PRIVACY POLICY

Introduction

With the following information we want to give you an overview of the processing of your personal data on our website https://www.porsche-ebike-performance.com/ (hereinafter referred to as "website"). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the Basic Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.

Table of Contents

• Controller
• Data Protection Officer
• Use of Third-Party Tools
• Provision of the Website
• General Information
• Purpose of Processing
• Legal Basis
• Retention Period
• Recipients of Personal Data
• Cookies
• General Information
• Technically Necessary Cookies
• Purpose of Processing
• Legal Basis
• Retention Periods
• Recipients of Personal Data
• Specifically used technically necessary cookies
• Analysis and Marketing-Cookies
• Purpose of Processing
• Legal Basis
• Retention Periods
• Recipients of Personal Data
• Specifically used optional cookies
• Contact
• General Information
• Purpose of Processing
• Legal Basis
• Retention Periods
• Recipients of Personal Data
• Newsletter
• General Information
• Newsletter Registration
• Newsletters for Existing Customers
• Newsletter Tracking
• Purpose of Processing
• Legal Basis
• Retention Periods
• Recipients of Personal Data
• Application
• General Information
• Purpose of Processing
• Legal Basis
• Retention Period
• Recipients of Personal Data
• Social Networks
• General Information
• Purpose of Processing
• Legal Basis
• Recipients of Personal Data
• Using online marketplaces for e-commerce
• General information
• Purpose of Processing
• Legal Basis
• Retention Period
• Recipients of Personal Data
• Your Rights
• Right to Confirmation
• Right to Access (Art. 15 GDPR)
• Right to Rectification (Art. 16 GDPR)
• Right to Erasure (Art. 17 GDPR)
• Right to Restriction of Processing (Art. 18 GDPR)
• Right to Data Portability (Art. 20 GDPR)
• Right to Object (Art. 21 GDPR)
• Withdrawing Consent
• Right to Lodge a Complaint
• Status of Privacy Policy

Controller

The controller according to Art.4 Nr. 1 GDPR is

Porsche eBike Performance GmbH
Marie-Curie-Straße 6, 85521 Ottobrunn
Telephone number: +49 (0)89 / 540462-100
E-Mail address: contact@porsche-ep.com

Data Protection Officer

You can reach our data protection officer as follows:

E-Mail address: dpo@porsche-ep.com

You can contact our data protection officer any time to ask questions and make suggestions regarding data protection and the exercise of your rights.

Use of Third-Party Tools

We use third-party services to provide certain functions and services on our website. The specific services can be found in the corresponding chapters.

In some cases, we use service providers that are based in a third country, i.e., outside the European Union. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 GDPR have been concluded. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send us an e-mail to the e-mail address mentioned in this privacy policy.

Provision of the Website

General Information

When you visit our website, data that your browser transmits to our serve, is automatically processed. This data is stored in the log files of the server (in so-called "server log files"). The following personal data is processed:

• Browser type and browser version
• Operating system used
• Referrer URL (previously visited website)
• Host name of the accessing computer
• Date and time of server request
• IP address
• Language settings

Purpose of Processing

We do not use the data stored in server log files to draw any conclusion about your person. The purposes pursued by us include:

• the guarantee of a smooth connection set-up of the website,
• the clarification of acts of abuse or fraud,
• problem analysis in the network, and
• the evaluation of system security and stability
• the processing of service requests

Legal Basis

The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.

Retention Period

The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.

Recipients of Personal Data

We use the following service providers:

Service Provider
Google Ireland Limited

Address
Gordon House, Barrow Street
Dublin 4
Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy

Service Provider
Team Viewer

Address
Bahnhofsplatz 2
73033 Göppingen
Deutschland

Third Country
-

Appropriate Safeguard
-

Further Information
Datenschutzhinweise

Cookies

General Information

We use cookies to give you the best browsing experience on our website. The data we collect with the use of cookies help us to optimize our website. We differentiate between technically necessary and non-necessary cookies.

Technically Necessary Cookies

These cookies are absolutely necessary to enable the basic functions of the website, like page navigation. The website will not run as it is intended to without these cookies. You can block or delete them by changing your browser settings. The technically necessary cookies cannot be blocked, otherwise the proper use f the website can no longer be guaranteed.

Purpose of Processing

We use technically necessary cookies for the following purposes:

• to provide services,
• to enable the use of our website functions, as well as
• to offer different languages.

Legal Basis

The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.

Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.

