In this Data Protection Notice (Privacy Policy) according to Article 13, 14 GDPR we are informing you about the processing of your personal data by AUDI AG, Auto-Union-Straße 1, 85057 Ingolstadt ("we") in the context of visiting a AUDI AG social media page.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing means any operation or set of operations performed with or without the aid of automated processes in connection with personal data such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In individual cases we can process your data for the following purposes:
Please observe your rights of objection when processing of data on the basis of our legitimate interest and your right to withdraw consent (see section 8 "What rights do you have?" and section "Information about your right to object").
4. Is there an obligation to provide data?
There is no obligation to provide personal data. To enter into a business relationship, you only have to provide the personal data that is necessary for the establishment and implementation of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude the contract or execute the order, or we will no longer be able to perform an existing contract and, if necessary, terminate it.
5. Who receives my data?
Due to the size and complexity of the data processing by the AUDI AG, it is not possible to list each recipient of your personal data individually in this data protection notice, which is why usually only categories of recipients are specified.
Within AUDI AG, your data is provided to the respective departments that need such data for data processing (e.g. sales division, human ressources)
As part of our social media activities, we also work with service providers (e.g. IT service providers or advertising and content agencies as well as personnel consultancies who support us in the creation of our articles as well as the provision and optimization of our social media page and our recruiting). To the extent that these service providers process personal data on our behalf, we have concluded a data processing agreement with these service providers and have agreed on appropriate safeguards to safeguard the protection of personal data. Our service providers in the context of our social media activities include
- We are Social, Klenzestraße 38, 80469 München (Publishing, Administration)
- Audi Interaction GmbH, Zeppelinstr. 48, 14471 Potsdam (Customer Care)
- Territory GmbH, Am Baumwall 11, 20459 Hamburg (Publishing, Administration)
- VICO Research & Consulting GmbH, Friedrich-List-Straße 46, 70771 Leinfelden-Echterdingen (Market research)
Your personal data will be disclosed by us to third parties only if this is necessary for the fulfilment of the contract, if we or the third party have a legitimate interest in the disclosure, or if you have given your consent. In addition, data may be transferred to third parties to the extent we are required to do so by law or by enforceable regulatory or judicial order. Third parties to whom we may transfer your personal data, irrespective of the services we provide, include
- Your Audi-dealer
- Service partner
- Importers
- External consultants of the AUDI AG (e.g. attorneys, tax consultant, chartered accountant)
- Authorities within their jurisdiction (e.g. tax office, police, public prosecutor's office),
- Courts
- Other third parties, if you instruct us to pass on data or give your consent.
6. Are data transmitted to a third country?
A transfer of data to third countries (i.e., countries that are neither members of the European Union nor of the European Economic Area) may occur to the extent necessary to perform services for you, if required by law, or where you have given us your consent.
Please note that not all third countries have a level of data protection recognised as adequate by the European Commission. AUDI AG will only transfer your personal data to third countries to the extent permitted by Art. 44 – 49 GDPR. Insofar as AUDI AG relies on appropriate safeguards in accordance with Article 46 (2) GDPR for third country transfers (e.g Standard Contractual Clauses or Binding Corporate Rules), AUDI AG will take additional technical and/or organizational measures to the extent necessary to maintain an adequate level of protection of you personal data.
You can obtain from us a copy of the specific applicable or agreed provisions to ensure an adequate level of data protection. To do so, please use the information in the contact section.
7. How long will my data be stored?
We store your data for as long as this is necessary to provide our services to you or we have a legitimate interest in further storage. If you wish to have your data deleted from the social media platform, please contact the operator of the respective social media platform, which alone has the direct access options in each case.
8. What rights do I have?
As the data subject, you are entitled to the following data protection rights:
Access:
You have the right to request access to personal data related to you and saved by AUDI AG, to be informed about the scope of data processing and data transfer by AUDI AG and to obtain a copy of your stored personal data.
Rectification:
With respect to your personal data stored, you have the right to demand the immediate rectification of incorrect personal data and you have the right to have incomplete personal data completed.
