Privacy Policy
Please find the Privacy Policy for our FAZUA App here.
Introduction
With the following information we want to give you an overview of the processing of your personal data on our website https://www.fazua.com/ (hereinafter referred to as "website"). We also want to inform you about your rights under data protection laws. The processing of your personal data by us is always in accordance with the Basic Data Protection Regulation (hereinafter referred to as "GDPR") and all applicable country-specific data protection regulations.
Table of Contents
- Controller
- Data Protection Officer
- Use of Third-Party Tools
- Provision of the Website
- General Information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Cookies
- General Information
- Technically Necessary Cookies
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Specifically used technically necessary cookies
- Analysis and Marketing-Cookies
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Specifically used optional cookies
- Contact
- General Information
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Newsletter
- General Information
- Newsletter Registration
- Newsletters for Existing Customers
- Newsletter Tracking
- Purpose of Processing
- Legal Basis
- Retention Periods
- Recipients of Personal Data
- Application
- General Information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Social Networks
- General Information
- Purpose of Processing
- Legal Basis
- Recipients of Personal Data
- Using online marketplaces for e-commerce
- General information
- Purpose of Processing
- Legal Basis
- Retention Period
- Recipients of Personal Data
- Your Rights
- Right to Confirmation
- Right to Access (Art. 15 GDPR)
- Right to Rectification (Art. 16 GDPR)
- Right to Erasure (Art. 17 GDPR)
- Right to Restriction of Processing (Art. 18 GDPR)
- Right to Data Portability (Art. 20 GDPR)
- Right to Object (Art. 21 GDPR)
- Withdrawing Consent
- Right to Lodge a Complaint
- Status of Privacy Policy
Controller
The controller according to Art.4 Nr. 1 GDPR is
Porsche eBike Performance GmbH
Marie-Curie-Straße 6, 85521 Ottobrunn
Telephone number: +49 (0)89 / 540462-100
E-Mail address: contact@porsche-ep.com
Data Protection Officer
You can reach our data protection officer as follows:
E-Mail address: dpo@porsche-ep.com
You can contact our data protection officer any time to ask questions and make suggestions regarding data protection and the exercise of your rights.
Use of Third-Party Tools
We use third-party services to provide certain functions and services on our website. The specific services can be found in the corresponding chapters.
In some cases, we use service providers that are based in a third country, i.e., outside the European Union. We only transfer data to a third country with an adequate level of data protection or where appropriate safeguards pursuant to Art. 44-49 GDPR have been concluded. You have the right to request a copy of the appropriate safeguards we have put in place. For this purpose, please send us an e-mail to the e-mail address mentioned in this privacy policy.
Provision of the Website
General Information
When you visit our website, data that your browser transmits to our serve, is automatically processed. This data is stored in the log files of the server (in so-called "server log files"). The following personal data is processed:
- Browser type and browser version
- Operating system used
- Referrer URL (previously visited website)
- Host name of the accessing computer
- Date and time of server request
- IP address
- Language settings
Purpose of Processing
We do not use the data stored in server log files to draw any conclusion about your person. The purposes pursued by us include:
- the guarantee of a smooth connection set-up of the website,
- the clarification of acts of abuse or fraud,
- problem analysis in the network, and
- the evaluation of system security and stability
- the processing of service requests
Legal Basis
The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.
Retention Period
The log files are stored for security reasons (e.g., to clarify acts of abuse or fraud) for a maximum of 7 days and then deleted. Data whose further retention is required for evidentiary purposes will be retained until the matter has been finally clarified.
Recipients of Personal Data
We use the following service providers:
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Service Provider
Team Viewer
Address
Bahnhofsplatz 2
73033 Göppingen
Deutschland
Third Country
-
Appropriate Safeguard
-
Further Information
Datenschutzhinweise
Cookies
General Information
We use cookies to give you the best browsing experience on our website. The data we collect with the use of cookies help us to optimize our website. We differentiate between technically necessary and non-necessary cookies.
