Icons of Porsche | Privacy Policy

We, Porsche Middle East and Africa FZE (hereinafter referred to as "we" or "PME" or “us”), are happy about your interest in our 2023 Icons of Porsche Event, held in Dubai, United Arab Emirates (hereinafter referred to as the "Event"). We take the protection of your personal data very seriously. Your personal data is processed only within the scope of the legal provisions of the United Arab Emirate's Federal Data Protection Law (“PDPL”), and applicable regulations including the General Data Protection Regulation (hereafter "GDPR"). In this Privacy Policy, we provide you with information about the processing of your personal data and your rights as a data subject in the context of the steps taken by PME to process your request. For information on the processing of personal data in other areas, please refer to the respective specific privacy policies.

This Privacy Policy applies to all customers, visitors, third parties, and others (hereinafter referred to as "you" or the "user") attending the Event or who access or use our website https://www.iconsofporsche.com/ (“Event Website”), customer and employee portals and social media pages in connection with the Event.

The intent of this Privacy Policy is to inform you about the following:

What information we may gather about you and the purpose for gathering it.
How we may use the information gathered from you and who do we share it with.
Your rights to privacy when it comes to your personal data.

If we refer to this Privacy Policy from external social media profiles, the following explanations apply only insofar as the processing takes place in our area of responsibility and insofar as no more specific and therefore prior information on data protection is provided in the context of such social media profiles.

1. Controller and data protection officer

Responsible for the data processing as controller in terms of data protection law is:

Controller for data processing in accordance with the data protection legislation is:

Porsche Middle East and Africa FZE
Plot-29-911, Dubai Silicon Oasis
Dubai, United Arab Emirates
P.O. Box 341356
Telephone (+971) 4 3569 911
Service License No. 25
www.porsche.com

If you have any questions or suggestions regarding data protection, please feel free to contact us. You can reach our data protection officer as follows:
You can contact our data protection officer at the following address:
Porsche Middle East and Africa FZE
Plot-29-911, Dubai Silicon Oasis
Dubai, United Arab Emirates
P.O. Box 341356
Telephone (+971) 4 3569 911
Email [email protected]

2. Subject matter of data protection

The subject matter of data protection is the protection of personal data. This is all information relating to an identified or identifiable natural person (so-called data subject). This includes information such as name, postal address, email address or telephone number, as well as information that necessarily originates within the context of contact when processing your respective request, such as complaints, data quality related enquiries, enquiries about the Porsche Sales Organization or Porsche Marketing campaigns. This also includes other information that may be generated when attending the Event and using the Event Website, in particular information about the beginning, end and extent of use as well as the transmission of your IP address.

2.1 How do we collect personal data?

PME will generally collect your personal data directly from you. This is achieved through your interactions, electronic, telephone communications or our security systems. We collect personal data indirectly from you through our business partners, suppliers, marketing agencies and other third parties such as your local Porsche Centre or Porsche Importer.

Most of the personal data collected by PME is provided by you voluntarily for example when you use the “Get Notified” function on the Event Website or register for the Event and personal data that you have provided by registering to the 2021 Icons of Porsche Event or the 2022 Icons of Porsche Event. The remaining personal data may be collected for the protection of public interest and the interests of data subjects, the protection and the defence of our rights, property, or safety or that of our clients and visitors of PME, the compliance with regulations applicable to PME, or the performance of contractual obligations.

3. Purposes and legal basis of data processing

The use of personal data during a form of making contact regarding the related enquiry is partially permissible without registration. Even when you use the website without registering however, personal data can be processed. In the following, you will find an overview of the purposes and legal basis of data processing in connection with the Event. In any case, we process personal data in accordance with the legal requirements, even if in individual cases a different legal basis should be relevant than that stated below.

The provision of personal data by you may be required by law or contract or may be necessary for the conclusion of a contract. We will point it out separately if you are obliged to provide personal data and what possible consequences the non-supply would then have (e.g., a loss of claims or our position not to provide the requested service without providing certain information).. The use of individual functions may require prior registration. Even if you use our websites without registration, personal data may still be processed.

3.1 Performance of a contract and pre-contractual measures

We process your personal data if this is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken in response to your request. The purposes of processing include enabling the use of our specific products and services within the scope of the Event. Please also note the details in the respective documents describing our products and services further to this Privacy Policy.

The processing before and in connect with the Event includes, but not limited to, these are the following functions:

“Get notified” – Function
Prior to the official registration period for the Event, you have the chance to provide your E-Mail address to get notified once registration is open to the public and receive relevant information about the Event. You will have the option to unsubscribe from the notifications at any time.
Registration for the Event
We require you to register for the event and provide your personal data during the registration process. Registration is not possible without the mandatory data. The mandatory data required for the registration are marked with an "*" in the respective input field, we collect: salutation, first and last name, age range, email address, mobile number, country and city from which you travel to the Event (only for UAE), vehicle data, and the same data will be collected from you for any guests you will bring to the Event.
If you do not provide us with this information, we may not be able to attend the Event. The data you provide will be used by us to provide you with your entry tickets, confirm your identity and the fulfilment and performance of the contract between you and us as well as our legitimate interest to ensure a seamless customer experience at the Event and to provide you with relevant updates (i.e., timings, agenda points and other information and reminders) on the Event via your preferred communication channels. You will have the option to unsubscribe from the notifications at any time.
Attending the Event
To grant you access to the Event, you will need to provide the entry tickets that you have received from us after registering for the Event and we may process your personal data to confirm your identity. When entering the Event premises, we will also track the time and duration of your visit. If you attend the Event with a Porsche vehicle, we will use the vehicle data provided by you during the registration to allocate you, and grant you access to, the respective parking area. We use this data for the fulfilment and performance of the contract between you and us as well as our legitimate interest to ensure a seamless customer experience at the Event and track Event capacity.
Data collected at the Event
At the Event, we may collect information about your Porsche merchandising purchases and data about new vehicle purchase intents (incl., Model, purchase interest, purchase intent and time). This information is collected from you directly by speaking to our Porsche dealers and service companies, cooperation partners and service providers at the Event, provided by you voluntarily and processed by us based on our legitimate interests mentioned in Section 3.4 below.

