Data Protection Notice

Data Protection at Audi Business Innovation GmbH

In the following we will be informing you about the controller responsible for the processing of your personal data and the controller’s data protection officer (Section A) as well as your rights regarding the processing of your personal data (Section B).
Furthermore, we have detailed information below on the processing of your personal data (Section C) and information regarding the use of cookies (Section D) on www.audibusinessinnovation.com.
For more information on processing in connection with our Audi on demand product, please click here. 

The terminology applied throughout this privacy notice, such as ‘Controller’, has the meaning as attributed to it under Article 4 GDPR (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)).


A. Information Regarding the Controller

I. Name and contact details of the controller

The controller of the www.audibusinessinnovation.com Internet presence is:

Audi Business Innovation GmbH
Hochbrückenstraße 6
80331 Munich
Germany
Email: info.businessinnovation@audi.de


- hereinafter referred to as ‘We’ -

II. Contact details of the controller’s data protection officer

You may contact our data protection officer as follows:

Audi Business Innovation GmbH  
Mr. Andreas Buchberger 
Data Protection Officer
Hochbrückenstraße 6
80331 Munich
Germany
Email: data@audimobility.com


B. Information Regarding the Rights of Data Subjects

As the data subject, you have the following rights regarding the processing of your personal data:

• the right of access to information (Article 15 of the General Data Protection Regulation);
• the right to the correction of data (Article 16 of the General Data Protection Regulation);
• the right to erasure (‘right to be forgotten’ - Article 17 of the General Data Protection Regulation);
• the right to the restriction of processing (Article 18 of the General Data Protection Regulation);
• the right to data portability (Article 20 of the General Data Protection Regulation);
• the right to object (Article 21 of the General Data Protection Regulation);
• the right to withdraw a consent (Article 7 III of the General Data Protection Regulation);
• the right to lodge a complaint with a supervisory authority (Article 57 I lit. f) of the General Data Protection Regulation).
   

To exercise your rights, you may contact our data protection officer (Section A.II.).

Information regarding the specific modalities and mechanisms which facilitate the exercise of your rights, especially in relation to the exercise of your rights to data portability and to object, is available (where applicable) from the information on the processing of personal data in Section C of this privacy notice.

Below we provide you with detailed information of your rights regarding the processing of your personal data:

I. Right of Access to Information
As the data subject, you have a right of access to information subject to the prerequisites laid down in Article 15 of the General Data Protection Regulation.
This means in particular that you have the right to request confirmation from us as to whether we process personal data concerning you. If this is the case, you also have the right to be informed of these personal data and such information as specified under Article 15 I of the General Data Protection Regulation. This includes, but is not limited to, information pertaining to the purposes of the processing; the categories of personal data that are processed; and the recipients or categories of recipient(s) to whom personal data have been or will be disclosed (Article 15 I lit. a), b), and c) of the General Data Protection Regulation).
To view the full scope of your right of access to information, please refer to Article 15 of the General Data Protection Regulation which can be prompted with this link.

II. Right to Rectification
As the data subject, you have a right to the rectification of data subject to the prerequisites laid down in Article 16 of the General Data Protection Regulation.
This means in particular that you have the right to request that we rectify incorrect personal data concerning you and complete any incomplete personal data without delay.
To view the full scope of your right to rectification, please refer to Article 16 of the General Data Protection Regulation which can be prompted with this link. 

III. Right to Erasure (‘right to be forgotten’)
As the data subject, you have a right to erasure (‘right to be forgotten’) subject to the prerequisites laid down in Article 17 of the General Data Protection Regulation.
This means that in principle, you have the right to request that we promptly erase the personal data concerning you and that we are obliged to erase these personal data without delay provided that one of the reasons as specified under Article 17 I of the General Data Protection Regulation applies. This may be the case, for example, if personal data are no longer required in relation to the purposes for which they were collected or otherwise processed (Article 17 I lit. a) of the General Data Protection Regulation).

Insofar as we made the personal data public and if we are obliged to erase them, we are equally obliged (subject to the available technology and cost of implementation) to take reasonable measures, even of technical nature, so as to inform other data controllers processing such personal data that a data subject requested that they erase all links to these personal data or copies or replications of said personal data (Article 17 II of the General Data Protection Regulation).