Technically Necessary Cookies
These cookies are absolutely necessary to enable the basic functions of the website, like page navigation. The website will not run as it is intended to without these cookies. You can block or delete them by changing your browser settings. The technically necessary cookies cannot be blocked, otherwise the proper use f the website can no longer be guaranteed.
Purpose of Processing
We use technically necessary cookies for the following purposes:
- to provide services,
- to enable the use of our website functions, as well as
- to offer different languages.
Legal Basis
The legal basis for processing your personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. We have an overriding interest in being able to offer our a technically functioning service.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. Technically necessary cookies are only stored for the respective session. When you leave our website and close your browser, the cookies are deleted.
Recipients of Personal Data
We use the following service providers:
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Specific, technical necessary cookies used
Description
GA-consent
Purpose
Storage of the user’s optional cookie consent value
Description
GA-consent-revision
Purpose
Storage of the current version of the cookie policy
Description
sessionid
Purpose
Storage of a session token used by the server to identify the user’s session
Description
csrftoken
Purpose
Token to prevent CSRF attacks
Analysis and Marketing-Cookies
We also use analysis and marketing cookies. These are cookies that are not technically necessary. We use them to understand your behaviour on our website and to improve our offer.
Purpose of Processing
We use technically necessary cookies for the following purposes:
- to measure and track our reach,
- to evaluate the behavior of visitors on our website,
- to optimize our offer on our website, and
- to publish targeted advertising
Legal Basis
The legal basis for processing your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. The cookies are set only after you have given your consent via our cookie banner.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. The storage period of personal data depends on the providers used.
Recipients of Personal Data
We use the following service providers:
Service Provider
Google Ireland Limited
Address
Gordon House, Barrow Street
Dublin 4,
Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Service Provider
Meta Platforms Ireland Ltd.
Address
4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Specific optional cookies used
Description
_fbp
Purpose
Cookie placed by Facebook with the function of storing and tracking visits on the website
Description
_gid
Purpose
Cookie placed by Google analytics with the function of storing and counting page views
Description
_ga
Purpose
Cookie placed by Google Analytics with the function of reading and filtering requests made by bots
Description
_gat_UA-78448920-1 (_gat_UA-*)
Purpose
Cookie placed by Google Analytics with the function of technical monitoring
Contact
General Information
Through our website you can contact us by e-mail or via our form. To contact you and to answer your request, we process the following personal data from you:
- First and last name
- E-mail address
- Telephone number (optional)
- Country
- Date and time of the inquiry
- IP address
- If applicable, images or videos uploaded by you
- Other personal data that you provide to us while contacting us.
Purpose of Processing
We process your data to respond to your inquiry and other matters arising from it.
Legal Basis
If your request is connected to pre-contractual measures or in relation to an existing contract with us, the legal basis is the performance of the contract and implementation of pre-contractual measures pursuant to Art. 6 (1) (b) GDPR.
If your request is made independently of contractual or pre-contractual measures, our overriding legitimate interests pursuant to Art. 6 (1) (f) GDPR constitute the legal basis. The overriding legitimate interest corresponds to the above-mentioned purposes.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of contact inquiries, this is usually the case when it is clear from the circumstances that the specific matter has been conclusively processed.
Recipients of Personal Data
We use the following service providers:
Service Provider
Quality Bicycle Products
Address
6400 W. 105th Street, 55438, Bloomington
Third Country
USA
Appropriate Safeguard
Adequacy decision
Further Information
Privacy Policy
Service Provider
Ampere Plus AG
Address
Roschbrunnen 3, 5053 Staffelbach
Third Country
Switzerland
Appropriate Safeguard
Adequacy decision
Further Information
Privacy Policy
Service Provider
VIMM Ltd.
