Porsche Drive S.r.l., a company belonging to the Porsche Group (hereinafter referred to as "we", "us" or "Porsche Drive"), is pleased that you have chosen to visit its website www.porsche-drive.it. Thank you for your interest in our company and our services. Your privacy is an essential priority for us. We take the protection of your personal data very seriously, which we process in accordance with the applicable data protection legislation, and in particular with the provisions of the General Data Protection Regulation of the European Union (EU Regulation 2016/679, hereinafter referred to as "GDPR").

We hereby inform you about the processing of your personal data and your rights as a data subject in the context of the use of our website with regard to the long-term rental service.

Should there be links to this privacy policy on external social media sites, the provisions hereof shall only apply to the extent that the data processing operations within the scope of these social media actually fall within our area of responsibility and there are no more specific, and therefore prevailing, privacy guidelines, related to the processing activities carried out on these social media.

1. Data Controller
The data controller within the meaning of data protection legislation is:
Porsche Drive S.r.l.
Via Alessandro Manzoni 16
38122 Trento
Italy
If you have any questions or comments on data protection, you can send a communication by mail to the aforementioned address or by e-mail to the privacy.drive@porsche.it address or to the certified e-mail address poschedrivesrl@legalmail.it.

2. The protection of your personal data
As a data controller, we protect your personal data. Personal data is any information relating to an identified or identifiable natural person (the so-called "data subject"). This information includes, but is not limited to, type of customer (natural person/legal entity), first and last name, gender, date of birth, citizenship, tax identification number, postal address, e-mail address/certified e-mail address or telephone number, contractual and billing data, as well as other information, which is automatically collected during the use of our website and better detailed in the following paragraphs.

3. Type, scope, purpose and legal basis of automatic data processing
Filling in the contact form on the web page dedicated to the long-term rental service is functional to requesting information about the relevant service from a Porsche Center of your choice.

3.1. Cookies, tracking technologies and related services
We use cookies and tracking technologies on our website. Please read our cookie policy.

3.2. Integration of third-party content
We also use the services of external providers on our website to supplement our offers and content (hereinafter referred to as "Content"). Unless otherwise specified below in connection with individual services of external providers, data processing is carried out on the basis of Article 6(1)(f) GDPR, in light of our legitimate interest in using the Content and services of third-party providers to enable effective and optimized operation of our website.

4. Contact request
You may voluntarily provide personal data in order to request information about the long-term rental service from the Porsche Centre of your choice with an individual profile in the appropriate area on our website; when you use the services and features described below, we store, process and use your data as set out below. Without registration, the above service cannot be used. The mandatory information required for functional registration for the long-term rental service is marked with a "*" on the respective input field and generally consists of at least the following data: E-mail, Name, Surname, Mobile phone. If you do not provide the mandatory information, you will not be able to proceed with sending the contact request. The personal data you provide when filling in the contact form will be used by us to enable you to use the service you have requested. The applicable legal basis for these data processing operations is Article 6(1)(b) GDPR. In some cases, such data may be collected and processed directly by our Company and in others it may be collected and processed by third parties who act as Data Processors to provide the services and offers you request.
We carry out the processing activities described in this paragraph to process your request regarding the long-term rental service.

5. How to contact us
If you provide us with personal data via a contact form, this is always done on a voluntary basis. Your information will be processed by us in order to process your contact request and in accordance with Article 6 GDPR (1) (b) (if your request relates to a possible contract to be concluded with us or a contract already concluded with us) or f) (for any other type of request) and may also be passed on to third parties (e.g. Porsche Centers) in this context.

6. Pursuit of legitimate interests
Data processing operations in the context of our website are carried out for the purposes of the following legitimate interests of ours:

  • ensuring the availability, operation and security of technical systems, as well as management of technical data;
  • further development of products, services and service offerings;
  • analysis of customer needs, e.g. processing of warranty claims as well as non-contractual questionnaires for interested parties and customers;
  • prevention of violations of the law and cases of fraud, actions related to legal claims.

