Data protection

Porsche Bank AG and/or Porsche Versicherungs AG are responsible for data processing. In certain cases, Porsche Bank AG may also act as a processor for Porsche Versicherungs AG or Porsche Versicherungs AG may act as a processor for Porsche Bank AG.

We use all personal data provided by the customer on his application and / or the self-disclosure to us or disclosed during an ongoing business relationship. We also process data which we receive via information from third parties, such as credit agencies, company register. These data can basically be divided into the following data categories:

• Contact and identification data: Surname, first name, gender, address, e-mail address, telephone number, cell phone number, date/place of birth, identification numbers, nationality, etc.
• Contract data: purchased products, (financial) services, date of purchase contract, purchase price, optional equipment, warranties, etc.
• Creditworthiness and banking data: Payment history, balance sheets, data from credit agencies, score values, financial circumstances, account details, credit card number, etc.
• Accounting data: Books, inventories, opening balances, annual financial statements including management reports, business letters and accounting vouchers, etc., books and records, and related supporting documents.
• Vehicle usage data: with vehicle identification (VIN) or vehicle registration number Data linked to VIN/vehicle registration number.

For the fulfillment of a contract or for the performance of pre-contractual measures.

For the financing of motor vehicles within the scope of leasing or loan financing, maintenance products, the maintenance of savings accounts for capital investment at the customer's request by Porsche Bank AG and for the provision of insurance services by Porsche Versicherungs AG. This also includes the associated customer service and the handling of inquiries as part of the application and quotation process.

For the fulfillment of legal obligations

Your data is also stored for the fulfillment of documentation and retention obligations under commercial and tax law by our accounting and bookkeeping department. Further legal bases on the basis of which your data is processed and/or transmitted result, for example, from the Financial Market Money Laundering Act (FM-GwG), the associated due diligence requirements for the prevention of money laundering and terrorist financing, the Common Reporting Standard Act (GMSG), the Deposit Guarantee and Investor Compensation Act, the Capital Adequacy Regulation, Regulation (EU) No. 575/2013, the Consumer Credit Act and the Banking Act. For our auditing, and reporting as well as risk management or risk assessment.

For the protection of legitimate interests of us or third parties.

To exercise or defend legal claims

We also process personal data in case of need for the exercise or defense of legal claims. Our legitimate interest in this respect is the enforcement of legal claims arising from the financing-insurance contract, the securing of vehicles and the settlement of outstanding accounts. In this respect, it is also a matter of minimizing the following economic risks: object risk, default risk and liquidation risk.Credit assessment

We also process personal data for credit assessment and risk assessment of financing and leasing products in the contractual and pre-contractual area. The basis for this data processing is the Consumer Credit Act and the legitimate interest. The legitimate interest here is creditor protection and risk minimization.

For the credit assessment and processing of the application, we are entitled to obtain the information about the customer necessary to protect our legitimate interests within the legal provisions from the Kreditschutzverband 1870 (KSV) and the information network system of consumer credit records operated by it.

In order to protect our legitimate interests in the assessment of creditworthiness, risk minimization or to protect creditor interests, in the context of financing, the following data may also be collected: First and last name, address, date of birth, lease amount, industry, telephone number and bank details. be forwarded to CRIF GmbH, Diefenbachgasse 35/1, 1150 Vienna, Bisnode Austria GmbH, Geiselbergstraße 17-19, 1110 Vienna.

Refinancing

For refinancing by Porsche Bank AG in the context of other legitimate economic interests, information on the customer and the contractual relationship may also be transmitted in encrypted form to a data trustee by way of a silent assignment. This is done to ensure additional data security measures in the course of an assignment of receivables or transfers of the contractual relationship. Non-personal data will also be transmitted to a debt purchaser if this is necessary for the purposes of a debt assignment or transfer from a contractual relationship. Personal data will only be disclosed to the debt purchaser if corresponding seizure events occur and these reflect a legitimate interest.

