svoju adresu za naplatu prije završetka postupka rezervacije. U ovom slučaju koristit ćemo ove podatke o adresi koje navedete u svrhu naplate i namire računa.

Za obradu plaćanja naših plaćenih usluga i proizvoda unutar okvira za My Porsche, Porsche Connect, Online Marketplace i Porsche Drive Rental koristimo davaoca usluge plaćanja. U ovu svrhu ćemo mi i davalac usluge plaćanja obraditi podatke o vašoj kreditnoj kartici i odgovarajuće podatke o plaćanju. Za upravljanje xxxxx podacima o kreditnoj kartici i obradu plaćanja se koriste sistemi davaoca usluge plaćanja. Kada unesete podatke o svojoj kreditnoj kartici, činite to direktno putem polja za unos davaoca usluge plaćanja koji ove informacije zasebno šifrira, pohranjuje i koristi za vaša plaćanja. Šifrirane informacije se zatim prenose s kompanije Porsche/od nas ka davaocu usluge plaćanja gdje se pohranjuju i koriste u svrhe vašeg plaćanja. Pravna osnova koja vrijedi za ovu obradu vaših ličnih podataka radi obrade plaćanja je izvršavanje ugovora u skladu s Članom 6 (1) (b) OUZP-a.

Ovlašteni davalac usluge plaćanja će obraditi vaše podatke o klijentu i kontaktu (npr. ime, adresu, adresu e-pošte, broj klijenta za Porsche Connect i, ako je primjenjivo, kompaniju i povezane subjekte), identifikacijski broj vozila prikazan na dokazu o vlasništvu isključivo u svrhu upravljanja dužnicima (uključujući provjere saglasnosti, gdje se to zakonski traži) i izvršavanje kreditnih provjera. Pravna osnova za obradu navedenih ličnih podataka u gorenavedene svrhe, u skladu s Članom 6 (1) (c) OUZP-a, jest ispunjenje zakonskih obaveza i, u skladu s Članom 6

(1) (f) OUZP-a, naš legitimni interes u upravljanju potraživanjima za odgovarajuće račune i kreditnim kontrolama, pod uslovom da ne podliježemo nikakvoj zakonskoj obavezi.

Kada kupujete u trgovinama na mreži, naš davaoc usluge plaćanja određuje rizik od prevare. Podaci o transakcijama se provjeravaju i pregledaju za nepravilnosti (npr. učestalost promjena lozinki). Pravni osnov obrade spomenutih ličnih podataka za ranije navedene svrhe je, u skladu s člankom 6 [1] (b) OUZP-a, ispunjavanje ugovora ili ,u skladu s člankom 6 [1] (f) OUZP-a, naš legitimni interes u sprečavanju prevare.

Nakon rezervacije možete aktivirati usluge. To će pohraniti xxxx autorizaciju korištenja u sistem i uzrokovat će da se ažurira xxxxxx dostupnih usluga u skladu s xxx.

Da bi xx xxxxx koristiti određene usluge (npr. ponude stanice za e-punjenje), u mnogim državama se poštom šalje personalizirana kartica (naziva se Porsche ID Card ili Porsche kartica za punjenje) koja sadrži RFID čipove kada se kupi proizvod. Na kartici je pohranjen identifikacijski broj koji se može koristiti za dodjelu vašem korisničkom računu Porsche ID. Na samoj kartici se digitalno ne pohranjuju nikakvi lični podaci, poput imena ili adrese, pored identifikacijskog broja. Ako se kartica izgubi, možete je blokirati unutar korisničkog računa Porsche ID.

Nakon isporuke, Porsche ID kartica se može izravno koristiti u poslovima s podržanom infrastrukturom (poput javnih stanica za punjenje).

Ako nije drugačije naznačeno, provodimo postupke obrade opisane u ovom odjeljku da bismo izvršili naš ugovor s vama na temelju članka 6. (1) (b) OUZP-a.

5.2 Korištenje usluga My Porsche i Porsche Connect

Možete koristiti usluge My Porsche i Porsche Connect koje su rezervirane, ovisno o usluzi, u vozilu (u mjeri xxxx xx dostupna za vaše vozilo) putem mobilne radio veze ili putem dodatnih uređaja u usluzi My Porsche ili aplikaciji Porsche Connect i, prema potrebi, također s više ili svih pristupnih tačaka. U tu svrhu će se vaše vozilo ili odgovarajući uređaj povezati s Porsche digitalnom uslužnom infrastrukturom.

Kada koristite usluge rezervirane putem usluga My Porsche ili Porsche Connect Store u vozilu ili na drugim uređajima, obrađujemo lične podatke koji se odnose na vas u svrhu omogućavanja korištenja usluga, u svrhu podrške i za dodatne, posebno određene potrebe. Ako nije drugačije navedeno, vaše lične podatke obrađujemo samo u okviru potrebnom za

omogućavanje upotrebe relevantnih usluga My Porsche ili Porsche Connect.

Kad koristite pojedinačne usluge My Porsche ili Porsche Connect, mogu se obraditi sljedeće kategorije ličnih podataka, npr. ovisno o načinu funkcioniranja određene usluge:

a) Identifikacijski podaci, poput identifikacijskog broja vozila, vašeg Porsche ID-a te ID-a uređaja i sistema za vaše uređaje i mobilne radio module koji su potrebni za ličnu identifikaciju, uređaj ili vozilo radi uspostavljanja veza, korištenje usluga ili pristupa sadržaju;

b) podatke o autorizaciji, uključujući da je vozilo ili odgovarajući uređaj aktiviran za relevantnu uslugu Porsche Connect, koji se mogu povezati s xxxxx ličnim podacima koje ste unijeli tokom postupka registracije i kreiranja Porsche ID korisničkog računa;

c) podaci o prijavi koji su potrebni ako želite koristiti usluge drugih davalaca koje zahtijevaju prijavu u vozilu ili na drugim uređajima;

d) komunikacijske informacije koje su potrebne da bi se uspostavila veza između vašeg vozila i/ili drugih uređaja i naših servera ili servera neovisnih davalaca sadržaja za usluge Porsche Connect;

e) informacije o lokaciji i kretanju, kao što su GPS ili podaci o brzini, potrebne za upotrebu sadržaja temeljenog na lokaciji;

f) jezične informacije koje omogućavaju glasovnu kontrolu i glasovne unose u određenim uslugama Porsche Connect. Glasovni podaci nam se prenose iz vozila ili uređaja kao snimke u svrhu pretvaranja u tekst. Tekst koji potom generira davalac usluga se vraća u vozilo, a snimak se zatim briše iz naše arhive;

g) kontakt podaci koji se koriste u komunikacijskim uslugama, npr. za slanje e-pošte ili tekstualnih poruka;

h) podaci za naplatu, poput pojedinačnih podataka o povezivanju u vezi s postupcima punjenja. Te podatke možemo kombinirati s vašom adresom i podacima za plaćanje u svrhe pojedinačnih naplata;

i) Podaci u obliku slike/videa o vašem vozilu ili njegovim komponentama

j) dodatni sadržaj xxxx xxxx dijeliti s nama ili davaocima usluga da bi vam se mogla pružiti usluga.

Detaljne informacije o ličnim podacima koji se obrađuju u okviru usluge potražite u opisima relevantne usluge xxxxx://xxxxxxx- xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

Primjenjuje se sljedeće, posebno u kontekstu posjeta servisu i povezane upotrebe ekstenzije narudžbe na mreži:

Ekstenzija narudžbe na mreži je usluga xxxx xxxxx klijentima nudi mogućnost praćenja postupka prihvatanja vozila tokom termina za servis bilo kad i bilo gdje putem snimljenih i personaliziranih videa savjetnika i/ili tehničara servisa. Osim toga, klijent može izdati/odobriti dodatne popravke/produženje popravaka direktno putem My Porsche portala i/ili My porsche aplikacije.

Ako nije navedeno drugačije u ovim pravilima, nekim od specifičnih pravila privatnosti ili, ako je primjenjivo, u dodatnim specifičnim obavještenjima o privatnosti koje se odnose na relevantnu uslugu, obrađujemo vaše lične podatke u svakom slučaju na temelju članka 6. (1) (b) OUZP-a da bismo vam pružili usluge u ovom kontekstu i izvršili ugovor povezan s njima.

5.3 Korištenje usluga neovisnih davalaca

Ako koristite usluge koje pruža neovisni davalac s kojim imate vlastiti ugovorni odnos, sadržaj tih usluga se može prikazati u vašem vozilu ili na vašem uređaju, a informacije se mogu dijeliti između vašeg vozila ili uređaja i dotičnog davaoca usluga.

Nemamo uticaj na obradu podataka xx xxxxxx tog neovisnog davaoca usluga niti na lokaciju obrade podataka. Stoga pogledajte zasebna obavještenja o privatnosti relevantnih davalaca usluga za

informacije o prirodi, opsegu i svrsi obrade ličnih podataka s obzirom na relevantnu uslugu.

Potrebne lične podatke prosljeđujemo relevantnom neovisnom davaocu usluge u skladu s člankom 6. (1) (b) OUZP-a da bismo izvršili ugovor između vas i nas.

5.4 Porsche kontaktni centar

Da biste nas kontaktirali, možete koristiti razne komunikacijske kanale, posebno dežurnu servisnu liniju ako nas želite kontaktirati telefonom, ali i e-poštu ili čavrljanje uživo. Kada kontaktirate naš Kontaktni centar, obradit ćemo vaše lične podatke do tog trenutka jer je to neophodno za pružanje usluge Kontaktnog centra i obradu vašeg zahtjeva. Moguće xx xx xxxx od vas tražiti da date lične podatke potrebne za pripremu i organizaciju kontakta radi obrade vašeg specifičnog zahtjeva. Bez ovih podataka nećemo moći obraditi vaš upit ili pristupiti vašem zahtjevu. Svrha obrade specifično proizilazi iz vašeg upita i usluga koje ste rezervirali. Posebno uključuju sljedeće

• Obrada upita zainteresiranih strana, klijenata i prodavača vezano za proizvode i usluge kompanije Porsche Smart Mobility GmbH. Ovo uključuje npr. sljedeće

• Tehničke usluge podrške

• Pomoć prilikom kupovine usluga ili proizvoda

• Odgovori na općenita pitanja o Smart Mobilty

• Tehnička podrška za klijente i prodavače, posebno putem dežurne servisne linije za telefonski kontakt.

Podaci se obrađuju u skladu s Članom 6 (1) (b) OUZP-a u svrhe izvršavanja ugovora s vama i provođenja mjera prije ugovora.

Vaše lične podatke obrađujemo i da bismo ispunili zakonske obaveze kojima podliježemo. Obaveze mogu nastati iz npr. privrednog, poreznog, telekomunikacijskog, finansijskog, kriminalnog ili zakona o sprečavanju pranja novca. Svrhe obrade proizilaze iz odgovarajuće zakonske obaveze; obrada obično služi za ispunjavanje državnih obaveza vezano za nadgledanje i dužnost otkrivanja.

Podaci se obrađuju u skladu s Članom 6 (1) (c) i (e) OUZP-a. Ako podatke prikupljamo na osnovu pravne obaveze ili u javnom interesu, morate pružiti lične podatke koji se traže radi ispunjavanja zakonske obaveze. Bez toga nećemo moći obraditi vaš zahtjev ili ispuniti te obaveze.

Ako koristite usluge podrške u Porsche centru, vaš prodavač također može uzeti te podatke. Da bi se ova usluga omogućila, također prenosimo gorespomenute podatke relevantnom prodavaču. U ovom slučaju ćemo vaše lične podatke obraditi u skladu s Članom 6 (1) (f) OUZP-a na osnovu našeg legitimnog interesa u omogućavanju usluge klijentima na način koji ste odabrali za kontakt ili putem prodavača kojeg ste odabrali.

6. Zaštita legitimnih interesa

U mjeri u kojoj obrađujemo vaše lične podatke da bismo zaštitili svoje legitimne interese, to se provodi uz postupke obrade podataka i svrhe opisane u ovim Općim pravilima privatnosti, Specifičnim pravilima privatnosti ili, ako je primjenjivo, dodatnim specifičnim obavještenjima o privatnosti koja se odnose na relevantnu uslugu u okviru specifične usluge, posebno u odnosu sljedećih interesa:

1. daljnji razvoj proizvoda, usluga i ponuda za korisnike kao i ostale mjere za upravljanje poslovnim transakcijama i procesima;

2. poboljšanje kvalitete proizvoda, uklanjanje grešaka i poremećaja, uključujući analizu podataka o vozilu i povratne informacije kupca;

3. obrada podataka na centralnoj platformi za potencijalne kupce i korisničku podršku, kao i ključni sistemi za korisničku lojalnost i prodajne svrhe radi pružanja individualne podrške kupcima i potencijalnim kupcima;

4. rješavanje garancijskih i servisnih slučajeva, obrada upita i drugih zahtjeva koje podnose potencijalni kupci i kupci izvan ugovora;

5. analiza potražnje i segmentacije kupaca, npr. izračunavanje i procjena afiniteta, preferenci i potencijala korisnika;

6. upravljanje rizicima i koordinacija kampanja opoziva;

7. provjere kredita, razmjenom podataka s kreditnom službom (npr. SCHUFA);

8. osiguravanje poštivanja zakona, sprječavanje i zaštita od kršenja zakona (posebno krivičnih djela), dokazivanje i odbrana u vezi s pravnim zahtjevima;

9. osiguravanje dostupnosti, rada i sigurnosti tehničkih sistema i upravljanja tehničkim podacima.

