Source: https://www.audiondemand.com/audi-mobility/audi-on-demand/com_en/nav/privacy-policy.html
Timestamp: 2019-01-23 21:39:25
Document Index: 225145831

Matched Legal Cases: ['Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 9', 'Art. 6']

Data Protection at Audi on demand
In the following we will be informing you about the controller responsible for the processing of your personal data and the controller’s data protection officer (Section A) as well as your rights regarding the processing of your personal data (Section B).
Furthermore, we have detailed information below on the processing of your personal data (Section C) and information regarding the use of cookies (Section D) on www.audiondemand.com.
The terminology applied throughout this privacy notice, such as ‘Controller’, has the meaning as attributed to it under Article 4 GDPR (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)).
A. Information Regarding the Controller
The controller of the www.audiondemand.com Internet presence is:
Email: audiondemand@audi.de
Telephone: +49 (0) 84188 6 44 88
Mr. Andreas Buchberger
Email: data@audimobility.com
B. Information Regarding the Rights of Data Subjects
As the data subject, you have the following rights regarding the processing of your personal data:
the right of access to information (Article 15 of the General Data Protection Regulation);
the right to the correction of data (Article 16 of the General Data Protection Regulation);
the right to erasure (‘right to be forgotten’ - Article 17 of the General Data Protection Regulation);
the right to the restriction of processing (Article 18 of the General Data Protection Regulation);
the right to data portability (Article 20 of the General Data Protection Regulation);
the right to object (Article 21 of the General Data Protection Regulation);
the right to withdraw a consent (Article 7 III of the General Data Protection Regulation);
the right to lodge a complaint with a supervisory authority (Article 57 I lit. f) of the General Data Protection Regulation).
To exercise your rights, you may contact our data protection officer (Section A.II.).
Information regarding the specific modalities and mechanisms which facilitate the exercise of your rights, especially in relation to the exercise of your rights to data portability and to object, is available (where applicable) from the information on the processing of personal data in Section C of this privacy notice.
Below we provide you with detailed information of your rights regarding the processing of your personal data:
I. Right of Access to Information
As the data subject, you have a right of access to information subject to the prerequisites laid down in Article 15 of the General Data Protection Regulation.
This means in particular that you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you also have the right to be informed of these personal data and such information as specified under Article 15 I of the General Data Protection Regulation. This includes, but is not limited to, information pertaining to the purposes of the processing; the categories of personal data that are processed; and the recipients or categories of recipient(s) to whom personal data have been or will be disclosed (Article 15 I lit. a), b), and c) of the General Data Protection Regulation).
To view the full scope of your right of access to information, please refer to Article 15 of the General Data Protection Regulation which can be prompted with this link.
As the data subject, you have a right to the rectification of data subject to the prerequisites laid down in Article 16 of the General Data Protection Regulation.
This means in particular that you have the right to request that we rectify incorrect personal data concerning you and complete any incomplete personal data without delay.
To view the full scope of your right to rectification, please refer to Article 16 of the General Data Protection Regulation which can be prompted with this link.
III. Right to Erasure (‘right to be forgotten’)
As the data subject, you have a right to erasure (‘right to be forgotten’) subject to the prerequisites laid down in Article 17 of the General Data Protection Regulation.
This means that in principle, you have the right to request that we promptly erase the personal data concerning you and that we are obliged to erase these personal data without delay provided that one of the reasons as specified under Article 17 I of the General Data Protection Regulation applies. This may be the case, for example, if personal data are no longer required in relation to the purposes for which they were collected or otherwise processed (Article 17 I lit. a) of the General Data Protection Regulation).
Insofar as we made the personal data public and if we are obliged to erase them, we are equally obliged (subject to the available technology and cost of implementation) to take reasonable measures, even of technical nature, so as to inform other data controllers processing such personal data that a data subject requested that they erase all links to these personal data or copies or replications of said personal data (Article 17 II of the General Data Protection Regulation).
In the exceptional case, the right to erasure (‘right to be forgotten’) does not apply insofar as processing is necessary for reasons specified in Article 17 III of the General Data Protection Regulation. This may be the case, for example, if processing is necessary to comply with a legal obligation or to establish, exercise or defend legal claims (Article 17 III lit. a) and e) of the General Data Protection Regulation).
To view the full scope of your right to erasure / right to be forgotten, please refer to Article 17 of the General Data Protection Regulation which can be prompted with this link.
IV. Right to the Restriction of Processing
As the data subject, you have a right to the restriction of processing subject to the prerequisites laid down in Article 18 of the General Data Protection Regulation.
This means that you have the right to request that we restrict the processing provided that one of the reasons as specified under Article 18 I of the General Data Protection Regulation applies. This may be the case, for example, if you contest the accuracy of the personal data. In such a case, processing will be restricted for such period that we require to verify the accuracy of the personal data (Article 18 I lit. a) of the General Data Protection Regulation).
Restriction means the marking of stored personal data with the aim of limiting their processing in the future (Article 4 (3) of the General Data Protection Regulation).
To view the full scope of your right to the restriction of processing, please refer to Article 18 of the General Data Protection Regulation which can be prompted with this link.