The respective data processing for the pursuit of legitimate interests is carried out on the basis of Article 6(1)(f) GDPR.

7. Consent: Marketing
With your free and optional consent (Article 6, paragraph 1, letter a) of the GDPR), we will process your data provided in relation to the long-term rental service, for marketing purposes (sending advertising material, carrying out market research, commercial communication and customer satisfaction survey), also through appropriately selected and formally appointed third-party suppliers, by sending you information and offers relating to Porsche Group products and services, which we think may be of interest to you by mail, e-mail, text message, fax and landline/mobile telephone with or without operator, social media. Consent to the processing of your personal data is free and optional and in case of lack of consent you will not suffer any detrimental consequences. You can withdraw your consent to the processing of data for marketing purposes at any time and free of charge, without any consequences, in the manner indicated in paragraph 16 below, even selectively, by informing us that you no longer want to be contacted through one or more contact methods. We therefore ask you to inform us if you wish to consent to the processing of your data for marketing purposes and to be contacted by Porsche Drive S.r.l., by selecting the appropriate consent request box. In this context, it should be noted that, again on the basis of your free and voluntary consent, the aforementioned marketing activities may also be carried out by communicating your data to Porsche Dealers, Porsche Service Centres and other companies belonging to the Porsche Group.

8. Recipients of personal data
Internal recipients: within Porsche Drive S.r.l., only those persons who need it for the specified purposes can access the data.
External recipients: We only transfer personal data to external recipients outside Porsche Drive S.r.l., if this is necessary for the processing or fulfilment of your request and/or to provide you with a service and/or for the performance of a contractual relationship, if there is another legal basis or obligation and/or if you have given us your consent to do so and/or if this is otherwise permitted under applicable law.
External recipients can be:

a) Data Processors
External service providers that we use for the provision of services, e.g. in the areas of technical infrastructure and maintenance for the offer of Porsche Drive S.r.l. or the provision of contractually relevant content. These processors (in some cases they may be companies belonging to the Porsche Group) are carefully selected also from a technical and IT point of view, and evaluated by us to ensure that your privacy is preserved. Service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) Public bodies
Government authorities and institutions, such as prosecutors, courts or tax authorities to whom we need to transfer personal data to comply with legal obligations. The transmission takes place on the basis of Article 6(1)(c) GDPR.

c) Private entities
The dealer to whom the Porsche Centre selected by you refers when requesting contact and third-party service providers for the purpose of processing an enquiry or the performance of a contract. The transmission takes place on the basis of Article 6(1)(b) GDPR.

9. Disclosure of data to third parties for marketing purposes
With your voluntary consent (Article 6(1)(a) GDPR), your personal data provided in connection with the long-term rental service, may be disclosed by us to other companies belonging to the Porsche Group. If you give your consent, these third parties may in turn process your personal data for marketing purposes (sending advertising material, carrying out market research, commercial communication and customer satisfaction surveys) and send you information and offers relating to their own products and services or those of the Porsche Group that may be of interest to you, by mail, e-mail, sms, fax and landline/mobile phone with or without operator, social media.

10. Data processing in third countries
If a transfer of data takes place to entities whose registered office or place of data processing is not located in a Member State of the European Union or in another State party to the Agreement on the European Economic Area, we will ensure before the transfer that, unless permitted by law, the recipient ensures an adequate level of data protection (e.g. by means of an adequacy decision by the Commission pursuant to Article 45 of the GDPR, through appropriate safeguards pursuant to Article 45 of the GDPR or the conclusion of so-called EU standard contractual clauses with the data importer, pursuant to Article 46(2)(c) of the GDPR, or, alternatively, by fulfilling the obligations and providing the safeguards provided for in Art. 49 (1) GDPR) or you have given your consent to such data transfer pursuant to Art. 49, paragraph 1, letter a) of the GDPR.
It is understood that, should such a transfer take place, you will be able to obtain from us an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure the appropriate level of data protection. To obtain this information, you can contact us as indicated in paragraphs 1 and 16.