U te svrhe, relevantna obrada podataka se obavlja na temelju članka 6. (1) (f) OUZP-a.

7. Pristanak

Ako nam date pristanak na određene postupke obrade podataka, taj pristanak je uvijek povezan s određenom svrhom; svrhe u svakom slučaju proizlaze iz sadržaja određene izjave o pristanku. U ovom slučaju se obrada podataka provodi na temelju članka 6.

(1) (a) OUZP-a. Ako ne pristanete, nismo u mogućnosti udovoljiti vašem zahtjevu koji je pokriven xxx pristankom. Dani pristanak možete povući u bilo kojem trenutku bez da se to utiče na zakonitost obrade xxxx xx izvršena na temelju pristanka prije povlačenja.

Na temelju bilo kakvog pristanka koji ste nam možda dali, kompanije navedene u izjavi o pristanku mogu koristiti podatke u posebne svrhe, npr. za pružanje individualne podrške kupcima i potencijalnim kupcima te vas mogu kontaktirati putem željenih komunikacijskih kanala.

Ako koristimo vaše podatke za pružanje individualne podrške kupcima i potencijalnim kupcima unutar ovog okvira, to se događa da bismo vam pružili uzbudljivo iskustvo robne marke i podrške kupcima Porschea i učinili našu komunikaciju i interakciju s vama ličnom i relevantnom. Podaci koji se posebno koriste za pružanje individualne podrške kupcima i potencijalnim kupcima, ovise o podacima koji su prikupljeni na temelju upita, naloga i savjeta (npr. pri kupovini Porsche proizvoda) i podacima (npr. vaši lični interesi) koje ste dali na odgovarajućim kontaktnim mjestima (npr. putem ove web lokacije ili u Porsche Zentrumu).

U xxx slučajevima poseban opseg i namjeravana svrha odobrenja koje dajete proizlaze iz formulacije izjave o pristanku na mjestu kontakta.

8. Primaoci ličnih podataka

Interni primaoci: U kompaniji PSM GmbH xxxxxxx xx ograničen na osobe koje moraju imati xxx xxxxxxx u navedene posebne svrhe.

Vanjski primaoci: Ne otkrivamo vaše lične podatke vanjskim primaocima izvan kompanije PSM GmbH, osim ako je to potrebno radi pružanja i provođenja odgovarajuće usluge, ako postoji drugo zakonsko ovlaštenje ili ako imamo vaš pristanak.

Vanjski primaoci mogu biti:

a) Izvršioci obrade:

Dr. Ing. x.x. X. Porsche AG ili njegove podružnice ili vanjski davaoci usluga s kojima ugovorimo pružanje usluga, npr. u područjima tehničke infrastrukture i usluge/održavanja za ponudu kompanije PSM GmbH ili pružanje sadržaja. Pažljivo biramo ove izvršioce obrade i podvrgavamo ih redovitim pregledima da bismo zaštitili xxxx privatnost. Davaocima usluga nije dopušteno korištenje ličnih podataka osim u svrhe koje smo naveli xxxxx xxxxx uputama.

b) Javna tijela:

Državne agencije i institucije, poput poreznih vlasti, državnog tužilaštva ili sudova, kojima prosljeđujemo (i/ili moramo proslijediti) lične podatke iz obaveznih pravnih razloga ili radi zaštite zakonitih interesa. U xxx slučajevima se prosljeđivanje obavlja na temelju tačaka (c) i/ili (f) članka 6. OUZP-a.

c) Privatna tijela

Porsche trgovci i servisne kompanije, partneri za saradnju, davaoci usluga ili osobe kojima se lični podaci prosljeđuju na temelju pristanka, radi izvršavanja ugovora s vama ili zaštite zakonitih interesa, poput Porsche centara i Porsche servisnih centara, finansirajućih banaka, davaoca dodatnih usluga ili daovaoca usluga prijevoza. U xxx slučajevima se prosljeđivanje obavlja na temelju tačaka (a), (b) i/ili (f) članka 6. (1) OUZP-a.

9. Obrada podataka u trećim zemljama

Ako se podaci prenose tijelima čija se sjedišta ili mjesta obrade podataka ne nalaze u zemlji članici Evropske unije, drugoj zemlji izvan Evropske unije xxxx xx potpisnica Sporazuma o Evropskom ekonomskom prostoru ili zemlji za xxxx xx odgovarajući nivo zaštite podataka utvrđen odlukom Evropske komisije, prije otkrivanja osigurat ćemo da je prijenos podataka obuhvaćen pravnim ovlaštenjem, da postoje garancije za odgovarajući nivo zaštite podataka u vezi s prijenosom podataka (npr. putem saglasnosti s ugovornim garancijama, službeno priznatih uredbi ili obavezujućih internih uredbi zaštite podataka na strani primaoca) ili da ste dali svoj pristanak za prijenos podataka.

Sve dok se podaci prenose na osnovu podstava 2 stava 1 članova 46, 47 ili 49 GDPR-a, od nas možete dobiti kopiju garancija za postojanje odgovarajućeg nivoa zaštite podataka u vezi s prijenosom podataka. U ovu svrhu koristite informacije navedene pod tačkom 1.

10. Prikupljanje podataka koje obavljaju xxxxx xxxxxx

Ne obrađujemo samo lične podatke koje direktno primimo od vas. Neke lične podatke dobivamo i od trećih strana u mjeri u kojoj imamo pravni osnov za to.

Detalje o prikupljanju podataka koje obavljaju xxxxx xxxxxx potražite u Specifičnim pravilima privatnosti i, ako je primjenjivo, dodatnim posebnim obavještenjima o privatnosti koje se odnose na relevantnu uslugu.

11. Automatsko odlučivanje i profiliranje

Ne koristimo automatizirano odlučivanje u skladu s člankom 22. OUZP-a za pripremu, uspostavljanje i/ili održavanje poslovnih odnosa. U mjeri u kojoj se vrši profiliranje, to se događa samo u svrhe spomenute u okviru Općih pravila privatnosti, Specifičnih pravila privatnosti i, ako je primjenjivo, dodatnih posebnih obavještenja o privatnosti koje se odnose na relevantnu uslugu i na temelju spomenutog pravnog osnova.

12. Period pohrane; brisanje

Osim kada su u opisu konkretnih usluga navedene informacije o periodu pohrane i/ili brisanju ličnih podataka, primjenjuju se sljedeći principi:

Vaše lične podatke pohranjujemo samo onoliko xxxx koliko je potrebno za ispunjavanje predviđenih svrha ili - u slučaju pristanka

- osim i dok ne povučete pristanak. U slučaju prigovora na obradu, xxxxxxx vaše lične podatke, osim ako je njihova daljnja obrada dopuštena u skladu s relevantnim zakonskim odredbama. Također brišemo vaše podatke ako moramo iz drugih zakonom propisanih razloga.

Primjenjujući ove opće principe, u pravilu brišemo vaše lične podatke bez odlaganja

- nakon što se pravni osnov prestane primjenjivati, pod uslovom da ne postoji drugi pravni osnov (npr. periodi pohrane propisani trgovačkim i poreznim zakonom). U potonjem slučaju brišemo lične podatke nakon što se prestane primjenjivati drugi pravni osnov.

- ako nam više nisu potrebni za pripremu i izvršavanje ugovora ili za ostvarivanje legitimnih interesa i ne postoji drugi pravni osnov (npr. npr. periodi pohrane propisani trgovačkim i poreznim zakonom). U potonjem slučaju brišemo lične podatke nakon što se prestane primjenjivati drugi pravni osnov.

- ako se svrha u koju smo ih prikupili prestane primjenjivati i ako nema drugog pravnog osnova (npr. npr. periodi pohrane propisani trgovačkim i poreznim zakonom). U potonjem slučaju brišemo lične podatke nakon što se prestane primjenjivati drugi pravni osnov.

13. Prava ispitanika

Kao ispitanika na kojeg utiče obrada podataka, na raspolaganju su vam brojna prava. Konkretno:

Pravo pristupa: Imate pravo dobiti informacije o ličnim podacima koji se tiču vas koje mi pohranjujemo.

Pravo ispravljanja i brisanja: Xxxxxx tražiti da ispravimo pogrešne podatke i - pod uslovom da su ispunjeni zakonom propisani preduslovi - obrišimo vaše podatke.

Ograničenje obrade: Xxxxxx zahtijevati - pod uslovom da su ispunjeni zakonom propisani preduslovi - da ograničimo obradu vaših podataka.

Prijenos podataka: Ako ste nam podatke dostavili na temelju ugovora ili pristanka, možete, ako su ispunjeni zakonom propisani preduslovi, zatražiti da dobijete podatke koje ste dali u strukturiranom, uobičajenom i mašinski čitljivom formatu ili da ih prenesemo drugom vodiocu obrade.

Prigovor na obradu podataka u slučaju „legitimnog interesa“ kao zakonski osnov: Imate pravo prigovoriti, iz razloga koji se odnose na vašu specifičnu situaciju, u bilo kojem trenutku protiv naše obrade podataka u mjeri u kojoj ta obrada ima „legitimni interes” kao zakonski osnov. Ako ostvarite pravo na prigovor, obustavit ćemo obradu vaših podataka osim ako u skladu sa zakonskim specifikacijama ne pokažemo uvjerljive zakonite razloge za daljnju obradu koji nadjačavaju vaša prava.

Povlačenje pristanka: U mjeri u kojoj ste xxx xxxx pristanak na obradu vaših podataka, možete ga povući u bilo kojem trenutku. To ne utiče na zakonitost obrade vaših podataka prije povlačenja pristanka.

Pravo podnošenja žalbe nadzornom tijelu: Žalbu možete uložiti i kod nadležnog nadzornog tijela ako smatrate da obrada vaših podataka krši važeći zakon. U tu svrhu možete kontaktirati nadzorno tijelo za zaštitu podataka koje je nadležno za vaše mjesto prebivališta ili xxxx zemlju ili nadzorno tijelo za zaštitu podataka koje je nadležno za nas.

Kontaktirajte nas: Xxxxxx nas također besplatno kontaktirati za sva pitanja u vezi s obradom vaših ličnih podataka, pravima na obradu vaših podataka i bilo kojem pristanku koji ste nam možda dali. Da biste ostvarili sva vaša navedena prava, kontaktirajte nas putem e-pošte na adresi xxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx@xxxxxxx.xxx, putem web- lokacije xxxx://xxx.xxxxxxx.xxx/xxxxxxxx/xx/xx/xxx-xxxxxxx- contact ili poštom na adresu naznačenu xxxxxx x Xxxxx 0. Pri tome se pobrinite da jasno možemo utvrditi vaš identitet.

14. Sigurnost podataka

Koristimo sve potrebne tehničke i organizacijske mjere u skladu s najnovijim spoznajama da bismo osigurali nivo sigurnosti primjeren riziku, u skladu s važećim zakonskim zahtjevima.

15. Ponude trećih strana

Xxxxx xxxxxx su osmislile i pružaju usluge drugih davalaca usluga povezanih s našim uslugama. Nemamo nikakav uticaj na dizajn, sadržaj i/ili funkcioniranje ovih usluga. Izričito se distanciramo od

svih sadržaja svih povezanih usluga. Imajte na umu da ove usluge, poput web lokacija trećih strana, mogu instalirati kolačiće na vaš uređaj ili prikupljati lične podatke. Na to nemamo uticaj. U vezi s xxx, zatražite podatke direktno od davalaca tih povezanih usluga.

16. Verzija

Primjenjuje se najnovija verzija ovih Pravila privatnosti. Posljednje ažuriranje: 01.06.2021

Posebna politika privatnosti Web lokacije Porsche Smart Mobility

Možete koristiti My Porsche, prodavnicu Porsche Connect Store, tržište na mreži i Porsche Drive Rental putem naše web lokacije (u daljem tekstu "web lokacija").

Možete rezervirati usluge My Porsche, Porsche Connect i Funkcije na zahtjev (FoD) i aktivirati odgovarajuće licence na portalu My Porsche i u prodavnici Porsche Connect Store. Možete unajmljivati vozila u usluzi Porsche Drive Rental. To zahtijeva da ste se prethodno registrirali za uslugu My Porsche i da imate Porsche ID korisnički račun. U zavisnosti od usluge, možete koristiti pomenute usluge i upravljati njima putem naše web lokacije, putem različitih Porsche aplikacija i putem bežične mrežne veze u vašem vozilu, ako je dostupna za vaše vozilo.

Pored toga, možete koristiti tržište na mreži da pristupite proširenom asortimanu proizvoda i usluga koje nude kompanije iz naše grupacije i davaoci usluga trećih strana. Klijenti koji imaju Porsche ID korisnički račun mogu koristiti odjeljke Tržišta Porsche tražilo i Porsche Store.

Neke funkcije na našim web lokacijama dostupne su i bez prethodne registracije. Za više detalja pogledajte tačku 2.3.