As the data subject, you have a right to data portability subject to the prerequisites laid down in Article 20 of the General Data Protection Regulation.
This means that in principle, you have the right to receive the personal data concerning you and which you provided to us in a structured, commonly-used and machine-readable format and that you have the right to transmit these data to another controller without hindrance on our behalf, provided the data were processed based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or for the performance of a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation and processing was conducted using automated means (Article 20 (I) of the General Data Protection Regulation).
Information as to whether processing is based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.
In exercising your right to data portability, you also have the right in principle to request that we transmit the personal data directly to another controller insofar as is technically feasible (Article 20 II of the General Data Protection Regulation).
To view the full scope of your right to the restriction of processing, please refer to Article 20 of the General Data Protection Regulation which can be prompted with this link.
As the data subject, you have a right to object subject to the prerequisites laid down in Article 21 of the General Data Protection Regulation.
We expressly point out your right to object as a data subject at the time of our initial communication with you the latest.
Below we provide you with detailed information of this:
1. Right to object for reasons resulting from the specific situation of the data subject
As the data subject, you have the right to object at any time to the processing of personal data concerning you for reasons resulting from your personal situation by virtue of Article 6 (I) lit. e) or f) of the General Data Protection Regulation; this equally applies to any profiling based on this provision.
Information as to whether processing is based on Article 6 (I) lit. e) or f) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.
If you object for reasons resulting from your specific situation, we will no longer process the personal data concerning you unless we can provide proof of compellingly legitimate grounds for such processing which override your interests, rights and freedoms, or such processing serves to establish, exercise or defend legal claims.
To view the full scope of your right to object, please refer to Article 21 of the General Data Protection Regulation which can be prompted with this link.
If the personal data concerning you are processed for direct marketing purposes, you have the right to object to the processing of personal data that concern you for the purposes of such marketing; this applies equally to profiling provided that it is tied to such direct marketing.
Information as to whether and to which extent personal data are processed for purposes relating to direct marketing is defined in the information regarding the purposes of processing, Section C of this privacy notice.
If you object to the processing for purposes relating to direct marketing, we will no longer process personal data concerning you for these purposes.
If processing is based on a consent issued pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation, you as the data subject have the right according to Article 7 III of the General Data Protection Regulation to withdraw your consent at any time. Your withdrawal of the consent does not affect the lawfulness of any processing carried out by virtue of a consent that was issued prior to such withdrawal. We shall notify you accordingly prior to issuing such consent.
Information as to whether processing is based on a consent pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.
As the data subject, you have a right to lodge a complaint with the competent supervisory authority subject to the prerequisites laid down in Article 57 I lit. f) of the General Data Protection Regulation.
C. Right to Lodge a Complaint with a Supervisory Authority
I. Legal Basis and Purpose of Processing Your Data
We process your personal data in compliance with the provisions set forth in the General Data Protection Regulation (GDPR) as well as the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) for various purposes. The specific purposes of data processing are primarily dependent on the individual request, the selected product or the individual service that has been opted for (e.g. use of Audi on demand).
The processing of your personal data is based on one of the legal reasons specified below:
you issued your prior consent (Art. 6 I, subparagraph 1 lit. a) GDPR);
processing is necessary in order to comply with the performance of a contract with you or to take steps prior to entering into a contract at your request (Art. 6 I, subparagraph 1 lit. b) GDPR);
processing is necessary to comply with a legal obligation under EU law or the legislation of an EU Member State (Art. 6 I, subparagraph 1 lit. c) GDPR);
processing is necessary for the purposes of the legitimate interests pursued by Audi Business Innovation GmbH or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data (Art. 6 I, subparagraph 1 lit. f) GDPR).
If, in the exceptional case, we process special categories of personal data (data that identify the race or ethnicity, political opinions, religious or ideological convictions or the affiliation to a trade union; the processing of genetic data, biometrical data to clearly identify a natural person; health data or data on a person’s sexual life or sexual orientation) concerning you, one of the following legal grounds must be relevant in addition:
you issued your express prior consent (Art. 9 II, lit. a) GDPR);
processing is necessary to protect your vital interests or those of another natural person and the data subject is unable to issue his or her consent because of physical or legal reasons (Art. 9 II lit. c) GDPR);
processing encompasses personal data which you manifestly made public (Art. 9 II lit. e) GDPR);
processing is necessary to establish, exercise or defend legal claims (Art. 9 II lit. f) GDPR);
processing is necessary for reasons of substantial public interest, on the basis of EU or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9 subparagraph 2 lit. g) GDPR).
Please observe your rights to object to the processing of data for purposes relating to direct marketing or personal reasons and your right to withdraw a consent given (see Section B, especially paragraph VI. about your right to object).
II. Personal Data on the Website
In connection with the website www.audiondemand.com various personal data are processed for different purposes.
