We, Brooklands Automotive Ltd trading as Porsche Service Centre Brooklands (herein referred to as “our”, “us”, "we" or "Porsche Service Centre Brooklands”) appreciate your interest in our products and services. With this Privacy Notice, we inform customers, website visitors, and other people who engage with us (collectively “you” or “your”) about the processing of your personal data in relation to such products and services, including within the scope of the pre-contractual, contractual and post-contractual business relationship, in particular the purchase/vehicle contract and workshop/repair order (collectively, the "Products and Services"). This Privacy Notice will also inform you about your rights as a data subject, as affected in connection with the Products and Services.
We take the protection of your personal data seriously. Your personal data will be processed in accordance with the applicable statutory provisions of data protection law (the "Data Protection Laws").

For information on the processing of personal data in other areas, please refer to the respective specific privacy policy.
1. Controller and Data Protection Officer
In relation to this Privacy Notice, the Data Controller responsible for data processing within the meaning of the Data Protection Laws is:
Brooklands Automotive Ltd trading as Porsche Service Centre Brooklands
If you have any questions regarding data protection for which Porsche Service Centre Brooklands is the data controller, please do not hesitate to contact us and our Data Protection Officer as follows:
Data Protection Officer
Data Protection Officer
Porsche Service Centre Brooklands
1 Abbot Close, Byfleet, Surrey, KT14 7JN
E-mail: info@porschebrooklands.co.uk
2. Personal data collected
When we say "personal data" we mean any information relating to an identified or identifiable natural person (so-called “data subject”). This includes details such as name, postal address, e-mail address or telephone number, but also other information about data subjects that arises in the course of our interaction with you, in particular:
(a) Information you give to us
We may collect personal data from you when you buy or use our Products and Services, when your vehicle is connected to our IT systems or you use the car configurator, when you book or attend Porsche events or visit our Porsche Centre, when you sign up to Porsche newsletters or other subscription services, enter into offers or promotions, interact with us on social media platforms, contact us, make a complaint or use our websites.
The categories of personal data we may request include your name, occupation, contact information (email, postal address and phone/mobile number), credit card/payment details, driving licence details, vehicle and driving data and general information about you such as your experience with Porsche Products and Services. We may also keep copies of any correspondence you send us which may include personal data.
You should only give us personal data on behalf of someone else if you have their permission to do so or you know that they would not have any objection to us processing their information in accordance with this Privacy Notice.
We refer you to Purposes and legal basis of data processing below for more detailed information regarding the data that we collect.
(b) Information collected by automated means
Some of the information that we collect is collected through automated means. This includes information such as vehicle and driving data collected when your vehicle connects to our IT systems which may relate specifically to you. It also may include data collected on our premises through CCTV cameras or call recordings of when you contact us, as well as the information about your devices and IP location when you visit our publicly accessible sources (such as social media platforms and our websites).
(c) Information collected from third parties
We also process personal data that we receive from third parties or from publicly accessible sources. Below you will find an overview of the corresponding sources and the purposes of processing your data obtained from these sources:
• Porsche Group Companies/Porsche sales organisation including Dr Ing.h.c.F.Porsche AG (as the manufacturer), Porsche Cars Great Britain Limited (as the local importer), Porsche Sales & Marketplace GmbH (as the provider of My Porsche and other digital services) and from members of the Porsche sales organisation (i.e. other Porsche Centres and Porsche Service Centres); we may receive specific data, e.g. information on the Products and Services you use and on your interests and, if necessary, when you use support services from the Porsche Digital Service Infrastructure, e.g. support for individual charging processes and remote activation of charging points.
• Cooperation partners, service providers and other third parties: In the case of purchase, repair and financing transactions, for example, we receive creditworthiness data (i.e., credit scores) from credit agencies and fraud prevention agencies to assist us in the provision of our Products and Services to you; we also use data from partners as needed to continuously improve our data quality, for example by checking addresses and the deliverability of e-mails; we may receive personal data from third parties for warranty, registration, insurance or financing purposes.