In the exceptional case, the right to erasure (‘right to be forgotten’) does not apply insofar as processing is necessary for reasons specified in Article 17 III of the General Data Protection Regulation. This may be the case, for example, if processing is necessary to comply with a legal obligation or to establish, exercise or defend legal claims (Article 17 III lit. a) and e) of the General Data Protection Regulation).

To view the full scope of your right to erasure / right to be forgotten, please refer to Article 17 of the General Data Protection Regulation which can be prompted with this link.

IV. Right to the Restriction of Processing
As the data subject, you have a right to the restriction of processing subject to the prerequisites laid down in Article 18 of the General Data Protection Regulation.
This means that you have the right to request that we restrict the processing provided that one of the reasons as specified under Article 18 I of the General Data Protection Regulation applies. This may be the case, for example, if you contest the accuracy of the personal data. In such a case, processing will be restricted for such period that we require to verify the accuracy of the personal data (Article 18 I lit. a) of the General Data Protection Regulation).
Restriction means the marking of stored personal data with the aim of limiting their processing in the future (Article 4 (3) of the General Data Protection Regulation).
To view the full scope of your right to the restriction of processing, please refer to Article 18 of the General Data Protection Regulation which can be prompted with this link.

V. Right to Data Portability
As the data subject, you have a right to data portability subject to the prerequisites laid down in Article 20 of the General Data Protection Regulation.
This means that in principle, you have the right to receive the personal data concerning you and which you provided to us in a structured, commonly-used and machine-readable format and that you have the right to transmit these data to another controller without hindrance on our behalf, provided the data were processed based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or for the performance of a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation and processing was conducted using automated means (Article 20 (I) of the General Data Protection Regulation).

Information as to whether processing is based on a consent pursuant to Article 6 (I) lit. a) or Article 9 (II) lit. a) of the General Data Protection Regulation or a contract pursuant to Article 6 (I) lit. b) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.

In exercising your right to data portability, you also have the right in principle to request that we transmit the personal data directly to another controller insofar as is technically feasible (Article 20 II of the General Data Protection Regulation).

To view the full scope of your right to the restriction of processing, please refer to Article 20 of the General Data Protection Regulation which can be prompted with this link. 

VI. Right to Object
As the data subject, you have a right to object subject to the prerequisites laid down in Article 21 of the General Data Protection Regulation.
We expressly point out your right to object as a data subject at the time of our initial communication with you the latest.
Below we provide you with detailed information of this:

1. Right to object for reasons resulting from the specific situation of the data subject 
As the data subject, you have the right to object at any time to the processing of personal data concerning you for reasons resulting from your personal situation by virtue of Article 6 (I) lit. e) or f) of the General Data Protection Regulation; this equally applies to any profiling based on this provision.

Information as to whether processing is based on Article 6 (I) lit. e) or f) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.

If you object for reasons resulting from your specific situation, we will no longer process the personal data concerning you unless we can provide proof of compellingly legitimate grounds for such processing which override your interests, rights and freedoms, or such processing serves to establish, exercise or defend legal claims.

To view the full scope of your right to object, please refer to Article 21 of the General Data Protection Regulation which can be prompted with this link. 

2. Right to object to direct marketing
If the personal data concerning you are processed for direct marketing purposes, you have the right to object to the processing of personal data that concern you for the purposes of such marketing; this applies equally to profiling provided that it is tied to such direct marketing.

Information as to whether and to which extent personal data are processed for purposes relating to direct marketing is defined in the information regarding the purposes of processing, Section C of this privacy notice.

If you object to the processing for purposes relating to direct marketing, we will no longer process personal data concerning you for these purposes.

To view the full scope of your right to object, please refer to Article 21 of the General Data Protection Regulation which can be prompted with this link.

VII. Right to Withdraw Consent
If processing is based on a consent issued pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation, you as the data subject have the right according to Article 7 III of the General Data Protection Regulation to withdraw your consent at any time. Your withdrawal of the consent does not affect the lawfulness of any processing carried out by virtue of a consent that was issued prior to such withdrawal. We shall notify you accordingly prior to issuing such consent.