Insofar as we as the so-called controller decide alone or jointly with others on the purposes and means of processing personal data, you are given information below that particularly regards
the personal data or categories of personal data that are processed;
the purposes for which the personal data are to be processed;
the legal basis for processing and, insofar as processing is based on Article 6 I lit. f) of the General Data Protection Regulation, the legitimate interests which we or a third party pursue;
where applicable, the recipient or the categories of recipient of the personal data;
where applicable, our intention to transmit the personal data to a third country or to an international organisation as well as the presence or absence of an adequacy decision by the Commission or, in the event of transmissions pursuant to Article 46 or Article 47 of the General Data Protection Regulation or Article 49 I subparagraph 2 of the General Data Protection Regulation, a reference to suitable or reasonable guarantees and the possibility of how a copy of them can be obtained or where they are available;
the storage period of personal data or, if this is not possible, the criteria that establish this period.
Insofar as we collect your personal data from you as the data subject you will receive additional information as to whether the provision of personal data is prescribed by law or by contract or whether it is necessary to conclude a contract for this, whether you are obliged to provide the personal data and which potential consequences may result from the failure to provide said data.
Insofar as we do not collect personal data from you as the data subject you will also receive additional information regarding the source providing the personal data and where applicable, whether they originate from publicly accessible sources.
In principle, you may access our website without providing personal data. However, your Internet browser will automatically transmit specific information each time you visit the website, which we store in so-called log files.
The following information is automatically transmitted in these cases:
IP address (Internet Protocol address) of the terminal device accessing the online offer;
URL of the website prompting the online offer (so-called referrer URL);
name of the service provider enabling access to the online offer;
name of the file or information requested;
date, time and duration of the request;
operating system and information about the Internet browser used, including add-ons that are installed (e.g. for Flash Player);
http status code (e.g. ‘request successful’ or ‘requested file not found’).
Log files save the above data without storing your full IP address so that it is not possible to identify your IP address.
III. Web Tracking / Recording Web Audiences and Use of Web Analytics Technology (Scope of Recording)
To maintain a current, user-centric and full offer on our websites, this website uses Adobe Analytics by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, (incl. Omniture Site Catalyst, Omniture Genesis, Omniture Discover, Omniture TagManager, Omniture SaintBernard), a web analytics tool that enables us to optimise our services to meet your needs. Adobe Analytics uses cookies to trace your preferences during your visit to our pages. This facilitates, for example, site navigation and allows us to further improve the user friendliness of our services. Data processing is performed for purposes relating to advertising, market research or the needs-oriented design of our website (in accordance with Section 15 III of the German Telemedia Act (Telemediengesetz - TMG)). The information generated in this context (including the IP address) are anonymised by default prior to being stored so that it becomes impossible to identify the user. This website has been customised to enable logging IP addresses in an anonymised format (so-called IP masking). It is not possible to identify a person directly based on the information stored on Adobe servers as Adobe Analytics runs with the ‘Before Geo-Lookup: Replace visitor’s last IP octet with 0’ and ‘Obfuscate IP-Removed’ setting. The ‘Before Geo-Lookup: Replace visitor’s last IP octet with 0’ setting guarantees that the IP address is anonymised prior to this so-called geo localisation by replacing the last IP octet with zeroes. The user’s approximate location is added for statistical analytics to the tracking pack which contains the IP address (still complete at that time). Before storing the tracking pack, the IP address is then replaced by a single fixed IP address (or generic IP address) once ‘Obfuscate IP Removed’ has been configured. This means that the IP address is no longer part of a stored data record. Only when anonymisation has been completed is there a reporting evaluation. The information generated by this cookie will usually be transmitted to an Adobe server in the European Union. However, it cannot be ruled out that in the event of a technical emergency these data will be transmitted to the USA and stored there so that consequently, a respective EU Standard Contract (adequate guarantee for data processing in non-EU countries) has been concluded. Within the context of your right to be informed, you have the right to be informed about this standard contract.
As a user of our websites you naturally have the possibility at any time to refuse the acceptance of cookies through the settings of your browser. Saving cookies is activated in most browsers by default. Please note that, if you wish to change this setting, you may experience a reduced functionality of our offers. You may opt out of data being collected by cookies and the use of website-related data (effective for the future) for Adobe as well as the processing of these data by Adobe at any time by activating a special OPT-OUT-cookie for this. Please use the Opt-out button for this at www.adobe.com/privacy/opt-out.html. Please note that your refusal in the form of an opt-out cookie will only work if your browser is set to accept the use of cookies. When you delete this cookie, use a different browser, or change the terminal device, you will have to opt out of the use of Adobe Analytics once again. We wish to point out that when deleting all of your cookies, the above cookie will also be deleted and must be re-installed.
If you consented to this, we will use Web Analytics technology for cookies (see Section D of this privacy notice) to log and analyse the usage behaviour of our website in order to improve the website and achieve the goals of the website more easily (e.g. visitor frequency, increased page views).
