Porsche Cookie Policy

1. Scope

This cookie policy applies in addition to the general privacy policy for our website (date 31.01.2022) and provides extra information about the type, scope and purpose of data processing for cookies and cookie-like technologies (hereinafter, for the sake of simplicity, also referred to as "cookies").

2. Controllers, data protection officers, data subject rights

For information on the controllers and their data protection officers as well as your rights as a data subject regarding the use of cookies, please refer to the general privacy policy for our website.

3. Categories of personal data

When we refer to the categories of data processed in this Porsche Cookie Policy, we mean in particular the following data: master data (e.g. names, addresses, dates of birth), contact data (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entered, photos, videos, contents of documents/files), contractual data (e.g. object of the contract, terms, customer categories), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of specific content, access times, contact or order history), connection data (e.g. device information, IP addresses, URL referrer), location data (e.g. GPS data, IP geo-localisation, access points), diagnostic data (e.g. crash logs, performance data of the website/app, other technical data for the analysis of faults and errors).

4. Categories of cookies and similar technologies

Cookies are text files that are stored or read by a website on your end device. They contain combinations of letters and numbers which enable us to recognise the user and user settings when the user returns to the website which set the cookie; they also enable the user to stay logged in to a customer account and allow us to statistically analyse a certain user behaviour.

The WebStorage technology enables the local storage of variables and values in the user's browser cache. The technology includes so-called 'sessionStorage' which remains stored until the browser tab is closed as well as 'localStorage' which remains stored in the browser cache until the cache is emptied by the user. The localStorage technology enables, among other things, recognition of the user and user settings when the user comes back to our website.

Cookies/similar technologies can only be accessed from the Internet address where the cookie was set. This means that we cannot access the cookies set by the service providers involved. They cannot access our cookies either. Third parties cannot access our cookies or those of the involved service providers. Third parties may only gain access by technical attacks which we cannot control and for which we are not responsible.

Pixel tags are small graphic files which are loaded from the severs of the respective service provider when a user accesses our website. This also includes loading of the program code which enables the collection of data (e.g. regarding your user behaviour while visiting our website).

The cookies used on our website can be divided into three categories: technically required cookies, cookies for the analysis of range and performance, and marketing cookies. While technically required cookies are always stored when you visit our website, you have the option to decide whether or not you wish to allow the use of cookies for the analysis of range and performance as well as marketing cookies. You can change your settings at any time. Please note that blocking certain types of cookies can impact on your experience of our website and/or the services and functions available there.

For general information on the cookies used, please refer to the sections and detailed views below ('Your cookie settings on this website').

Your cookie settings on this website

Technically required

The use of technically required cookies and similar technologies is absolutely necessary in order to properly and securely provide the website you have accessed with the functionalities typical for this service. These technologies are used, for example, to

enable basic functions of the website,
save your data protection preferences,
provide secure authentication that allows you to log into your user account,
provide you with multimedia content that meets the technical requirements of your end device, and
enable the completion of forms.

Data processing by means of technically required cookies and similar technologies is carried out – insofar as there is a corresponding contractual relationship – on the basis of Article 6 paragraph 1 b) of the GDPR or on the basis of Article 6 paragraph 1 c) of the GDPR – if necessary for the fulfilment of a legal obligation – and otherwise on the basis of our legitimate interest pursuant to Article 6 paragraph 1 f) of the GDPR. Our legitimate interest arises from the described purpose of use of the specific technology, as well as ensuring the technical operation of our website and certain basic features. These technologies are automatically used when accessing our website or a specific feature, unless you have prevented it in your device and/or Internet browser settings. In particular, we use the following services that use technically required cookies or similar technologies:

Amazon CloudFront

This is a Content Delivery Network (CDN) from Amazon.

Usercentrics Consent Management Platform

This is a service used to manage your consent settings.

Additional essential functions

Essential functions for the provision of the website

Usercentrics Consent Management Platform + Bridge

This is a consent management service to register your consent across multiple sites. We can use this to understand which user has given/not given/revoked the consent, so that the consent banner is not displayed again when the (sub)domain changes within a setting ID.

Google Tag Manager

This is a tag management system. It allows the user to update measurement codes and associated code snippets, collectively referred to as tags, on the user's website or mobile app.

Analysis and perfomance

Cookies and similar technologies are used to analyse reach and performance to enable an evaluation of website usage. These technologies are partly set by the third-party providers stated below. By using such technologies, we can, for example, count the number of visits to our website and determine from which other websites our pages were accessed. We can therefore find out which sections of our website are most popular, which are the least frequented and how visitors navigate our website. This allows us to measure and improve the overall performance of our website and optimise the content. For example, we use these technologies to

understand what content is relevant for users and, on this basis, continue improving the quality of our website and optimise the user experience,
measure the reach and success of measures,
measure and improve the performance of our website, and
adapt content to the needs of the user.

Data is processed using cookies and similar technologies for the analysis of reach and performance exclusively based on your voluntary consent in accordance with Article 6 paragraph 1 a) of the GDPR. If you give us your consent to do so, the technologies will be used for analysis when you access our website or when an offer made available via the website is accessed. You have the option [here] to extend your consent either to individual services or to all services in this category. You may also withdraw your consent there at any time with future effect. In particular, we use the following services that use cookies or similar technologies to analyse reach and performance:

Google Analytics

This is an analysis service to optimise our digital offers.

Datadog

Monitoring system stability and identifying code errors

Marketing

Cookies and similar technologies are used in marketing to provide interest-based content and advertising, and to receive more accurate reports on campaign performances. These technologies are sometimes placed by third-party providers, i.e. by our selected marketing and social media partners. They therefore receive information about your use of our website and may collate this information with other data they may have received about you elsewhere.

This enables us to deliver interest-focused advertising on other Porsche online and social media platforms to users interested in content and offers on our website, with the help of selected partners (retargeting/remarketing). Advertising is inserted on the websites of our marketing and social media partners based on an analysis of your Internet previous usage behaviour on our website. Such usage profiles are created based on information supplied by the providers of the retargeting/remarketing services we use, sometimes anonymously or using pseudonyms. We will not use your data collected in this way to personally identify you, and never merge it with the personal data we hold about you.

For example, we use these technologies to

address interested users with the appropriate information and therefore continuously optimise marketing communication with visitors to our website, and
display advertising content that is relevant to you – even outside of the Porsche websites.

Data is processed exclusively based on your voluntary consent in accordance with Article 6 paragraph1 a) of the GDPR. If you give your consent, cookies and similar technologies will be placed when you visit our website or access one of the services provided, allowing you to experience interest-based advertising also on other websites and social media platforms. You have the option here to extend your consent either to individual services or to all services in this category. You may withdraw your consent at any time with future effect. In particular, we use the following services that use cookies or similar technologies:

Google Ads