We, Dr. Ing. h.c. F. Porsche AG (hereafter "we" or "Porsche AG"), appreciate your use of our PETnews2go app (hereafter "app") and your interest in our company and our products. Your privacy is extremely important to us. We therefore take the protection of your personal details very seriously, and treat them in strictest confidence. Your personal data is processed only within the scope of the legal provisions of data protection law, in particular the European Union's General Data Protection Regulation (hereafter "GDPR"). In this privacy policy we provide you with information about the processing of your personal data and your rights as a data subject within the scope of the use of our PETnews2go app. For information on other products and services offered by other companies in the Porsche Group, please consult the respective privacy policy for these services or Porsche companies.

1. Controller and data protection officer; contact


Controller for data processing within the meaning of the data protection legislation is:


Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Germany
Tel: (+49) 0711 911-0

Please do not hesitate to contact us if you have questions or suggestions relating to data protection.

You can contact our data protection officers at the following address:


Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
Data protection officer

70435 Stuttgart
Germany
Contact: http://por.sc/privacycontact


2.Subject matter of data protection

The subject matter of data protection is the protection of personal data. This is all the information that relates to an identified or identifiable natural person (known as the data subject). This covers, for example, information such as name, postal address, e-mail address, or phone number as well as information that necessarily originates from the use of our Porsche PETnews2go app, such as details about the start, end, and scope of use, and the communication of your IP address.

3.Type, scope, purposes of, and legal basis for automated data processing

In general, it is possible to use our PETnews2go app without registering. Even if you use our PETnews2go app without registering, personal data can still be processed.

An overview of the type, scope, purposes of, and legal basis for automatic data processing within the scope of our app is provided below. Please refer to Section 5 for details on the processing of personal data in relation to the individual services and functions.


3.1 Provision of our PETnews2go app

When you access our app using your device, we process the following data:

- Date and time of activation

- Operating system used

- IP address

We process this data on the basis of Article 6 (1) (f) GDPR in order to provide the app, to ensure technical operation, and to identify and rectify faults. In this way, we pursue the interest of facilitating and ensuring the long-term use of our app and its technical functional capability. When our app is opened, this data is automatically processed. You cannot use our app unless the data is provided. We do not use this data for the purpose of drawing conclusions about you or your identity.

3.2 Cookies

When you use our app, "cookies" as well as similar technologies, which are usually small files, may be stored on your device in order to provide you with a comprehensive scope of functions, make it easier to use our service, and optimize our offerings. If you do not wish to allow the use of cookies and/or similar technologies, you can prevent them from being stored on your device by configuring the relevant settings on your device, in your browser or in the app as well as using the specific opt-out options. Please note that the functional capability and functional scope of our offering could be restricted as a result. Please refer to our Cookie Policy for details on the type, scope, purposes of, legal basis for, and opt-out options for data processing in relation to cookies and similar technologies.

4.Access authorizations on the device

Our app supports the "push notifications" (immediate notifications) function. The app may therefore request you to authorize access to push notifications on your device.

Granting this authorization for push notifications is voluntary. However, if you want to fully use the push notification function, you will need to grant the corresponding authorization as you will not otherwise be able to use this function.

The authorization remains active until you have reset it on your device by deactivating the respective setting.

5.Individual services and functionalities

You can voluntarily enter personal data or register for services and functions when using our app. When you register for the services and functions named below, we process personal data as outlined here.

For use of the services and functions specified in Section 5.2 within our app, prior registration and the creation of a user profile are required.

5.1 Registration process and creation of a user profile

(a) Mandatory data when registering

When registering and creating your user profile, the following mandatory information, which is marked with "*", is requested:

- Dealership number,

- Salutation

- First name

- Last name

- Business e-mail address

It is not possible to register or create a user profile unless this mandatory data is specified.

We process the data collected on the basis of Article 6 (1) (b) and (f) GDPR in order to create your profile for you and to identify you each time you log in. Other data may be collected and then linked with your profile data, depending on the service and function you wish to register for.

5.2 Use of the individual functions with registration/log-in

The functions within the app and the relevant personal data processed, purposes and legal basis are described below.

5.2.1 Feedback function

Prior registration and log-in with a user profile is required to use this function.

The feedback function enables you to provide feedback on the posts and the app. Following your rating you can also add a comment in a free text field.

