1. General Data Protection Regulation (GDPR)
The General Data Protection Regulation (GDPR) is a European regulation for the protection of natural persons in the processing of personal data. Personal data is any information that relates to an identified or identifiable natural person (individual). This new regulation will enter into force in all European Member States on 25.05.2018.
This results in the following relevant rights vis-a-vis AUDI AG for those concerned, among others:
the right to (i) data disclosure, (ii) data transmission, (iii) data deletion, (iv) data rectification, (v) revocation of consent and (vi) limitation of processing.
2. Rights of affected persons: customers and other groups of affected persons
In order to ensure transparent presentation of the desired data and targeted processing of your request, a distinction is made between the following groups of affected persons: customers and other groups of affected persons.
The customer category includes vehicle owners, (former) customers or interested parties of Audi original accessories, Audi original parts or digital Audi services.
Other groups of affected persons include (former) AUDI AG employees, family members of an employee, applicants, suppliers and service providers or business partners as well as their employees or visitors.
We ask you to always address your request to us by post so that we can ensure correct authentication and identification of the enquiring person.
In accordance with Articles 15 to 21 of the GDPR, the rights of the data subject are as follows:
you have the right to (i) data disclosure. This includes information about the data AUDI AG stores about you and the extent to which AUDI AG processes and passes on data, as well as a copy of the personal data stored about you.
If you make use of your right to data disclosure, we will provide you with information about the data AUDI AG has stored about you as a data subject. This information will only be sent to you by post.
You have the right to (ii) data transmission. If we automatically process your personal data provided by you on the basis of your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, current and machine-readable format. You may transmit this data to another responsible person without any impediment by AUDI AG. You also have the right to have the personal data transmitted directly by AUDI AG to another responsible person, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.
If you exercise your right to data transmission, you will receive the data AUDI AG has stored about you as the data subject in a machine-readable format. This information, including instructions for downloading your data, will only be sent to you by post.
You have the right to (iii) data erasure. This means the immediate deletion of your personal data stored by AUDI AG, provided that the legal requirements are met. If we have passed your data on to third parties, we will inform them of the deletion, insofar as this is legally required.
Please note that your right to erasure is subject to restrictions. For example, we may not have to or are not allowed to delete any data that we have to keep for legal retention periods. Data that we need to assert, exercise or defend legal claims is also excluded from your right of deletion.
If you exercise your right to data erasure, all your personal data will be deleted from the systems of AUDI AG immediately and irrevocably, unless we are entitled or obliged to further processing. However, you must delete your myAudi account and the data processed in connection with your myAudi account online in the portal yourself. Please log into the myAudi Portal and delete your account.
You have the right to (iv) data rectification. This means the immediate correction and or completion of the personal data stored about you at AUDI AG.
If you exercise your right to data rectification, we will make the desired changes in all our systems. We will only send you confirmation of this by post.
You have the right to (v) revocation of consent. Where you have provided your consent to us processing your personal data, you may withdraw this consent at any time. Please note that the revocation is only effective for the future. Processing that took place before the revocation is not affected by this.
If you exercise your right to revoke declarations of consent, you revoke all declarations of consent you have given to AUDI AG. All personal data processed on the basis of your declarations of consent will then be deleted immediately and irrevocably from the systems of AUDI AG, unless we are entitled or obliged to further processing. An example of such an obligation is the performance of a contract to which the data subject is a party.
You have the right to (vi) limitation of processing. This means that, under certain conditions, you may require the processing to be restricted (i.e. the marking of stored personal data with the aim of restricting their future processing). The data is marked accordingly and, apart from its storage, processed only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the EU or an EU Member State.
If you exercise your right to restrict processing, we will block your personal data in accordance with legal requirements. We will only send you confirmation of this by post.
3. Process flow for customer enquiries
We would like to point out that the enquiry concerns AUDI AG only. Other personal data may also be held by third parties, such as by an Audi Partner. Declarations of consent to third parties must be revoked with them. After receipt of your signed GDPR request form, Audi will process this in due time. Any feedback, including data if applicable, will be sent exclusively by post. We thank you for your cooperation.
If you, as the customer concerned, wish to exercise your rights, please contact us by post.
4. Data Protection Officer
Contact details of our company Data Protection Officer:
AUDI AG, Datenschutzbeauftragter, Auto-Union-Straße 1, 85045 Ingolstadt
Request form: Rights of data subjects
With the aid of the request form you can start a request conformable to GDPR (e. g. data access or data rectification requests) with respect to your processed personal data by AUDI AG. To do so, please follow the instructions on the request form.
Power of Attorney:
You need a power of attorney if you are not making the request on your own behalf. The data subject can use the enclosed power of attorney to authorise you to exercise their desired right on their behalf.
Confirmation from the vehicle owner:
If you are the sole user of a vehicle for a certain period of time, but not the vehicle owner, you need confirmation from the vehicle owner. If this is the case, we can only consider the Audi vehicle for your enquiry if you enclose confirmation from the vehicle owner that you were the sole user of the vehicle for the specified period. You will find the vehicle owner in Part I of the current registration certificate of your Audi vehicle.
Information Sheet on the Redaction of Unrequired Data on Verification Documents
6. Further information
Below you will find the official information on the European General Data Protection Regulation (EU GDPR).
7. Auto Union GmbH
If you would like to exert your rights as a data subject towards the Auto Union GmbH, please feel free to contact the following address:
Auto Union GmbH
Models, products and services – switch to your country / sales region website and discover the regional diversity of Audi.