Privacy Policy

Thank you for visiting our website and for your interest in Porsche Consulting and our services. To ensure that you feel safe and comfortable when visiting our website, we take the protection and confidentiality of your personal data very seriously.

We would therefore like to inform you with this Privacy Policy about the processing of in compliance with the applicable data protection regulations via our website.

Should you have any further questions regarding the use of your personal data, please do not hesitate to contact our data protection officer, whose contact details you will find below

According to the General Data Protection Regulation (GDPR), personal data is any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Examples of personal data are your address, your telephone number or your date of birth.

2. Collection and processing of personal data at Porsche Consulting GmbH

We process your personal data for the following purposes and on the following legal basis:

2.1.    Calling up our website

When using the website for purely informational purposes, and  do not register or provide us with information otherwise, we only collect the personal data that your browser sends to our server. This data is technically necessary to enable us to display the website and to ensure its stability and security. The legal basis for this is Art. 6 (1) f) GDPR. The data processing concerns the following data in particular:

• IP-address
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (concrete page)
• Access Status/HTTP Status Code
• Amount of data transferred in each case
• Website (where the request comes from)
• Browser
• Operating system and its interface
• Language and version of the browser software

In order to deliver certain content to you quickly and efficiently, we use the "Content Delivery Network" (CDN) of the provider Prospect One (sp.z o.o. Królewska 65A/1, 30-081 Kraków, Poland). A CDN is a service that helps to deliver the content of our website more quickly with the help of regionally distributed servers. The processing of user data is solely for these purposes and for the security and integrity of the systems, which is also our legitimate interest regarding Art. 6 (1) f) GDPR. 

Your data is transferred to servers within the EU, a transfer to a third country outside the EU/EEA is not intended.

2.2.    Contact form

You have the possibility to contact us via our e-mail address or the contact form. In this respect, the legal basis is our legitimate interest in answering your inquiry in accordance with Art. 6 (1) f) GDPR.

As far as we ask for input via our contact form that is not necessary for contacting us, we have always marked these as optional. This information serves us to concretize your request and to improve the processing of your request. Communicating this information to us is voluntary and only takes place with your consent. If this information concerns communication channels (e.g. e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to answer your request. If you provide information that has been marked as optional, the legal basis for processing is your consent in accordance with Art. 6 (1) a) GDPR.

Of course, you can revoke this consent at any time with effect for the future. To do so, please contact our Data Protection Officer, whose contact details are listed below.

2.3.    Surveys

If you participate in a survey, you will be redirected to the website of the provider. Please note the provider's data protection information.

The surveys can be conducted anonymously. The provision of personal data within the scope of such a survey is always optional. If you decide to voluntarily provide information about yourself, this personal data will be processed on the basis of your consent in accordance with Art. 6 (1) a) GDPR. You can revoke this consent at any time with effect for the future. Please send the declaration of revocation to the contact addresses given below. 

2.4.    Contact us by telephone

If we initially contact you by telephone, we have either generated your data from public sources or we use the information you have provided us with. The legal basis is our legitimate interest, Art. 6 (1) f) GDPR. Our interest in the initial contact by telephone outweighs the interest of the affected persons, since we exclusively address B2B clients via contact channels from public sources and the contact is related to specific events in connection with the business activity of the affected person. We only inquire about the initial telephone contact to find out whether there is any interest in the contact and do not already make extensive reference to our services.

2.5.    Processing of client data

If you conclude a contract with us regarding a consulting service, we collect your contact data, invoice data and contract data. The data processing is carried out for the purpose of contract initiation and contract implementation, Art. 6 (1) b) GDPR.

2.6.    Advertising for established customers by Porsche Consulting GmbH

If we receive your e-mail and postal address in the course of an order, we can use this data to inform you by e-mail and by mail about our own similar product and service offers from now on. If you do not wish to receive any further advertising information by e-mail or mail, you can object to the use of your contact data at any time with effect for the future without incurring any costs other than the transmission costs according to the basic rates. You can address your objection to the contact detail listed below.

2.7.    Information about events, News e.g.

On our website, you can subscribe to regular information from Porsche Consulting GmbH and its affiliated foreign companies about events, news and projects, as well as current developments and opportunities for cooperation. The legal basis for sending the information is your consent in accordance with Art. 6 (1) 1 a) GDPR with § 7 (2) no. 3 UWG (German Act against Unfair Competition/ Gesetz gegen den unlauteren Wettbewerb) or the legal permission according to § 7 (3) UWG.

In regards to the registration we use the so-called double-opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive information from our company. If you do not confirm your registration, your information will be automatically deleted after 3 days.

Mandatory information is solely data concerning your address, your company affiliation and your e-mail address. The provision of further data is voluntary. All data will be used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you information until revoked. We also store your IP address current at the time of registration, the time of registration and confirmation for up to three years after registration (statute of limitations). The purpose of this procedure is to be able to prove your registration in case of doubt and, if necessary, to clarify any misuse of your personal data. The legal basis for the logging of the registration is our legitimate interest in accordance with Art. 6 (1) 1 f) GDPR in proof of a previously given consent, see also Art. 7 (1) GDPR.