1. Posebne napomene o korištenju naše web lokacije

1.1 Korištenje naše web lokacije

U određenoj mjeri je moguće koristiti ovu web lokaciju bez registracije. Čak i ako koristite web lokaciju bez registracije, moguće je da će se lični podaci obrađivati.

U nastavku se nalazi pregled vrste, obima, svrhe i pravne osnove za automatiziranu obradu podataka koja se vrši pri korištenju naše web lokacije. Za informacije o obradi ličnih podataka pri korištenju pojedinačnih posebnih funkcija i usluga pogledajte tačku 2 u nastavku.

1.1.1 Automatsko prikupljanje podataka

Kada putem svog uređaja pristupite našoj web lokaciji, prikupljat ćemo i obraditi sljedeće podatke:

- datum i vrijeme pristupanja,

- trajanje posjete web lokaciji,

- vrstu uređaja,

- korišteni operativni sistem,

- funkcije koje koristite,

- Količina prenesenih podataka

- Vrsta događaja

- IP adresa

- URL posredničke lokacije,

- naziv domene

Ove podatke obrađujemo u skladu s članom 6. [1] (f) GDPR-a u svrhu pružanja usluge korištenja web lokacije, zaštite njenih tehničkih operacija te identifikacije i otklanjanja grešaka. Xxxxxx slijedimo interes koji se sastoji u tome da omogućimo korištenje naše web lokacije i osiguramo njenu dugoročnu tehničku funkcionalnost. Ovi podaci se automatski obrađuju kada posjetite našu web lokaciju. Ako ne osigurate ove podatke nećete moći koristiti našu web lokaciju. Ne koristimo ove podatke da izvodimo zaključke o vama i vašem identitetu.

1.1.2 Obrada podataka radi unapređenja naše ponude na mreži

Automatizovani podaci koje prikupljamo iz xxxxx 1.1.1 se dalje obrađuju s ciljem unapređenja funkcionisanja naših usluga, osiguranja njihove dostupnosti, optimizacije korisničkog iskustva, dodatne procjene vašeg korištenja web lokacije, sastavljanja izvještaja o aktivnostima web lokacije za nas, te pružanja drugih usluga vezanih za korištenje web lokacije.

Obrađivat ćemo vaše podatke u skladu s članom 6. [1] (f) GDPR- a na temelju naših legitimnih interesa za performanse i dostupnost naših proizvoda, kao i za analizu obrazaca korištenja xx xxxxxx posjetitelja naše web lokacije. Ne koristimo ove podatke da izvodimo zaključke o vama i vašem identitetu.

Pored toga, kao dio ovdje opisanog procesa, pohranjujemo kolačiće. Za više detalja pogledajte tačku 1.1.3.

1.1.3 Kolačići i slične tehnologije

U okviru konteksta našeg sadržaja na mreži koristimo kolačiće i slične tehnologije koje nam omogućavaju bilježenje i procjenu njegove upotrebe. Time se osigurava pravilan i siguran rad sadržaja na mreži i njegovih funkcionalnosti. Obrada podataka vrši se na osnovu stavova 1 (b) i (f) člana 6 GDPR-a, što je neophodno za implementaciju funkcija koje odaberete i zaštitu našeg legitimnog interesa u funkcionalnosti našeg sadržaja na mreži.

Pored toga, kolačiće i slične tehnologije možemo koristiti kako bismo analizirali sadržaj na mreži i posebno ga uskladili s xxxxx interesima te vam, ako je potrebno, ponudili sadržaj i oglase bazirane na xxxxx interesima. Odgovarajuće kolačiće ponekad postavljaju xxxxx xxxxxx koje mogu spojiti informacije dobivene uz druge podatke. To nam omogućava da se usmjerimo na korisnike sadržaja na mreži dok koriste drugi sadržaj s oglašavanjem prema interesima uz pomoć odabranih partnera (preusmjeravanje/ponovni marketing). Tako prikupljene podatke nećemo koristiti za otkrivanje vašeg identiteta i nikad xx xxxx povezati s ličnim podacima koje smo pohranili. Obrada podataka vrši se isključivo na osnovu vašeg dobrovoljnog pristanka u skladu sa stavom 1 (a) člana 6 GDPR-a. Ako želite, možete proširiti svoj pristanak na pojedinačne kolačiće ili na sve kolačiće u ovoj kategoriji. Svoj pristanak možete opozvati u svakom trenutku, s učinkom u budućnosti.

Detalji u vezi s funkcijama i kolačićima i sličnim korištenim tehnologijama kao i opcijama postavke i opoziva mogu se pronaći u odjeljku Postavke kolačića (xxxxx://xxxxxxx- xxxxx0.xxxxxxx.xxx/xx/xx/xxxxxxxxxxxx). Ako ne želite koristiti kolačiće, pomoću odgovarajućih postavki na vašem uređaju možete onemogućiti bilo kakvu pohranu. Pohranjene kolačiće je moguće obrisati u svakom trenutku putem postavki sistema vašeg uređaja. Imajte na umu da blokiranje određenih vrsta kolačića ili sličnih tehnologija može rezultirati smanjenim funkcijama našeg sadržaja na mreži.

1.2 Dozvole pristupa za uređaj

Kada koristite pojedinačne funkcije kao što je „Najbliža lokacija Porsche Drive Rental-a”, od vas će se možda tražiti da odobrite pristup svojoj lokaciji.

Stranica 7 od 11

Davanje dozvola je dobrovoljno. Međutim, ako želite koristiti relevantne funkcije morate dati odgovarajuće dozvole, inače nećete moći koristiti te funkcije.

Dozvole ostaju aktivne dok ih ne opozovete na svom uređaju i/ili Internet pregledniku deaktiviranjem odgovarajuće postavke.

2. Posebne usluge i funkcije

Pružanje ličnih podataka i registriranje za usluge ili funkcije kad koristite našu web lokaciju je dobrovoljno. Kada se registrirate ili koristite usluge i funkcije opisane ispod, lični podaci će se prikupljati, obrađivati i koristiti na način koji je opisan u nastavku teksta.

Potrebno je da se registrirate unaprijed i da kreirate Porsche ID korisnički račun kako biste koristili usluge i funkcije opisane u tački 2.2. Usluge i funkcije opisane u tački 2.3 mogu se koristiti bez prethodnog registriranja.

2.1 Postupak registracije i kreiranja Porsche ID korisničkog računa

Informacije o postupku registriranja i kreiranju vašeg Porsche ID korisničkog računa možete pronaći u tački 4.1 dokumenta Porsche infrastruktura digitalnih usluga / Opća politika privatnosti za Porsche ID.

2.2 Korištenje pojedinačnih funkcija uz registraciju/prijavu

U nastavku su opisane funkcije u okviru naše ponude na web lokaciji i odgovarajući lični podaci koji se obrađuju, svrhe i pravne osnove za obradu.

2.2.1 Rezerviranje i aktiviranje usluga, rukovanje informacijama o plaćanju, potvrđivanje identiteta

Za informacije o tome kako rezervirati usluge putem naše web lokacije i na xxxx xxxxx se upravlja informacijama o plaćanju pogledajte tačku 5.1 dokumenta Porsche infrastruktura digitalnih usluga / Opća politika privatnosti za Porsche ID.

Zakoni u nekim državama mogu zahtijevati provjeru identiteta na osnovu identifikacijskih dokumenta kako bi se rezervirale određene telekomunikacijske usluge. Xxxx xx u pitanju obrada podataka tokom izvršavanja takvih provjera identiteta, imamo zajedničku odgovornost s kompanijom

- IDnow GmbH, Auenstr. 100, 80469 Munich, Njemačka.

Politiku privatnosti našeg partnera s kojim sarađujemo, kompanije IDnow GmbH, možete vidjeti na sljedećoj vezi: xxxxx://xxxxx.xx/xxxxxxx/ .

Dostupna su dva načina za potvrđivanje identiteta. Jedan xxxxx xx da vas se preusmjeri na vanjsku stranicu ili aplikaciju davaoca usluge, IDnow, u okviru postupka rezerviranja usluge. U okviru ovog postupka, mi ćemo, na vaš zahtjev, prenijeti davaocu usluge informacije za provjeru (vaše ime, xxxx adresu i datum rođenja) i referentni broj, kojem ćemo u kasnijoj fazi pridružiti rezultate provjere. U sklopu provjere identiteta, davalac usluge će uporediti navedene podatke s xxxxx identifikacijskim dokumentom i pohranit će podatke, kao i optoelektroničku kopiju identifikacijskog dokumenta, fotografiju potvrđene osobe i audio zapis sesije. Nakon toga će nas davalac usluge obavijestiti o rezultatu provjere identiteta, koristeći referentni broj.

Druga mogućnost koja vam stoji na raspolaganju je da se provjera identiteta izvrši u relevantnom Porsche centru. To znači

da će osoblje Porsche centra provjeriti vaš identitet na temelju identifikacijskog dokumenta i poslati potvrđene informacije (vaše ime, adresu i datum rođenja) i referentni broj davaocu usluga putem Porsche sistema. Unosom ovog referentnog broja možete koristiti aplikaciju davaoca usluga da predate optoelektroničku kopiju vašeg identifikacijskog dokumenta davaocu usluga po svom izboru. Nakon toga će nas davalac usluge obavijestiti o rezultatu provjere identiteta, koristeći referentni broj.

Lični podaci koji proizilaze iz ove provjere identiteta će biti podijeljeni s trećim stranama samo onda kada smo zakonski obavezani da to učinimo. Samo u xxx slučajevima ćemo dobiti pristup kopiji identifikacijskog dokumenta od davaoca usluge radi ispunjavanja naših pravnih obaveza.

Pravna osnova za obradu vaših ličnih podataka u svrhu provjere identiteta sadržana je u članu 6. [1] (c) i/ili (f) GDPR-a, jer je provjera identiteta zakonska obaveza kojom smo obavezani, ili predstavlja naš legitimni interes da radimo u skladu s pravnim zahtjevima.

Kao zajednički odgovorna strana zajedno s kompanijom IDnow GmbH, u našem sporazumu, u skladu s članom 26. GDPR-a, utvrđeno je strukturiranje odgovarajućih funkcija i odnosa pri obradi ličnih podataka i ko xx xxxxx ispuniti koje obaveze o zaštiti podataka, posebno u pogledu osiguranja odgovarajućeg nivoa sigurnosti, provedbe vaših prava kao subjekta xxxx se podaci obrađuju, ispunjenja obaveza zaštite podataka, kao i praćenja mogućih incidenata pri zaštiti podataka, uključujući osiguravanje obaveza prijavljivanja ili obavještavanja (po potrebi). Možete koristiti kontakt detalje iz xxxxx 1 (Opće politike privatnosti) da zatražite dodatne informacije o ovom sporazumu. Na osnovu toga ćemo vam dostaviti ključne odredbe.

Možete kontaktirati bilo koju zajednički odgovornu stranu s pitanjima ili radi ostvarivanja svojih prava u svojstvu subjekta xxxx se podaci obrađuju. U duhu navedenog sporazuma, posavjetovat ćemo se s kompanijom IDnow GmbH u skladu s članom 26. GDPR-a kako bismo odgovorili na vaš upit i, ukoliko je potrebno, ispunili xxxx želju da ostvarite svoja prava u svojstvu subjekta xxxx se podaci obrađuju.

Razmjena ličnih podataka između zajednički odgovornih strana vrši se na osnovu člana 6. (1) (f) GDPR-a, drugim riječima, u našem legitimnom interesu za učinkovitu provedbu provjera identiteta u saradnji s kompanijom IDnow GmbH.

Po potrebi dostavljamo dodatne informacije o obradi ličnih podataka za naše usluge koje se mogu rezervirati u posebnim dodatnim odredbama o zaštiti podataka za odgovarajuće usluge.

2.2.2 Korištenje usluga My Porsche i Porsche Connect

Informacije o korištenju usluga My Porsche i Porsche Connect putem naše web lokacije možete pronaći u tački 5.2 dokumenta Porsche infrastruktura digitalnih usluga / Opća politika privatnosti za Porsche ID.

2.2.3 Pružanje usluge i informacije o garanciji

Za korištenje ove funkcije potrebno je da se prethodno registrirate i kreirate Porsche ID korisnički račun.

Da bismo vam pružili informacije o vašem vozilu, trenutnim garancijama i kampanjama opoziva u odjeljku „My Porsche” na našoj web lokaciji, obrađujemo podatke o opremi i glavne podatke vozila kao što su identifikacijski broj vozila prikazan na dokazu o vlasništvu, trenutne garancije, xxxxxx modela i slika modela.

U skladu s članom 6. [1] (b) GDPR-a, pravna osnova za obradu vaših ličnih podataka je izvršavanje ugovora između vas i nas.

2.2.4 Zahtjev za termin servisa

Za korištenje ove funkcije potrebno je da se prethodno registrirate i kreirate Porsche ID korisnički račun.