• Marketing service providers: We may sometimes receive your information from Porsche-sponsored events or via promotional partners; or we may work with customer engagement technology partners to help us have more targeted and relevant communications with you. Where legally required, we will always take steps to ensure that your personal data is only used for these purposes if you have consented to receive marketing materials from us. You can opt out from receiving our marketing communications at any time by following the instructions in any of the messages you receive.
• Legal or regulatory entities: In case required for compliance or public interest obligations, we may receive your personal data from legal or regulatory entities, including law enforcement.
• Publicly available sources: We may collect your personal data from publicly available sources where it is lawful to do so. This typically includes information like your name, contact details, professional role, or publicly shared interests. We typically use this information to conduct market research and business development, as well as to prevent fraud and ensure compliance with legal obligations.
Children's privacy
We will never knowingly collect personal data from individuals under the age of sixteen (16) without first obtaining verifiable parental/guardian consent. If you are under the age of sixteen (16) you should not provide information to us. If we become aware that a person under sixteen (16) has provided personal data to us without appropriate consent, we will remove such personal data from our files.
3. Purposes and legal basis of data processing
In the table at Section 3.5 (below), you will find an overview of the purposes for which personal data is processed, the categories of data processed in order to achieve such purpose, and the legal basis which we rely on for our data processing activities in connection with the provision of our Products and Services. In any case, we shall only process personal data in accordance with our legal requirements and if we have identified a valid legal basis (even if, in individual cases, a different legal basis may be relevant than otherwise stated in the table below).
We will let you know if we require your personal data and what possible consequences might arise if you do not share your personal data with us. However, unless otherwise stated, not providing your personal data will not result in legal consequence for you.
3.1 Fulfilment of contractual and pre-contractual obligations
We process your personal data if this is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures that take place at your request. The purposes of the processing include enabling the use of our specific Products and Services and in particular the creation and processing of offers, support and services. In this respect, please also refer to the descriptions of the Products and Services beyond this Privacy Notice.
3.2 Fulfilment of legal obligations
We process your personal data in order to comply with legal obligations to which we are subject. The obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law.
3.3 Safeguarding legitimate interests
We also process your personal data to protect the legitimate interests of us or third parties, unless your interests requiring the protection of your personal data override these interests. The processing for the protection of legitimate interests is carried out for the following purposes or for the protection of the following interests, for example:
• Managing our business to enable us to give you the best Products and Services in a secure way;
• Further development of products, services and support offerings as well as other measures to control business transactions and processes;
• Improving product quality, eliminating faults and malfunctions by analysing vehicle data and customer feedback, among other things;
• Processing of data in a central prospect and customer care platform as well as upstream and downstream systems for customer loyalty and sales purposes;
• Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences as well as customer potentials;
• Handling of warranty and goodwill cases, processing of non-contractual enquiries and concerns;
• Risk management and coordination of recall campaigns;
• Support in the use of support services and services of the Porsche Digital Service Infrastructure;
• Credit assessment through data exchange with credit agencies;
• Ensuring legally compliant actions, prevention of and protection against legal violations (especially criminal offences), assertion of and defence against legal claims, internal and external compliance measures;
• Safeguarding property rights, e.g. by means of video surveillance and other measures for building and facility security within the legally permissible framework;
• Ensuring the availability, operation and security of technical systems as well as technical data management;
• Answering and evaluating contact requests and feedback.
3.4 Consent
In some instances, we process your personal data on the basis of explicit consent; for example, to process your sensitive categories of personal data such as your health and medical data. If you give your consent, it is always for a specific purpose; the purposes of the processing are determined by the content of your declaration of consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
You will not be disadvantaged or experience any prejudice as a result of withholding or withdrawing your consent, nor will it affect the Products and Services we provide to you, unless the processing is strictly necessary for those services.
3.5 Our Legal Bases
Note that the purposes for which we use your personal data may change from time to time, in which case we will update this privacy notice (see Effective date below).