Compliance, including fraud and corruption prevention

Porsche Bank AG also processes the personal data made available to it when necessary to check the integrity of business partners as part of a business partner check and to prevent corruption and fraud. In this context, donations and gifts to and from third parties are documented in a database based on the compliance regulations of Volkswagen AG. Fraud prevention is also carried out to prevent possible misuse of financing and insurance benefits.

Marketing activities and market research

Depending on the use case, we process your data for marketing as well as for market research in order to promote our products. Our legitimate interest is to offer existing or potential customers financing and insurance products tailored to their customer needs. You have the right to object to the processing of personal data for direct marketing purposes at any time. (E-mail address: kontakt@porschebank.at. Controlling and reporting

On the basis of customer and/or contract information, customer and contract-related evaluations can be created for controlling and reporting purposes. This is done primarily in connection with the data processing purposes we pursue, but also in order to be able to improve our products and/or services and customer processes.

Group-wide customer data management

In the context of an existing customer relationship, data may be exchanged within the group of companies between Porsche Bank AG or Porsche Versicherungs AG and Volkswagen Versicherungsdienst VVD GmbH if necessary. This is done for internal administrative purposes or group-wide customer relationship management. This provides customers with better service, including faster processing of inquiries.

Use of online services

Please note that when using our online services, these can be connected to the CarLog customer portal. This way, your category master data (contact & identification data) will be retrieved directly from the carLOG application. Our partner Porsche Porsche Konstruktionen GmbH & Co KG (Louise-Piëch-Straße 2, 5020 Salzburg) provides access via carLOG.

Within the scope of a consent granted by you

If you have given us your explicit consent for our marketing activities and market research.

If you have given us your express consent for the processing of sensitive data as health data. In general, processing of this data is carried out exclusively within the framework of §§ 11a-d of the Insurance Contract Act.

In other cases, please do not provide us with sensitive data, such as data on trade union membership or health data, in the documents you make available to us.

In order to fulfill the stated purposes, your data will be transmitted to the following recipients or categories of recipients as processors in case of need:

• Porsche Informatik GmbH
• Porsche Constructions GmbH & Co KG
• Supplier or agent of the vehicle, custody dealer
• Scanpoint GmbH
• Excon Controlling Austria GmbH
• Printkom GmbH
• Advertising agencies, market research institutes
• Raiffeisen Bank International AG
• R-IT (Raiffeisen IT) GmbH
• Thomson Reuters Austria Ges.m.b.H.
• Porsche Corporate Finance GmbH
• NTT Data GmbH
• Audatex Austria GmbH
• Other web, print, scan, service and IT service providers

The data thus transferred may only be used by processors to fulfill their specified task. Your data may also be transferred to the following recipients or categories of recipients in case of need on the basis of the stated legal basis:

• To: Porsche Holding GmbH, Volkswagen AG - Why: Legitimate interest, internal auditing, compliance reporting
• To: Co-applicants - Why: Legal information requirements
• To: Cardif Allgemeine Versicherung AG, Volkswagen Versicherungsdienst VVD, UNIQA Österreich Versicherungen AG, Generali Versicherungs AG, Wiener Städitsche Versicherung AG - Why: Conclusion of an insurance contract
• To: Insurance companies, partner workshops, experts and reinsurers - Why: Insurance claim, justified interest in the preparation of expert opinions, risk assessment
• To: Kreditschutzverband 1870 (KSV), CRIF GmbH, Bisnode Austria GmbH - Why: Legitimate interest in assessing creditworthiness and/or minimizing risk
• To: legal representatives, courts - Why: in case of need, legitimate interest in defending and asserting legal claims
• To: debt collection companies - Why: in case of need, justified interest in settling outstanding accounts, securing property
• To: Austrian National Bank, auditors, Einlagensicherung der Banken und Bankiers GmbH, state authorities - Why: within the scope of statutory reporting obligations
• To: banks, payment service providers - Why: for processing payment transactions, for contract performance
• To: mineral oil companies - Why: if a fuel card is requested in addition to the contract
• To: external consultants - Why: to fulfill legal obligations
• To: shipping and transport service providers - Why: to ship goods, for contract fulfillment.