Da biste u odjeljku "My Porsche" naše web lokacije i aplikacije zatražili termine za servis kod trgovaca kompanije Porsche i servisnih kopanija, možemo na vaš zahtjev kompanijama po vašem izboru dostaviti podatke o klijentu i vozilu. Ako želite, dostavit ćemo vaše ime, adresu, broj telefona, adresu e-pošte, Porsche ID, identifikacijski broj vozila prikazan na vlasničkom listu, model vozila, datume servisa koje ste izabrali, opseg servisa koji želite, dopunsku poruku na vaš zahtjev kao i željene kanale za kontakt za trgovca ili servisnu kompaniju koje izaberete za odgovarajući zahtjev (trgovca ili servisnu kompaniju koji će obavljati radove).

Vaši lični podaci se prenose u okviru odgovarajućeg zahtjeva za servis, na pravnoj osnovi na temelju člana 6(1) (b) OUZP-a, kao predugovorna mjera na vaš zahtjev. Vaš odgovarajući zahtjev za servis pohranjujemo da bismo ispunili ugovor s vama i u skladu s članom 6(1) (b) OUZP-a.

2.5.5 My Porsche vijesti

Pomoću funkcije My Porsche vijesti možete pozvati vijesti i u aplikaciji i putem portala My Porsche. Ovo obično podrazumijeva informacije relevantne za ugovor u vezi s kupovinom i/ili upotrebom vašeg računa, vašeg vozila ili digitalnog sadržaja kompanije Porsche.

Posebno za to obrađujemo sljedeće lične podatke: glavne podatke, detalje za kontakt te podatke o ugovoru, trgovcu i vozilu.

Xxxx navedene lične podatke obrađujemo na pravnoj osnovi na temelju člana 6(1) (b) OUZP-a, a u svrhu ispunjenja vašeg ugovora, da bismo vam pružali aplikaciju i njene funkcije, i također na pravnoj osnovi na temelju člana 6(1) (f) OUZP-a da bismo ispunili naš opravdan interes za pružanje usluga u vezi s xxxxx ugovorom.

2.2.6 Prikupljanje podataka o vozilu, usluzi i proizvodu u svrhu razvoja i unapređenja proizvoda i usluga

U vezi s korištenjem usluga, u slučaju poruka o grešci ili kao dio definiranih mjera procjene podataka, Porsche Smart Mobility GmbH može prenositi podatke o nekim vozilima, uslugama i proizvodima iz vozila, iz usluga ili iz drugih Porsche proizvoda na uslugu Porsche AG kako bi tamo bili dostupni za ocjenu xxxx spomenutih ciljeva.

Možete dati svoju saglasnost s ovim na web lokaciji My Porsche.

Podaci o vozilu, usluzi i proizvodu sadrže identifikacijske podatke, osnovne podatke, podatke o upotrebi, analizi, okolišu, prometu, lokaciji i kretanju.

Neki podaci se ne mogu izbrisati retroaktivno, jer se pohranjuju bez konkretne identifikacije vozila. U xxx slučaju podaci se brišu najkasnije nakon 5 xxxxxx.

2.2.7 Rezerviranje i kupovina usluga i proizvoda putem odjeljka „Tržište na mreži”

Kao dio Tržišta na mreži, nudimo vam centralnu platformu gdje možete rezervirati ili kupiti usluge i proizvode od nas, firmi iz

naše grupacije i od davaoca usluga trećih strana (u daljem tekstu

„učesnici”). Za datog učesnika je osigurano područje na našoj platformi za prezentaciju i ponudu njegovih proizvoda i usluga (u daljem tekstu „prodavnica”).

Klijenti koji imaju Porsche ID korisnički račun mogu koristiti odjeljke „Tržišta” „Porsche tražilo” i „Porsche Store”. Klijenti s postojećim Porsche ID ugovorom takođe mogu koristiti odjeljak

„Tržišta” „Porsche Store” putem funkcije „Guest access”.

Obradu u okviru Tržišta na mreži vršimo dijelom mi, dijelom dati učesnik, a dijelom se vrši pod zajedničkom odgovornošću.

2.2.7.1 Obrada pod odgovornošću kompanije PSM GmbH

Za informacije o obradi podataka koja se vrši isključivo pod našom odgovornošću pogledajte druga poglavlja ove i drugih politika privatnosti za Smart Mobility GmbH.

2.2.7.2 Obrada pod odgovornošću učesnika Tržišta

Za informacije o obradi podataka koja se vrši pod isključivom odgovornošću učesnika Tržišta pogledajte politike privatnosti relevantnih kompanija. Odgovorni učesnik je naveden na odgovarajućoj stranici proizvoda ili usluge.

2.2.7.3 Obrada pod zajedničkom odgovornošću kompanije PSM GmbH i učesnika Tržišta

U pogledu sljedeće obrade, zajednički smo odgovorni sa učesnicima Tržišta na mreži koji su postavili ponudu na odgovarajuću stranicu i kod kojih možete rezervirati usluge ili proizvode:

- Obrada podataka kao dio posjete i postupka rezerviranja, prijave ili rezervacije u odgovarajućoj prodavnici učesnika Tržišta, ali ne i dalja obrada usluge van platforme;

- Automatsko prikupljanje podataka, prikupljanje podataka radi unapređenja naših usluga na mreži, pohrane kolačića i analize podataka (vidjeti tačku 1.1 ove Politike privatnosti);

- Obrada podataka u okviru funkcija oglašavanja, komunikacije i marketinga na platformi, posebno za module unakrsne prodaje;

- Obrada plaćanja za plaćene rezerviranja, prijave i rezervacije u okviru odgovarajuće prodavnice na Tržištu na mreži;

- Korisnička podrška u vezi s odgovarajućom prodavnicom na Tržištu.

Kada su u pitanju ove aktivnosti obrade podataka, određujemo svrhe i načine obrade ličnih podataka u saradnji s odgovarajućim učesnicima na Tržištu.

U dogovoru o zajedničkoj odgovornosti s odgovarajućim učesnicima na Tržištu definirali smo, prema članu 26. GDPR-a, odgovarajuće zadatke i odgovornosti u obradi ličnih podataka i odgovorne strane za ispunjavanje obaveza vezanih za zaštitu podataka. Posebno smo definirali kako se mogu osigurati odgovarajući nivo sigurnosti i vaša prava kao predmet podataka, kako se zajednički možemo pridržavati obaveza informacija o zaštiti podataka i kako možemo nadgledati potencijalne incidente u zaštiti podataka. To također uključuje osiguravanje da možemo ispuniti svoje obaveze u izvještavanju i obavještavanju.

PSM GmbH vam je na usluzi kao centralna xxxxx kontakta u vezi s prethodno spomenutom obradom u zajedničkoj odgovornosti. Možete se pozvati na svoja prava u vezi s operacijama obrade

pod zajedničkom odgovornošću, ali i u pogledu zajednički odgovornog učesnika u tržištu. Ukoliko nas kontaktirate u vezi s ovim operacijama obrade, konzultirat ćemo relevantnog učesnika u tržištu u skladu s prethodno spomenutim sporazumom prema članu 26. GDPR-a da bismo odgovorili na vaš upit i garantirali vaša prava kao subjekta xxxx se podaci obrađuju. U xxx slučaju vrijede tvrdnje u odjeljku 13 Opće politike privatnosti.

Ta zajednička odgovornost ne utiče posebno na postupke obrade iz Opće politike privatnosti, uključujući one za administriranje glavnih podataka (Porsche ID) i obradu podataka na platformi koje se vrše pod isključivom odgovornošću Porsche Smart Mobility GmbH. Konkretno, usluga obrade ugovora o kupovini, rezerviranju, prijavi ili rezervaciji, kao i izdavanje računa ne vrši se u okviru zajedničke odgovornosti, već pod isključivom odgovornošću odgovarajućeg pružatelja usluga na Tržištu.

2.2.8 Sastavljanje i obrada ugovora o iznajmljivanju u okviru usluge Porsche Drive Rental

Ova funkcija vam omogućava da iznajmite Porsche vozilo.

Za zaključivanje ugovora o iznajmljivanju morate nam dostaviti lične podatke navedene u nastavku. Ove lične podatke možete u bilo kojem trenutku sačuvati na svom Porsche ID korisničkom računu i na xxx xxxxx ubrzati obradu na lokaciji iznajmljivanja. Ako unaprijed ne sačuvate ove lične podatke na svom Porsche ID korisničkom računu, morat ćete ih dostaviti popunjavanjem tih ličnih podataka na vašem Porsche ID korisničkom računu na lokaciji iznajmljivanja (moguće xx xxxxxx našeg davaoca usluga). U tu svrhu će vam po potrebi biti dostupan odgovarajući uređaj na toj lokaciji.

Za sastavljanje validnog ugovora o iznajmljivanju na vašem Porsche ID korisničkom računu moraju se sačuvati sljedeći obavezni podaci:

- pol,

- ime i prezime,

- datum rođenja,

- državljanstvo,

- adresa e-pošte,

- broj mobilnog telefona,

- adresa (ulica i kućni broj, poštanski broj i grad/mjesto),

- detalji o plaćanju za naplatu xxxxx (ime, broj kreditne kartice, organ izdavanja, sigurnosni kod kartice),

- detalji o vozačkoj dozvoli (broj dozvole, datum i mjesto izdavanja),

- detalji o ličnoj karti (broj lične karte, datum i mjesto izdavanja),

- detalji o plaćanju za sigurnosni depozit (ime, broj kreditne kartice, organ izdavanja, sigurnosni kod kartice).

Ako se ovi podaci ne dostave nije moguće sastaviti ugovor o iznajmljivanju i vozilo xx xxxx moći preuzeti.

Obrađujemo prikupljene podatke na osnovu člana 6. [1] (b) i (f) GDPR-a kako bismo vam pružili usluge koje su vam potrebne u vezi s xxx i proveli povezani ugovorni odnos s vama.

S ciljem potvrđivanja vašeg identiteta prije potpisivanja ugovora o iznajmljivanju, davalac usluga će od vas tražiti da se identificirate. Pored toga, radi osiguranja ispravnosti podataka (na primjer, bez grešaka u kucanju, zamjene imena i prezimena, pravopisnih grešaka u pisanju stranih imena ulica i kućnih brojeva itd.) i iz sigurnosnih razloga (na primjer, otkrivanje broja kartice nadležnim tijelima u slučaju krivičnog djela ili prekršaj u vezi sa

iznajmljenim vozilom) obično se izrađuje kopija vaše lične karte. Nepotrebne informacije (poput vaše visine ili boje očiju) bit će zatamnjene. Vaši lični podaci će se obrađivati na osnovu člana 6.

[1] (b), (c) i (f) GDPR-a kako bismo vam pružili usluge koje su vam potrebne u vezi s xxx, proveli povezani ugovorni odnos s vama i ispunili svoje zakonske obaveze. Naš legitimni interes proizilazi iz svrhe utvrđene na početku ovog pasusa.

Ne obrađujemo nikakve podatke o plaćanju na ovoj web lokaciji. Za naplatu se koristi vaš Porsche ID korisnički račun. Za više informacija o tome kako upravljamo informacijama o plaćanju pogledajte tačku 5.1 dokumenta Porsche infrastruktura digitalnih usluga / Opća politika privatnosti za Porsche ID.

Vozila imaju uređaj za praćenje lokacije i stanja vozila (posebno trenutne kilometraže). Ograničeni broj zaposlenika može pomoću ovog uređaja pratiti ugovorom dogovorenu kilometražu i trenutnu lokaciju vozila.

Vaši lični podaci će se obrađivati na osnovu člana 6. [1]

(c) i (f) GDPR-a kako bismo zaštitili svoj legitimni interes, pružili vam potrebnu podršku i spriječili upotrebe koje nisu u skladu s ugovorom i potencijalnu štetu kao i ispunili službene i/ili pravne zahtjeve ili obaveze, kao što su službeni zahtjevi, zahtjevi državnog tužioca ili sudski zahtjevi.

Za izvršavanje ugovora u Njemačkoj, PSM GmbH koristi odabrane davaoce usluga koji se mogu odabrati postupkom rezervacije na web stranici Porsche Drive Rental (na sljedećoj vezi: xxxxx://xxxxxxxx.xxxxx.xxxxxxx.xxx/xxxxxx/xx/xxxxxxx- drive-rental-stations). Davaoci usluga su Porsche centri unutar njemačke organizacije prodavača ili kompanije povezane s kompanijom Porsche AG koja se nalazi u Njemačkoj. Te davaoce usluga pažljivo bira PSM GmbH.

Na kraju perioda iznajmljivanja dobit ćete sažetak podataka o putovanju e-poštom. Možete po želji memorirati taj sažetak ili ga poslati trećim stranama, nezavisno od naših ponuda, putem vlastitog priključnog uređaja ili usluga trećih strana koje koristite.

Nakon isteka period iznajmljivanja možete nas obavijestiti putem e-pošte u online dijalogu (npr. dodjelom zvjezdica) o svom iskustvu s iznajmljivanjem. Obrađujemo podatke koje sakupljamo na osnovu Člana 6 (1) (b) uredbe GDPR kako bismo dodatno poboljšali usluge na temelju vaših povratnih informacija.

2.3 Upotreba pojedinačnih funkcija bez registriranja/prijave

U nastavku su opisane funkcije u okviru naše web lokacije i odgovarajući lični podaci koji se obrađuju, svrhe i pravne osnove za obradu.

2.3.1 Ostvarivanje kontakta putem Razgovora uživo

Za korištenje ove funkcije nije potrebno da se prethodno registrirate i kreirate Porsche ID korisnički račun.