Section 15 III TMG or Article 6 I 1 lit. f) GDPR constitute the legal basis for this (processing that is necessary for the legitimate interests pursued by a natural person unless fundamental rights and fundamental freedoms override these). However, you have the right to object to this creation and the saving of a user profile under a pseudonym (Section 15 III first and second sentence of the TMG and Article 21 GDPR). The legitimate interest in the meaning of Article 6 I 1 lit. f) GDPR which we pursue with the processing of the data detailed above is our interest in both (i) the creation of customer information and offers from the services that refer to the automotive sector and to vehicles of Audi, of Audi Business Innovation GmbH and of co-operation partners such as service and product information (e.g. new fleet vehicles, offers of suitable vehicles for Audi mobility services or suitable used vehicle offers as well as vehicle functionalities such as Functions on Demand and Connect), campaigns and special offers (e.g. discount campaigns, discounts and co-operation offers) as well as surveys regarding customer satisfaction and customer support and (ii) the optimisation of customer experiences on our website.
1. Details on personal data to be processed
Web analytics tool: Adobe Analytics
Categories of personal data: Log data which are created following the use of the web analytics tool (Adobe Analytics) used on the website.
Personal data included in categories: Marketing ID (pseudonymised IP address), URL and name of viewed Internet page; type and version of your Internet browser; operating system used; system language setting; access status of site from where the Internet page was prompted; country of origin (based on IP address); city (based on IP address); the page viewed; the previously viewed page (referrer URL); date and time of view; time spent on the site; exit rate; campaign code; device type and similar metrics. For more information and a list of all possible metrics click here.
Source of data: Website users
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to conduct web analytics.
Storage period: All metrics are stored for a maximum 37 months by Adobe Analytics.
Categories of personal data that are processed: Data saved in cookies (-> Section D) for the web analytics tool (Adobe Analytics) on the user’s terminal device.
Personal data included in categories: Unique visitor ID to identify returning visitors.
Data sources: Website users
Storage period: Various. For information regarding the period of the cookie’s validity see Section D.III.
Categories of personal data that are processed: Data recorded by the web analytics tool (Adobe Analytics) and which are saved in pseudonymised user profiles.
Personal data included in categories: Data on use of the website, especially page views, frequency of views and time spent on prompted pages.
Data sources: Independently generated.
2. Details on processing of personal data
Purpose of processing personal data: To improve the website and to achieve the website’s goals more easily (e.g. frequency of visitors, increased page views) the behaviour of users of our website is recorded and analysed in pseudonymised form. Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The goal of this is to examine where users originate from; which areas of the website are sought out and how often and for how long which subpages and categories are viewed. For this purpose cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Categories of personal data that are processed: Web analytics tool data (Adobe Analytics).
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 I lit. a) of the General Data Protection Regulation).
Recipient: Provider of the web analytics tool – Adobe.
Purpose of processing personal data: Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The aim of this is to measure the effectiveness with which a targeted group of individuals can be moved to perform the desired actions. For these purposes cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Categories of personal data that are processed: Web analytics tool (Adobe Analytics) data.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 paragraph 1 lit. a) of the General Data Protection Regulation).
Purpose of processing personal data: To evaluate the visitor campaign (conversion tracking) the behaviour of users of our website is recorded and analysed in pseudonymised form. Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The aim of this is to measure the effectiveness with which a targeted group of individuals can be moved to perform the desired actions. For this purpose cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Recipient: Provider of the web analytics tool - Adobe.
3. Details on recipients of personal data and the transmission of personal data to third countries and / to international organisations
Recipient: Adobe Systems Incorporated
Role of recipient: Processor
Seat of recipient:
Tel.: +1 408-536-6000
Fax: +1 408-537-6000
Tel.: +49 (0) 89 31 705 0
Fax: +49 (0) 89 31 705 432
Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations EU-U.S. Privacy Shield Certification
IV. Registration to our e-mail-newsletter
On our website we offer the possibility to register for our e-mail-newsletter. During the registration and the insight of our newsletter, we process specific information, e.g. your e-mail-address. We use this data for the provision of our newsletter.
Categories of personal data that are processed: Data that you share with us via the website’s contact form (‘Subscription Data’).
Personal data included in categories: Salutation, e-mail-address, surname, last name.
Data sources: Subscriber to the newsletter.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data is not provided, we will not be able to send you our newsletter.
Storage period: Data will be stored until you want us to stop sending newsletters to you. We save these data for evidential purposes, to potentially establish, exercise or defend legal claims and moreover, beyond this, for a transition period of three years from the end of the year in which you shared these data with us and, in the event of potential legal disputes, until those disputes have been concluded.
Categories of personal data that are processed: Protocol data, which may be created for technical reasons when giving your consent to being contacted for marketing purposes (‘Registering Data’).
Personal data included in categories: Date and time of issuing the consent.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to provide product information to you.
Purpose of processing of personal data: Sending of the newsletter. Your name and salutation is needed for your personal salutation.
Categories of personal data that are processed: Subscription & registering data.
Legal basis and where appropriate, legitimate interests: Consent: 6 I lit a. of the General Data Protection Regulation.
Recipient: E-Mail-Newsletter-Provider is Audi Business Innovation GmbH.
Purpose of processing of personal data: We save these data for evidential purposes, to potentially establish, exercise or defend legal claims
Legal basis and where appropriate, legitimate interests: Legitimate Interests, Article 6 I lit f. of the General Data Protection Regulation. In this case our legitimate interest is the exercise or defend of legal claims.