11. Sources and categories of data in the case of third-party searches
Through our website, we only process personal data that we collect directly from users. We do not collect personal data through intermediaries or other third parties.

12. Automated decision-making
We do not use any automated decision-making process that produces legal effects on an individual or similarly significantly affects him or her within the meaning of Article 22 of the GDPR.

13. Duration of storage and deletion
We store your personal data only for as long as is necessary for the purpose of the intended purposes or, in the case of consent, until you have revoked your consent. If you object to data processing, we will delete your personal data, unless further processing of your personal data is necessary for other legitimate purposes of the processing. We will also delete your personal data when we are obliged to do so by any legal obligation. Applying these general principles, we will immediately delete your personal data:

  • in the event that the legal basis on which the data processing is based no longer applies, unless further storage is necessary to comply with legal obligations or to pursue other legitimate purposes of the data processing. If the latter occurs, we will delete the data after the other legal basis also ceases;
  • if they are no longer necessary for the purposes of preparing and performing a contract or for the pursuit of legitimate interests and there is no other legal basis (such as if further storage is necessary for compliance with legal obligations relating to tax or the retention of business records). If, on the other hand, another legal basis exists, we will delete the data when the other legal basis also ceases;
  • if the purpose of the processing activities pursued by us ceases and there is no other legal basis (e.g. if further storage is necessary for compliance with legal obligations relating to tax or the retention of business records). If there is another legal basis, we will delete the data when the other legal basis also ceases to exist.

Information on the duration of storage of cookies can be found in our cookie policy.

14. Rights of the data subject
As a data subject, you have the right to request from us access to your personal data and the rectification or deletion of your personal data or the restriction of data processing concerning you or to object to its processing, as well as the right to data portability. In detail:
Right of access : you have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and information specified in Article 15 of the GDPR;
Right to rectification and right to erasure : You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the data processing, you have the right to obtain the completion of incomplete personal data, including by providing a supplementary statement. You also have the right to obtain the erasure of personal data concerning you without undue delay if one of the reasons set out in Article 17 of the GDPR applies;
Right to restriction of data processing : you have the right to obtain the restriction of processing when one of the hypotheses indicated in Article 18 of the GDPR applies;
Right to data portability : if the processing of your data is based on consent or contract and is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit such data to another data controller without hindrance;
Right to object : You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(f) (processing based on legitimate interest). If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes;
Revocation of consent : If you have given us consent to process your data, you can revoke this consent at any time with immediate effect. The lawfulness of the data processing remains unchanged until the moment of revocation;
Right to lodge a complaint with a supervisory authority : You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your data infringes applicable law. You can contact the Italian Data Protection Authority (www.garanteprivacy.it) or the other Supervisory Authority of the Member State of the European Union in which you reside or work.

15. Links to third party sites
The websites and services of other parties to which the links contained on our website, have been designed and provided by third parties. We have no influence whatsoever on the design, content and function of these third-party websites and services. We assume no responsibility for the content of these websites and services and the associated data processing. Please note that these third parties whose sites and services are linked to on our site may place their own cookies on your device or collect personal data when you use the links. We have no influence on that possibility. If necessary, please inquire directly with the providers of these websites and services.

16. How to contact us
You can contact us free of charge if you have any questions regarding the processing of your personal data and to exercise your rights. Please contact us by e-mail at privacy.drive@porsche.it or certified e-mail poschedrivesrl@legalmail.it or by mail at the following address making sure you clearly identify yourself:
Porsche Drive S.r.l.
Via Alessandro Manzoni 16
38122 Trento
Italy

17. Version
The latest version of this Privacy Policy applies.

Last updated: December 3, 2024