U određenim odjeljcima naše web lokacije nudimo mogućnost uspostavljanja kontakta i pružanja savjeta putem opcije Razgovor uživo. Razgovor uživo vam omogućava da komunicirate s jednim od naših savjetnika putem tekstualnih poruka. Kada pristupite i koristite Razgovor uživo vaš preglednik na početku upotrebe iz tehničkih razloga automatski šalje sljedeće podatke. Pohranjujemo te podatke odvojeno od drugih podataka koje nam prenosite:

- Datum i vrijeme pristupanja

- Trajanje posjete web lokaciji

- Vrsta web preglednika uključujući verziju

- Korišteni operativni sistem

- Količina prenesenih podataka

- Vrsta događaja

- IP adresa.

Pravna osnova za ovu obradu podataka je član 6. [1] (f) GDPR-a, pri čemu je naš legitimni interes usmjeren na garantiranje i održavanje funkcioniranja i sigurnosti naših usluga i uklanjanje grešaka. U xxx okviru obrađujemo i podatke u svrhu analize, bez pridruživanja određenoj osobi.

Ako nam dostavite dodatne lične podatke putem usluge Razgovor uživo, radite to na dobrovoljnoj osnovi. Ako su za pojašnjenje vašeg zahtjeva potrebni lični podaci, naglasit ćemo vam to i zatražiti vaše lične podatke. Tekstovi koje unesete u masku za unos tokom sesije Razgovor uživo pohranjuju xx x xxxx ime na serveru vanjskog davaoca usluga. Pravna osnova za ovu obradu podataka je član 6. [1] (b) GDPR-a.

2.3.2 Pristup rezerviranju i kupovini usluga i proizvoda putem odjeljka „Tržište na mreži” za gosta

I pored korištenja Tržišta na mreži uz Porsche ID, klijenti mogu koristiti odjeljak Tržište u prodavnici Porsche Store bez prethodne registracije i kreiranja Porsche ID korisničkog računa pomoću funkcije „Pristup za gosta“. Za više informacija o obradi podataka u ovom kontekstu pogledajte tačku 2.2.6.

2.3.3 Najbliža Porsche Drive Rental lokacija

Za korištenje ove funkcije nije potrebno da se prethodno registrirate i kreirate Porsche ID korisnički račun.

Ova funkcija vam omogućava da pronađete najbližu Porsche Drive Rental lokaciju pomoću svog uređaja.

Kada se koristi ova funkcija, obrađivat će se sljedeće kategorije ličnih podataka:

- Lokacijski podaci vašeg uređaja.

To se pruža dobrovoljno. Međutim, ako ne navedete ove podatke, možda se nećemo moći u potpunosti uskladiti s xxxxx željama u vezi s korištenjem ove funkcije.

Obrađujemo ove podatke na osnovu člana 6. (1) (b) GDPR-a kako bismo vam pružili usluge koje su vam potrebne u vezi s xxx i proveli povezani ugovorni odnos s vama.

2.3.4 Neobavezujući upit putem usluge Porsche Drive Rental

Za korištenje ove funkcije nije potrebno da se prethodno registrirate i kreirate Porsche ID korisnički račun.

Ova funkcija vam omogućava da nas kontaktirate pomoću kontakt obrasca kako biste poslali neobavezujući upit o rezervaciji. Podaci prikupljeni ovdje koristit će se isključivo za obradu vašeg upita i za slanje neobavezujuće ponude.

(a) Obavezni podaci za postavljanje upita o rezervaciji

Kada se koristi ova funkcija, sljedeće kategorije ličnih podataka označenih pomoću "*" će se obrađivati kao obavezni podaci:

- titula,

- ime i prezime,

- datum rođenja,

- adresa e-pošte,

- broj mobilnog telefona,

- adresa (ulica i kućni broj, poštanski broj i grad/mjesto),

- Traženi broj vozila u odgovarajućoj klasi,

- Obavezna lokacija iznajmljivanja,

- Obavezni period iznajmljivanja,

Upiti o rezervaciji nisu mogući bez dostavljanja ovih obaveznih podataka.

(b) Opcionalni podaci za postavljanje upita o rezervaciji

Kao dio vašeg upita o rezervaciji imate mogućnost na dobrovoljnoj osnovi dati dodatne informacije, npr. sljedeće kategorije ličnih podataka:

- Xxxx titulu,

- Ime kompanije

- Vaš broj telefona,

- Vaš komentar.

Imajte na umu da ove informacije nisu potrebne za upite o registriranju, i to da li nam želite potpuno otkriti ove podatke u potpunosti ovisi o vama.

Obrađujemo ove podatke na osnovu člana 6. [1] (b) i (f) GDPR-a kako bismo vam pružili usluge koje su vam potrebne u vezi s xxx, proveli povezani ugovorni odnos s vama, te kako bismo mogli sastaviti ponudu ili napraviti rezervaciju za vas.

3. Prava subjekata xxxx se podaci obrađuju

Kao xxxxx xxxx se podaci obrađuju, imate na raspolaganju brojna prava. Konkretno, možete dati prigovor na upotrebu kolačića ili sličnih tehnologija u bilo kojem trenutku. Detalje možete pronaći u našoj Politici upotrebe kolačića na web lokacijama za Porsche Smart Mobility koja se može pronaći na adresi xxxxx://xxxxxxx- xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

Za više informacija o xxxxx dodatnim pravima, pogledajte informacije iz stava 13. naše Opće politike privatnosti u vezi sa uslugama My Porsche i Porsche Connect / Porsche infrastruktura digitalnih usluga, koju možete pogledati na adresi xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

4. Izmjene ove Politike privatnosti i verzija

Zadržavamo pravo izmjene ove Posebne politike privatnosti. Trenutna verzija Politike privatnosti uvijek se može pronaći na adresi xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

Datum: 01.01.2021

Porsche Smart Mobility GmbH General Privacy Policy

Porsche Digital Service Infrastructure / Porsche ID

We, Porsche Smart Mobility GmbH (hereinafter referred to as "we" or "PSM GmbH"), are pleased about your use of the Porsche Digital Service Infrastructure and other of our digital offers (hereinafter individually or jointly also referred to as "services" and jointly "Porsche Digital Service Infrastructure") and about your interest in our company and our products. Your privacy is important to us. We take protecting your personal data and handling this data confidentially very seriously. Processing of your personal data takes place exclusively within the scope of the statutory provisions of data protection and privacy law, particularly the EU General Data Protection Regulation (hereinafter “GDPR”). This Privacy Policy provides you with information on the processing of your personal data and your rights as a data subject within the scope of your use of our Services. For information on the individual Services, please see the Specific Privacy Policy and, where applicable, the further specific privacy notices pertaining to the relevant Service.

Where we link to this Privacy Policy from external social media sites, the terms and conditions that follow apply only to the extent that the data processing operations within the scope of such social media sites do in fact lie within our sphere of responsibility and no information that is more specific – and thus takes precedence – regarding data protection and privacy is provided within the scope of such social media sites.

1. Controller and data protection officer; contact

Unless expressly stated otherwise in this General Privacy Policy, a Specific Privacy Policy based on it or, where applicable, the further specific privacy notices pertaining to the specific Service, the controller responsible for data processing within the meaning of the laws on data protection and privacy is:

Porsche Smart Mobility GmbH Xxxxxxxxxxxx 0

70435 Stuttgart Germany

Email: xxxxxxxxxxxxx@xx.xxxxxxx.xxx

Should you have questions or suggestions regarding data protection or privacy, please feel free to contact us.

You can reach our data protection officer as follows: Porsche Smart Mobility GmbH

Data Protection Officer

Xxxxxxxxxxxx 0

70435 Stuttgart Germany

Contact: xxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx@xxxxxxx.xxx

2. Subject-matter of data protection

The subject-matter of data protection is the protection of personal data. This means all information concerning an identified or identifiable natural person (known as the “data subject”). This includes information such as name, postal address, email address or phone number, as well as information that necessarily arises during the use of our Porsche Digital Service Infrastructure.

3. Nature, scope, purposes and legal bases of data processing in the case of the Porsche Digital Service Infrastructure

This General Privacy Policy provides you with an overview of the nature, scope, purposes and legal bases of the data processing within the scope of the registration, creation and use of your Porsche ID user account as well as the booking and use of our Services on the basis of your Porsche ID user account. You will also find in the text that follows information on data protection and privacy, such as on the recipients of personal data, data processing in third countries and your rights as a data subject, which applies in general within the scope of the use of the Porsche Digital Service Infrastructure. For more detailed information on the processing of personal data in relation to the use of individual Services, the relevant legal bases and specific rights of data subjects with regard to the relevant Service, please also see the relevant Specific Privacy Policy and, where applicable, the further specific privacy notices pertaining to the relevant Service.

4. Porsche ID user account

To use the Porsche Digital Service Infrastructure and the Services offered within it in full, it is necessary to register and create a Porsche ID user account in My Porsche. After completing the registration process and creating your Porsche ID user account you will also receive your Porsche ID (username for the Porsche ID user account). During registration and when creating and using your Porsche ID user account personal data is processed and may be transferred to third parties as depicted hereinafter in order to fulfil our contractual obligations in this context. Except where indicated otherwise, we carry out all processing operations described in this section in order to perform the contract existing between you and us on the basis of Article 6(1)(b) GDPR.

4.1 The registration process and creating your Porsche ID user account

You can choose one of two ways to register and create your Porsche ID user account:

4.1.1 Invitation by an authorised dealer

If you wish, your authorised dealer will enter the personal data you have provided for you via the dealer’s access to our systems. You

will then receive a link by email, for example, that you will have to use to confirm your registration and the creation of your Porsche ID user account. Please note that the authorised dealers are independent companies and we have no influence over them. A second factor will be used for additional verification, for example a code sent via text message that you then enter as part of the process of registering and creating your Porsche ID user account.

4.1.2 Self-registration

In the event that the registration and creation of your Porsche ID user account was not carried out via an authorised dealer, you can register and create your Porsche ID user account yourself and enter your personal data independently. In selected countries you can also add a vehicle and use other digital services that require vehicle ownership. You must also upload a copy of an identification document and proof of ownership and, in case you are not the owner of the vehicle, a power of attorney from the vehicle owner after entering your vehicle identification number. These documents are forwarded to Porsche Connect Support or, in countries whose official language is not supported by Porsche Connect Support, directly to the dealer selected by you and checked locally, using our verification criteria. As proof of successful verification, we also save the names, birth dates, birthplaces and addresses shown in the relevant identification documents along with the validity dates of the documents, as well as the vehicle identification numbers, owner names and addresses shown in the proof of ownership. After verification is complete, the copies of the documents will be deleted. If you add a vehicle and a specific vehicle is therefore assigned to you in your Porsche ID user account, a so-called vehicle relationship (hereinafter referred to as "vehicle relationship") exists. After successful verification, you will receive, for example, an e-mail with a link, which you must use to confirm your registration and creation of your Porsche ID user account. A second feature allows you to additionally verify your identity, for example via an SMS code, which you then enter during the process of registering and creating your Porsche ID user account.

Self-registration requires that you upload pictures from your device. This means you will be asked for authorisation to access your device’s camera or photo library. Granting authorisation is voluntary. However, if you wish to use the self-registration feature, granting the relevant authorisation is required, as you will be unable to use self-registration otherwise. The authorisation remains active until you reset it in your device and/or internet browser by deactivating the relevant setting.

(a) Required information when registering and creating your Porsche ID user account

When registering and creating your Porsche ID user account you are required (in the case of self-registration) to enter your email address, a password, your name and any suffixes, contact and address information, mobile phone number, email address and, where applicable, the language in which you wish to communicate with us, or (in the case of registration and creation of your Porsche ID user account via an authorised dealer) to confirm this personal data during the process of registering and creating your Porsche ID user account. This personal data is required in order to set up and manage your Porsche ID user account for you so that you can use the full range of our Services offered within the scope of the Porsche Digital Service Infrastructure. In selected countries, you can also use our offerings as a prospective customer. In this case all you are required to provide is your name and email address and a password. We also need this and, where applicable, further personal data not least in order to be able to respond to requests, questions and criticism. In addition we store the time of your most recent log-in. During registration and creation of your Porsche ID user account we perform a plausibility check of your name and address information.

(b) Voluntary information when registering and creating your Porsche ID user account

When registering and creating your Porsche ID user account you also have the option to voluntarily enter further information, such as additional name information (academic titles, etc.), company contact information, date of birth, other phone numbers, credit card information (which is stored exclusively with the payment service provider) and your vehicle registration number and a personal vehicle name. In addition you can provide information on your interests and preferences and your desired contact channels. Please note that this information is not required in order to register and create your Porsche ID user account, and it is entirely up to you whether you wish to communicate this personal data to us.

4.2 Porsche Digital Service Infrastructure: Data processing after registration and creation of your Porsche ID user account

If you have registered and created your Porsche ID user account we will share fundamental information regarding your Porsche ID user account and your vehicles with Porsche dealers that provide service in order to be able to provide you with service via our dealer organisation as well, as needed. This is done in order to perform the contract with you on the basis of Article 6(1)(b) GDPR. To this end, we will transfer not only your vehicle identification number, but also your username (Porsche ID), the technical and/or sales-related availability of Services and product offerings for your Porsche ID user account or vehicle and relevant events within the scope of the creation, modification or deletion of your Porsche ID user account, links to vehicles, the selection of dealers or the activation or deactivation of Services.