We may use your personal data to: How do we use personal data for this purpose? Legal Basis
Create and operate your Porsche ID We offer a registration and login process for our website that requires the Porsche ID so that you do not have to remember login data for our website and to improve your online experience. Details on how to register a user account for a Porsche ID, including information about what personal data we process as joint controllers, can be found in the privacy policy of PSM GmbH.
Our legitimate business interests in making the registration and login process efficient and convenient for you, or necessary to fulfil a contract with you.
Improve your experience in our Porsche Centre We use personal data such as your name, title, email address, postal address, telephone number, date of birth, demographic information, and purchase history to improve your experience in our Porsche Centre. Our legitimate business interests in providing the best Porsche Centre experience to our customers and visitors.
Improve your experience on our websites We use personal data such as your name, title, email address, postal address, telephone number, date of birth, demographic information, IP address, preferences, site usage information and purchase history to improve your experience on our websites.
We may also use this information to track your activities on our websites; to recognise your computer or device so that you are able to save your preferences and stay logged in to the website without having to re-enter your online account credentials; to preserve the contents of your shopping cart and remind you if you have left items in it, or to remind you if you left the website without adding items to your cart; and to otherwise enhance, monitor and analyse your usage of the websites. Our legitimate business interests in providing the best shopping and browsing experiences to our customers and visitors, to enable the use of our websites and functionality and to protect their operation, to identify and resolve possible technical issues, and to continuously improve and protect our company, property and customers against fraud.
Identify you when you contact us and fulfilling your requests for Products and Services

We may use your name, email address, postal address, telephone number, vehicle details or payment information to identify you when you contact us, for the purposes of processing and fulfilling your requests for products and services and keeping you informed about your requests. Where we undertake vehicle servicing or MOTs we may also take photos or video footage of your vehicle. Performance of our contractual obligations, our legitimate interest (for example, handling of non-contractual inquiries and concerns), or your consent.
Detect and prevent fraudulent transactions We may need to process your personal data in order to keep your payments safe and secure and protect against fraudulent transactions. It is in our legitimate interests to process personal data to keep our customers' payments secure.
Comply with legal obligations to which we are subject We may need to process your personal data to comply with legal obligations binding or accepted by us. For example, we may need to retain your transaction records for a period of time to comply with tax or accounting requirements or carry out checks on you when you purchase a vehicle to satisfy our obligations under anti-money laundering legislation or disclose your personal data if forming part of an investigation by law enforcement. Compliance with our legal obligations (for example, from commercial tax, money laundering, financial or criminal law).
Product development to understand what products and services you might prefer, and tailor your experience according to your preferences
We use personal data (such as your name, email address, postal address (including postcode), telephone number, date of birth, order history, vehicle and driving data, IP address; preferences, and site usage information) to better understand you and your preferences so that we can provide you with tailored offers and personalise your experience on our websites. Our legitimate interest (such as further development of Products and Services; improvement of product quality, elimination of efforts and malfunctions, among other things by means of analysis of vehicle data and customer feedback), or your consent.
Send you purchase or service-related communications regarding the Products and Services you select We use your personal data to send you purchase or service-related communications regarding the Products and Services you select, for example to let you know when your vehicle is ready for collection or when there may be a software update for your vehicle. Performance of our contractual obligations, our legitimate interest (for example, software updates, handling of warranty and goodwill cases), or your consent.
Carry out studies, surveys, research, and analysis We use your personal data to carry out market research to help improve our products and services, advertising and marketing, website content, customer service, business planning, online and offline operations, and your overall customer experience. Our legitimate interest (to develop our Products and Services), or your consent.
Customer segmentation and profiling We may use information about you to create customer segments and profiles. This means we group customers with similar characteristics or behaviours (such as purchase history, preferences, or location) to better understand your needs. Profiling helps us tailor our Products and Services, and communications so they are more relevant to you. This may be collected by any means described under Profiling below.
Our legitimate interest (to conduct analysis and customer segmentation, e.g., calculation and evaluation of affinities, preferences and customer potential), or your consent.