When you use this function, the following categories of personal data are processed:

- Your data provided during registration

- Your individual feedback to us (free text field)

Your individual feedback is not published within the app or shared with other users. We treat it as strictly confidential. We process the data collected on the basis of Article 6 (1) (b) GDPR in order to optimize our app, partly on the basis of your wishes and/or criticisms.

5.3 Comments function

Prior registration and log-in with an individual user profile is required to use this function. The comments function enables you to provide comments on the posts in the app. You can use it for interacting with Porsche AG and other app users.

When you use this function, the following categories of personal data are processed:

- Your individual comment (up to 100 characters possible).

Your comments are visible to other app users, without additional specification of your name, in order to allow for discussions.

This is voluntary information. However, if you do not provide this data, we may not be able to respond in full to your needs when using this function in certain circumstances.

We process the data collected on the basis of Article 6 (1) (b) GDPR in order to enable an objective discussion on the topics covered in the posts.

5.4 Bookmark function

Prior registration and log-in with a user profile is required to use this function.

The function allows you to save your preferred posts, such as tips on day-to-day work or new products and highlights via the Porsche parts catalog PET2. You can access these saved posts at any time as favorites in the menu.

No data beyond the personal data provided by you during registration is processed for use of this function.

We process the data collected on the basis of Article 6 (1) (b) GDPR to provide you with direct access to the collected posts selected by you.

5.5 Push notifications

Prior registration and log-in with an individual user profile is required to use this function.

The push notifications function enables you to be informed on new content in our app in the form of immediate notifications. To use this function, you must grant the appropriate authorization for push notifications on your device.

We process the data collected on the basis of Article 6 (1) (b) GDPR in order to inform you of new posts within our app.

5.6 "Like" function

Prior registration and log-in with an individual user profile is required to use this function.

By clicking on the "Like" ("thumbs-up") button, you indicate that you like a post in our app. You can undo a "like" by clicking on the button again.

We process the data collected on the basis of Article 6 (1) (b) GDPR to provide you and the other users information on the popularity and relevance of the posts in anonymized form.

5.7 "Share" function

Prior registration and log-in with an individual user profile is required to use this function.

By clicking on the "Share" button, you can transfer relevant posts to the business e-mail address that you previously provided during registration or as a text message to your mobile number.

When you use this function, the following categories of personal data are processed in addition to the data specified under Section 5.1, which you provided during registration:

- Your business, or, on request, your private mobile number.

This is voluntary information. However, if you do not provide this data, we may not be able to respond in full to your needs when using this function in certain circumstances.


We process the data collected on the basis of Article 6 (1) (b) GDPR to provide you with posts via e-mail or text message.

6.Safeguarding of legitimate interests

We will process your personal data for the purpose of safeguarding our legitimate interests. In addition to the interests specified in the description of individual services and offers in Section 3 and Section 5, data processing procedures are performed when using our app or after completing registration, in particular against the background of the following interests:

1.Further development of products, services and care offers as well as other measures for controlling business cases and processes;

2.Improvement of product quality, rectification of faults and malfunctions by analyzing vehicle data and customer feedback;

3.Processing warranty and goodwill cases as well as non-contractual prospect and customer inquiries and issues;

4.Risk management and coordination of recall campaigns;

5.Ensuring actions are lawful, preventing and protecting against legal violations (in particular criminal offenses), asserting and defending against legal claims;

6.Guaranteeing the availability, operation and safety of technical systems as well as technical data management.

Data is processed on the basis of Article 6 (1) (f) GDPR.

7.Consent

If you have given consent to perform certain data processing procedures, this consent always relates to a specific purpose included in the content of the actual declaration of consent. In this case, data is processed on the basis of Article 6 (1) (a) GDPR. We cannot accommodate the request covered by the consent if this information is not provided. You can withdraw your consent at any time without affecting the lawfulness of processing based on the consent given before its withdrawal.

8.Recipients of personal data

Internal recipients: Within Porsche AG, the only people who have access are those who need it for the purposes named in Sections 3 and 4.

External recipients: We only forward your personal data to external recipients outside Porsche AG if this is necessary for administering or processing your issue, if another legal authorization exists, or if we have your consent to forward the data.

External recipients can be:

a) Processors

Group companies in Porsche AG or external service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the Porsche AG offer or the provision of content. We carefully select and regularly inspect these processors to make sure that your privacy is protected. The service providers may use the data only for the purposes we have specified and in accordance with our instructions.

b) Public bodies

Authorities and public institutions, such as public prosecutors, courts or financial authorities to which we must transfer personal data for legal reasons. The data is transferred on the basis of Article 6 (1) (c) GDPR.

c) Private bodies

Dealers, cooperation partners or support staff to whom the data is transferred on the basis of consent, to implement a contract with you or to safeguard legitimate interests, for example Porsche Dealerships, financing banks, providers of other services or transport service providers. The data is transferred on the basis of Article 6 (1) (a), (b) and/or (f) GDPR.