If you have selected an authorised dealer and granted your consent, the personal data stored in your Porsche ID user account, particularly contact information, customer service, contract and Service information and information on your interests, vehicles and Services used, will also be shared with the authorised dealer and synchronised with any personal data concerning you that may be stored by the authorised dealer. If you no longer wish this sharing of data to take place in the future, you can adjust the user settings for your Porsche ID user account accordingly. The aforementioned personal data will no longer be shared with the authorised dealer from then on. The legal basis for the processing of your personal data in this context is your consent pursuant to Article 6(1)(a) GDPR.

4.3 Deleting your Porsche ID user account

If you delete your Porsche ID user account, the personal data stored in your Porsche ID user account will also be erased upon termination of the contractual relationship, but not before the end of the term of your existing Service licences. To the extent that personal data must be stored for legal reasons, this data will be blocked (this is known as “restriction of processing”). The personal data is then no longer available for further use, particularly for the use of Services. The Services may no longer function in full or at all as a result. You will then no longer be able to use the Porsche Digital Service Infrastructure in full either. If further controllers within the Porsche group of companies and its sales organisation process personal data on their own responsibility, the processing of this personal data will not be affected by this. To the extent that personal data has been shared with a dealer of your choice based on your consent pursuant to Article 6(1)(a) GDPR, we will notify the dealer of the deletion of your Porsche ID user account.

5. Central Services

5.1 Booking and activation of Services; handling of payment information

You can book individual or multiple My Porsche Services and Porsche Connect Services and activate Service licences. When selecting the relevant Servwice or Service package you can also view the relevant information included in the offer details on the processing of personal data within the scope of the Services in question. To perform and fulfil a booking and the contractual relationship associated with it we process not only the relevant booking information, but also your personal data that has been collected during the process of registering and creating your Porsche ID user account. You can change your billing address before the booking process is concluded. In this case we will use this address information that you provide for purposes of billing and settling the account.

We use a payment service provider to process payments for our paid services and products within the framework of My Porsche, Porsche Connect, Online Marketplace and Porsche Drive Rental. For this purpose, we and the payment service provider used will process your credit card information and the respective payment information. The payment service provider's systems are used to manage your credit card information and to process payments. When you enter your credit card information, this is done directly via an input field of the payment service provider, which encrypts, stores and uses this information independently for your payments. The encrypted information is then transferred from Porsche/from us to the payment service provider where it is stored and used for your payment. The applicable legal basis for this processing of your personal data in order to process payment is the fulfilment of the contract pursuant to article 6 paragraph 1 b) of the GDPR.

The payment service provider commissioned will process your customer and contact information (for example name, address, email address, Porsche Connect customer number, and if applicable, company and affiliates) and the vehicle identification number shown in the proof of ownership exclusively for the purpose of debtor management (including compliance checks, where legally required) and to carry out credit checks. The legal basis for processing the named personal data for the aforementioned purposes, in accordance with article 6 paragraph 1 c) of the GDPR, is the fulfilment of a legal obligation incumbent on us and, in accordance with article 6 paragraph 1 f) of the GDPR, our legitimate interest in appropriate accounts receivable management and credit controls, provided we are not subject to any legal obligation.

When purchasing through online shops, our payment service provider determines the fraud risk. The transaction data is checked and examined for abnormalities (e.g. frequency of password changes). The legal basis for the processing of the mentioned personal data for the aforementioned purposes is, in accordance with GDPR Article 6 [1] (b), the fulfilment of a contract, or, pursuant to GDPR Article 6 [1] (f), our legitimate interest in preventing fraud.

After the booking is complete, you can activate the Services. This will store your use authorisation in the system and cause the list of available Services to be updated accordingly.

In order to use certain services (e.g. E-Charging station offers), a personalised card (referred to as a Porsche ID Card or Porsche Charging Card) containing RFID chips is sent by post in many countries when a product is purchased. An identification number is stored on the card, which can be used to assign it to your Porsche ID user account. No personal data beyond the identification number, in particular your name or address, is stored digitally on the card itself. If the card is lost, you can block it within your Porsche ID user account.

Once delivered, the Porsche ID Card can be used directly in dealings with supported infrastructure (such as public charging stations).

Unless otherwise indicated, we carry out the processing operations described in this section in order to perform our contract with you on the basis of Article 6(1)(b) GDPR.

5.2 Use of the My Porsche Services and Porsche Connect Services

You can use the My Porsche Services and Porsche Connect Services that have been booked, depending on the Service, in your vehicle (to the extent available for your vehicle) via mobile radio connection or via further devices in My Porsche or your Porsche Connect app and, where applicable, also from multiple or all access points. To this end, your vehicle or the relevant device will connect to the Porsche Digital Service Infrastructure.

When you use the Services booked via My Porsche or the Porsche Connect Store in your vehicle or on other devices, we process personal data concerning you for the purposes of enabling the use of the Services, for support purposes and for further, specifically defined purposes. Unless otherwise indicated, we process your personal data only within the scope necessary to enable the use of the relevant My Porsche Service or Porsche Connect Service.

When you use the individual My Porsche Services or Porsche Connect Services the following categories of personal data may be processed, for example, depending on how the specific Service works:

a) identification information, such as the vehicle identification number, your Porsche ID and the device and system IDs for your devices and mobile radio modules, which is needed to identify you personally, your device or your vehicle in order to establish connections, use Services or access content;

b) authorisation information, including that the vehicle or the relevant device has been activated for the relevant Porsche Connect Service, which can be linked to your personal data that you entered during the process of registering and creating your Porsche ID user account;

c) login information that is needed if you wish to use services from other providers that require a login in your vehicle or on other devices;

d) communication information that is required in order to establish a connection between your vehicle and/or other devices and our servers or the servers of third- party providers of content for Porsche Connect Services;

e) location and movement information, such as GPS or speed data, that is needed in order to use location- based content;

f) language information that enables voice control and voice entries in certain Porsche Connect Services. Voice data is transferred to us from the vehicle or a device as recordings for the purpose of conversion to text. The text that is then generated by a service provider is transferred back to the vehicle and the recording is then deleted at our end;

g) contact information that is used in communication services, for example to send email or text messages;

h) billing data, such as individual connection records regarding charging processes. We may combine this information with your address and payment information for individual billing purposes;

i) Image/video data of your vehicle or its components

j) further content that must be shared with us or with service providers in order to be able to provide a Service for you.

For detailed information on which personal data is processed within the scope of which Service, please see the relevant Service descriptions at xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx.

The following applies especially in the context of workshop visits and the associated use of online order extension:

Online order extension is a service that offers our customers the possibility to follow the vehicle acceptance process during a workshop appointment at any time and from anywhere through recorded and personalised videos of the service consultant and/or technician. In addition, the customer can release/approve additional repairs/repair extensions directly via the My Porsche Portal and/or the My Porsche App.

Unless otherwise mentioned here, in one of the Specific Privacy Policies or, where applicable, in the further specific privacy notices pertaining to the relevant Service, we process your personal data in each case on the basis of Article 6(1)(b) GDPR in order to provide you with the Services in this context and perform the contract associated therewith.

5.3 Use of services of a third-party provider

If you use services provided by a third-party provider with which you have a contractual relationship of your own, content of these services may be displayed in your vehicle or on your device and information may be shared between your vehicle or device and the service provider in question.

We have no influence over the processing of data by this third- party provider or the location of the data processing. Therefore please see the relevant third-party provider’s separate privacy notices for information on the nature, scope and purpose of the processing of personal data with regard to the relevant service.

We transfer the necessary personal data to the relevant third-party provider on the basis of Article 6(1)(b) GDPR to perform the contract existing between you and us.

5.4 Porsche Contact Centre

You can use various communication channels to contact us, in particular the service hotline if you wish to contact us by telephone, but also e-mail or live chat. When you contact our Contact Centre, we will process your personal data insofar as this is necessary in order to provide the Contact Centre service and to process your request. It is possible that we may ask you to provide personal data that is required to prepare and organise contact in order to process your specific request. Without this data, we will not be able to process your inquiry or accede to your request. The purposes of processing arise specifically from your inquiry and the services you have booked. They cover in particular

• The processing of inquiries from interested parties, customers and dealers in relation to products and services from Porsche Smart Mobility GmbH. These include, for example

• Technical support services

• Assistance when purchasing services or products

• Answering general questions about Smart Mobilty

• Technical support for customers and dealers, in particular through the provision of a service hotline for telephone contact.

Data is processed on the basis of article 6 paragraph 1 b) of the GDPR for the purpose of fulfilling the contract with you and implementing measures in advance of the contract.

We also process your personal data to comply with legal obligations to which we are subject. Obligations may arise, for example, from commercial, tax, telecommunications, money laundering, financial or criminal law. The purposes of processing arise from the respective statutory obligation; the processing generally serves the purpose of complying with state obligations with regard to monitoring and duty of disclosure.

Data is processed on the basis of article 6 paragraph 1 c) and e) of the GDPR. If we collect data on the basis of a legal obligation or in the public interest, you need to provide the personal data that is required to comply with the legal obligation. Without this, we might not be able to process your request or fulfil these obligations.

If you use support services in a Porsche Centre, your dealer can also retrieve this data. To facilitate this service, we also transmit the aforementioned data to the relevant dealer. In this case, we will process your personal data in accordance with article 6 paragraph 1 f) of the GDPR on the basis of our legitimate interest in facilitating customer service at your preferred point of contact or through your preferred dealer.

6. Safeguarding legitimate interests

To the extent that we process your personal data to safeguard our legitimate interests, this takes place in addition to the data processing operations and purposes described in this General Privacy Policy, the Specific Privacy Policies or, where applicable, the further specific privacy notices pertaining to the relevant Service within the scope of the specific Service particularly against the background of the following interests:

1. further development of products, services and customer service offerings as well as other measures to manage business transactions and processes;

2. improvement of product quality, elimination of errors and disruptions, including by means of analysis of vehicle data and customer feedback;

3. processing of data in a central prospective customer and customer care platform as well as upstream and downstream systems for customer loyalty and sales purposes to provide individual care to customers and prospective customers;

4. handling of warranty and service cases, processing of inquiries and other requests submitted by prospective customers and customers outside of contracts;

5. analysis of demand and customer segmentation, e.g. calculation and evaluation of affinities, preferences and customer potential;

6. risk management and coordination of recall campaigns;

7. credit checks, by means of sharing data with credit bureaus (e.g. SCHUFA);

8. ensuring legal compliance, preventing and protecting against legal violations (especially criminal acts), assertion of and defending against legal claims;

9. ensuring the availability, operation and security of technical systems and technical data management.

The relevant data processing takes place on the basis of Article 6(1)(f) GDPR in this regard.

7. Consent

Should you grant us consent to certain data processing operations, this consent is always associated with a specific purpose; the purposes arise in each case from the content of the specific declaration of consent. In this case, the processing of data takes place on the basis of Article 6(1)(a) GDPR. If you do not consent, we are not able to comply with your request that is covered by the consent. You can withdraw consent, once granted, at any time without this affecting the lawfulness of processing that has taken place based on consent before its withdrawal.

On the basis of any consent that may have been granted by you, the companies listed in the declaration of consent may use the data for specific purposes, e.g. to provide individual care for customers and prospective customers, and may contact you via your desired communication channels.

If we use your data to provide individual care for customers and prospective customers within this scope, this takes place in order to provide you with an exciting brand and customer care

experience with Porsche and to make our communications and interactions with you as personal and relevant as possible. Which of your data is specifically used to provide individual care for customers and prospective customers depends in particular on which data has been collected on the basis of inquiries, orders and advising (e.g. when purchasing Porsche products) and which data (e.g. your personal interests) you have provided at the relevant contact points (e.g. via this website or at the Porsche Zentrum).

In these cases, the specific scope and intended purpose of the consent granted by you arise from the wording of the declaration of consent at the point of contact.

8. Recipients of personal data

Internal recipients: Within PSM GmbH access is restricted to those persons who require it for the specific purposes mentioned.

External recipients: We do not disclose your personal data to external recipients outside PSM GmbH except where necessary in order to provide and carry out the relevant Service, where there is another legal authorisation or where we have your consent to do so.

External recipients may be the following:

a) Processors:

Dr. Ing. x.x. X. Porsche AG or its affiliates or external service providers with which we contract for the provision of services, for example in the areas of technical infrastructure and service/maintenance for the offerings of PSM GmbH or the provision of content. We select these processors carefully and subject them to regular reviews to ensure that your privacy is safeguarded. The service providers are not permitted to use the personal data other than for the purposes specified by us and according to our instructions.

b) Public bodies:

Government agencies and state institutions, such as tax authorities, public prosecutors’ offices or courts, to which we transfer (and/or are required to transfer) personal data for mandatory legal reasons or to safeguard legitimate interests. In these cases the transfer takes place on the basis of point(s) (c) and/or (f) of Article 6(1) GDPR.

c) Private bodies

Porsche dealers and service businesses, cooperation partners, service providers or persons to which or whom personal data is transferred on the basis of consent, to perform a contract with you or to safeguard legitimate interests, such as Porsche centres and Porsche service centres, financing banks, providers of further services or transportation service providers. In these cases the transfer takes place on the basis of point(s) (a), (b) and/or (f) of Article 6(1) GDPR.