Recipient: Audi Business Innovation GmbH
Role of recipient: Controller
Seat of recipient: EU
Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations: -
V. Use of Online Contact Form
You have the possibility to contact us on the website by using a contact form. We will process the information that you provide via the contact form to handle your request.
Categories of personal data that are processed: Data that you share with us via the website’s contact form (‘Contact Form Data’).
Personal data included in categories: This includes information which you provided to us via the individual contact form on the website. This may include the following data in particular: salutation, first name, last name, telephone number, email address and the content of your request.
Data sources: Contact form users.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data is not provided, we will not be able to process your request.
Storage period: Data will be stored until your request has been completed. We save these data for evidential purposes, to potentially establish, exercise or defend legal claims and moreover, beyond this, for a transition period of three years from the end of the year in which you shared these data with us and, in the event of potential legal disputes, until those disputes have been concluded. Moreover, we save these data beyond this insofar as legal retention requirements apply, and here in particular commercial law-related and tax law-related requirements. Depending on the nature of the documents, commercial law-related and tax law-related retention requirements of six or ten years may apply (Section 147 of the German Fiscal Code (Abgabenordnung - AO), Section 257 of the German Commercial Code (Handelsgesetzbuch - HGB).
Categories of personal data that are processed: Log data which may be created for technical reasons when giving your consent to being contacted for marketing purposes (‘Consent Data’).
Data sources: Website users.
Storage period: We will store these data for as long as you consent to being contacted for marketing purposes. We save these data for evidential purposes, to potentially establish, exercise or defend legal claims and moreover, beyond this, for a transition period of three years from the end of the year in which you unsubscribed and, in the event of potential legal disputes, until those disputes have been concluded.
Purpose of processing of personal data: Processing of your request.
Categories of personal data that are processed: Contact form data.
Legal basis and where appropriate, legitimate interests: If your request regards the performance of a contract to which you are party or aims at taking steps prior to entering into a contract: Article 6 I lit. b) of the General Data Protection Regulation. Otherwise: Balancing of interests (Article 6 I lit. f) of the General Data Protection Regulation). In this case our legitimate interest constitutes the processing of your request.
Recipient: Audi Business Innovation GmbH.
Purpose of processing of personal data: Processing your request via e-mail or phone.
Categories of personal data that are processed: Contact form data; Consent data.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 I lit. a GDPR).
Purpose of processing of personal data: processing is necessary to establish, exercise or defend legal claims Art. 9 II lit. f) GDPR.
Legal basis and where appropriate, legitimate interests: Legitimate interest (Article 6 I lit f.) Our legitimate interest is to potentially establish, exercise or defend legal claims.
Purpose of processing of personal data: We save these data insofar as legal retention requirements apply, and here in particular commercial law-related and tax law-related requirements. Depending on the nature of the documents, commercial law-related and tax law-related retention requirements of six or ten years may apply (Section 147 of the German Fiscal Code (Abgabenordnung - AO), Section 257 of the German Commercial Code (Handelsgesetzbuch - HGB).
Legal basis and where appropriate, legitimate interests: Compliance with legal obligations (Art. 6 I lit c. GDPR).
Recipient: Form provider (AUDI AG, (Audi Business Innovation GmbH [controller]))
Recipient: Email newsletter provider (Audi Business Innovation GmbH).
VI. Use of our Service-Hotline
We offer you the possibility to get in touch with us via our Service-Hotline. We process the provided information to handle your request.
Categories of personal data that are processed: Data that you share with us during the phone call with our Service-Hotline (‘Service-Hotline-Data’).
Personal data included in categories: This may include the following data in particular: salutation, first name, last name, telephone number, email address and the content of your request.
Data sources: Caller.
Categories of personal data that are processed: Protocol-data, which incur via phone due to technical reasons.
Personal data that are processed within this category: phone number and date of the call.
Purpose of processing of personal data: Offering a Service-Hotline.
Categories of personal data that are processed: Protocol Data.
Legal basis and where appropriate, legitimate interests: Legitimate interests (Article 6 I lit f. GDPR. In this case our legitimate interest constitutes the offering of a Service-Hotline.
Recipient: Audi Interaction GmbH, Zeppelinstraße 48, 14471 Potsdam, processor.
Purpose of processing of personal data: Handling your request.
Categories of personal data that are processed: ‘Service-Hotline-Data’.
Legal basis and where appropriate, legitimate interests: As far as your request is related to a contract or in order to take steps to entering into a contract (Article 6 I lit b. GDPR). In other cases: Legitimate interests (Article 6 I lit f. GDPR. In this case our legitimate interest constitutes the offering of a Service-Hotline.
Recipient: Audi Interaction GmbH, Zeppelinstraße 48, 14471
VII. Registering on the Platform
If you wish to use arrangement services on our Platform, you must first register as a user. When you register, we collect your personal details such as your first name and last name, date of birth, home and business address if applicable, mobile phone number, email address and a password of your choice for your user account and your driving licence details (jointly ‘Registration Data’).
If you have not granted us your consent to the further use of your Registration Data, except for the uses we mention below, we will use this data exclusively for arranging mobility services with third-party providers in accordance with the User Agreement you enter into when registering with the Platform.