Erasure:
You have the right to demand the immediate deletion or erasure of your personal data stored, if the legal requirements are satisfied.
This is the case, in particular, if
- your personal data is no longer needed for the purposes for which it was collected;
- the sole legal basis for processing such data was your consent, and you have withdrawn such consent;
- you have objected to processing on the legal grounds relating to your particular situation, and we cannot prove that there are overriding legitimate grounds for processing;
- your personal data were processed unlawfully; or
- your personal data must be erased in order to comply with legal requirements.
Please note that your right to erasure is subject to certain limitations. For example, we may not and/or must not erase data that we are still required to retain due to statutory retention obligations. In addition, your right of erasure does not extend to data that we need in order to assert, exercise or defend against legal claims.
Restriction to the Processing:
Under certain conditions, you have the right to request that processing be limited (i.e., the marking of stored personal data with the aim of limiting its processing in the future). The requirements are:
- The accuracy of your personal data is contested by you and it must be verified the accuracy of the personal data;
- the processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
- your personal data is no longer needed for the purposes of processing, but you require the data to establish, exercise or defend your legal claims;
- you have objected to processing pending the verification of whether the legitimate grounds of the controller override your legitimate grounds.
Where processing has been restricted, such data will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of an EU Member State.
Data Portability:
To the extent that we automatically process your personal data that you have provided to us based on your consent or any contract with you (including your employment contract), you have the right to receive such data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from AUDI AG. You also have the right to have the personal data transmitted directly from AUDI AG to another controller where technically feasible, provided that such transmission does not adversely affect the rights and freedoms of others.
Right to Object:
If we process your personal data on grounds of legitimate interests or in the public interest, then you have the right to object to the processing of your personal data on grounds relating to your particular situation. In addition, you have an unrestricted right to object if we process your data for our direct marketing purposes. Please see our separate note in the section titled “Information about your right to object”.
Withdrawal of Consent:
If you have given consent to the processing of your personal data, then you can withdraw such consent at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.
Complaint:
Furthermore, you have a right to file a complaint with a data protection authority, if you believe that the processing of your personal data is unlawful. The right to file a complaint is without prejudice to any other administrative or judicial remedies.
The address of the data protection supervisory authority responsible for AUDI AG is:
Bayerisches Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
Deutschland
Information about your right to object
Right to object for personal reasons
You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place on the basis of a balancing of interests. This applies also to profiling.
Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can demonstrate compelling legitimate grounds but will, of course, examine each individual case.
In the event of an objection, we will no longer process your personal data, unless
- we can demonstrate compelling legitimate grounds for the processing of these data that override your interests, rights and freedoms, or
- your personal data serves the establishment, exercise or defence of legal claims.
Exercise of the right of objection
The objection can be made without form and should preferably be made to the contact data listed in this data protection notice.
With regard to data processing by AUDI AG, you can assert your above rights against AUDI AG at any time free of charge. With regard to data processing by the operator of the respective social media platform, you can assert your above rights against the respective operator at any time free of charge. For more information on how to exercise your rights, please see Section 9 below.
9. Contact person for exercising your rights
The contact person for exercising your rights is primarily the operator of the respective social media platform, who alone has direct access to the necessary information or makes the functionality of the respective platform available and can take appropriate measures immediately. The contact persons for exercising your rights vis-à-vis the operators of the respective social media platform and further information can be found in the information on data protection on the following websites of the respective social media platform:
- Facebook privacy policy under https://de-de.facebook.com/privacy/policy
- Instagram privacy policy under https://de-de.facebook.com/privacy/policy/
- LinkedIn privacy policy under https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
- YouTube privacy policy under https://policies.google.com/privacy?hl=de&gl=de
If the support of AUDI AG is possible or necessary, we will of course support you and, for example, forward your request to exercise your rights vis-à-vis the operators of the respective social media platform to them.
If you wish to assert your data protection rights concerning data processing activities by AUDI AG, please adress them to
There you will find further information on how to assert your data protection rights.
Postally you can contact:
AUDI AG, DSGVO-Betroffenenrechte, 85045 Ingolstadt