We appreciate you putting your trust in us concerning your personal data.
Please read this Privacy Notice (" Privacy Notice") carefully as it describes how we collect, use and disclose your personal data. Personal data is any information relating to a living person.
In this Privacy Notice, when we refer to "we", "our", "us" or "Porsche", we mean Porsche Cars Great Britain Limited (“PCGB”) and its affiliates, including Dr. Ing. h.c.F. Porsche Aktiengesellschaft, Porsche Smart Mobility GmbH, Porsche Financial Services Great Britain Limited, Porsche Design Great Britain Limited, Porsche Retail Group Limited and such Porsche Centres as are authorised by PCGB (“Porsche Centres”) ("Affiliates").
If you have any questions about this Privacy Notice please contact us using the details in the " How to contact us" section below.
Data Controller
For purposes of this privacy notice the Data Controller is:
Porsche Cars Great Britain Limited
Bath Road
Reading, Berkshire
United Kingdom
RG31 7SE
Data Protection Officer
You can reach the data protection officer of Porsche Cars Great Britain Limited at:
Data Protection Officer
Porsche Cars Great Britain Limited
Bath Road
Reading, Berkshire
United Kingdom
RG31 7SE
What information do we collect about you?
(1) Information you give to us
We may collect personal data from you when you buy or use our products or services, when your vehicle is connected to our IT systems, when you attend Porsche events or visit a Porsche Centre, a Porsche Design Store or Porsche Experience Centre, sign up to Porsche newsletters or other subscription services, enter into offers or promotions, interact with us on social media platforms, contact us, make a complaint or use our Websites.
The categories of personal data we may request include your name, occupation, contact information (email, postal address and phone/mobile number), credit card/payment details, driving licence details, vehicle and driving data and general information about you such as your experience with Porsche products and services. We may also keep copies of any correspondence you send us which may include personal data.
You should only give us personal data on behalf of someone else if you have their permission to do so or you know that they would not have any objection to us processing their information in accordance with this Privacy Notice.
(2) Information collected by automated means
We also obtain some of your personal data by automated means, for example, when your vehicle is connected to our IT systems we collect vehicle and driving data, when you enter zones at our premises monitored by CCTV, when you telephone for customer assistance your calls are recorded and when you visit our Websites we collect the IP address of the device you use to connect to the Internet, the geographical location of your device, the browser you are using, the type of device you are using (tablet, mobile, desktop), the URL you came from and the web pages you access.
(3) Information collected from third parties
We may receive personal data about you from the following third parties:
We may request information about you from credit reference agencies and fraud prevention agencies to assist us in the provision of our goods and services to you.
Some of our Porsche Centres are operated by third party dealers and licensed to sell Porsche products and services. These dealers collect your personal data when you contact a Porsche Centre in connection with a purchase or prospective purchase, and pass this information on to us.
We may sometimes purchase information about prospective customers from third party organisations for marketing purposes. We will always take steps to ensure that your personal data is only used for these purposes if you have consented to receive marketing materials from us. You can opt out from receiving our marketing communications at any time by following the instructions in any of the messages you receive.
Children's privacy
We will never knowingly collect personal data from individuals under the age of sixteen (16) without first obtaining verifiable parental consent. If you are under the age of 16 you should not provide information to us. If we become aware that a person under 16 has provided personal data to us without verifiable parental consent, we will remove such personal data from our files.
How do we use your personal data?
We are required by law to provide you with information about the purposes for which we use your information and the legal justification for us to use that information. For example, there may be a legal justification for us to use your personal data where:
We need to use your information to perform a contract with you or to fulfil a request originated by you.
You have given your consent to us using your information.
Using your information is in our legitimate business interests (provided these interests are balanced against your rights).
We need to process your personal data to comply with legal obligations to which we are subject.
The table below sets out the different purposes for which we may use your personal data and the legal basis for each one. Note that the purposes for which we use your personal data may change from time to time, in which case we will update this privacy notice (see further "Updates to our Privacy Notice" below).