9. Data processing in third countries

If data is transferred to bodies whose headquarters or place of data processing is not located in a member state of the European Union, another country outside of the European Union that is a signatory to the Agreement on the European Economic Area or a state for which an appropriate level of data protection has been determined through a decision of the European Commission, we will ensure before disclosure that the data transfer is either covered by a legal authorisation, that there are guarantees for an adequate level of data protection with regard to the data transfer (e.g. through the agreement of contractual warranties, officially recognised regulations or binding internal data protection regulations at the recipient) or that you have given your consent to the data transfer.

Insofar as data is transferred on the basis of GDPR Article 46, 47 or 49, Paragraph 1, Subparagraph 2, you can obtain from us a copy of the guarantees for the existence of an adequate level of data protection with regard to the data transfer. For this purpose, please use the information under point 1.

10. Collection of data by third parties

We do not only process personal data that we receive from you directly. We also receive some personal data from third parties to the extent that we have a legal basis for this.

For details regarding collection of data by third parties, please see the Specific Privacy Policies and, where applicable, the further specific privacy notices pertaining to the relevant Service.

11. Automated decision-making and profiling

We do not use any automated decision-making pursuant to Article

22 GDPR to prepare for, establish and/or carry out business relationships. To the extent that profiling is performed, this takes place only for the purposes mentioned within the scope of the General Privacy Policy, the Specific Privacy Policies and, where applicable, the further specific privacy notices pertaining to the relevant Service and on the basis of the legal bases mentioned.

12. Duration of storage; erasure

Except where information on the specific duration of the storage and/or erasure of personal data is provided in the description of the specific Services, the following applies:

We store your personal data only as long as is necessary to fulfil the intended purposes or – in the case of consent – unless and until you withdraw consent. In the event of an objection to processing, we erase your personal data unless the continued processing thereof is permitted pursuant to the relevant statutory provisions. We also erase your personal data if we are obligated to do so for other statutory reasons.

Applying these general principles, we generally erase your personal data without delay

- after the legal basis ceases to apply, provided that there is no other legal basis (e.g. storage periods mandated by commercial and tax law) that applies. If the latter is the case, we erase the personal data after the other legal basis ceases to apply.

- if it is no longer needed for our purposes of preparing for and performing a contract or pursuing legitimate interests and there is no other legal basis (e.g. storage periods mandated by commercial and tax law) that applies. If the latter is the case, we erase the personal data after the other legal basis ceases to apply.

- if the purpose for which we have collected it ceases to apply and there is no other legal basis (e.g. storage periods mandated by commercial and tax law) that applies. If the latter is the case, we erase the personal data after the other legal basis ceases to apply.

13. Rights of data subjects

As the data subject affected by data processing, you have numerous rights at your disposal. Specifically:

Right of access: You have the right to obtain information regarding the personal data concerning you that is stored by us.

Right of rectification and erasure: You can request that we rectify incorrect data and – provided that the statutory prerequisites are met – erase your data.

Restriction of processing: You can request – provided that the statutory prerequisites are met – that we restrict the processing of your data.

Data portability: Should you have provided data to us on the basis of a contract or consent, you can, if the statutory prerequisites are met, request that you receive the data provided by you in a structured, commonly used and machine-readable format or that we transfer it to another controller.

Objection to data processing in the case of “legitimate interest” as the legal basis: You have the right to object, on grounds relating to your particular situation, at any time to the processing of data by us to the extent that this processing has “legitimate interest” as its legal basis. If you exercise your right to object, we will discontinue the processing of your data unless we can demonstrate – in accordance with the statutory specifications – compelling legitimate grounds for continued processing which override your rights.

Withdrawal of consent: To the extent that you have granted us consent to the processing of your data, you can withdraw it at any time with effect for the future. This does not affect the lawfulness of the processing of your data prior to the withdrawal of consent.

Right to lodge a complaint with the supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. To this end, you can contact the data protection supervisory authority with jurisdiction over your place of residence or your country or the data protection supervisory authority with jurisdiction over us.

Contacting us: You can also contact us free of charge with any questions regarding the processing of your personal data, your data subject rights and any consent you may have given us. To exercise all your aforementioned rights, please contact us by e- mail at xxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx@xxxxxxx.xxx, via the website xxxx://xxx.xxxxxxx.xxx/xxxxxxxx/xx/xx/xxx-xxxxxxx- contact or by post at the address indicated in Point 1 above. When doing so, please make sure that we can clearly identify you.

14. Data security

We utilise all the necessary technical and organisational measures in keeping with the state of the art in order to ensure a level of security appropriate to the risk, in accordance with the applicable statutory requirements.

15. Third-party offerings

Services of other providers linked to by our Services have been and are designed and provided by third parties. We have no influence over the design, content and/or functioning of these services. We expressly distance ourselves from all content of all services linked to. Please note that these services, such as third- party websites, may install cookies on your device or collect personal data. We have no influence over this. In this regard, please obtain information directly from the providers of these services linked to as necessary.

16. Version

The most current version of this Privacy Policy applies. Last updated: 01.06.2021

Specific Privacy Policy Porsche Smart Mobility Websites

You can use My Porsche, Porsche Connect Store, Online Marketplace and Porsche Drive Rental via our website (hereinafter also referred to as "website").

You can book My Porsche services, Porsche Connect services and Functions on Demand (FoD) and activate the corresponding licences in My Porsche and the Porsche Connect Store. You can rent vehicles under Porsche Drive Rental. This requires you to be registered with My Porsche and have a Porsche ID user account. Depending on the service, you can use and manage the aforementioned services via our website, via various Porsche apps and, if available for your vehicle, in your vehicle via wireless network connection.

In addition, you can use the Online Marketplace to access the extended range of products and services offered by our Group companies and third-party providers. Customers with a Porsche ID user account can use the Marketplace sections Porsche Finder and Porsche Store.

Some features on our websites are also available without registration. For further details see Point 2.3.

1. Special notes on the use of our website

1.1 Provision of our website

To a certain extent, it is possible to use this website without registration. Even if you use the website without registration, personal data may still be processed.

Below you will find an overview of the type, scope, purposes of and legal grounds for automated data processing that takes place when using our website. For information on the processing of personal data when using the individual specific features and services, please refer to Point 2 below.

1.1.1 Automated data collection

The following data will be processed by us when you access our website with your device:

- Date and time of access,

- Duration of visit,

- Type of device,

- Operating system used,

- The features you use,

- Amount of data transmitted,

- Type of event,

- IP address,

- Referrer URL,

- Domain name.

We process this data on the basis of GDPR Article 6 [1] (f) for the purpose of providing the website, safeguarding its technical operation and identifying and clearing up malfunctions. In doing so, we pursue the interest of making it possible for our website to be used and ensuring its long- term technical functionality. When you access our website, this data will be processed automatically. You will not be able to use our website without providing this data. We do not use

this data for the purpose of drawing conclusions about you or your identity.

1.1.2 Data processing to improve our online offer

The automated data we collect mentioned in Point 1.1.1 is furthermore processed to improve the performance of our services, to ensure their availability, to optimise the user experience, to further evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website usage.

We shall process your data in accordance with GDPR Article 6

[1] (f) based on our legitimate interest in the performance and availability of our products, as well as in the analysis of the usage patterns of our website visitors. We do not use this data for the purpose of drawing conclusions about you or your identity.

In addition, we store cookies as part of the processing described here. For further details, please refer to Point 1.1.3.

1.1.3 Cookies and comparable technologies

Within the context of our online content, we use cookies and comparable technologies, which enable us to record and evaluate its use. This ensures the proper and secure operation of the online content and its functionalities. Data processing takes place on the basis of GDPR Article 6, Paragraph 1 (b) and (f), as this is necessary for implementation of the functions that you select and in order to safeguard our legitimate interest in the functionality of our online content.

In addition, we may also use cookies and comparable technologies in order to analyse the online content and specifically align it to your interests and, if necessary, to provide you with interest-based content and advertisements. Appropriate cookies are sometimes set by third parties, who may merge the information obtained with other data. This enables us to target users of the online content in their use of other content with interest-oriented advertising, with the help of selected partners (retargeting/remarketing). The data thus collected will not be used by us to identify you personally and will at no time be merged with the personal data stored by us. Data processing takes place exclusively on the basis of your voluntary consent in accordance with GDPR Article 6, Paragraph 1 (a). Optionally, you can extend your consent to either individual cookies or all cookies in this category. You can revoke your consent at any time with effect for the future.

Details regarding the function and the cookies and comparable technologies used as well as setting and revocation options, can be found under Cookie settings (xxxxx://xxxxxxx-xxxxx0.xxxxxxx.xxx/xx/xx/xxxxxxxxxxxx). If you do not wish to use cookies, you can also prevent any storage by means of the relevant settings on your device. Stored cookies can be erased at any time using the system settings of your device. Please note that blocking certain types of cookies or comparable technologies may result in impaired use of our online content.

1.2 Device access permissions

When using individual features such as "Closest Porsche Drive Rental location", you may be asked to grant access to your location.

Granting permissions is voluntary. However, if you wish to use the relevant features, you must grant the corresponding permissions, otherwise you will not be able to use these features.

Permissions remain active unless you revoke them in your device and/or Internet browser by deactivating the relevant setting.

2. Special services and features

You can voluntarily provide personal information or register for services or features when using our website. When registering and using the services and features described below, personal data will be collected, processed and used by us as shown below.

It is necessary to register in advance and to create a Porsche ID user account in order to use the services and features described in Point 2.2. The services and features described in Point 2.3 can be used without prior registration.

2.1 Registration process and creation of a Porsche ID user account

Information on the registration process and the creation of your Porsche ID user account can be found in Point 4.1 of the Porsche Digital Service Infrastructure / Porsche ID General Privacy Policy.

2.2 Using the individual features with registration/login

The features within the framework of our offering on our website and the relevant processed personal data, purposes and legal bases are described below.

2.2.1 Booking and activating services, handling payment information, identity verification

For information about how to book services via our website and how payment information is handled, see Point 5.1 of the Porsche Digital Service Infrastructure / Porsche ID General Privacy Policy.

The laws in some countries may require an identity check based on identification documents in order to book certain telecommunications services. In relation to data processing when carrying out such identity checks, we are jointly responsible with

- IDnow GmbH, Auenstr. 100, 80469 Munich, Germany.

You can access the Privacy Policy of our cooperation partner IDnow GmbH via xxxxx://xxxxx.xx/xxxxxxx/.

There are two methods available for performing identity verification. One method is that you can be redirected to the external page or app of the service provider, IDnow, as part of the service booking procedure. As part of the process, we will, at your request, transmit the information to be verified (your name, your address and your date of birth) as well as a reference number to the service provider that will allow us to assign the test result at a later point. As part of the identity check, the service provider will compare the aforementioned data with your identification document and store the data, as well as an optoelectronic copy of the identification document,

a photo of the verified person and an audio record of the session. The service provider will then inform us of the result of the identity check, using the reference number.

Your other option is to have identity verification performed at a participating Porsche Centre. This involves staff at the Porsche Centre verifying your identity on the basis of an identification document and sending the verified information (your name, address and date of birth) and a reference number to the service provider via a Porsche system. By entering this reference number, you can use the service provider's app to submit an optoelectronic copy of your identification document to the service provider at your convenience. The service provider will then inform us of the result of the identity check, using the reference number.

Personal data resulting from this identity check will only be shared with third parties if we are legally obliged to do so. Only in such cases will we obtain access to a copy of your identification document from the service provider, for the purpose of fulfilling our legal obligations.

The legal basis for our processing of your personal data in order to carry out an identity check is GDPR Article 6 [1] (c) and/or (f), as the identity check is the fulfilment of a legal obligation by which we are bound, or reflects to our legitimate interest in complying with legal requirements.

As the jointly responsible party together with IDnow GmbH, we have determined in an agreement according to GDPR Article 26 how the respective functions and relationships in the processing of personal data are to be structured and who is to satisfy which data protection obligations, in particular with regard to ensuring an adequate level of security, the implementation of your rights as a data subject, the fulfilment of data protection obligations, as well as the monitoring of potential data protection incidents, including the assurance of reporting or notification obligations (as required). You can use the contact details provided in Point 1 (of the General Privacy Policy) to request further information about this agreement; we shall then supply you with the key provisions.

You are welcome to contact either of the jointly responsible parties with questions or to exercise your rights as a data subject. In the spirit of the aforementioned agreement, we will consult with IDnow GmbH in accordance with GDPR Article 26 in order to answer your inquiry and, if necessary, to fulfil your wish to exercise your rights as a data subject.

The exchange of personal data between the jointly responsible parties takes place on the basis of GDPR Article 6 (1) (f), in other words our legitimate interest in the effective implementation of identity checks in cooperation with IDnow GmbH.

If necessary, we supply further information about the processing of personal data for our bookable services in the additional special data protection provisions for the relevant services.