Send you newsletters and marketing information about our Products and Services We use your personal data to send you newsletters and other information about products and services that you may be interested in, provided this is in line with your marketing choices. You can unsubscribe from marketing communication at any time by following the instructions in any of the messages you receive. Your consent.
To manage and operate our Porsche events We may use the contact information you provide to us (such as your name, address, telephone numbers and email address) to invite you to Porsche events you may be interested in, provided this is in line with your marketing choices, as well as making the arrangements for you to attend events. We may also take photos and video images of you captured during the Porsche events for our internal and commercial purposes. Our legitimate interest (such as facilitating events and promoting similar Products and Services or events to existing customers who have previously purchased from us), or your consent.
To ensure vehicles are sold to end user customers only and not to unauthorised resellers We will use your personal data to carry out ‘know your customer’ due diligence.
Where we have reason to believe you are operating as an unauthorised vehicle reseller, we will use your personal data (such as your name, address, vehicle purchase history and any due diligence undertake) to update the central unauthorised reseller database which is shared with other members of the Porsche sales organisation and Porsche Group Companies. Performance of our contractual obligations, or our legitimate interest in protecting our business distribution model.

To customise the vehicle and enhance the customer experience We may process your personal data, including your contact details, your vehicle data and your car configurator ID ref to help you customise your vehicle and enhance your customer experience (for example to connect your vehicle with our other Products and Services. Our legitimate business interests in improving your customer experience, or necessary to fulfil a contract with you.
To fulfil our obligations under the Porsche Assistance Service or the Porsche New Vehicle Warranty We need to use your personal data to fulfil our obligations under the Porsche Assistance Service or the Porsche New Vehicle Warranty and keep you informed of our progress. We may also take photos or video footage of your vehicle for this purpose. Performance of our contractual obligations, or our legitimate interest
Safeguarding property rights The personal data is used through collection of video surveillance utilised for building and facility security. Our legitimate interest and legal obligation in ensuring the security and safety of our physical facilities/premises.
Customer loyalty programmes (for example, Custodians by Porsche) Where you access our loyalty programmes or offerings, we may process your personal data, including your vehicle and contact details, your account, transactions, consumer behaviour, demographics and your communications with us. In certain circumstances, we may do this in our legitimate interests, such as to provide our loyalty programme to you and improve customer experience, or your consent.
Answer your technical queries and general enquiries We use your personal data including vehicle and driving data to answer your technical queries about our Products and Services, and any other general enquiries you make. We may also take photos or video footage of your vehicle for this purpose. Performance of our contractual obligations, or our legitimate interest (so you can liaise with our customer assistance teams regarding our Products and Services).
Resolve complaints and other customer service issues (e.g. organising repairs) We use your personal data including vehicle and driving data when we deal with complaints or other customer service issues, such as organising repairs or replacement parts, and providing car guarantee offers. We may also take photos or video footage of your vehicle for this purpose. Performance of our contractual obligations, or our legitimate interest (for example, answering and evaluation of contact requests and feedback).
Process and track your orders We need to use your personal data to process your orders and keep you informed of their progress. Performance of our contractual obligations, or our legitimate interest (to manage our business efficiently).
Administer vehicle safety recalls If we become aware of a safety issue with a particular vehicle model, we will need to use your personal data to organise product recalls, in line with our obligations under consumer protection legislation. Compliance with our legal obligations.
Defend our legal rights and to protect the security or integrity of the websites, our customers and our business in general We may need to process personal data in order to defend our legal rights, for example to enforce our terms and conditions or to collect unpaid debts that we are owed. We may also need to process personal data to protect the security and integrity of our websites, our customers and our business in general. Our legitimate interest (ensuring legally compliant actions, prevention of and protection against legal violations (especially criminal offences), assertion of and defence against legal claims, internal and external compliance measure).

(a) Change of purpose
If we process your personal data for a purpose other than that for which the data was collected, beyond the scope of a corresponding consent or a mandatory legal basis, we will take into account, the compatibility of the original and the now pursued purpose, the nature of the personal data, the possible consequences of further processing for you and the guarantees for the protection of the personal data.