3.2 Compliance with legal obligations

We process your personal data to comply with legal obligations to which we are subject. These obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law and to comply with requests by the relevant authority. The purposes of the processing result from the respective legal obligation; as a rule, the processing serves the purpose of complying with state control and information obligations.

3.3 Audio and Video Recordings and Photography at and during the Event

PME and/or our respective partners may take photos, video, and audio recordings (the ‘Recordings’) of you during the Event. The creation, processing and publication of recordings and the personal data contained therein will be carried out based on our legitimate interest to use Recordings made at the Event for internal and external corporate communications on different channels.

Where reasonable and feasible, we will inform you at the Event before Recordings are made and you will have the chance to object by speaking to the photographer and/or choosing to stand out from the shot if you see that photographs/videos are taken. Online publication is international, and it cannot be ensured that all Recordings once published can be removed without a trace. In addition, the recordings from an online publication can be found via search engines.

To object the processing of Recordings that contain your personal data (and enable to specifically identify you and are not part of a larger group, landscape or scenic shot), you can contact our data protection officer using the contact details provided in Section 1.

3.4 Safeguarding of legitimate interests

We also process your personal data to pursue the legitimate interests of ourselves or third parties, unless your rights, which require the protection of your personal data, outweigh these interests. The processing to safeguard legitimate interests is carried out for the following purposes or to safeguard the following interests.

Further development of Porsche products and offerings of Events, services and support offers as well as other measures to control business transactions and processes;
Improvement of product quality, elimination of errors and malfunctions, among other things by means of analysis of vehicle data and customer feedback;
Processing and updating of personal data in a central prospective customer and customer care platform as well as upstream and downstream systems for customer retention and sales purposes;
Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences and customer potential;
Handling of non-contractual inquiries and concerns;
Ensuring legally compliant actions, prevention of and protection against legal violations (especially criminal offences), assertion of and defense against legal claims, internal and external compliance measures;
Ensuring availability, operation and security of technical systems as well as technical data management;
Answering and evaluation of contact requests and feedback;
Processing warranty and goodwill cases as well as non-contractual prospect and customer inquiries and concerns.

3.4.1 Use of the Event Website

When you call up the Event Website www.iconsofporsche.com data relating to your end device and your use of the online behaviour (cookie) are processed and stored in a so-called log file. We collect Information about the beginning, end and extent of use as well as the transmission of the IP address of the device you use to connect to the Internet, the geographical location of your device, the browser you are using, the type of device you are using (tablet, mobile, desktop), the URL you came from and the websites you access. This concerns in particular technical data such as date and time of access, duration of the visit, type of terminal device, operating system used, functions used, amount of data sent, IP address and referrer URL. We process this data to ensure technical operation and to determine and eliminate faults. In doing so, we pursue the interest of permanently ensuring technical operability. We do not use this data for the purpose of drawing conclusions about your person.

3.4.2 E-Mail-analyses

When we send emails for customer and prospect management or to supply you with relevant updates on the Event, we may use commercially available technologies such as tracking pixels or click-through links. This enables us to analyse which or how many emails are delivered and/or rejected and/or opened. The latter is done in particular using tracking pixels. It will not be possible to fully measure the opening rate of our emails using tracking pixels if you have deactivated the display of images in your email program. In this case, the email will not be displayed completely. However, we are still able to track whether an email has been opened if you click on text or graphic links in the email. By using click-through links, we can analyse which links in our emails are clicked and derive what interest there is in certain topics. When you click on the corresponding link, you are guided through our separate analysis server before the target page is called up. Based on the results of the analysis, we can make emails more relevant, send them in a more targeted manner or stop them from being sent. If you do not want such data to be collected and tracked, do not click on text or graphic links in emails.

3.4.3 Social Media Widgets and External Links

Our websites may include links to social media platforms such as Facebook, Twitter, YouTube, and others as well as external links to other websites. These links may collect information about you by providing you with their services, setting cookies or employing other tracking technologies. Your interactions with those websites and features are governed by the Privacy Policy of the companies that provide them.

3.5 Consent & Direct Marketing

If you give your consent, it is always for a specific purpose; the purposes of processing are determined by the content of your declaration of consent. You may revoke any consent you have given at any time, without affecting the legality of the processing that has taken place on the basis of the consent until revocation.

If you have given your consent, we and our related partners listed in this Privacy Policy can use the data on this basis, e.g. for individual customer and prospective customer support and contact you for these purposes via the communication channels you have requested. Your data will be used in this context to offer you an inspiring brand and customer care experience with Porsche and to make communication and interaction with you as personal and relevant as possible. Which of your data is actually used for individual customer and prospective customer support depends in particular on which data has been collected on the basis of orders and consultations (e.g. when buying or servicing Porsche products) and which data you have provided (e.g. your personal interests) at the respective contact points (e.g. at the Porsche Center).