Recipients of Personal Data

We use the following service providers:

Service Provider
Google Ireland Limited

Address
Gordon House, Barrow Street
Dublin 4
Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy

Specific, technical necessary cookies used
Description
GA-consent

Purpose
Storage of the user’s optional cookie consent value

Description
GA-consent-revision

Purpose
Storage of the current version of the cookie policy

Description
sessionid

Purpose
Storage of a session token used by the server to identify the user’s session

Description
csrftoken

Purpose
Token to prevent CSRF attacks

Analysis and Marketing-Cookies

We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our offer.

Purpose of Processing

We use technically necessary cookies for the following purposes:

• to measure and track our reach,
• to evaluate the behavior of visitors on our website,
• to optimize our offer on our website, and
• to publish targeted advertising

Legal Basis

The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. The cookies are set only after you have given your consent via our cookie banner.

Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.

Recipients of Personal Data

We use the following service providers:

Service Provider
Google Ireland Limited

Address
Gordon House, Barrow Street
Dublin 4,
Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy

Service Provider
Meta Platforms Ireland Ltd.

Address
4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy

Specific optional cookies used

Description
_fbp

Purpose
Cookie placed by Facebook with the function of storing and tracking visits on the website

Description
_gid

Purpose
Cookie placed by Google analytics with the function of storing and counting page views

Description
_ga

Purpose
Cookie placed by Google Analytics with the function of reading and filtering requests made by bots

Description
_gat_UA-78448920-1 (_gat_UA-*)

Purpose
Cookie placed by Google Analytics with the function of technical monitoring

Contact

General Information

Through our website you can contact us by e-mail or via our form. To contact you and to answer your request, we process the following personal data from you:

• First and last name
• E-mail address
• Telephone number (optional)
• Country
• Date and time of the inquiry
• IP address
• If applicable, images or videos uploaded by you
• Other personal data that you provide to us while contacting us.

Purpose of Processing

We process your data to respond to your inquiry and other matters arising from it.

Legal Basis

If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.

If your request is made independently of contractual or pre-contractual measures, our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.

Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.

Recipients of Personal Data

We use the following service providers:

Service Provider
Quality Bicycle Products

Address
6400 W. 105th Street, 55438, Bloomington

Third Country
USA

Appropriate Safeguard
Adequacy decision

Further Information
Privacy Policy

Service Provider
Ampere Plus AG

Address
Roschbrunnen 3, 5053 Staffelbach

Third Country
Switzerland

Appropriate Safeguard
Adequacy decision

Further Information
Privacy Policy

Service Provider
VIMM Ltd.

Address
25 Autumn Blaze Street, NZ 0616 Hobsonville, Auckland

Third Country
New Zealand

Appropriate Safeguard
Adequacy decision

Further Information
-

Newsletter

General Information

We offer you the possibility to receive the newsletter of our company. With our newsletter, we inform customers and business partners about our offers at regular intervals. Within the scope of the newsletter dispatch, we process the following personal data:

• First and last name
• E-mail address
• Organization
• Preferred language
• Metadata (e.g., device information, IP address, date, and time of registration)

Newsletter Registration

If you register for our newsletter via our website, we will send you a confirmation e-mail. After confirming your registration through the double opt-in procedure, you will be placed in our newsletter database. This confirmation e-mail serves to verify whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter. In the process, the registration for the newsletter is logged.

Newsletters for Existing Customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, by e-mail. We base this processing on section 7 (3) of the German Act against Unfair Competition.

Newsletter Tracking

Our newsletters contain so-called tracking pixels. This is a miniature graphic that is embedded in e-mails. This allows us to track, for example, whether and when an e-mail was opened by you and which links in the e-mail were called up by you. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected by the tracking pixel is stored and analyzed by us to optimize the newsletter mailing and to better adapt the content of future newsletters to your interests.

Purpose of Processing

We process your personal data for the following purposes:

• Newsletter mailing: implementation of marketing measures.
• Double opt-in procedure: fulfillment of our legal obligations to provide proof.
• Newsletter tracking: display of personalized advertising, market research, performance measurement.

Legal Basis

The legal basis for the processing of your personal data in the context of the:

• newsletter subscription is your consent pursuant to Art. 6 (1) (a) GDPR,
• double-opt-in procedure is our legal obligation according to Art. 6 (1) (b) GDPR,
• newsletter mailing to existing customers is our overriding interest Art. 6 (1) (f) GDPR, and
• newsletter tracking is your consent pursuant to Art. 6 (1) (a) GDPR.

Retention Periods

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of the newsletter mailing, this is generally the case when you withdraw your consent or you object to the processing.

For this purpose, there is an opt-out link at the end of every newsletter. In addition, you also have the option of unsubscribing from the newsletter mailing at any time on our website or informing us of this in another way. When you select the unsubscribe option in our newsletters, we automatically interpret this as your withdrawal of consent or your objection to the processing.