(b) Profiling
We do not carry out automated decision making. Profiling is only carried out to protect our legitimate interests as described above in regards to customer segmentation and profiling. We also refer to Customer and prospect care below which discusses customer and prospect care including personalisation of our offerings.
4. Access authorisations in the end device
To the extent functions of the Products and Services require the granting of authorisation to access your end device (e.g. access to location data or photos), the granting of these authorisations is voluntary. However, if you wish to use the corresponding functions, you must grant the appropriate authorisations, otherwise you will not be able to use these functions. The permissions remain active as long as you have not reset them in your device by deactivating the respective setting.
5. Technical and organisational security measures
We maintain appropriate administrative, technical and physical safeguards to protect the personal data you provide to us against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing.
6. Recipients of personal data
We may disclose personal data we process for the following purposes and in the following ways, to the extent permitted by law and depending on such purpose(s) or way(s):
Recipient / Purpose What we share Legal justification
Porsche Group Companies, other members of the Porsche sales organisation, for all the same purposes described in Section 3.5 above. Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, payment information, preferences, site usage information, customer care (such as complaints/requests/queries). Performance of our contract obligations, our legitimate interest, compliance with our legal obligations and/or consent depending on the purpose as described in Section 3.5 above.
Our service providers and suppliers, who process such information for us or on our behalf (known as “Data Processors”), for all the same purposes described in Section 3.5 above. Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information. Performance of our contract obligations, our legitimate interest, and/or consent depending on the purpose as described in Section 3.5 above.
To provide information to and as required by local law enforcement agencies, other government authorities, regulators, ombudsman or otherwise required by law or to protect the rights and safety of our property, company and customers. Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information. Our legitimate interest, compliance with our legal obligations.
On a case-by-case basis, in the event that our Porsche Centre or substantially all of its assets are acquired by one or more third parties as a result of an acquisition, merger, sale, consolidation, bankruptcy, liquidation or other similar corporate reorganisation, where your information may be one of the transferred assets. Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information. Our legitimate interest (to manage our business), or compliance with our legal obligations.
If you have consented to our sharing of your personal data with third parties to use for their own marketing purposes, as permitted by law. Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information. Your consent.
Third parties, where it is necessary to achieve the purposes described in section 3.5 (for example, insurance companies, service providers (not bound by our instructions), financing banks, credit agencies, emergency services, transport service providers). Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, payment information, preferences. Performance of our contract obligations, our legitimate interest, to protect your vital interests, and/or consent depending on the purpose as described in in Section 3.5 above.

7. Cookies
We use cookies and comparable technologies in connection with the Products and Services which serve to communicate with your end device and exchange stored information (hereinafter collectively referred to as "Cookies"). These Cookies are primarily used to make the functions of the Products and Services usable. General examples in which the use of Cookies is technically required in this sense are the storage of a language selection, login data or a shopping or watch list. Accordingly, technically required Cookies may be used by us to enable the processing described in Purposes and legal basis of data processing above and to ensure the proper and secure operation of the Products and Services. The data processing is then carried out as it is necessary to implement the functions you have selected or to protect our legitimate interest in the functionality of the Products and Services.
Insofar as we should also use Cookies in order to analyse the use of the Products and Services and to be able to target it to your interests and, if necessary, to provide you with interest-based content and advertisements, this is done exclusively on the basis of your voluntary consent. You will then have the opportunity to make the appropriate settings within the Products and Services via the Cookie Policy | Porsche Centre Brooklands. You may revoke any consent you have given at any time with effect for the future. Further information on Cookies and their function in detail as well as on setting and revocation options can be found in the Cookies policy on our website Cookie Policy | Porsche Centre Brooklands

Under the UK Data Protection Laws specifically, certain cookies that are used solely for statistical purposes - such as measuring website traffic or understanding how our Products and Services are used - do not require your consent. These cookies are designed to help us enhance functionality and user experience and are not used for advertising, profiling, or tracking across sites.