We may use your personal data to:
How do we use personal data for this purpose?
Legal Basis
Improve your experience in Porsche Centres and on our Websites
We use personal data such as your name, email address, postal address, telephone number, date of birth, demographic information, IP address, preferences, site usage information and purchase history to improve your experience in our Porsche Centres and on our Websites. We may use this information to track your activities on our Websites; to recognise your computer or device so that you are able to save your preferences and stay logged in to the Website without having to re-enter your online account credentials; to preserve the contents of your shopping cart and remind you if you have left items in it, or to remind you if you left the Website without adding items to your cart; and to otherwise enhance, monitor and analyse your usage of the Websites.
Our legitimate business interests in providing the best shopping and browsing experiences to our customers and visitors, to enable the use of our Websites and functionality and to protect their operation, to identify and resolve possible technical issues, and to continuously improve and protect our company, property and customers against fraud (referred to as “our legitimate interest”)
Identify you when you contact us
We may use your name, email address, postal address, telephone number or payment information to identify you when you contact us, for the purposes of processing and fulfilling your requests for products and services and keeping you informed about your requests.
Performance of our contractual obligations, our legitimate interest, or your consent.
Detect and prevent fraudulent transactions
We may need to process your personal data in order to keep your payments safe and secure and protect against fraudulent transactions.
It is in our legitimate interests to process personal data to keep our customers' payments secure.
Comply with legal obligations to which we are subject
We may need to process your personal data to comply with legal obligations binding or accepted by us. For example, we may need to retain your transaction records for a period of time to comply with tax or accounting requirements, or carry out checks on you when you purchase a vehicle to satisfy our obligations under anti-money laundering legislation or disclose your personal data if forming part of an investigation by law enforcement.
Compliance with our legal obligations
Product development, to understand what products and services you might prefer, and tailor your experience according to your preferences
We use personal data (such as your name, email address, postal address (including postcode), telephone number, date of birth, order history, vehicle and driving data, IP address; preferences, and site usage information) to better understand you and your preferences so that we can provide you with tailored offers and personalise your experience on our Websites.
Our legitimate interest, or your consent.
Send you service-related communications regarding your vehicle or any other products you may have with us
We use your personal data to send you service-related communications about your vehicle and other products you have with us, for example to let you know when your vehicle is due for a service.
Performance of our contractual obligations, our legitimate interest or your consent.
Carry out surveys, research, analysis and customer profiling
We use your personal data to carry out market research and build profiles of our customers. This is to help improve our products and services, advertising and marketing, Website content, customer service, business planning, online and offline operations and your overall customer experience.
Our legitimate interest or your consent.
Invite you to Porsche events you may be interested in
We may use the contact information you provide to us (such as your name, address, telephone numbers and email address) to invite you to Porsche events you may be interested in, provided this is in line with your marketing choices.
Our legitimate interest or your consent.
Answer your technical queries and general enquiries
We use your personal data including vehicle and driving data to answer your technical queries about the Website and any other general enquiries you make.
Performance of our contractual obligations, or our legitimate interest.
Resolve complaints and other customer service issues (e.g. organising repairs)
We use your personal data including vehicle and driving data when we deal with complaints or other customer service issues, such as organising repairs or replacement parts.
Performance of our contractual obligations, or our legitimate interest.
Process and track your orders
We need to use your personal data to process your orders and keep you informed of their progress.
Performance of our contractual obligations, or our legitimate interest.
Administer vehicle safety recalls
If we become aware of a safety issue with a particular vehicle model, we will need to use your personal data to organise product recalls, in line with our obligations under consumer protection legislation.
Compliance with our legal obligations.
Defend our legal rights and to protect the security or integrity of the Websites, our customers and our business in general
We may need to process personal data in order to defend our legal rights, for example to enforce our terms and conditions or to collect unpaid debts that we are owed. We may also need to process personal data to protect the security and integrity of our Websites, our customers and our business in general.
Our legitimate interest.
Send you newsletters and marketing information about our products and services.