9.Data processing in third countries

If data is transferred to bodies whose headquarters or whose place of data processing is not located in a member state of the European Union or in another country outside of the European Union who is a signatory to the treaty, we ensure before forwarding the data that, outside of legally permitted exceptional cases pertaining to the recipient, either an appropriate level of data protection exists (e.g., through an adequacy decision of the European Commission, through suitable guarantees such as self-certification by the recipient for the EU-US Privacy Shield or the agreement of EU standard contractual clauses between the European Union and the recipient) or you give sufficient consent for the transfer of the data.

We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. To obtain these, please contact the address specified in Section 1.

10.Automated decision making and profiling

We do not use automated decision making processes according to Article 22 GDPR to prepare, establish and forge business relationships. Profile imaging is only performed to maintain our legitimate interest as part of the processing purposes described in this document.

11.Duration of storage, deletion

Please note that your user account is not automatically deleted when you delete the app from your device. You can have your user account deleted by us by contacting support@petnews2go.com. In this case, all your personal data will be deleted within 30 days.

If the description of the individual services and offers does not contain any specific information about the storage duration or deletion of data, the following applies:

We will store your personal data only for the length of time necessary to fulfill the intended purposes, or – in the case of consent – until you withdraw your consent. If you withdraw your consent to process your personal data, we will delete it unless relevant legal provisions stipulate that it can be processed further. We will also delete your personal data if we are obliged to do so for other legal reasons.

In line with these general principles, we will usually delete your personal data immediately

- after the legal grounds cease to apply and provided that no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.

- if we no longer need the data for the purposes of preparing and executing a contract or legitimate interests and no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.

- if the purpose of collecting the data no longer applies and no other legal grounds apply (e.g. commercial law and tax law retention periods). If the latter is the case, we will delete the data once the other legal grounds cease to apply.

12.Rights of data subjects

As the data subject affected by the data processing, you have several rights. Specifically:

Right of access: You have the right to obtain information from us about the data that we have stored about you.

Right of rectification and erasure: You have the right to demand that we rectify incorrect data and – provided the legal requirements are met – that we delete your data.

Restriction of processing: You have the right – provided the legal requirements are met – to demand that we restrict the processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you have the right, in accordance with the legal requirements, to obtain the data you have provided in a structured, standard and machine-readable format or you can demand that we transfer this data to another responsible person.

Objection to the processing of data on the legal basis of "legitimate interest": You have the right to object at any time, on grounds relating to your particular situation, to our processing of your data, provided this objection is based on the legal basis of "legitimate interests". If you exercise your right to object, we will cease the processing of your data unless we can – pursuant to the legal requirements – prove compelling legitimate reasons for further processing, which override your rights.

Objection to cookies and similar technologies: You can also object to the use of cookies and similar technologies at any time. For details on how to object, please refer to our Cookie Policy.

Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected up until the time of the withdrawal of consent.

Right to lodge a complaint with a supervisory authority: You can also submit a complaint to the competent supervisory authority if you believe that processing your data is in breach of the legislation. To do so, you can apply to the data protection authority that is responsible for your town/city or country or the data protection authority that is responsible for us.

Contacting us: Please do not hesitate to contact us if you have any questions regarding the processing of your personal data, your rights as a data subject and any consent that you may have given. To exercise all of these above-mentioned rights, please go to http://por.sc/privacycontact or contact us by post at the address specified above in Section 1. In doing so, please ensure that it is possible for us to identify you uniquely.

13.Links to third-party offerings

Websites and services offered by other providers that are linked to our app are structured and provided by third parties. We do not have any influence over the structure, content, or role of these third-party services. We explicitly distance ourselves from all content in all linked third-party offerings. Please note that the third-party offerings linked to the app may install their own cookies on your device or collect personal data. We have no influence on this. Please contact the providers of these linked third-party offerings as required for the relevant information

14.Status

The current version of this privacy policy applies. Status 8/28/2018.Porsche Cookie Policy

Scope of application

This Cookie Policy applies in addition to the general privacy policy for our PETnews2go app (hereafter "app") and describes the type, scope, purposes of, legal basis for, and opt-out options for data processing in relation to cookies and similar technologies (hereafter referred to as "cookies" in both cases). The general privacy policy for our app applies to all other information. Status 8/28/2018.