You can revoke your consent to the sending of regular information at any time, either by clicking on the link provided in our e-mails or by sending an e-mail to the contact detail listed below.

2.8.    Applications

You can apply for a job at Porsche Consulting online via our application portal. Your online application will be forwarded directly to the personnel department via an encrypted connection and will of course be treated confidentially. We will use your detail exclusively for processing your application and will not pass them on to third parties outside the Porsche Group (§ 26 (1) BDSG/ Federal Data Protection Act). If you have applied for a specific position and this position has already been filled or if we consider you equally or even better suited for another position, we will forward your application within the Porsche Group with your consent. Your personal data will be deleted immediately after completion of the application process, or after a maximum of 6 months, unless you expressly give us your consent to store your data for a longer period. You can find further information on data processing within the application procedure in the data protection declaration of our application portal. Please note that we only offer the application portal for applications. Should you nevertheless apply to us by e-mail, we would like to point out that e-mail attachments are not encrypted.

2.9.    Data processing at exhibitions

If you provide us with your contact detail at a trade fair, for example by giving us your business card, we will record this data in our client data system. We use your data to contact you, to establish a business relationship or to send you information material (Art. 6 (1) a), b) and f) GDPR).

2.10.   Customer satisfaction surveys

We would like our clients to be satisfied with our services and want them to receive the maximum benefit. In order to find out whether our consulting services meet your ideas and expectations, we conduct a satisfaction survey up to twice within the framework of a project. During this process, an e-mail is sent to the main contact person, asking them to participate in the survey for the specific project. To process the survey, we use the first and last name, organizational affiliation, function and e-mail address of the contact person. Personal data is processed exclusively for the purpose of conducting the customer satisfaction survey. You can object to the processing of the data at any time with effect for the future. You can send your objection to the contact detail listed below. The legal basis for the implementation of the client satisfaction survey is Article 6 (1) f) GDPR with § 7 (3) UWG.

2.11.   Adobe Sign

We use Adobe Sign a software from Adobe Systems Software Ireland Limited, located at 4-6 Riverwalk, City West Business Campus, Saggart D24, Dublin, Ireland ("Adobe Sign") for the digital signature of contracts and documents. For this purpose, Adobe Sign processes the data you entered when using the service as well as usage data of your terminal device and transaction-related data. Adobe Sign stores all personal data on servers within the EU. The legal basis is Art. 6 (1) b) and f) GDPR. For more information on data processing by Adobe Sign, please visit the Adobe Privacy Center.

2.11.   Centralized Systems

Porsche AG (Dr. Ing. h.c. F. Porsche AG, Porscheplatz 1, 70435 Stuttgart, Germany) and certain group companies of Porsche AG are jointly responsible for the processing of data within the scope of the group's internal administration and division of labor by means of centralized systems, IT security and administration, and the provision of individual services. To this extent, Porsche AG and the respective Group companies shall jointly determine the purposes and means of processing personal data.

Porsche AG and the respective Group companies have concluded an agreement on joint responsibility in accordance with Article 26 GDPR which defines the respective tasks and responsibilities in the processing of personal data and who fulfils which data protection obligations. In particular, it was determined how an appropriate level of security and your rights as data subjects can be ensured, how the duties to provide information under data protection law can be jointly fulfilled, and how potential data protection incidents can be monitored. This also includes ensuring that reporting and notification obligations are fulfilled.

Porsche AG is at your disposal as your central contact. You can assert your rights in relation to processing under joint responsibility, but also vis-à-vis a jointly responsible Group company. In accordance with the aforementioned agreement under Article 26 GDPR, Porsche AG and the relevant group companies will coordinate their actions in order to respond to your inquiry and to guarantee your rights as a data subject.

Further information on the Group companies involved can be found at 

https://www.porsche.com/germany/privacyjointcontroller/

We use various relevant cookies and tools to improve our website, to optimize the user experience and to evaluate the number of visitors. This only takes place if you have given us your consent for this in accordance with Art. 6 (1) a) GDPR. Further information on the cookies and website optimization tools used can be found in our Cookie Policy, which can also be called up from the Cookie-Consent-Manager.

So-called social bookmarks (e.g. from Facebook and Xing) are integrated on our website. Social bookmarks are Internet bookmarks that allow users of such services to collect links and news items. These are only integrated on our website as links to the corresponding services. After clicking on the integrated graphic, you will be redirected to the page of the respective provider, i.e. only then will user information be transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers.

To enable Porsche Consulting GmbH to process your data in accordance with the purposes described above, your personal data may also be viewed and processed by other recipients.