3.6 Newsletter

We send out newsletters after respective registration, i.e. with your consent. If the contents of the newsletter are specifically described in the context of a registration, these are decisive for the scope of the consent. Furthermore, our newsletters contain information about our products, offers, promotions and our company. The entity named in the registration process is responsible for processing your data. The registration is carried out by means of the so-called double opt-in procedure, i.e. after your registration you will receive an email asking you to confirm your registration in order to prevent the misuse of your email address. The registrations for the newsletter are logged by us in order to be able to prove the registration process and the consent contained therein in accordance with the legal requirements. The logging of the registration and the necessary processing of the data entered by you during the registration process is accordingly based on our legitimate interests. You can revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter.

3.7 Change of purpose

If we process your personal data for a purpose other than that for which the data was collected, beyond the scope of a corresponding consent or a mandatory legal basis, we will take into account, the compatibility of the original and the now pursued purpose, the nature of the personal data, the possible consequences of further processing for you and the guarantees for the protection of the personal data.

3.8 Profiling

We do not use automated decision-making processes to prepare, establish and forge business relationships. Profiling is only performed within the framework of the processing purposes described in this document to protect our justified interests.

4. Cookies and comparable technologies

We use cookies and comparable technologies in connection with the Event website which serve to communicate with your end device and exchange stored information (hereinafter collectively referred to as "Cookies"). These Cookies are primarily used to make the functions of the Event Website usable. General examples in which the use of Cookies is technically required in this sense are the storage of a language selection, login data or a shopping or watch list. Accordingly, technically required Cookies may be used by us to enable the processing described in Section 3 and to ensure the proper and secure operation of the Event Website. The data processing is then carried out, as it is necessary to implement the functions you have selected or to protect our legitimate interest in the functionality of the Event Website.

Insofar as we should also use Cookies in order to analyse the use of the Event Website and to be able to target it to your interests and, if necessary, to provide you with interest-based content and advertisements, this is done exclusively on the basis of your voluntary consent. You will then have the opportunity to make the appropriate settings within the Event Website via the consent management. You may revoke any consent you have given at any time with effect for the future. Further information on Cookies and their function in detail as well as on setting and revocation options can be found directly in the corresponding areas of the consent management. Please note that we only make available the consent management in the context of the Event Websiteif, in addition to the above-mentioned technically required Cookies, consent- based Cookies are to be used.

If you do not wish to use Cookies in general, you can also prevent their storage by adjusting the settings of your end device accordingly. Stored Cookies can be deleted at any time in the system settings of your terminal device. Please note that blocking certain types of Cookies can lead to impaired use of the Event Website.

5. Integrated third-party services

Insofar as we integrate services of other providers within the scope of the Event in order to provide you with certain content or functions (e.g. playing videos or route planning). This is because the data processing is then necessary to implement the functions you have selected or to protect our legitimate interest in an optimal range of functions of the Event Website. Insofar as Cookies may be used within the scope of these third-party services, the statements under Section 5 apply. Please also refer to the Privacy Policy of the respective third-party provider with regard to the third-party services.

Services of other providers which we integrate or to which we refer are provided by the respective third parties. We have no influence on the content and function of the third-party services and are generally not responsible for the processing of your personal data by their providers, unless the third-party services are completely designed on our behalf and then integrated by us on our own responsibility. Insofar as the integration of a third-party service results in us establishing joint processes with its provider, we will define with this provider in an agreement on joint controllership how the respective tasks and responsibilities in the processing of personal data are structured and who fulfils which data protection obligations. Insofar as Cookies are to be set on the basis of your consent, you will receive further information on the responsibility for setting these Cookies and any associated third-party services in the corresponding area of the consent management.

Unless otherwise stated, profiles on social media are generally only included in the Event Website as a link to the corresponding third-party services. After clicking on the integrated text/image link, you will be redirected to the offer of the respective social media provider. After the redirection, personal data may be collected directly by the third-party provider. If you are logged in to your user account of the respective social media provider, the provider may be able to assign the collected information of the specific visit to your personal user account. If you interact via a "share" button of the respective social media provider, this information can be stored in the personal user account and published if necessary. If you want to prevent the collected information from being assigned directly to your user account, you must log out before clicking the included text/image link.

6. Sources and categories of data in case of third party collection

We also process personal data that we receive from third parties or from publicly accessible sources. Below you will find an overview of the corresponding sources and the categories of data obtained from these sources.

Group companies, Porsche dealers and service companies: [specific data, e.g. information on the products you use and on your interests];

7. Recipients of personal data

It may sometimes be necessary for us to share your personal data with other PME business partners around the Middle East region and/or Europe. We have procedures and safeguards in place to ensure the protection of personal data. These procedures include contractual obligations to ensure that all such entities safeguard your personal data and use it only for the purposes that we have specified and communicated to you.

Internal recipients: Within PME the only people who have access are those who need it for the purposes referred to above in each case.

External recipients: We only forward your personal data to external recipients outside PME if this is necessary for administering or processing your request, if another legal authorization exists or if we have your consent to forward the data.

External recipients can be:

a) Processors

Group companies in Porsche AG or external service providers that we use to provide services, for example for provision of the infrastructure and operation of the Contact Centre as well as maintenance of this offering on behalf of Porsche AG. We carefully select and regularly inspect these processors to make sure that the security and confidentiality of your personal data are safeguarded. The service providers may use the data only for the purposes we have specified.