Address
25 Autumn Blaze Street, NZ 0616 Hobsonville, Auckland
Third Country
New Zealand
Appropriate Safeguard
Adequacy decision
Further Information
-
Newsletter
General Information
We offer you the possibility to receive the newsletter of our company. With our newsletter, we inform customers and business partners about our offers at regular intervals. Within the scope of the newsletter dispatch, we process the following personal data:
- First and last name
- E-mail address
- Organization
- Preferred language
- Metadata (e.g., device information, IP address, date, and time of registration)
Newsletter Registration
If you register for our newsletter via our website, we will send you a confirmation e-mail. After confirming your registration through the double opt-in procedure, you will be placed in our newsletter database. This confirmation e-mail serves to verify whether you, as the owner of the e-mail address, have authorized the receipt of the newsletter. In the process, the registration for the newsletter is logged.
Newsletters for Existing Customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, by e-mail. We base this processing on section 7 (3) of the German Act against Unfair Competition.
Newsletter Tracking
Our newsletters contain so-called tracking pixels. This is a miniature graphic that is embedded in e-mails. This allows us to track, for example, whether and when an e-mail was opened by you and which links in the e-mail were called up by you. This enables us to statistically evaluate the success or failure of online marketing campaigns. The personal data collected by the tracking pixel is stored and analyzed by us to optimize the newsletter mailing and to better adapt the content of future newsletters to your interests.
Purpose of Processing
We process your personal data for the following purposes:
- Newsletter mailing: implementation of marketing measures.
- Double opt-in procedure: fulfillment of our legal obligations to provide proof.
- Newsletter tracking: display of personalized advertising, market research, performance measurement.
Legal Basis
The legal basis for the processing of your personal data in the context of the:
- newsletter subscription is your consent pursuant to Art. 6 (1) (a) GDPR,
- double-opt-in procedure is our legal obligation according to Art. 6 (1) (b) GDPR,
- newsletter mailing to existing customers is our overriding interest Art. 6 (1) (f) GDPR, and
- newsletter tracking is your consent pursuant to Art. 6 (1) (a) GDPR.
Retention Periods
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected. In the context of the newsletter mailing, this is generally the case when you withdraw your consent or you object to the processing.
For this purpose, there is an opt-out link at the end of every newsletter. In addition, you also have the option of unsubscribing from the newsletter mailing at any time on our website or informing us of this in another way. When you select the unsubscribe option in our newsletters, we automatically interpret this as your withdrawal of consent or your objection to the processing.
Recipients of Personal Data
We use the following service providers:
Service Provider
Mailchimp
Address
The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, USA
Third Country
USA
Appropriate Safeguard
SCC
Further Information
-
Application
General Information
You can apply for job vacancies through our application form or via email. As part of the application process, we process the following personal data:
- First and last name
- Address
- Contact data (e.g., e-mail address, telephone number), and
- Application data (e.g., cover letter, resume, certificates, and other supporting documents).
Purpose of Processing
The purpose of the processing is to carry out the application procedure.
Legal Basis
The legal basis for the processing of personal data is the fulfillment of the contract and the implementation of pre-contractual measures pursuant to Art. 88 (1) GDPR in conjunction with § 26 (1) Federal Data Protection Act.
If we obtain your consent (e.g., for you to be included in our applicant pool), this constitutes the legal basis for the data processing.
Retention Period
If an employment relationship is established after completion of the application process, the personal data provided will be processed further for the employment relationship. Otherwise, we generally retain the data for six months after the end of the application process. We then delete all personal data. Longer storage periods are possible if we include the personal data in our application pool after obtaining your consent.
Recipients of Personal Data
We use the following service providers:
Service Provider
Personio GmbH
Address
Rundfunkplatz 4
80335 München
Third Country
-
Appropriate Safeguard
-
Further Information
Privacy Policy
Social Networks
General Information
We maintain presences in social networks to communicate with you and inform you about our services.
Purpose of Processing
The purpose of the processing is the maintenance of presences in social media.
Legal Basis
The legal basis for the processing of personal data is our overriding legitimate interest pursuant to Art. 6 (1) (f) GDPR. The overriding interest corresponds to the above-mentioned purposes.