What are cookies?

We use "cookies" in order to provide you with a comprehensive scope of functions, make it easier to use our service, and optimize our offerings. Cookies are usually small files, which are stored on your device by your Internet browser or the app.

Categories of cookies

We use cookies for different purposes and with different functions. We make a distinction according to whether its use is technically required (technical requirement), how long it is stored for and used (duration of storage), and whether it was created by our app itself or by a third party and the provider who created the cookie or similar technology (hereafter "cookie provider").

Technical requirement

Cookies required for technical reasons: We use certain cookies because they are required for our app and its functions to work properly. These cookies are set automatically when our app is opened or a specific function is called up, unless you have disabled cookies in your device, browser or app settings.

Cookies not required for technical reasons: By contrast, cookies that are not required are set to improve your experience with our app or to store specific settings that you have configured. We also use cookies that are not required for technical reasons to obtain information on the frequency of use of certain areas of our app so that we can better tailor them to your needs. We do not store cookies that are not required for technical reasons until you click on the corresponding field to confirm that you have read our cookie notice and continue using our app.

Duration of storage

Session cookies: Most cookies are required only for the duration of your current app use or session and are deleted or become invalid as soon as you exit our app or your current session expires (session cookies). Session cookies are used, for example, to retain certain information such as your login for the app or your shopping cart during your session.

Permanent cookies: Cookies are occasionally stored over a longer period for the purposes of recognizing you when you subsequently access our app again and retrieving saved settings. This makes it faster and easier for you to access our app and means that you do not have to repeat settings such as your selected language, for example. Permanent cookies are deleted automatically at the end of a predefined period.

Flow cookies: These cookies are used for communication between various internal Porsche servers. They are created at the start of a user interaction and deleted again when it is ended. Flow cookies are assigned a unique identification number during the interaction. However, this does not allow any conclusions to be drawn with respect to the identity of the actual customer or user.

Cookie provider

Third-party cookies: "Third-party cookies" are created and used by other bodies or websites, for example by providers of web analysis tools. Further information on web analysis tools and reach measurement can be found further on in this policy. Third parties can also use cookies to show advertising or to integrate content from social networks such as social plugins, for example.

Use of cookies for usage analysis and reach measurement

We use the following services for usage analysis and reach measurement:

We use Google Analytics, a service provided by Google Inc. ("Google"). Google Analytics uses third-party cookies to identify the frequency of use of certain areas of our app as well as preferences. The information on your use of our app (including your shortened IP address) generated by the cookie is transferred to a server operated by Google in the USA and stored there. Google uses this information on our behalf and on the basis of a contract for order processing to analyze your use of our app to compile activity reports for us, and to provide other services relating to the use of the service and Internet usage.

The legal basis for the use of services for usage analysis and reach measurement such as Google Analytics is Article 6 (1) (f) GDPR; our legitimate interests arise to this extent from the above-mentioned purposes, particularly the analysis, optimization, and cost-effective operation of our app.

Deletion of and objection to the use of cookies

The acceptance of cookies is not obligatory when using our app; if you would prefer not to have cookies saved on your device, you can disable the relevant option in the system settings of your device, browser or the app. Saved cookies can be deleted at any time in the system settings. If you choose not to accept any cookies, this can, however, lead to restrictions in the functions offered on our website.

You can also disable the use of Google Analytics cookies with a browser add-on if you do not wish to have web analysis. You can download it here: https://tools.google.com/dlpage/gaoptout?hl=en.

"Opt-out" information, which is used for the purposes of assigning your deactivation of Google Analytics, is stored on your device. Please note that this opt-out information only leads to the deactivation of Google Analytics on the device and the respective browser from which it was set. Furthermore, you must set it again when you delete cookies from your device. As an alternative to the browser add-on, on mobile devices you can also prevent data collection by Google Analytics by clicking on the following link [program using Java Script Code]. An "opt-out cookie" is then created, which prevents the future collection of your data. The opt-out cookie is valid only for the browser used to set it and only for our app and is stored on your device. You must set the opt-out cookie again when you delete cookies from your browser.

You can also enable the "Do Not Track function" on your device. If this function is enabled, your device informs the respective service that it does not wish to be tracked.

The statistically processed data is deleted from Google Analytics after 26 months. No personal reference is contained in reports created on the basis of Google Analytics.