The Porsche Contact Centre is operated on our behalf by:
Porsche Digital GmbH, Groenerstrasse 11/1, 71636 Ludwigsburg, Germany

The Event Website is operated on our behalf by:
C2 Communications Advertising LLC, PO Box 2642, Dubai, United Arab Emirates

b) Public bodies

Authorities and public institutions, such as tax authorities, public prosecutors, or the courts, to which we (must) transfer personal data for legally binding reasons or to safeguard legitimate interests.

c) Private bodies

Porsche dealers and service companies, cooperation partners, service providers or persons to whom the data is transferred based on consent, or to execute a contract with you or to safeguard legitimate interests, for example, Porsche Centres and Porsche Service Centres and Porsche Importers based on your selection or if you are already a Porsche customer based on your current customer profile. Other recipients may be providers of other services or transport service providers in case required for evacuation or other safety measures.

8. Data processing in third countries

If data is transferred to bodies whose headquarters or place of data processing are not located in in the United Arab Emirates, we will ensure before disclosure that the data transfer is either covered by a legal authorisation, that there are guarantees for an adequate level of data protection with regard to the data transfer (e.g. through the agreement of contractual warranties, officially recognised regulations or binding internal data protection regulations at the recipient) or that you have given your consent to the data transfer.

Insofar as data is transferred outside of the United Arab Emirates, you can obtain from us a copy of the guarantees for the existence of an adequate level of data protection with regard to the data transfer or information on the availability of a copy of the guarantees. For this purpose, please use the information under Section 1.

The countries that your personal data might be transferred to include, but are not limited to:

European Union

Where we transfer your personal data to either of the above-mentioned countries or any other third countries as required from time to time, this is done for the fulfilment of the contract between you and us and on the basis that these countries are subject to laws that provide an adequate level of protection of your personal data.

9. Storage duration, erasure of data

We store your personal data, if there is legal permission to do so, only as long as necessary to achieve the intended purposes or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data, unless further processing is still permitted by law. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will usually delete your personal data immediately;

after the legal permission has ceased to apply and provided that no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter applies, we will delete the data after the other legal basis has ceased to apply;
if your personal data is no longer required for the purposes we pursue and no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter is the case, we will delete the data after the other legal basis has ceased to apply.

PME is mindful of the importance of your personal data being stored on its systems and therefore works on safeguarding that data as well as deleting it securely when no longer required.

Personal data collected from the interactions, electronic or telephone communications, websites and social networks are being stored on our servers located within the country governed by appropriate security techniques to protect and preserve the data.
We will destroy the personal data immediately upon the completion of the purpose of its collection through secure methods and techniques.
We might require keeping your personal data even after the purpose of its collection has ended in the following three cases:
If there is a legal justification for us to keep it for a specified period by law, regulation, or for security reasons.
If the personal data is closely related to a case before a judicial authority and its retention is required for this purpose.
If all personal elements have been anonymized.

10. Rights of data subjects

The right to obtain information from the controller (right to be informed).: You have the right to obtain information from us about the data that we have stored about you.

Right to rectification and erasure: You can demand that we correct incorrect data and, if the legal requirements are met, delete your data.

Restriction of processing: You can demand that we restrict the processing of your data, provided that the legal requirements are met.

Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, demand that the data you have provided us with are handed over in a structured, common and machine-readable format or that we transfer it to another controller.

Objection: You have the right to object at any time to data processing by us based on the safeguarding of legitimate interests for reasons arising from your particular situation. If you make use of your right to object, we will stop processing the data unless we can prove compelling reasons for further processing worthy of protection which outweigh your rights and interests.

Objection to direct marketing: If we process your personal data for the purpose of direct marketing, you have the right to object to our processing of your data for this purpose at any time. If you exercise your right to object, we will stop processing your data for this purpose.

Revocation of consent: If you have given us your consent to process your personal data, you can revoke it at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected.

Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country or the supervisory authority responsible for us.

Your contact with us and the exercise of your rights: Furthermore, you can contact us free of charge if you have questions regarding the processing of your personal data and your rights as a data subject. Please contact us at [email protected] or by letter mail to the address provided under Section 1. Please make sure that we can definitely identify you. If you revoke your consent, you can alternatively choose the contact method that you used when you gave your consent.

11. Security

The security and confidentiality of your Personal Data is important to PME, and we protect the integrity and confidentiality of your personal data. Therefore, when using external service providers acting as processors, we require that they adhere to the same standards as us. Regardless of where your personal data is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure. In addition, we will take appropriate steps to protect the personal information you share with us. We maintain administrative, technical, electronic, and physical safeguards compliant with the applicable laws to protect the personal data you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, we cannot be certain that the prior would not happen and cannot be held responsible for unauthorized or unintended access that is beyond our control. The security measures are reviewed periodically by us to keep pace with business, technology, and regulatory changes.

12. Effective date

The latest version of this Privacy Policy applies. Version 1 - This version dates from [11.09.2023].