The legal basis for the collection and further processing of the Registration Data, apart from the password and driving licence details, is section 14 TMG, or from 25 May 2018, Article 6(1)(b) GDPR whereas the processing is necessary to perform the contract that you have entered into by registering on the Platform. For processing the password, the legal basis is set out in section 15(1) TMG or from 15 May 2018, Article 6(1)(b) GDPR and for processing the driving licence, in section 28(1) first sentence 1 no. 1 BDSG, or from 25 May 2018, Article 6(1)(b) GDPR.
VIII. Booking a mobility service
If you book a mobility service on the Platform, e.g. a vehicle, we also collect your credit card details which you entered for payment purposes, plus information about your booking such as details of the vehicle, place and time of collection and return (which we refer to in this policy as the ‘Booking Information’).
We transmit your Booking Information for the purpose of our arrangement service to the provider of the mobility service you booked, to enable it to conclude the contract for your desired mobility service. The provider of the mobility service will process your personal data in accordance with its privacy policy, which it shall make available to you, including on its website, at the time you make your booking.”
We also transmit your credit card details for the purposes of verifying the cardholder and checking the credit facility and for charging the fees due to our provider for the mobility service you use, to our payment services provider, Heidelberger Payment GmbH and HPC GmbH, both Vangerowstraße 18, 69115 Heidelberg, Germany, their cooperation partner PAY.ON AG, Grillparzerstr. 18, 81675 Munich, Germany, and the acquirer HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1 pl. du Marché, 6755 Grevenmacher, Luxembourg.
The legal basis for this is section 28(1) first sentence 1 no. 1 BDSG, or from 25 May 2018, Article 6(1)(b) GDPR. i.e. the processing is necessary to perform a contract that you have entered into.
If you acquired your driving licence in the United Kingdom and intend to hire a vehicle in the United Kingdom, we will also transmit your driving licence details and information about the vehicle you have chosen to our service provider, DCML Limited, 1 Waterloo Court, Waterloo Road, Stockport, Cheshire, SK1 3DU, United Kingdom, which compares these details with those of the DVLA (Driver and Vehicle Licensing Agency) to verify your age details and the scope of permissions on your licence and to check whether you are entitled to drive the desired vehicle.
The legal basis for this processing is set out in section 28(1) first sentence 1 no. 1 BDSG, or from 25 May 2018, in Article 6(1)(b) GDPR i.e. the processing is necessary to perform a contract that you have entered into.
If you wish to hire a vehicle in the United Kingdom, we will also transmit your driving licence details and information about the vehicle you have chosen to our service provider, DCML Limited, 1 Waterloo Court, Waterloo Road, Stockport, Cheshire, SK1 3DU, United Kingdom, which will send these details to the insurance company Aviva plc, St Helen’s, 1 Undershaft, London EC3P 3DQ, United Kingdom (hereinafter ‘Aviva’) for the purpose of preparing the necessary insurance coverage for the desired vehicle, taking into account your age, the chosen vehicle and any other information accessible to it. In case Aviva should refuse to grant insurance coverage, upon your request we will explain you the reasons for this decision.
3.5 Booking history in your user account and central customer service
We also process your Registration Data and Booking Information and the invoices for your bookings given to us by the provider in performance of our User Agreement to make these and your booking history available to you in your user account on the Platform and for the purpose of handling your queries in the context of customer service. The legal basis for this processing is set out in section 28(1) first sentence 1 no. 1 BDSG, or from 25 May 2018, in Article 6(1)(b) GDPR i.e. the processing is necessary to perform a contract that you have entered into.
D. Information on the Use of Cookies
In connection with the website www.audiondemand.com, we use cookies. Cookies are to facilitate the use of the website and improve user friendliness or provide different functionalities (to make the website overall more user-friendly, effective and secure). For this, we use processing and storage functionalities of the browser of your terminal device and collect information from the browser cache of your terminal device.
Below we provide you with detailed information of this.
I. General Information on Cookies
Cookies are small text files with information which can be placed during the visit of a website via the browser on the terminal device of the user. When viewing the website again with the same terminal device, the cookie as well as the information it has stored can be retrieved.
1. Categories of cookies that are used
Essential cookies: These cookies are essential for the website to function. Without these cookies, certain services would not function.
Functional cookies: These cookies allow a website to store information already provided (for example, user name, configurations) and to offer to the user improved, more personalised functionalities.
Performance cookies: These cookies are used to improve the user friendliness of our website and therefore the user experience. They collect information about the usage of our website, the number of visits, the average time spent on the website, pages viewed. Performance cookies help us, for example, to identify the most-used elements of our Internet offer and to advance the website based on your needs.
2. First- und third-Party-cookies
Depending on the origin of a cookie, cookies are differentiated between first-party cookies and third-party cookies:
First-party cookies: Cookies which are placed and retrieved by the operator of the website as the responsible controller for processing or by a processor which the controller contracted with.
Third-party cookies: Cookies which are placed and retrieved by other parties responsible for processing other than the operator of the website yet that are not active as the processors on the part of the website’s operator.
3. Transiente und persistente cookies
The validity of cookies further differentiates so-called transient cookies from persistent cookies:
Transient cookies (session cookies): Cookies that are automatically deleted when you close your browser.