If you do not wish to use Cookies in general, you can also prevent their storage by adjusting the settings of your end device accordingly. Stored Cookies can be deleted at any time in the system settings of your terminal device. Please note that blocking certain types of Cookies can lead to impaired use of the Products and Services.

Furthermore, we use other technologies which, like Cookies, serve to ensure the secure and user-friendly usability of the website (e.g. by protecting against misuse or evaluating usage). Technically, these additional technologies differ from cookies, as they do not store any information on your end device or access information already stored there. Insofar as these additional technologies process data that is subject to data protection law (e.g. IP addresses), we process this data to provide the website, to ensure technical operation and for the purpose of identifying and eliminating faults. In doing so, we also pursue the interest of permanently ensuring the technical functionality of the website, improving its performance and optimising the user experience. When you access our website, this data is automatically processed. Without the provision of this data, you will not be able to use our website. We do not use this data for the purpose of drawing conclusions about your person or identity.
8. Integrated third-party services
Products and services of other providers which we integrate or to which we refer are provided by the respective third parties. We may also sometimes link to other websites and social media platforms. We have no influence on the content and function of the third-party services and are generally not responsible for the processing of your personal data by their providers, unless the third-party services are completely designed on our behalf and then integrated by us on our own responsibility.
Unless otherwise stated, profiles on social media are generally only included in the Products and Services as a link to the corresponding third-party services. After clicking on the integrated text/image link, you will be redirected to the offer of the respective social media provider. After the redirection, personal data may be collected directly by the third-party provider. If you are logged in to your user account of the respective social media provider, the provider may be able to assign the collected information of the specific visit to your personal user account. If you interact via a "share" button of the respective social media provider, this information can be stored in the personal user account and published if necessary. If you want to prevent the collected information from being assigned directly to your user account, you must log out before clicking the included text/image link.
Insofar as we integrate services of other providers within the scope of the Products and Services in order to provide you with certain content or functions (e.g. playing videos or route planning) and we process personal data in the process, this is done on the basis of the Data Protection Laws. This is because the data processing is then necessary to implement the functions you have selected or to protect our legitimate interest in an optimal range of functions of the Products and Services. Please also refer to the privacy policy of the respective third-party provider with regard to the third-party services.
9. Customer and prospect care
In the following, we would like to provide you with further data protection information on the implementation of customer and prospect care at Porsche Service Centre Brooklands. The measures serve to ensure customer and interested party-oriented support.

(a) Joint customer and prospect care at Porsche Service Centre Brooklands

The data processing mentioned above under Purposes and legal basis of data processing in the context of customer and prospect support (in particular customer segmentation and profiling, service and support, implementation of legal requirements, needs analyses, individual support via the desired communication channels) are generally not carried out by the controller alone. Involved in the customer and prospect care are in addition to us, Porsche Cars Great Britain Limited as the importer, as part of international support, the respective local importers, Dr. Ing. h.c. F. Porsche AG as manufacturer and its affiliated companies in the areas of financial and mobility services, digital services and lifestyle products. An up-to-date list of the participating companies with their contact details for support in the UK is available upon request.

By using a central platform, we avoid situations where information about your products, contact data and interests would not be available for your respective Porsche Service Centre Brooklands contact and where you would therefore have to be referred to another company. This also applies in the event that the operating entity of your Porsche Centre changes. By exchanging and verifying data, we ensure that you receive the best possible service and advice. Only the companies involved that actually need access to your data for operational purposes have such access.
 
Joint customer and prospect care can lead to joint control in certain cases. For this reason, the companies involved have set out in an agreement pursuant to the Data Protection Laws how the respective tasks and responsibilities for processing personal data are structured and who fulfils which data protection obligations. In particular, it was determined how an appropriate level of security can be achieved and how data subject rights and data protection information obligations can be guaranteed. Porsche Service Centre Brooklands is available to you as a central contact in addition to the other companies involved. 

(b) Individual customer and prospect care
Insofar as you have given your voluntary consent contact data, support and contract data (e.g. on purchases, leasing or financing), service information as well as data on interests, vehicles and services or products used will be used by the companies involved in joint customer and prospect care to send you personally tailored information and offers on Porsche vehicles, services and other products, invitations to events and surveys on satisfaction and expectations via the desired communication channels. 