Title

Text

We, Porsche Middle East and Africa FZE (hereinafter referred to as "we" or "PME" or “us”), are happy about your interest in our 2023 Icons of Porsche Event, held in Dubai, United Arab Emirates (hereinafter referred to as the "Event"). We take the protection of your personal data very seriously. Your personal data is processed only within the scope of the legal provisions of the United Arab Emirate's Federal Data Protection Law (“PDPL”), and applicable regulations including the General Data Protection Regulation (hereafter "GDPR"). In this Privacy Policy, we provide you with information about the processing of your personal data and your rights as a data subject in the context of the steps taken by PME to process your request. For information on the processing of personal data in other areas, please refer to the respective specific privacy policies. This Privacy Policy applies to all customers, visitors, third parties, and others (hereinafter referred to as "you" or the "user") attending the Event or who access or use our website <a href="https://www.iconsofporsche.com/">https://www.iconsofporsche.com/</a> (“Event Website”),  customer and employee portals and social media pages in connection with the Event.The intent of this Privacy Policy is to inform you about the following:<ul><li>What information we may gather about you and the purpose for gathering it.</li><li>How we may use the information gathered from you and who do we share it with.</li><li>Your rights to privacy when it comes to your personal data.</li></ul>If we refer to this Privacy Policy from external social media profiles, the following explanations apply only insofar as the processing takes place in our area of responsibility and insofar as no more specific and therefore prior information on data protection is provided in the context of such social media profiles. <h4>1. Controller and data protection officer</h4>Responsible for the data processing as controller in terms of data protection law is: Controller for data processing in accordance with the data protection legislation is: Porsche Middle East and Africa FZE Plot-29-911, Dubai Silicon Oasis Dubai, United Arab Emirates P.O. Box 341356 Telephone (+971) 4 3569 911 Service License No. 25 <a href="https://www.porsche.com">www.porsche.com</a> If you have any questions or suggestions regarding data protection, please feel free to contact us. You can reach our data protection officer as follows: You can contact our data protection officer at the following address: Porsche Middle East and Africa FZE Plot-29-911, Dubai Silicon Oasis Dubai, United Arab Emirates P.O. Box 341356 Telephone (+971) 4 3569 911 Email <a href="mailto:privacy@porsche-me.ae">privacy@porsche-me.ae</a>  <h4>2. Subject matter of data protection</h4>The subject matter of data protection is the protection of personal data. This is all information relating to an identified or identifiable natural person (so-called data subject). This includes information such as name, postal address, email address or telephone number, as well as information that necessarily originates within the context of contact when processing your respective request, such as complaints, data quality related enquiries, enquiries about the Porsche Sales Organization or Porsche Marketing campaigns. This also includes other information that may be generated when attending the Event and using the Event Website, in particular information about the beginning, end and extent of use as well as the transmission of your IP address.  2.1 How do we collect personal data?PME will generally collect your personal data directly from you. This is achieved through your interactions, electronic, telephone communications or our security systems. We collect personal data indirectly from you through our business partners, suppliers, marketing agencies and other third parties such as your local Porsche Centre or Porsche Importer.Most of the personal data collected by PME is provided by you voluntarily for example when you use the “Get Notified” function on the Event Website or register for the Event and personal data that you have provided by registering to the 2021 Icons of Porsche Event or the 2022 Icons of Porsche Event. The remaining personal data may be collected for the protection of public interest and the interests of data subjects, the protection and the defence of our rights, property, or safety or that of our clients and visitors of PME, the compliance with regulations applicable to PME, or the performance of contractual obligations. <h4>3. Purposes and legal basis of data processing</h4>The use of personal data during a form of making contact regarding the related enquiry is partially permissible without registration. Even when you use the website without registering however, personal data can be processed. In the following, you will find an overview of the purposes and legal basis of data processing in connection with the Event. In any case, we process personal data in accordance with the legal requirements, even if in individual cases a different legal basis should be relevant than that stated below.The provision of personal data by you may be required by law or contract or may be necessary for the conclusion of a contract. We will point it out separately if you are obliged to provide personal data and what possible consequences the non-supply would then have (e.g., a loss of claims or our position not to provide the requested service without providing certain information).. The use of individual functions may require prior registration. Even if you use our websites without registration, personal data may still be processed. 3.1 Performance of a contract and pre-contractual measuresWe process your personal data if this is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken in response to your request.  The purposes of processing include enabling the use of our specific products and services within the scope of the Event. Please also note the details in the respective documents describing our products and services further to this Privacy Policy.The processing before and in connect with the Event includes, but not limited to, these are the following functions:   <ul><li>“Get notified” – Function Prior to the official registration period for the Event, you have the chance to provide your E-Mail address to get notified once registration is open to the public and receive relevant information about the Event. You will have the option to unsubscribe from the notifications at any time.  </li><li>Registration for the Event We require you to register for the event and provide your personal data during the registration process. Registration is not possible without the mandatory data. The mandatory data required for the registration are marked with an "*" in the respective input field, we collect: salutation, first and last name, age range, email address, mobile number, country and city from which you travel to the Event (only for UAE), vehicle data, and the same data will be collected from you for any guests you will bring to the Event.  If you do not provide us with this information, we may not be able to attend the Event. The data you provide will be used by us to provide you with your entry tickets, confirm your identity and the fulfilment and performance of the contract between you and us as well as our legitimate interest to ensure a seamless customer experience at the Event and to provide you with relevant updates (i.e., timings, agenda points and other information and reminders) on the Event via your preferred communication channels.  You will have the option to unsubscribe from the notifications at any time.  </li><li>Attending the Event To grant you access to the Event, you will need to provide the entry tickets that you have received from us after registering for the Event and we may process your personal data to confirm your identity. When entering the Event premises, we will also track the time and duration of your visit. If you attend the Event with a Porsche vehicle, we will use the vehicle data provided by you during the registration to allocate you, and grant you access to, the respective parking area. We use this data for the fulfilment and performance of the contract between you and us as well as our legitimate interest to ensure a seamless customer experience at the Event and track Event capacity.  </li><li>Data collected at the Event  At the Event, we may collect information about your Porsche merchandising purchases and data about new vehicle purchase intents (incl., Model, purchase interest, purchase intent and time). This information is collected from you directly by speaking to our Porsche dealers and service companies, cooperation partners and service providers at the Event, provided by you voluntarily and processed by us based on our legitimate interests mentioned in Section 3.4 below.   </li></ul>3.2 Compliance with legal obligationsWe process your personal data to comply with legal obligations to which we are subject. These obligations may arise, for example, from commercial, tax, money laundering, financial or criminal law and to comply with requests by the relevant authority. The purposes of the processing result from the respective legal obligation; as a rule, the processing serves the purpose of complying with state control and information obligations.   3.3 Audio and Video Recordings and Photography at and during the EventPME and/or our respective partners may take photos, video, and audio recordings (the ‘Recordings’) of you during the Event. The creation, processing and publication of recordings and the personal data contained therein will be carried out based on our legitimate interest to use Recordings made at the Event for internal and external corporate communications on different channels.Where reasonable and feasible, we will inform you at the Event before Recordings are made and you will have the chance to object by speaking to the photographer and/or choosing to stand out from the shot if you see that photographs/videos are taken. Online publication is international, and it cannot be ensured that all Recordings once published can be removed without a trace. In addition, the recordings from an online publication can be found via search engines.To object the processing of Recordings that contain your personal data (and enable to specifically identify you and are not part of a larger group, landscape or scenic shot), you can contact our data protection officer using the contact details provided in Section 1.   3.4 Safeguarding of legitimate interestsWe also process your personal data to pursue the legitimate interests of ourselves or third parties, unless your rights, which require the protection of your personal data, outweigh these interests. The processing to safeguard legitimate interests is carried out for the following purposes or to safeguard the following interests.<ul><li>Further development of Porsche products and offerings of Events, services and support offers as well as other measures to control business transactions and processes;</li><li>Improvement of product quality, elimination of errors and malfunctions, among other things by means of analysis of vehicle data and customer feedback;</li><li>Processing and updating of personal data in a central prospective customer and customer care platform as well as upstream and downstream systems for customer retention and sales purposes;</li><li>Needs analysis and customer segmentation, e.g. calculation and evaluation of affinities, preferences and customer potential;</li><li>Handling of non-contractual inquiries and concerns;</li><li>Ensuring legally compliant actions, prevention of and protection against legal violations (especially criminal offences), assertion of and defense against legal claims, internal and external compliance measures;</li><li>Ensuring availability, operation and security of technical systems as well as technical data management;</li><li>Answering and evaluation of contact requests and feedback;</li><li>Processing warranty and goodwill cases as well as non-contractual prospect and customer inquiries and concerns.</li></ul>3.4.1     Use of the Event WebsiteWhen you call up the Event Website <a href="http://www.iconsofporsche.com">www.iconsofporsche.com</a>  data relating to your end device and your use of the online behaviour (cookie) are processed and stored in a so-called log file. We collect Information about the beginning, end and extent of use as well as the transmission of the IP address of the device you use to connect to the Internet, the geographical location of your device, the browser you are using, the type of device you are using (tablet, mobile, desktop), the URL you came from and the websites you access. This concerns in particular technical data such as date and time of access, duration of the visit, type of terminal device, operating system used, functions used, amount of data sent, IP address and referrer URL. We process this data to ensure technical operation and to determine and eliminate faults. In doing so, we pursue the interest of permanently ensuring technical operability. We do not use this data for the purpose of drawing conclusions about your person. 3.4.2      E-Mail-analysesWhen we send emails for customer and prospect management or to supply you with relevant updates on the Event, we may use commercially available technologies such as tracking pixels or click-through links. This enables us to analyse which or how many emails are delivered and/or rejected and/or opened. The latter is done in particular using tracking pixels. It will not be possible to fully measure the opening rate of our emails using tracking pixels if you have deactivated the display of images in your email program. In this case, the email will not be displayed completely. However, we are still able to track whether an email has been opened if you click on text or graphic links in the email. By using click-through links, we can analyse which links in our emails are clicked and derive what interest there is in certain topics. When you click on the corresponding link, you are guided through our separate analysis server before the target page is called up. Based on the results of the analysis, we can make emails more relevant, send them in a more targeted manner or stop them from being sent. If you do not want such data to be collected and tracked, do not click on text or graphic links in emails. 3.4.3     Social Media Widgets and External Links Our websites may include links to social media platforms such as Facebook, Twitter, YouTube, and others as well as external links to other websites. These links may collect information about you by providing you with their services, setting cookies or employing other tracking technologies. Your interactions with those websites and features are governed by the Privacy Policy of the companies that provide them.  3.5 Consent & Direct MarketingIf you give your consent, it is always for a specific purpose; the purposes of processing are determined by the content of your declaration of consent. You may revoke any consent you have given at any time, without affecting the legality of the processing that has taken place on the basis of the consent until revocation.If you have given your consent, we and our related partners listed in this Privacy Policy can use the data on this basis, e.g. for individual customer and prospective customer support and contact you for these purposes via the communication channels you have requested. Your data will be used in this context to offer you an inspiring brand and customer care experience with Porsche and to make communication and interaction with you as personal and relevant as possible. Which of your data is actually used for individual customer and prospective customer support depends in particular on which data has been collected on the basis of orders and consultations (e.g. when buying or servicing Porsche products) and which data you have provided (e.g. your personal interests) at the respective contact points (e.g. at the Porsche Center).  