2. Data controllers, data protection officers and data subjects' rights
In cases where we are dealing with a co-responsibility regime, we indicate in a co-responsibility agreement, in accordance with Article 26 of the GDPR, how the respective tasks and responsibilities arising from the processing are structured, and who fulfills the different data protection obligations. In particular, we determine how to ensure an adequate level of security and the rights of data subjects, how data protection reporting obligations can be jointly fulfilled, and how potential data protection incidents can be monitored. This also involves ensuring that reporting and notification obligations can be fulfilled. If you contact us, we will coordinate in accordance with the aforementioned agreement pursuant to Article 26 of the GDPR to respond to your inquiry and ensure your rights as a data subject. In the detailed views in the "Your cookie settings" area, you will find information on which cookies are used and who has (possibly joint) control over such use.
In addition, in connection with data processing via cookies on the Porsche Marketplace platform (offered by Porsche Sales and Marketplace GmbH, which includes the Porsche Finder and the Porsche Shop), joint control may be exercised together with the other parties participating on this platform, such as the Porsche companies (in particular, Porsche Financial Services GmbH and Porsche Services Ibérica, S.L.) and Porsche Centres, or the Porsche dealers and service companies. In this case, we shall also act according to the procedure described above and appropriate arrangements will be drawn up to organise joint control.
The external providers that technically implement the processing via cookies are listed as "Data recipients" in the detailed view under the "Your cookie settings" area, thereby allowing you to obtain information on them. If external providers act as processors or, in certain cases, joint controllers in conjunction with us, we shall enter into the necessary arrangements with these external providers or organise the data processing accordingly. Please note that external providers may merge the data generated with other data and also use it for their own purposes.
3. Categories of Personal Data
4. Categories of cookies and similar technologies
Cookies are text files that a website saves or reads on your end device. They contain combinations of letters and numbers that allow us to recognise users and their settings when they return to the website that set the cookie; they also enable users to remain logged in to a customer account and allow us to statistically analyse the behaviour of individual users. WebStorage technology allows local storage of variables and values in users' browser cache. The technology includes the so-called "sessionStorage" property, which remains stored until the browser tab is closed, as well as "localStorage", which remains stored in the browser cache until the user deletes it. The localStorage technology makes it possible, among others, to recognise users and their settings when they return to our website.
Cookies or similar technologies can only be accessed from the internet address at which the cookie was set. This means that we cannot access cookies set by the service providers involved. These service providers, in turn, are also unable to access our cookies. Third parties cannot access our cookies or those of the service providers involved. Third parties can only gain access through technical attacks that are beyond our control and for which we are not responsible.
Tracking pixels are small graphic files that are loaded from the servers of the respective service provider when users access our website. This also includes the loading of programme code that enables the collection of data (e.g. regarding their behaviour as users when visiting our website).
For general information on the cookies used, please see the sections and detailed view below ("Your cookie settings").
Your cookie settings on this website
5. Processing location
The processing of personal data collected by means of cookies is generally carried out in the European Union (EU) and the European Economic Area (EEA), or in third countries in relation to which the European Commission has confirmed an adequate level of data protection in accordance with Article 45(3) of the GDPR. However, it is possible, in particular, that any third-party providers used could have their registered office in third countries - such as the United States of America (USA) - which do not have a similar level of data protection to that required under the GDPR or could process the data there. In such cases, we shall comply with the requirements of Article 44 and following of the GDPR and take measures to bring the level of data protection into line with the GDPR standard by means of appropriate safeguards, in particular by entering into standard contractual clauses as set out by the European Commission in Article 46(2)(c) of the GDPR. In this regard, a transfer of data may also take place if it is necessary for the performance of a contract or the implementation of pre-contractual measures in accordance with Article 49(1)(b) and (c) of the GDPR.
With regard to analytics cookies, as well as (possibly personalised) marketing cookies, which are only used if the relevant consent has been obtained, by providing the declaration of consent under Article 49(1)(a) of the GDPR the user agrees that data may be processed in third countries outside the EU which lack a level of data protection that complies with the GDPR standard. For more information on the processing location of the cookies used, please refer to the sections and detailed view below ("Your cookie settings"). In relation to the granting of consent, please note that due to the different legal statuses of third countries, there may be latent risks that the transferred data will not be processed in accordance with the GDPR (e.g. by third-party providers that merge the data with other data and use it for their own purposes, where you may not be able to exercise your rights as a data subject, including the rights of access and erasure, as would be possible under the GDPR). In particular, local authorities in the third country in question could access the data without providing you with effective legal protection or enforceable rights as in the EU.
In the cookie settings and the settings of similar technologies used on our website, you have the option of voluntarily granting your consent to the use of (possibly personalised) analytical and marketing technologies, involving the potential transfer of data to third countries on an individual or general basis, as well as the option to revoke that consent at any time in the future.
If you do not wish to use certain technologies or cookies in general, you can also prevent them from being stored on your end device by configuring the appropriate settings on that device or in your internet browser.
You can select "Do not accept cookies" in your internet browser settings. The process of managing and deleting cookies in your internet browser settings is described in your internet browser's help menu. You can also block all cookies by using free internet browser plug-ins such as Adblock Plus (https://adblockplus.org/es/), in addition to the EasyPrivacy list (easylist.to) or Ghostery (ghostery.com). It is not possible, in all cases, to exclude access to similar technologies such as WebStorage content or Pixel-Tags.
Stored cookies can be deleted at any time in the system settings of your device or your internet browser.
Please note that the functionality and range of features of our offer may be limited if you block cookies or similar technologies or refuse to consent to their use.
7. Retention period for data obtained from cookies
The data obtained from cookies will be kept for the period necessary to achieve the purpose for which they were installed and, in particular, for the following periods:
a. User data or conversions in Google Analytics Universal: 26 months b. Google Analytics 4 data: 14 months c. Facebook Audiences data: 180 days
At the end of these periods, the data will be deleted.