We use your personal data to send you newsletters and other information about products and services that you may be interested in, provided this is in line with your marketing choices. You can unsubscribe from marketing communication at any time by following the instructions in any of the messages you receive.
Our legitimate interest or your consent.
Providing your personal data to us may be required due to a legal obligation which could be a statutory or contractual obligation, may be on a voluntary basis or may be necessary for us to enter into the contract with you, depending on the purposes for which we collect and use your personal data as set out in this Privacy Notice. However, if you do not provide your personal data to us this may result in disadvantages to you, e.g. we may not be able to provide certain products or services to you. However, unless otherwise stated, not providing your personal data will not result in legal consequence for you.
How do we protect your personal data?
We use Transport Layer Security (TLS) 1.1 or higher to protect your online transactions. TLS encrypts the personal data you provide to us before travelling over the internet. We maintain appropriate administrative, technical and physical safeguards to protect the personal data you provide to us against accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use and other unlawful forms of processing.
Your data protection rights
You have the following rights in relation to your personal data:
Access. You have the right to request a copy of the personal data we are processing about you, which we will provide back to you in electronic form. For your own privacy and security, in our discretion we may require you to prove your identity before providing the requested information. If you require multiple copies of your personal data, we may charge a reasonable administration fee where we are permitted to do so in accordance with the European Union’s General Data Protection Regulations (GDPR) or other relevant data privacy legislation.
Rectification. You have the right to have incomplete or inaccurate personal data that we process about you rectified. Note that you can always make certain adjustments to certain personal data directly through your online account.
Deletion. You have the right to request that we delete personal data that we process about you, except we are not obligated to do so if we need to retain such data in order to comply with a legal obligation or to establish, exercise or defend legal claims.
Restriction. You have the right to restrict our processing of your personal data where you believe such data to be inaccurate, our processing is unlawful or that we no longer need to process such data for a particular purpose, but where we are not able to delete the data due to a legal or other obligation or because you do not wish for us to delete it.
Portability. You have the right to obtain personal data we hold about you, in a structured, electronic format, and to transmit such data to another data controller, where this is (a) personal data which you have provided to us, and (b) if we are processing that data on the basis of your consent (such as for direct marketing communications) or to perform a contract with you.
Objection. Where the legal justification for our processing of your personal data is our legitimate interest, you have the right to object to such processing on grounds relating to your particular situation. We will abide by your request unless we have compelling legitimate grounds for the processing which override your interests and rights, or if we need to continue to process the data for the establishment, exercise or defence of a legal claim.
Withdrawing Consent. If you have consented to our processing of your personal data, you have the right to withdraw your consent at any time, free of charge. This includes cases where you wish to opt out from marketing messages that you receive from us. You can unsubscribe from marketing communications at any time by following the instructions in any individual message. The legality of the processing of your personal data prior to you withdrawing your consent remains unaffected by this.
Please find more details on how to make any of these requests in relation to your personal data in the ‘How to contact us’ section of this Privacy Notice.
You also have the right to lodge a complaint with the local data protection authority if you believe that we have not complied with applicable data protection laws.
If you are based in, or the issue relates to, the UK, the Information Commissioner’s Office can be contacted as follows:
Telephone: +44 303 123 1113
Email: casework@ico.org.uk
Website: www.ico.org.uk
Web-form: www.ico.org.uk/concerns/
Address: Water Lane, Wycliffe House, Wilmslow, Cheshire, SK9 5AF
If you are based in or the issue you would like to complain about took place outside of the United Kingdom but within the European Economic Area (EEA), you can contact the data protection authority in your place of residence or your country. Please click here for a list of local data protection authorities in the other EEA countries.
Who do we share your information with?
We may disclose personal data we process for the following purposes and in the following ways, to the extent permitted by law and depending on such purpose(s) or way(s):
Recipient / Purpose
What we share
Legal justification
Our Affiliates, for all the same purposes described in the How We Use Information section above.
Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information
Performance of our contract obligations, our legitimate interest, compliance with our legal obligations and/or consent depending on the purpose as described in the How We Use Information section above
Our service providers and suppliers, who process such information for us or on our behalf, for all the same purposes described in the How We Use Information section above.*
Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information
Performance of our contract obligations, our legitimate interest and/or consent depending on the purpose as described in the How We Use Information section above
To provide information to and as required by local law enforcement agencies, other government authorities, or otherwise required by law or to protect the rights and safety of our property, company and customers.
Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information
Our legitimate interest, compliance with our legal obligations
On a case by case basis, in the event that Porsche or substantially all of its assets are acquired by one or more third parties as a result of an acquisition, merger, sale, consolidation, bankruptcy, liquidation or other similar corporate reorganisation, where your information may be one of the transferred assets.
Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information
Our legitimate interest, compliance with our legal obligations
If you have consented to our sharing of your personal data with third parties to use for their own marketing purposes, as permitted by law.
Name, email address, postal address (including postcode), telephone number, date of birth, demographic information, order history, vehicle and driving data, IP address, payment information, preferences, site usage information
Consent
*These third-party partners provide a range of services to us, including operating our Centres; providing technical services (such as hosting, analytics, security, and payment) to help operate our Websites; and managing and conducting advertising and marketing campaigns on our behalf. If you would like to know more information about the third-party companies currently charged with such data processing, please contact us using the details in the " How to contact us" section below.
Cookies
When visiting our Website, Cookies which are small text files, can be stored on your device in order to offer you certain functionality, to make the Website more convenient and to optimise our Website. If you do not want cookies to be used, you can disable them by configuring the relevant settings in your web browser or by using separate opt-out options. Please note that this may restrict the functionality and your use of our Website and certain features may not work as a result. Please see our Cookie Notice for more details on cookies, web beacons and other tags.
Online Content Contributions
If you choose to contribute to a social, community or other publicly available area or feature of our Website, the information you submit may be made available to the general public depending on your settings (which is why we recommend that you do not submit or post any personal data to such forums, such as your full name, home address, phone number and/or other information that would enable others to contact or locate you).
Data Processing outside of the United Kingdom
Most third parties with whom we share data, including our Affiliates, are located within the United Kingdom and European Economic Area ("EEA"), but some may process your personal data outside of the EEA.
If data is transferred to organisations which are based outside of the United Kingdom or whose data processing takes place outside of the United Kingdom, before transferring the data we will ensure that (unless a legally applicable exemption applies) that the recipient has an appropriate level of data protection in place (e.g. through a determination of adequacy by the European Commission or through appropriate guarantees such as an agreement in the form of the EU standard contractual clauses with the recipient).
We can provide you with an overview of the recipients in non-UK jurisdictions and a copy of the measures which have been put in place to ensure an adequate level of data protection applies. If you would like to request this, please contact us as set out in " How to Contact Us" below.
Updates to our Privacy Notice
As our business changes from time to time, we sometimes need to make changes to the way we collect and use your personal information. Therefore, this Privacy Notice may be updated from time to time. If we make changes to this Privacy Notice, we will notify you of these changes by email and post an alert on the home page of our Website.
How long do we keep your personal information?
Your personal information is processed by us and/or our service providers only for the period necessary for the purposes for which the information is collected, or where we are relying upon your consent until you withdraw that consent. When we no longer need to use your information for those purposes or if we are relying on your consent where you withdraw that consent, we will remove it from our systems and records or take steps to anonymise it so that you can no longer be identified from it (unless we need to keep your information to comply with legal or regulatory obligations to which we are subject).
How to contact us
If you would like to make a request relating to your personal data, you may either:
submit your request via our Rights Request web form;
call us on +44 3457 911 911
or write to us at: Porsche Customer Interaction Centre, Porsche Cars Great Britain Limited, Bath Road, Calcot, Reading, RG31 7SE.
Alternatively, you can contact our Data Protection Officer as indicated at the top of this Privacy Notice.
Version 2020/2. This Privacy Notice was last updated: December 2020.