3.6 NewsletterWe send out newsletters after respective registration, i.e. with your consent. If the contents of the newsletter are specifically described in the context of a registration, these are decisive for the scope of the consent. Furthermore, our newsletters contain information about our products, offers, promotions and our company. The entity named in the registration process is responsible for processing your data. The registration is carried out by means of the so-called double opt-in procedure, i.e. after your registration you will receive an email asking you to confirm your registration in order to prevent the misuse of your email address. The registrations for the newsletter are logged by us in order to be able to prove the registration process and the consent contained therein in accordance with the legal requirements. The logging of the registration and the necessary processing of the data entered by you during the registration process is accordingly based on our legitimate interests. You can revoke your consent to receive our newsletter at any time, e.g. by unsubscribing from the newsletter. You will find an unsubscribe link to exercise this right at the end of each newsletter.  3.7 Change of purposeIf we process your personal data for a purpose other than that for which the data was collected, beyond the scope of a corresponding consent or a mandatory legal basis, we will take into account, the compatibility of the original and the now pursued purpose, the nature of the personal data, the possible consequences of further processing for you and the guarantees for the protection of the personal data.   3.8 ProfilingWe do not use automated decision-making processes to prepare, establish and forge business relationships. Profiling is only performed within the framework of the processing purposes described in this document to protect our justified interests. <h4>4. Cookies and comparable technologies</h4>We use cookies and comparable technologies in connection with the Event website which serve to communicate with your end device and exchange stored information (hereinafter collectively referred to as "Cookies"). These Cookies are primarily used to make the functions of the Event Website usable. General examples in which the use of Cookies is technically required in this sense are the storage of a language selection, login data or a shopping or watch list. Accordingly, technically required Cookies may be used by us to enable the processing described in Section 3 and to ensure the proper and secure operation of the Event Website. The data processing is then carried out, as it is necessary to implement the functions you have selected or to protect our legitimate interest in the functionality of the Event Website. Insofar as we should also use Cookies in order to analyse the use of the Event Website and to be able to target it to your interests and, if necessary, to provide you with interest-based content and advertisements, this is done exclusively on the basis of your voluntary consent. You will then have the opportunity to make the appropriate settings within the Event Website via the consent management. You may revoke any consent you have given at any time with effect for the future. Further information on Cookies and their function in detail as well as on setting and revocation options can be found directly in the corresponding areas of the consent management. Please note that we only make available the consent management in the context of the Event Websiteif, in addition to the above-mentioned technically required Cookies, consent- based Cookies are to be used. If you do not wish to use Cookies in general, you can also prevent their storage by adjusting the settings of your end device accordingly. Stored Cookies can be deleted at any time in the system settings of your terminal device. Please note that blocking certain types of Cookies can lead to impaired use of the Event Website. <h4>5. Integrated third-party services</h4>Insofar as we integrate services of other providers within the scope of the Event in order to provide you with certain content or functions (e.g. playing videos or route planning). This is because the data processing is then necessary to implement the functions you have selected or to protect our legitimate interest in an optimal range of functions of the Event Website. Insofar as Cookies may be used within the scope of these third-party services, the statements under Section 5 apply. Please also refer to the Privacy Policy of the respective third-party provider with regard to the third-party services.Services of other providers which we integrate or to which we refer are provided by the respective third parties. We have no influence on the content and function of the third-party services and are generally not responsible for the processing of your personal data by their providers, unless the third-party services are completely designed on our behalf and then integrated by us on our own responsibility. Insofar as the integration of a third-party service results in us establishing joint processes with its provider, we will define with this provider in an agreement on joint controllership how the respective tasks and responsibilities in the processing of personal data are structured and who fulfils which data protection obligations. Insofar as Cookies are to be set on the basis of your consent, you will receive further information on the responsibility for setting these Cookies and any associated third-party services in the corresponding area of the consent management. Unless otherwise stated, profiles on social media are generally only included in the Event Website as a link to the corresponding third-party services. After clicking on the integrated text/image link, you will be redirected to the offer of the respective social media provider. After the redirection, personal data may be collected directly by the third-party provider.  If you are logged in to your user account of the respective social media provider, the provider may be able to assign the collected information of the specific visit to your personal user account. If you interact via a "share" button of the respective social media provider, this information can be stored in the personal user account and published if necessary. If you want to prevent the collected information from being assigned directly to your user account, you must log out before clicking the included text/image link.  <h4>6. Sources and categories of data in case of third party collection </h4>We also process personal data that we receive from third parties or from publicly accessible sources. Below you will find an overview of the corresponding sources and the categories of data obtained from these sources.  <ul><li>Group companies, Porsche dealers and service companies: [specific data, e.g. information on the products you use and on your interests];</li></ul> <h4>7. Recipients of personal data</h4>It may sometimes be necessary for us to share your personal data with other PME business partners around the Middle East region and/or Europe. We have procedures and safeguards in place to ensure the protection of personal data. These procedures include contractual obligations to ensure that all such entities safeguard your personal data and use it only for the purposes that we have specified and communicated to you.Internal recipients: Within PME the only people who have access are those who need it for the purposes referred to above in each case.External recipients: We only forward your personal data to external recipients outside PME if this is necessary for administering or processing your request, if another legal authorization exists or if we have your consent to forward the data. External recipients can be: a) ProcessorsGroup companies in Porsche AG or external service providers that we use to provide services, for example for provision of the infrastructure and operation of the Contact Centre as well as maintenance of this offering on behalf of Porsche AG. We carefully select and regularly inspect these processors to make sure that the security and confidentiality of your personal data are safeguarded. The service providers may use the data only for the purposes we have specified.The Porsche Contact Centre is operated on our behalf by: Porsche Digital GmbH, Groenerstrasse 11/1, 71636 Ludwigsburg, GermanyThe Event Website is operated on our behalf by: C2 Communications Advertising LLC, PO Box 2642, Dubai, United Arab Emirates b) Public bodiesAuthorities and public institutions, such as tax authorities, public prosecutors, or the courts, to which we (must) transfer personal data for legally binding reasons or to safeguard legitimate interests.  