Persistent cookies: Cookies that are saved for a specific period of time on your terminal device after you close your browser.
4. Cookies (not) requiring consent
According to their functionality and designated purpose, certain cookies may require the express consent from the user. To this extent cookies are differentiated between those that require the user’s consent, and those that do not require such consent:
In principle, it is possible to view our websites without cookies. However, if you wish to use the full functionality of our websites, we recommend that you accept cookies which enable the use of certain functionalities or which make those functionalities more convenient to use.
Most web browsers are set by default to automatically accept all cookies. However, you may object to the use of cookies with an effect for the future at any time by setting your browser as such that it does not accept any cookies, or accepts certain cookies only, or informs you as soon as cookies are sent. This may result in being unable to use the full functionality of our websites. Insofar as you accept cookies in your browser settings, you declare your consent to the use of these cookies when using our websites.
Please note that your browser settings apply to the respective browser only. If you use either different browsers or different terminal devices, you will have to apply the respective settings anew. Moreover, you have the option to delete cookies from your cache any time. For information on cookie settings, how to change and delete cookies, please refer to the help function of your web browser.
Additionally, there are software products that can manage cookies for you. Further information on cookies and how to handle them is also available from online help pages.
III. Management of Cookies Used on This Website
1. Consenting to the use of cookies
When viewing our website, a cookie banner is prompted which allows you to consent to the use of cookies on this website by clicking a button. By activating the designated button for this, you have the possibility to consent to the use of all cookies detailed under Section D.III of this cookie notice.
2. Managing cookies in your browser settings
You can manage the use of cookies in the settings of your browser. Different browsers offer different ways to configure cookie settings. More detailed information on this can be found, for example, at www.allaboutcookies.org/ge/cookies-verwalten/.
However, we wish to point that if you deactivate the use of cookies in your browser in general, you may not be able to use the full functionality of the website, or the website’s functionality may not operate properly.
IV. Cookies used on this Website
Provider: Adobe Analytics.
Name: s_cc.
Usage: The cookie establishes if cookies are activated in the browser settings.
Type: Performance cookie.
Validity: Transient (until the end of the browser session).
Name: AMCVS_097B467352782F130A490D45%40AdobeOrg7 / AMCV_097B467352782F130A490D45%40AdobeOrg
Usage: The cookies stores the number of days that have passed since the user last visited the page.
Type: First-party cookie.
Name: countryselector.
Usage: The cookie stores information about the country of the user.
Name: demdex.
Usage: The cookie is set by the Audience Manager instead of an individual User ID.
Type: Third-party cookie.
Validity: 180 days.
Name: s_fid.
Usage: The cookie is used to identify a unique user (‘unique user’). The cookie is a fall-back cookie if the ‘s_vi’ cookie has been blocked which is used normally for this.
Validity: Five years.
Name: s_depth.
Usage: The cookie logs the number of pages which the user has opened while visiting. Each time the user views a new page, this number increments by ‘1’.
Validity: Until the end of the session.
Name: s_invisit.
Usage: The cookie establishes whether the user visits the domain for the first time. The cookie indicates TRUE or FALSE.
Validity: 30 minutes.
Name: s_ppv.
Usage: When a user leaves the page, the cookie saves the part of the page which the user was looking at. This is, for example, relevant for pages that users can scroll (‘Share viewed per page’).
Name: s_tbm.
Usage: The cookie establishes the market channel which the user used to access the page. Paid advertisements on Google, for example, are such marketing channels.
Name: s_vnum.
Usage: The cookie saves the number of visits (‘visits’) by a unique visitor (‘unique visitor’). This measures how often a visitor prompted the page over the past 30 days.
Validity: One month.
Name: sc_appvn.
Usage: The cookie saves the number of visits per application (‘visits’). Each application that is measured in Adobe Analytics is given a tracking code.
Name: sc_cmdep.
Usage: The cookie identifies the combination between marketing channel and campaign. Paid advertisements on Google, for example, are such marketing channels. A campaign may include Audi banner ads on a third-party site.
Name: sc_pCmp.
Usage: The cookie establishes previous ‘campaign tracking code’. The ‘campaign tracking code’ is attributed, for example, when a customer clicked on an Audi banner ad on a third-party site to reach the Audi homepage.
Validity: Seven years.
Name: sc_prevpage.
Usage: The cookie establishes which page the user visited (‘previous page’).
Name: sc_prop32.
Usage: The cookie establishes the current application.
Name: sc_tsev.
Usage: The cookie enables, or is necessary to establish the ‘duration of the visit’ with the sc_tsv cookie.
Name: sc_tsv.
Usage: The cookie saves the duration of the visit to a page using the information from the sc_tsev cookie.
Name: sc_c68.
Usage: The cookie attributes an ‘individual time stamp’ to the visit. The date and time of the respective page view is recorded. This information can be used to track the sequence of activity of an anonymous user. The cookie is set once per visit to the page.
Name: sc_tsp.
Usage: The cookie attributes the current time stamp (‘time stamp’) to the visit of the customer. Contrary to cookie sc_c68, this time stamp is attributed at the start of each page view to measure the time spent on the page.