For the individual design of customer and prospective customer support, we will create a customer profile of you.
The specific data used for this purpose depends on the information collected on the basis of orders and consultations or provided by you (e.g. in the consultation at the Porsche Centre or as part of your activities under your Porsche ID at My Porsche). The data may also originate from orders or purchases that are processed in cooperation with partners (e.g. insurance companies) and from which we then receive the information, if applicable. Insofar as corresponding consents have been granted, other data sources may also be included. This can be data on usage behaviour or vehicle condition in relation to the vehicle data assigned to you (e.g. on your driving behaviour, identification, basic, usage, analysis, environmental and traffic data, as well as location and movement data) or on the use of digital media (e.g. website use). You will receive more information on the merging of the data with the corresponding consent. 
In order to offer an inspiring brand and customer care experience with Porsche Service Centre Brooklands and to make communication and interaction as personal and relevant as possible, the aforementioned data is used for needs analyses and customer segmentation. On this basis, for example, affinities, preferences and potentials can be determined by the companies involved as part of individual customer and prospect care. Examples of such measures for individualisation are classification numbers on your likely product interests and on your satisfaction. The corresponding information and analysis results are stored in your customer profile and are then available for the individual configuration of customer and prospect care. The personal analysis and individual allocation in a customer profile will only take place if this serves your individual customer and prospect care. Individual customer and prospect care without these measures for optimisation and personalisation is not offered. 
Beyond the individual measures relating to direct communication with you, we will only use the aforementioned data within the framework of general measures of customer and prospect care to carry out general evaluations based on the aggregated data of customers and prospects in order to optimise our offers and systems and align them with overarching interests. Please note that data on usage behaviour or vehicle condition in relation to the vehicles assigned to you or on the use of digital media may also be used for this purpose if you have given the appropriate consent. Please also note that your data may also be evaluated beyond the scope of customer and prospect support; this will then be done on the basis of your specific consent or another legal basis. 
When we send emails for individual customer and prospect care, we may use market standard technologies such as tracking pixels or click-through links. This allows us to analyse which or how many emails are delivered, rejected and/or opened. The latter is particularly done by means of tracking pixels. Measuring the opening rate of our emails by means of tracking pixels is not fully possible if you have deactivated the display of images in your email program. In this case, the email will not be displayed to you in full. However, it is still possible for us to track whether an email has been opened if you click on text or graphic links in the email. By using click-through links, we can analyse which links in our emails are clicked on and deduce what interest there is in certain topics. When clicking on the corresponding link, you are guided through our separate analysis server before calling up the target page. Based on the results of the analysis, we can make emails more relevant in the context of individual customer and prospect care, send them in a more targeted manner or prevent them from being sent. The sending of emails and the evaluation of their use will only take place if you have given your voluntary consent to individual customer and prospect care. Individual customer and prospect care without the described evaluation for optimisation is not offered. 
10. Data Processing in third countries
If a data transfer takes place to entities whose registered office is based outside of the United Kingdom or whose data processing takes place outside of the United Kingdom, or another jurisdiction for which an adequate level of data protection has not been determined by a decision of the European Commission, we will ensure prior to the transfer that either the data transfer is covered by statutory permit/legal authorisation, that guarantees for an adequate level of data protection with regard to the data transfer is in place (e.g. through the agreement in the form of the standard contractual clauses (and UK addendum, as appropriate) with the recipient), or that you have given your consent to the data transfer.
If the data is transferred, you can obtain from us a copy or reference to the availability of the guarantees for an adequate level of data protection in relation to the data transfer. If you would like to request this, please contact us as set out in How to contact us section below.
11. Storage duration, erasure of data
We recognise the importance you place on how your personal data is handled and shared, and we are committed to earning your trust by protecting your information. We implement appropriate technical and organisational security measures, including physical, administrative and technical safeguards to protect your personal data from unauthorised access, use and disclosure.