5.1.    Recipients within the Porsche Group

In special cases it may be necessary for us to process your data group-wide. However, data processing within the Porsche Group will only take place if we have legal permission to do so. This is the case, for example, if other companies within the group work for us within the scope of data processing, if there is a legitimate interest in accordance with Art. 6 (1) f) GDPR, if we are legally obliged to transfer data, or if you have given your consent.

5.2.    Data Processors

Your data will be passed on to service partners, provided that these partners work on our behalf and support Porsche Consulting GmbH in providing its services. Processing of your personal data by service providers takes place within the framework of data processing in accordance with Article 28 GDPR. We have concluded data processing agreements in the following areas (e.g.):

• IT-Hosting, maintenance and support
• Hosting service providers
• Mailing and dispatch service provider
• Call answering service provider

Such service providers will only have access to personal information that is necessary to perform their respective functions. These service providers are prohibited from passing on your personal information or using it for other purposes, in particular for their own advertising purposes.

5.3.    Other service providers, partners and third parties

Porsche Consulting GmbH may cooperate with other partners if it is necessary to fulfill our service offerings or if we are legally obliged to disclose data. These may be the following partners or third parties: 

• Credit institutions and payment service providers
• Credit assessments
• Transfer to public authorities or by court order
• Agencies

The personal data of the data subject will be deleted or blocked as soon as the purpose of the storage no longer applies. Furthermore, data may be stored if this has been provided for by the European or national legislator in EU directives, laws or other regulations to which the person responsible is subject. The data will also be blocked or deleted when a storage period prescribed by the above-mentioned standards expires, unless it is necessary to continue storing the data in order to conclude or fulfill a contract.

It is important to us to process your data within the EU. However, it may happen that we use service providers who operate outside the EU. In these cases, we will obtain assurance from the service providers that an adequate level of data protection is in place before your personal data is transferred. This means that by means of EU Standard Contractual Clauses or an adequacy decision, a level of data protection is achieved that is comparable to the standards within the EU.

Porsche Consulting uses technical and organizational security measures to protect your data managed by us against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights against the controller.

Insofar as your personal data is processed within the scope of a joint responsibility, you can assert the following rights against each responsible company in the Group. If there is a joint responsibility, we point this out separately in the respective privacy policy. An overview of the jointly responsible companies and their contact details can be found at

https://www.porsche.com/germany/privacyjointcontroller/

• Right to information according to article 15 GDPR
  You can request confirmation from us as to whether personal data concerning you is being processed by us. If we have processed your data, you are entitled to further rights of information as mentioned in Article 15 GDPR.
• Right of rectification
  If the data we have collected from you is incorrect or incomplete, you can demand that we correct it immediately in accordance with Article 16 GDPR.
• Right to limit processing
  Under the conditions of Article 18 GDPR, you may also request under certain circumstances that the processing of your personal data be restricted. According to the restriction, your data may only be processed with your consent or for the purpose of asserting, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the Union or of a Member State. We will inform you before the restriction is lifted.
• Right to deletion
  If one of the reasons set out in Article 17 (1) GDPR applies, you can demand that we delete the personal data relating to you without delay, unless there is an exception to the obligation to delete in accordance with Article 17 (3) GDPR.
• Right to information
  If you have asserted the right to correct, delete or limit the processing of your personal data against us, we are obliged to inform all recipients of your personal data in accordance with Article 19 GDPR, unless the communication is impossible or involves disproportionate effort. You also have the right to be informed about the recipients. You have the right to be informed about these recipients.
• Right to data transferability
  Furthermore, according to Article 20 GDPR, you have the right to receive your personal data in machine-readable format and to transmit the data to another responsible person without hindrance, provided that the conditions of Article 20 (1) a) GDPR are met. Your personal data may also be transmitted directly to another controller, provided that this is technically feasible and does not affect the freedoms and rights of other persons. This right does not apply to the processing of personal data which is necessary for the performance of a task in the public interest or for the exercise of official authority.
• Right of objection
  You have the right to object to Porsche Consulting GmbH processing your personal data at any time according to Article 6 (1) f) GDPR. We will no longer process your personal data unless there are legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
• Right to revoke your consent
  You have the right to revoke your consent at any time by notifying Porsche Consulting GmbH. The revocation of your consent does not affect the legality of the processing that has taken place on the basis of your consent until revocation.

This data protection declaration is continuously adapted in the course of technological development or changes to our offer. We will announce any changes on this page in good time. In order to keep yourself informed about the current status of data processing, this page should be called up regularly.

Porsche Consulting GmbH

Data Privacy Officer (DPO)
Porschestraße 1
74321 Bietigheim-Bissingen

E-Mail: datenschutz@porsche-consulting.com

Contact Detail of Controler

Porschestraße 1
74321 Bietigheim-Bissingen

phone: (+49) 0711 911-1 20 01
email: kontakt@porsche-consulting.com

represented by the management:
Eberhard Weiblen, Vorsitzender
Dr. Joachim Lamla, Federico Magno