We only store your personal data for as long and to the extent that this is necessary for the stated purposes or we are legally obliged to do so.

In order to fulfill the commercial and tax documentation and storage obligations, data is stored for the duration of the contract plus seven years. If your request does not lead to the conclusion of a contract, your data will be deleted again. As part of our duty of care to prevent money laundering and the financing of terrorism, we are obliged to store data for a period of 10 years after the end of the business relationship. As part of the defense and assertion of legal claims, we store your data within the framework of the general statutory limitation periods.

If the processing is based on consent, you as the data subject have the right to withdraw this consent at any time.

In principle, you have the right to information, correction, deletion, restriction of processing and objection as well as, insofar as provided for by law, a right to data portability. For this, please contact us. If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you can lodge a complaint with the supervisory authority. In Austria, the data protection authority is responsible.

You can assert these rights by sending an email to info@porschebank.at.

Announcement of data protection officer according to Article 37 (7) General Data Protection Regulation (GDPR) for Porsche Bank AG and Porsche Versicherungs AG:

Mr. Werner Krumpschnabel, LLM.oec., LL.M.

kontakt@porschebank.at

The protection of your privacy when using our website is particularly important to us. Therefore, we will inform you thoroughly about the processing of personal data in the following. Porsche Bank Aktiengesellschaft and/or Porsche Versicherungs Aktiengesellschaft are responsible for data protection on this website. We strictly adhere to the applicable data protection regulations when using and processing personal data.

This data protection declaration applies only to (www.sharetoo.at, www.porschebank.at, www.flottenmanagement.at and www.porschebank.com) and the related sub-pages, but not to websites controlled and operated by third parties. Please review the privacy statements of websites controlled and operated by third parties, as these websites are beyond our control and we are not responsible for their content or privacy practices.

It is pointed out that all processing of personal data may only be used by persons who have reached the age of 14. Participation in various promotions (competitions, registrations for events, etc.) on the Facebook fan page and the resulting processing of the data of users under this age limit is prohibited without the consent of the parents/guardians. Should such data processing nevertheless occur, we will stop processing this data as soon as we become aware of it within the scope of the given possibilities.

We have taken appropriate technical and organizational measures to protect your data against loss, manipulation or unauthorized access, among other things. The measures taken are subject to regular review and are continuously adapted to the state of the art.

Should a breach of the protection of your personal data occur that is likely to result in a high risk to your rights and freedoms, we will notify you immediately.

Data provided by you

Personal data will only be processed by us in accordance with the applicable data protection regulations. When you correspond with us or fill out a form on our website with data, you acknowledge that the data you provide in the respective form will be processed for the purposes described below (see Data Processing Not Requiring Consent) or to process a contact request, to fulfill a contract or to carry out pre-contractual measures at your request.

Data collected by us

When you visit our website, data is collected by cookies in a technically automated manner. You can find more information about cookies used on our website on this page under Use of cookies.

Porsche Bank Aktiengesellschaft and/or Porsche Versicherungs Aktiengesellschaft does not carry out all processing of personal data itself, but has the support of professional partners, namely Porsche Informatik GmbH with registered office in 5020 Salzburg, Vivid Planet Software GmbH with registered office in 5302 Henndorf am Wallersee and Porsche Austria GmbH & Co OG with registered office in 5020 Salzburg as well as Q2E GmbH with registered office in 3100 St. Pölten, which act on our behalf.

The partners have been carefully selected and take appropriate technical and organizational measures to ensure that your data is processed in accordance with data protection laws and that your rights are protected. The partners are not permitted to use the personal data provided for their own or advertising purposes or to pass it on to third parties.

As a result, other web service and IT service providers may also be used for us or act on our behalf.

Consent to be contacted for marketing and market research purposes

If you have given your express consent in the registration process for the newsletter on our website, you agree that we may process your personal data (contact and identification data) for the purposes listed below: Sending information about products, services, events and market research - and quality assurance / improvement purposes by post, telephone / SMS, e-mail. The granting of this declaration of consent is voluntary and can be revoked at any time in writing to the following e-mail address flottenmanagement@porschebank.at with effect for the future. Your revocation does not affect the legality of the processing of your data that took place on the basis of the consent until revocation.