2.2.2 Using the My Porsche services and Porsche Connect services

Information on the use of My Porsche services and Porsche Connect services via our website can be found in Point 5.2 of the Porsche Digital Service Infrastructure / Porsche ID General Privacy Policy.

2.2.3 Provision of service and warranty information

Prior registration and creation of a Porsche ID user account is required to use this feature.

In order to provide you with information about your vehicle, current warranties and recall campaigns in the "My Porsche" section of our website, we process equipment and vehicle master data such as the vehicle identification number shown on the proof of ownership, current warranties, the model year and a model picture.

Pursuant to GDPR Article 6 [1] (b), the legal basis for the processing of your personal data is the fulfilment of the contract between you and us.

2.2.4 Service appointment request

Prior registration and creation of a Porsche ID user account are required to use this feature.

To request service appointments with Porsche dealers and service companies in the "My Porsche" section of our website and app, we may provide customer and vehicle data to companies of your choice at your request. If you wish, we will provide your name, address, telephone number, e-mail address, Porsche ID, vehicle identification number shown in the proof of ownership, vehicle model, the service dates you have selected, the scope of service you desire, and a supplementary message to your request, as well as the desired contact channels for the dealer or service company chosen by you for the relevant request (the dealer or service company that will be carrying out the work).

The transmission of your personal data takes place within the framework of the respective service request on the legal basis of GDPR Article 6(1) (b) as a precontractual measure at your request. We store your respective service request in order to fulfil the contract between you and us in accordance with GDPR Article 6(1) (b).

2.2.5 My Porsche News

The My Porsche News feature lets you call up news in the app as well as via the My Porsche portal. This usually entails information relevant to the contract in connection with the purchase and/or the use of your account, your vehicle or digital content from Porsche.

We process the following personal data in particular for this: master data, contact details, contract data, dealer data and vehicle data.

We process the above personal data on the legal basis of GDPR Article 6(1) (b) to fulfil our contract with you to provide the app and its features, as well as on the basis of the legal basis of GDPR Article 6(1) (f) to fulfil our justified interest in providing services in connection with your contract.

2.2.6 Collection of vehicle, service and product data for product and service development and improvement

In connection with the use of services, in the event of error messages or as part of defined data evaluation measures, certain vehicle, service and product data from the vehicle, from services or from other Porsche products may be transferred by Porsche Smart Mobility GmbH to Porsche AG in order to be available there for evaluation of the aforementioned purposes.

You can consent to this on the "My Porsche" website.

The vehicle, service and product data comprise identification, basic, usage, analysis, environmental, traffic, location and movement data.

Some data cannot be deleted retroactively, as they are stored without concrete vehicle identification. In this case the data will be deleted after 5 years at the latest.

2.2.7 Reservation and purchase of services and products via the "Online Marketplace" section

As part of the Online Marketplace, we offer you a central platform where you can book or purchase services and products from us, our group companies and third-party providers (hereinafter also referred to as "participants"). The respective participant is provided with an area on our platform to present and offer their products and services (hereinafter referred to as "shop").

Customers with a Porsche ID user account can use the "Marketplace" sections "Porsche Finder" and "Porsche Store". Customers without an existing Porsche ID contract can also use the Marketplace section "Porsche Store" via the "Guest access" feature.

Processing within the framework of the Online Marketplace is carried out partly by us, partly by the respective participant and partly under joint responsibility.

2.2.7.1 Processing under the responsibility of PSM GmbH

For information on data processing carried out by us under our sole responsibility, please refer to the other chapters of this and other privacy policies of Smart Mobility GmbH.

2.2.7.2 Processing under the responsibility of Marketplace participants

For information on data processing carried out by Marketplace participants under their sole responsibility, please refer to the privacy policies of the respective companies. The responsible participant is indicated on the respective page of the product or service.

2.2.7.3 Processing under joint responsibility of PSM GmbH and Marketplace participants

With regard to the following processing, we are jointly responsible with the respective participants of the Online Marketplace who have placed the offer on the respective page and with whom you may book services or products:

- Data processing as part of the visit and the booking, application or reservation process in the respective shop of the Marketplace participant, but not the downstream service processing outside the platform;

- Automated data collection, data processing to improve our online service, storage of cookies and data analysis (see Point 1.1 of this Privacy Policy);

- Data processing within the scope of advertising, communication and marketing features of the platform, especially cross-selling modules;

- Payment processing for paid bookings, applications and reservations within the framework of the respective shop of the Online Marketplace;

- Customer support with regard to the respective shop in the Marketplace.

In relation to these data processing activities, we determine the purposes and means of processing personal data in cooperation with the respective Marketplace participants.

In an agreement with the relevant Marketplace participants on joint responsibility, we have defined, pursuant to GDPR Article 26, the respective tasks and responsibilities in the processing of personal data and the responsible parties to fulfil data protection obligations. In particular, we have defined how an appropriate level of security and your rights as a data subject can be ensured, how we can jointly comply with data protection information obligations and how we can monitor potential data protection incidents. This also includes ensuring that we can fulfil our reporting and notification obligations.

PSM GmbH is at your disposal as your central point of contact with regard to the aforementioned processing in joint responsibility. You can assert your rights in relation to processing operations under joint responsibility but also vis-à-

vis a jointly responsible Marketplace participant. Insofar as you contact us in relation to these processing operations, we will consult with the relevant Marketplace participant in accordance with the aforementioned agreement under GDPR Article 26 in order to answer your enquiry and to guarantee your data subject rights. In this case, the statements in Section 13 of the General Privacy Policy apply.

This joint responsibility does not affect, in particular, the processing operations mentioned in the General Privacy Policy, including those for master data administration (Porsche ID) and data processing on the platform, which are carried out under the sole responsibility of Porsche Smart Mobility GmbH. In particular, the service processing of the purchase, booking, application or reservation contract as well as invoicing does not take place under joint responsibility, but under the sole responsibility of the relevant Marketplace provider.

2.2.7 Formation and processing of the rental agreement within the framework of Porsche Drive Rental

This feature enables you to rent a Porsche vehicle.

In order to conclude a rental contract, you must provide us with the personal data listed below. You can save this personal data in your Porsche ID user account at any time, thus speeding up processing at the rental location. If you do not save this personal data in your Porsche ID user account in advance, you will be required to provide this personal data by completing this personal data in your Porsche ID user account at the rental location (possibly by our service provider). An appropriate device will be made available to you at the location for this purpose if necessary.

In order for a valid rental contract to be created, the following mandatory data must be saved in your Porsche ID user account:

- Gender,

- First and last name,

- Date of birth,

- Nationality,

- E-mail address,

- Mobile phone number,

- Address (street and house number, postcode and town/city),

- Payment details for the rental charge (name, credit card number, issuing institution, card security code),

- Details of the driving licence (licence number, date and place of issue),

- Details of the ID card (ID number, date and place of issue),

- Payment details for the security deposit (name, credit card number, issuing institution, card security code).

If this data is not provided, it is not possible to draw up a rental contract and the vehicle cannot be collected.

We shall process the gathered data on the basis of GDPR Article 6 [1] (b) and (f) in order to provide you with the services you require in this connection, and to implement the associated contractual relationship with you.

In order to establish your identity before you sign the rental contract, you will be asked by our service provider to identify yourself. In addition, to ensure the correctness of the data (for example no typographical errors, reversal of first and last name, the spelling of foreign street names and house numbers, etc.) and for security reasons (for example disclosure of the card number to the competent authorities in the event of a criminal offense or misdemeanour relating to the rented vehicle) a copy is generally made of your ID card. Unnecessary information (such as your height or eye colour) will be blacked out. You personal data will be processed on the basis of GDPR Article 6 [1] (b), (c) and (f) in order to provide you with the services you require in this connection, to implement the associated contractual relationship with you and to meet our legal obligations. Our legitimate interest derives from the purposes set out at the beginning of this paragraph.

We do not process any payment data on this website. Billing uses your Porsche ID user account. For more information on the handling of payment information, please refer to Point 5.1 of the Porsche Digital Service Infrastructure / Porsche ID General Privacy Policy.

The vehicles have a device for tracking the location and condition of the vehicle (especially current mileage). Using this device, it is possible for a limited number of employees to keep track of the contractually agreed mileage and current location of the vehicle.

You personal data will be processed on the basis of GDPR Article 6 [1] (c) and (f) in order to safeguard our legitimate interest, to provide you with the support you require and to prevent uses contrary to the contract and potential damage as well as to fulfil official and/or legal requirements or obligations, such as official, public prosecutor or judicial requests.

For the fulfilment of the contract in Germany, PSM GmbH uses selected service providers who can be chosen in the booking process on the Porsche Drive Rental website (under the following link: xxxxx://xxxxxxxx.xxxxx.xxxxxxx.xxx/xxxxxx/xx/xxxxxxx- drive-rental-stations). Service providers are Porsche Centres within the German dealer organisation or companies affiliated with Porsche AG based in Germany. These service providers are carefully selected by PSM GmbH.

At the end of the rental period you will receive a summary of your trip data by e-mail. You can save this summary as you

wish, or send it to third parties, independently of our offers, via your own terminal device or the third-party services you use.

After the end of the rental period, you also have the option of informing us by e-mail via an online dialogue (e.g. by awarding stars) how you enjoyed the rental. We process the data we collect on the basis of Article 6(1)(b) of GDPR in order to further improve the services based on your feedback.

2.3 Using the individual features without registration/login

The features within the framework of our website and the relevant processed personal data, purposes and legal bases are described below.

2.3.1 Contact via Live Chat

No prior registration and creation of a Porsche ID user account is required to use this feature.

In certain sections of our website we offer contact and advice via Live Chat. Live Chat allows you to communicate with one of our consultants via text messages. When you access and use Live Chat, your browser automatically transmits the following data at the beginning of use for technical reasons. We store this data separately from other data that you may transmit to us:

- Date and time of access

- Duration of website visit

- Type of web browser including version

- Operating system used

- Amount of data transmitted

- Type of event

- IP address.

The legal basis for this data processing is GDPR Article 6 [1] (f), whereby our legitimate interest is directed towards guaranteeing and maintaining the operation and security of our services and the elimination of faults. Within this framework, data is also processed by us for analysis purposes, without allocation to a specific person.

If you provide us with additional personal data via Live Chat, you do so on a voluntary basis. If personal data is required to clarify your request, we will point this out to you and ask you for your personal data. The texts you enter into the input mask during the Live Chat session are stored on our behalf on an external service provider's server. The legal basis for this data processing is GDPR Article 6 [1] (b).

2.3.2 Guest access for reservation and purchase of services and products via the "Online Marketplace" section

In addition to using the Online Marketplace with Porsche ID, customers can use the Porsche Store Marketplace section without prior registration and creation of a Porsche ID user account via the "Guest access" feature. For information on data processing in this context, please refer to Point 2.2.6.

2.3.3 Closest Porsche Drive Rental location

No prior registration and creation of a Porsche ID user account is required to use this feature.

This feature allows you to find the closest Porsche Drive Rental location with your device.

When this feature is used, the following categories of personal data will be processed:

- Location data of your device.

This is provided voluntarily. If you do not provide this data, however, we may not be able to fully comply with your wishes in relation to using this feature.

We shall process this data on the basis of GDPR Article 6 [1]

(b) in order to provide you with the services you require in this connection, and to implement the associated contractual relationship with you.

2.3.4 Non-binding reservation inquiry via Porsche Drive Rental

No prior registration and creation of a Porsche ID user account is required to use this feature.

This feature allows you to contact us using a contact form to make a non-binding reservation inquiry. The data gathered here will be used solely to process your inquiry and to send you a non-binding offer.

(a) Mandatory data when making a reservation inquiry

When using this feature, the following categories of personal data, marked with an "*", will be processed as mandatory data:

- Title,

- First and last name,

- Date of birth,

- E-mail address,

- Mobile phone number,

- Address (street and house number, postcode and town/city),

- Required number of vehicles in the respective class,

- Required rental location,

- Required rental period,

Reservation inquiries are not possible without providing this mandatory data.

(b) Optional data when making a reservation inquiry

As part of your reservation inquiry, you also have the option of providing further data on a voluntary basis, i.e. the following categories of personal data:

- Your title,

- Your company,

- Your telephone number,

- Your comment.

Please note that this information is not required for registration inquiries and whether you want to disclose this data to us is completely up to you.

We shall process this data on the basis of GDPR Article 6 [1]

(b) and (f) in order to provide you with the services you require in this connection, to implement the associated contractual relationship with you and to enable us to draw up an offer or reservation for you.

3. Rights of data subjects

As the person whose data is being processed, you have numerous rights at your disposal. In particular, you may object to the use of cookies or similar technologies at any time. For details please refer to our Porsche Smart Mobility Cookie Policy for Websites, which can be retrieved at xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

To find out about your additional rights, please refer to the information in Point 13 of the My Porsche and Porsche Connect Services / Porsche Digital Service Infrastructure General Privacy Policy, which you can access at xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

4. Changes to this Privacy Policy and version

We reserve the right to modify this Specific Privacy Policy. The current version of the Privacy Policy can always be found at xxxxx://xxxxxxx-xxxxx.xxxxxxx.xxx/xx/xx/x/xxxxxxx.

Date: 01.06.2021