Information as to whether processing is based on a consent pursuant to Article 6 I lit. a) or Article 9 II lit. a) of the General Data Protection Regulation is defined in the information regarding the legal basis for processing, Section C of this privacy notice.

VIII. Right to Lodge a Complaint with a Supervisory Authority
As the data subject, you have a right to lodge a complaint with the competent supervisory authority subject to the prerequisites laid down in Article 57 I lit. f) of the General Data Protection Regulation.


C. Information Regarding the Processing of Personal Data

I. Legal Basis and Purpose of Processing Your Data
We process your personal data in compliance with the provisions set forth in the General Data Protection Regulation (GDPR) as well as the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) for various purposes. The specific purposes of data processing are primarily dependent on the individual request, the selected product or the individual service that has been opted for (e.g. use of Audi on demand).

The processing of your personal data is based on one of the legal reasons specified below:

• you issued your prior consent (Art. 6 I, subparagraph 1 lit. a) GDPR);
• processing is necessary in order to comply with the performance of a contract with you or to take steps prior to entering into a contract at your request (Art. 6 I, subparagraph 1 lit. b) GDPR);
• processing is necessary to comply with a legal obligation under EU law or the legislation of an EU Member State (Art. 6 I, subparagraph 1 lit. c) GDPR);
• processing is necessary for the purposes of the legitimate interests pursued by Audi Business Innovation GmbH or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data (Art. 6 I, subparagraph 1 lit. f) GDPR).
   

If, in the exceptional case, we process special categories of personal data (data that identify the race or ethnicity, political opinions, religious or ideological convictions or the affiliation to a trade union; the processing of genetic data, biometrical data to clearly identify a natural person; health data or data on a person’s sexual life or sexual orientation) concerning you, one of the following legal grounds must be relevant in addition:

• you issued your express prior consent (Art. 9 II, lit. a) GDPR);
• processing is necessary to protect your vital interests or those of another natural person and the data subject is unable to issue his or her consent because of physical or legal reasons (Art. 9 II lit. c) GDPR);
• processing encompasses personal data which you manifestly made public (Art. 9 II lit. e) GDPR);
• processing is necessary to establish, exercise or defend legal claims (Art. 9 II lit. f) GDPR);
• processing is necessary for reasons of substantial public interest, on the basis of EU or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9 subparagraph 2 lit. g) GDPR).
  
  

Please observe your rights to object to the processing of data for purposes relating to direct marketing or personal reasons and your right to withdraw a consent given (see Section B, especially paragraph VI. about your right to object).

II. Personal Data on the Website
In connection with the website www.audibusinessinnovation.com various personal data are processed for different purposes.

Insofar as we as the so-called controller decide alone or jointly with others on the purposes and means of processing personal data, you are given information below that particularly regards

• the personal data or categories of personal data that are processed;
• the purposes for which the personal data are to be processed;
• the legal basis for processing and, insofar as processing is based on Article 6 I lit. f) of the General Data Protection Regulation, the legitimate interests which we or a third party pursue;
• where applicable, the recipient or the categories of recipient of the personal data;
• where applicable, our intention to transmit the personal data to a third country or to an international organisation as well as the presence or absence of an adequacy decision by the Commission or, in the event of transmissions pursuant to Article 46 or Article 47 of the General Data Protection Regulation or Article 49 I subparagraph 2 of the General Data Protection Regulation, a reference to suitable or reasonable guarantees and the possibility of how a copy of them can be obtained or where they are available;
• the storage period of personal data or, if this is not possible, the criteria that establish this period.
   

Insofar as we collect your personal data from you as the data subject you will receive additional information as to whether the provision of personal data is prescribed by law or by contract or whether it is necessary to conclude a contract for this, whether you are obliged to provide the personal data and which potential consequences may result from the failure to provide said data.

Insofar as we do not collect personal data from you as the data subject you will also receive additional information regarding the source providing the personal data and where applicable, whether they originate from publicly accessible sources.
In principle, you may access our website without providing personal data. However, your Internet browser will automatically transmit specific information each time you visit the website, which we store in so-called log files.