Request for advice to dealers

When requesting advice from dealers on the website, the data you provide in the advice form will be processed by Porsche Bank AG for the purpose of processing the advice request to fulfill a contract or to carry out pre-contractual measures at your request. In the process, the data provided in the form will also be forwarded to the relevant dealer for the aforementioned purpose and legal basis.

Online damage report

When reporting damage online on the website, the data you provide in the form will be processed by Porsche Versicherungs AG for the purpose of handling damage claims. In the process, the data provided in the form will also be forwarded to insurance companies UNIQA Österreich Versicherungen AG, Untere Donaustraße 21 in 1029 Vienna and to Generali Versicherungs AG, Landskrongasse 1-3 in 1010 Vienna, as well as to partner workshops and experts for the purpose of processing the insurance claim or fulfilling the contract and/or preparing expert reports, carrying out repairs on the basis of our legitimate interests in the event of a claim.

Please do not provide us with any sensitive data, such as personal health data, in the documents you upload and make available to us. If you nevertheless provide such sensitive data, you expressly consent to the processing of this data for the purposes of claims handling by Porsche Versicherung.

General contact

Should you send us an inquiry, e-mail or letter, your personal data will be processed by us from the receipt of the respective inquiry. In this context, the data provided in the form will be processed for the purpose of processing a contact request or for the performance of a contract or for the performance of pre-contractual measures upon request. The justification for this is the execution of a contract or a pre-contractual relationship with you or our legitimate interest in being able to process your individual inquiries through the contact channels as well as to be able to answer them quickly and reliably.

Processing of the sweepstake

When participating in the Porsche Bank competition, your personal data provided in the form will be processed for the purpose of handling the competition. The justification here is the fulfillment of a contract or the implementation of pre-contractual measures. The data will be stored until the end of the competition and the announcement of the winners and then deleted.

Porsche Bank AG stores the personal data for the duration of the statutory retention obligations. Data entered in forms on our website will be deleted after 30 days.

The customer has the statutory right to information as well as to correction, deletion, restriction of processing, a right to object to processing and, where provided by law, a right to data portability. There is a right of appeal to the Austrian data protection authority.

These rights must be asserted with Porsche Bank AG by sending a message to the e-mail address kontakt@porschebank.at.

Bekanntgabe Kontaktdaten Datenschutzbeauftragter nach Artikel 37 Abs 7 Datenschutz-Grundverordnung (DSGVO) für die Porsche Bank AG und Porsche Versicherungs AG:

Porsche Bank AG

Datenschutzbeauftragter

Vogelweiderstraße 75

A - 5020 Salzburg

Datenschutz@porsche.co.at

A cookie is a small text file that saves internet settings. Almost all websites use this technology. It is downloaded by your internet browser the first time you visit a website. The next time you access this website with the same device, the cookie and the information stored in it is either sent back to the website that generated it (first-party cookie) or sent to another website to which it belongs (third-party cookie). This allows the website to recognise that it has been accessed with this browser before, and in some cases it varies the content displayed.

Some cookies are extremely useful, since they are able to improve the user experience when accessing a website that you have already visited multiple times. For example, provided you are using the same device and the same browser as before, cookies remember your preferences, share how you use a website and adapt the offers displayed to be more relevant to your personal interests and needs. The majority of the cookies used by us are automatically deleted from your hard drive once more at the end of the browser session (“session cookies”). In addition, we also use cookies that remain on your hard drive beyond the end of the session. This takes place primarily in order to enable us improve the user experience when you access the website again by making it possible for the website to subsequently be adapted to your personal needs and thus optimise loading times.

Cookie Settings

The granting of consent is neither legally nor contractually prescribed; not granting consent does not have any disadvantageous consequences for you and is voluntary. Furthermore, it is possible for you to revoke your consent at any time without providing reasons with effect for future processing operations:

Cookie Settings