We store your personal data, if there is legal permission to do so, only as long as necessary to achieve the intended purposes or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data unless further processing is still permitted by law. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will usually delete your personal data immediately:
• after the legal basis (described in the table above) has ceased to apply and provided that no other ground applies (e.g. commercial and tax law retention periods). If the latter applies, we will delete the data after the other legal basis has ceased to apply;
• if your personal data is no longer required for the purposes we pursue and no other legal basis (e.g. retention periods under commercial and tax law) intervenes. If the latter applies, we will delete the data after the other legal basis has ceased to apply;
• where applicable, if this is no longer necessary for the purpose of preventing unauthorised resale, effectively protecting the selective distribution system and avoiding infringements. This is usually the case after checking for reseller activity.
We implement safeguard measures tailored to the risks associated with processing your personal data and will only store your personal data insofar as is necessary to achieve our purposes (explained in the table above).
12. Rights of data subjects
You may have certain rights under Data Protection Laws. However, there may be lawful reasons for us to object to, or partially respond to, your requests for exercising such rights. These rights are as follows:
Right to be informed: You have the right to know how we collect, use, and store your personal data. This includes clear information about the data we collect, the purposes of processing, and the legal basis for doing so in accordance with applicable Data Protection Laws. This is why we will share a privacy notice (such as this one) prior to you disclosing personal data to us. Please read these carefully.
Right to access: You may have the right to receive information about your personal data stored by us and we have the obligation to carry out reasonable and proportionate searches to identify your relevant data. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee where we are permitted to do so in accordance with the Data Protection Laws.
Right to rectification and erasure: You may have the right to ask us to correct incorrect personal data and, if the legal requirements are met, delete your personal data.
Restriction of processing: In limited circumstances, you may have the right to ask us that we restrict the processing of your personal data, provided that the legal requirements are met and unless we think we have a legitimate interest for processing your data which overrides your request.
Data portability: If you have provided us with personal data on the basis of a contract or consent you may have the right to ask us that the data you have provided us with is handed over in a structured, common and machine-readable format or that we transfer it, to another controller.
Objection: You may have the right to object at any time to data processing by us based on the safeguarding of legitimate interests for reasons arising from your particular situation. If you make use of your right to object, we will stop processing the data unless we can prove compelling reasons for further processing worthy of protection which outweigh your rights and interests.
Revocation of consent: If you have given us your consent to process of your personal data, you can revoke it at any time with effect for the future. The legality of the processing of your personal data until revocation remains unaffected.
Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country or the supervisory authority responsible for us.
If you are based in, or the issue relates to, the UK, the Information Commission can be contacted as follows:
• Telephone: +44 303 123 1113
• Email: casework@ico.org.uk
• Website: www.ico.org.uk
• Web-form: www.ico.org.uk/concerns/
• Address: Water Lane, Wycliffe House, Wilmslow, Cheshire, SK9 5AF
If you are based in or the issue you would like to complain about took place outside of the United Kingdom but within the European Economic Area (EEA), you can contact the data protection authority in your place of residence or your country. Please click here for a list of local data protection authorities in the other EEA countries.
13. How to contact us
You can contact us free of charge if you have questions regarding the processing of your personal data and your rights as a data subject. Please contact us by either:
• call us on 01932 341 911
• or write to us at: DPO, Porsche Service Centre Brooklands, 1 Abbot Close, Byfleet, Surrey, KT14 7JN
Alternatively, you can contact our Data Protection Officer as indicated at the top of this Privacy Notice under Controller and Data Protection Officer.
Please make sure that we can definitely identify you. If you revoke your consent, you can alternatively choose the contact method that you used when you gave your consent.
14. Effective date
As our business changes from time to time, we sometimes need to make changes to the way we collect and use your personal information. Therefore, this Privacy Notice may be updated from time to time. If we make changes to this Privacy Notice, we will notify you of these changes by email and post an alert on the home page of our website.
The latest version of this Privacy Notice applies.
Version 2026/3. Effective date: 13/05/2026