Name: sc_v0.
Usage: The cookie saves the current campaign tracking code. A campaign may include, for example, a click on an Audi banner ad on a third-party site.
Name: sc_v41.
Usage: The cookie saves the marketing channel used so far by the user. Paid advertisements on Google, for example, are such marketing channels.
Name: sc_v43.
Sage: The cookie saves the tracking codes of campaign which the user had previously prompted.
Name: sc_v49.
Usage: The cookie saves content from the ‘vanity’ URL parameter. ‘Vanity’ refers to an Audi domain but uses a different domain than www.audiondemand.com.
Name: TrackingOptOut.
Usage: The cookie indicates if a visitor has deactivated tracking by Adobe Analytics.
Name: s_ev50.
Name: s_lv.
Validity: unknown.
Provider: doubleclick.net / Google.
Name: IDE.
Usage: The cookie is used for retargeting, optimisation and dissemination of online advertising. To opt out, please click here.
Validity: Two months.
Provider: Facebook.
Usage: The cookie sets an encrypted Facebook ID and browser ID.
V. Use of Facebook Remarketing
This site uses the "Custom Audiences" remarketing feature of Facebook Inc. ("Facebook"). This function is used to show highly interessting content to visitors of this website once they visit the social network Facebook ("Facebook Ads"). The remarketing tag of Facebook was implemented on this website. Through this tag a direct connection to the Facebook servers is made when visiting the website. This will send the information to the Facebook server that you visited this site, and Facebook will assign this information to your personal Facebook user account. For more information on how Facebook collects, uses, and protects your privacy, see the Facebook privacy policy at www.facebook.com/about/privacy. Alternatively, you can disable the "Custom Audiences" remarketing feature at www.facebook.com/settings/?tab=ads#_=_. You must be logged in to Facebook.
VI. Use of Facebook social plug-ins
Audi Business Innovation GmbH uses what are known as social plug-ins (“plug-ins”) of the social network Facebook.com, which are operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”), on its website. The plug-ins are identified by a Facebook logo or the suffix “Facebook Social Plug-In”.
Whenever you launch an Audi Business Innovation GmbH web page that contains such a plug-in, your browser establishes a direct connection with the Facebook servers. The content of the plug-in is transmitted from Facebook directly to your browser, which integrates it into the web page.
When the plug-in is integrated, Facebook is notified that you have launched the corresponding page of the Audi Business Innovation GmbH website. If you are logged into Facebook, Facebook can attribute the visit to your Facebook account. If you interact with the plug-ins, by pressing the “Like” button or commenting, for example, the corresponding information will be transmitted from your browser directly to Facebook, where it is stored.
The extent and purpose of data collection and the further processing and use of data by Facebook, as well your corresponding rights and setting options for protecting your privacy can be found in the data protection notices of Facebook.
If you do not wish Facebook to collect data about you via the Audi Business Innovation GmbH website, you need to log out of Facebook before you visit any web page of Audi Business Innovation GmbH.
VII. Use of Adforms
This website uses the technology of Adform Germany GmbH (Gr. Burstah 50-52, 20457 Hamburg), hereinafter "Adform". In conjunction with online marketing and optimization measures, adform will put a pixel on your computer when you click on one of these ads or when you arrive at this website through this ad.
Adform does not store any personal information such as name, e-mail address or other personal information. All information is anonymous and includes technical information such as the frequency of advertising and the date of advertisement, the browser used or the operating system installed. A conclusion on your person is not possible. You can disable the Adform pixel for the future through your browser at site.adform.com/privacy-policy/en.
VIII. Use of emetriq retargeting
This website uses retargeting technology from emetriq GmbH (Gr. Burstah 50-52, 20457 Hamburg), hereinafter "emetriq". This makes it possible to specifically target Internet users who were already interested in our website and our products on the websites of our partners. The insertion of the advertising material takes place during retargeting on the basis of a cookie-based analysis of the previous user behavior. If you do not want to receive interest-based advertising from emetriq, you can opt out of data collection and storage at any time for the future here (www.emetriq.com/en/opt-out/).
IX. Use of Lead Ads (Facebook)
We use the Lead Ads feature of Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA (" Facebook "), to collect and to process data of interested people- so-called leads - via a contact form featured on Facebook's website, and to process Data. The use of the data is linked to the purposes of the respective Lead Ad campaign, and these purposes will be described in detail in the context of the Lead Ad before we receive the data we have provided. For more information, please refer to the Facebook Data Policy at en-gb.facebook.com/privacy/explanation.
If you have given us your consent to this and/or if the statutory requirements are met, we will use your personal data provided during registration described under section 3.3 oben and your information described above under section 3.4 about the booking of a vehicle in order to produce and send you personally tailored customer information and offers from the automotive field and car-related services from Audi, Audi Mobility and cooperation partners as well as service and product information (e.g. new fleet cars, offers for suitable vehicles within the Audi mobility services or suitable pre-owned car offers and features of vehicles such as Functions on demand or Connect), news (e.g. new openings of Audi mobility service locations), promotions and special offers (e.g. cashback promotions, discounts, offers).