Recipients of Personal Data

We use the following service providers:

Service Provider
Mailchimp

Address
The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA

Third Country
USA

Appropriate Safeguard
SCC

Further Information
-

Application

General Information

You can apply for job vacancies through our application form or via email. As part of the application process, we process the following personal data:

• First and last name
• Address
• Contact data (e.g., e-mail address, telephone number), and
• Application data (e.g., cover letter, resume, certificates, and other supporting documents).

Purpose of Processing

The purpose of the processing is to carry out the application procedure.

Legal Basis

The legal basis for the processing of personal data is the fulfillment of the contract and the implementation of pre-contractual measures pursuant to Art. 88 (1) GDPR in conjunction with § 26 (1) Federal Data Protection Act.

If we obtain your consent (e.g., for you to be included in our applicant pool), this constitutes the legal basis for the data processing.

Retention Period

If an employment relationship is established after completion of the application process, the personal data provided will be processed further for the employment relationship. Otherwise, we generally retain the data for six months after the end of the application process. We then delete all personal data. Longer storage periods are possible if we include the personal data in our application pool after obtaining your consent.

Recipients of Personal Data

We use the following service providers:

Service Provider
Personio GmbH

Address
Rundfunkplatz 4
80335 München

Third Country
-

Appropriate Safeguard
-

Further Information
Privacy Policy

Social Networks

General Information

We maintain presences in social networks to communicate with you and inform you about our services.

Purpose of Processing

The purpose of the processing is the maintenance of presences in social media.

Legal Basis

The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding interest corresponds to the above-mentioned purposes.

Recipients of Personal Data

We have company presences in the following social networks:

Social Network
Facebook

Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy
Contradiction settings
Joint Controller Agreement

Social Network
LinkedIn

Address
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy
Opt-out and retargeting opt-out
Joint Controller Agreement

Social Network
Instagram

Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy
Contradiction settings

Social Network
XING

Address
New Work SE, Dammtorstraße 29-32, 20354 Hamburg

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
SCC, adequacy decisions

Further Information
Privacy Policy
Contradiction settings

Social Network
YouTube

Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
Adequacy decisions

Further Information
Privacy Policy
Contradiction settings

Social Network
TikTok

Address
TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, London, England ("TikTok UK") und TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok Ireland") as Joint Controllers (“TikTok“)

Third Country
on a case-by-case basis USA and other third countries

Appropriate Safeguard
Adequacy decisions

Further Information
Privacy Policy

Using online marketplaces for e-commerce

General information

We offer our services on online platforms hosted by other service providers. In this context, data privacy policies of the respective platforms apply in addition to our privacy policy. This applies with regard to the range measurement and interest-based marketing processes used on the platforms.

In context of using online marketplaces, we process the following personal data:

• Inventory data (e.g. names, addresses)
• Payment data (e.g. bank details, bills, payment history)
• Contact data (e.g. e-mail, telephone numbers)
• Contract data (e.g. subject-matter of a contract, term, customer category)
• User data (e.g. visited websites, interest in content, access times)
• Meta/ communication data (e.g. device information, IP adress)

Purpose of Processing

The purpose of processing is to provide contract performances and customer service.

Legal Basis

The legal basis for the processing of personal data is the fulfillment of the contract and pre-contractual requests (Art. 6 (1) (b) GDPR, legitimate interests (Art. 6 (1) (f) GDPR).

Retention Period

We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.

Recipients of Personal Data

We use the following service providers:

Service Provider
Shopify

Address
Shopify International Limited , Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland

Third Country
-

Appropriate Safeguard
-

Further Information
Privacy Policy

Your Rights

Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

Right to Access (Art. 15 GDPR)

You have the right to obtain from us - at any time and free of charge - information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.

Right to Rectification (Art. 16 GDPR)

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, considering the purposes of the processing.

Right to Erasure (Art. 17 GDPR)

You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.

Right to Restriction of Processing (Art. 18 GDPR)

You have the right to demand that we restrict the processing if one of the legal requirements is met.

Right to Data Portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

In addition, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.

Right to Object (Art. 21 GDPR)

You have the right to object at any time, on the basis of reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) e GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) f GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Withdrawing Consent

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

Right to Lodge a Complaint

You have the right to lodge a complaint about our processing of personal data with a supervisory authority.

The responsible supervisory authority:

Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)
Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
P.O. Box 1349
91504 Ansbach
Telephone number: 0981/180093-0
Mail: poststelle@lda.bayern.de
https://www.lda.bayern.de

Status of Privacy Policy

This privacy policy is currently valid and has the following status: July 2022.

If we continue to develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.