c) Private bodiesPorsche dealers and service companies, cooperation partners, service providers or persons to whom the data is transferred based on consent, or to execute a contract with you or to safeguard legitimate interests, for example, Porsche Centres and Porsche Service Centres and Porsche Importers based on your selection or if you are already a Porsche customer based on your current customer profile. Other recipients may be providers of other services or transport service providers in case required for evacuation or other safety measures. <h4>8. Data processing in third countries</h4>If data is transferred to bodies whose headquarters or place of data processing are not located in in the United Arab Emirates, we will ensure before disclosure that the data transfer is either covered by a legal authorisation, that there are guarantees for an adequate level of data protection with regard to the data transfer (e.g. through the agreement of contractual warranties, officially recognised regulations or binding internal data protection regulations at the recipient) or that you have given your consent to the data transfer.Insofar as data is transferred outside of the United Arab Emirates, you can obtain from us a copy of the guarantees for the existence of an adequate level of data protection with regard to the data transfer or information on the availability of a copy of the guarantees. For this purpose, please use the information under Section 1.The countries that your personal data might be transferred to include, but are not limited to:<ul><li>European Union</li></ul>Where we transfer your personal data to either of the above-mentioned countries or any other third countries as required from time to time, this is done for the fulfilment of the contract between you and us and on the basis that these countries are subject to laws that provide an adequate level of protection of your personal data. <h4>9. Storage duration, erasure of data</h4>We store your personal data, if there is legal permission to do so, only as long as necessary to achieve the intended purposes or as long as you have not revoked your consent. In the event of an objection to processing, we will delete your personal data, unless further processing is still permitted by law. We will also delete your personal data if we are obliged to do so for other legal reasons. Applying these general principles, we will usually delete your personal data immediately;<ul><li>after the legal permission has ceased to apply and provided that no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter applies, we will delete the data after the other legal basis has ceased to apply;</li><li>if your personal data is no longer required for the purposes we pursue and no other legal basis (e.g. commercial and tax law retention periods) intervenes. If the latter is the case, we will delete the data after the other legal basis has ceased to apply.</li></ul>PME is mindful of the importance of your personal data being stored on its systems and therefore works on safeguarding that data as well as deleting it securely when no longer required.<ul><li>Personal data collected from the interactions, electronic or telephone communications, websites and social networks are being stored on our servers located within the country governed by appropriate security techniques to protect and preserve the data.</li><li>We will destroy the personal data immediately upon the completion of the purpose of its collection through secure methods and techniques.</li><li>We might require keeping your personal data even after the purpose of its collection has ended in the following three cases:</li><li>If there is a legal justification for us to keep it for a specified period by law, regulation, or for security reasons.</li><li>If the personal data is closely related to a case before a judicial authority and its retention is required for this purpose.</li><li>If all personal elements have been anonymized.</li></ul> <h4>10. Rights of data subjects</h4>The right to obtain information from the controller (right to be informed).: You have the right to obtain information from us about the data that we have stored about you.Right to rectification and erasure: You can demand that we correct incorrect data and, if the legal requirements are met, delete your data. Restriction of processing: You can demand that we restrict the processing of your data, provided that the legal requirements are met. Data portability: If you have provided us with data on the basis of a contract or consent, you may, if the legal requirements are met, demand that the data you have provided us with are handed over in a structured, common and machine-readable format or that we transfer it to another controller.Objection: You have the right to object at any time to data processing by us based on the safeguarding of legitimate interests for reasons arising from your particular situation. If you make use of your right to object, we will stop processing the data unless we can prove compelling reasons for further processing worthy of protection which outweigh your rights and interests. Objection to direct marketing: If we process your personal data for the purpose of direct marketing, you have the right to object to our processing of your data for this purpose at any time. If you exercise your right to object, we will stop processing your data for this purpose.Revocation of consent: If you have given us your consent to process your personal data, you can revoke it at any time with effect for the future. The legality of the processing of your data until revocation remains unaffected.Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data violates applicable law. You can contact the supervisory authority responsible for your place of residence or your country or the supervisory authority responsible for us. Your contact with us and the exercise of your rights: Furthermore, you can contact us free of charge if you have questions regarding the processing of your personal data and your rights as a data subject. Please contact us at <a href="mailto:privacy@porsche-me.ae">privacy@porsche-me.ae </a>or by letter mail to the address provided under Section 1. Please make sure that we can definitely identify you. If you revoke your consent, you can alternatively choose the contact method that you used when you gave your consent. <h4>11. Security </h4>The security and confidentiality of your Personal Data is important to PME, and we protect the integrity and confidentiality of your personal data. Therefore, when using external service providers acting as processors, we require that they adhere to the same standards as us. Regardless of where your personal data is transferred or stored, we take all steps reasonably necessary to ensure that personal data is kept secure. In addition, we will take appropriate steps to protect the personal information you share with us. We maintain administrative, technical, electronic, and physical safeguards compliant with the applicable laws to protect the personal data you provide against accidental, unlawful, or unauthorized destruction, loss, alteration, access, disclosure, or use. However, we cannot be certain that the prior would not happen and cannot be held responsible for unauthorized or unintended access that is beyond our control. The security measures are reviewed periodically by us to keep pace with business, technology, and regulatory changes. <h4>12. Effective date</h4>The latest version of this Privacy Policy applies. Version 1 - This version dates from [11.09.2023].

Image

Can be multiple Images

Text Under Image

Image Download Button Class (put it d-block to show)

Text Align: ‘left’ or ‘center’