Recipients of Personal Data
We have company presences in the following social networks:
Social Network
Facebook
Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Joint Controller Agreement
Social Network
LinkedIn
Address
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Opt-out and retargeting opt-out
Joint Controller Agreement
Social Network
Instagram
Address
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
XING
Address
New Work SE, Dammtorstraße 29-32, 20354 Hamburg
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
SCC, adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
YouTube
Address
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
Adequacy decisions
Further Information
Privacy Policy
Contradiction settings
Social Network
TikTok
Address
TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, London, England ("TikTok UK") und TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok Ireland") as Joint Controllers (“TikTok“)
Third Country
on a case-by-case basis USA and other third countries
Appropriate Safeguard
Adequacy decisions
Further Information
Privacy Policy
Using online marketplaces for e-commerce
General information
We offer our services on online platforms hosted by other service providers. In this context, data privacy policies of the respective platforms apply in addition to our privacy policy. This applies with regard to the range measurement and interest-based marketing processes used on the platforms.
In context of using online marketplaces, we process the following personal data:
- Inventory data (e.g. names, addresses)
- Payment data (e.g. bank details, bills, payment history)
- Contact data (e.g. e-mail, telephone numbers)
- Contract data (e.g. subject-matter of a contract, term, customer category)
- User data (e.g. visited websites, interest in content, access times)
- Meta/ communication data (e.g. device information, IP adress)
Purpose of Processing
The purpose of processing is to provide contract performances and customer service.
Legal Basis
The legal basis for the processing of personal data is the fulfillment of the contract and pre-contractual requests (Art. 6 (1) (b) GDPR, legitimate interests (Art. 6 (1) (f) GDPR).
Retention Period
We delete your personal data as soon as they are no longer required to achieve the purpose for which they were collected.
Recipients of Personal Data
We use the following service providers:
Service Provider
Shopify
Address
Shopify International Limited , Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland
Third Country
-
Appropriate Safeguard
-
Further Information
Privacy Policy
Your Rights
Right to Confirmation
You have the right to request confirmation from us as to whether personal data concerning you is being processed.
Right to Access (Art. 15 GDPR)
You have the right to obtain from us - at any time and free of charge - information about the personal data stored about you, as well as a copy of this data in accordance with the statutory provisions.
Right to Rectification (Art. 16 GDPR)
You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, considering the purposes of the processing.
Right to Erasure (Art. 17 GDPR)
You have the right to demand that personal data concerning you be deleted immediately if one of the reasons provided for by law applies and insofar as the processing or storage is not necessary.
Right to Restriction of Processing (Art. 18 GDPR)
You have the right to demand that we restrict the processing if one of the legal requirements is met.
Right to Data Portability (Art. 20 GDPR)
You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format. Furthermore, you have the right to transfer this data to another controller without hindrance from us, to whom the personal data was provided, provided that the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
In addition, when exercising your right to data portability pursuant to Art. 20 (1) GDPR, you have the right to have the personal data transferred directly from one controller to another controller, insofar as this is technically feasible and insofar as this does not adversely affect the rights and freedoms of other persons.
Right to Object (Art. 21 GDPR)
You have the right to object at any time, on the basis of reasons arising from your particular situation, to the processing of personal data relating to you which is carried out on the basis of data processing in the public interest pursuant to Art. 6 (1) e GDPR or on the basis of our legitimate interest pursuant to Art. 6 (1) f GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Withdrawing Consent
You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.
Right to Lodge a Complaint
You have the right to lodge a complaint about our processing of personal data with a supervisory authority.
The responsible supervisory authority:
Der Bayerische Landesbeauftragte für den Datenschutz (BayLfD)
Landesamt für Datenschutzaufsicht
Promenade 18
91522 Ansbach
P.O. Box 1349
91504 Ansbach
Telephone number: 0981/180093-0
Mail: poststelle@lda.bayern.de
https://www.lda.bayern.de
Status of Privacy Policy
This privacy policy is currently valid and has the following status: July 2022.
If we continue to develop our website and our offers or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.