The following information is automatically transmitted in these cases: 

• IP address (Internet Protocol address) of the terminal device accessing the online offer;
• URL of the website prompting the online offer (so-called referrer URL);
• name of the service provider enabling access to the online offer;
• name of the file or information requested;
• date, time and duration of the request;
• data volume transferred;
• operating system and information about the Internet browser used, including add-ons that are installed (e.g. for Flash Player);
• http status code (e.g. ‘request successful’ or ‘requested file not found’).
   

Log files save the above data without storing your full IP address so that it is not possible to identify your IP address. 

III. Web Tracking / Recording Web Audiences and Use of Web Analytics Technology (Scope of Recording)
Adobe Analytics

To maintain a current, user-centric and full offer on our websites, this website uses Adobe Analytics by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland, (incl. Omniture Site Catalyst, Omniture Genesis, Omniture Discover, Omniture TagManager, Omniture SaintBernard), a web analytics tool that enables us to optimise our services to meet your needs. Adobe Analytics uses cookies to trace your preferences during your visit to our pages. This facilitates, for example, site navigation and allows us to further improve the user friendliness of our services. Data processing is performed for purposes relating to advertising, market research or the needs-oriented design of our website (in accordance with Section 15 III of the German Telemedia Act (Telemediengesetz - TMG)). The information generated in this context (including the IP address) are anonymised by default prior to being stored so that it becomes impossible to identify the user. This website has been customised to enable logging IP addresses in an anonymised format (so-called IP masking). It is not possible to identify a person directly based on the information stored on Adobe servers as Adobe Analytics runs with the ‘Before Geo-Lookup: Replace visitor’s last IP octet with 0’ and ‘Obfuscate IP-Removed’ setting. The ‘Before Geo-Lookup: Replace visitor’s last IP octet with 0’ setting guarantees that the IP address is anonymised prior to this so-called geo localisation by replacing the last IP octet with zeroes. The user’s approximate location is added for statistical analytics to the tracking pack which contains the IP address (still complete at that time). Before storing the tracking pack, the IP address is then replaced by a single fixed IP address (or generic IP address) once ‘Obfuscate IP Removed’ has been configured. This means that the IP address is no longer part of a stored data record. Only when anonymisation has been completed is there a reporting evaluation. The information generated by this cookie will usually be transmitted to an Adobe server in the European Union. However, it cannot be ruled out that in the event of a technical emergency these data will be transmitted to the USA and stored there so that consequently, a respective EU Standard Contract (adequate guarantee for data processing in non-EU countries) has been concluded. Within the context of your right to be informed, you have the right to be informed about this standard contract.
As a user of our websites you naturally have the possibility at any time to refuse the acceptance of cookies through the settings of your browser. Saving cookies is activated in most browsers by default. Please note that, if you wish to change this setting, you may experience a reduced functionality of our offers. You may opt out of data being collected by cookies and the use of website-related data (effective for the future) for Adobe as well as the processing of these data by Adobe at any time by activating a special OPT-OUT-cookie for this. Please use the Opt-out button for this at www.adobe.com/privacy/opt-out.html. Please note that your refusal in the form of an opt-out cookie will only work if your browser is set to accept the use of cookies. When you delete this cookie, use a different browser, or change the terminal device, you will have to opt out of the use of Adobe Analytics once again. We wish to point out that when deleting all of your cookies, the above cookie will also be deleted and must be re-installed.

If you consented to this, we will use Web Analytics technology for cookies (see Section D of this privacy notice) to log and analyse the usage behaviour of our website in order to improve the website and achieve the goals of the website more easily (e.g. visitor frequency, increased page views).
Section 15 III TMG or Article 6 I 1 lit. f) GDPR constitute the legal basis for this (processing that is necessary for the legitimate interests pursued by a natural person unless fundamental rights and fundamental freedoms override these). However, you have the right to object to this creation and the saving of a user profile under a pseudonym (Section 15 III first and second sentence of the TMG and Article 21 GDPR). The legitimate interest in the meaning of Article 6 I 1 lit. f) GDPR which we pursue with the processing of the data detailed above is our interest in both (i) the creation of customer information and offers from the services that refer to the automotive sector and to vehicles of Audi, of Audi Business Innovation GmbH and of co-operation partners such as service and product information (e.g. new fleet vehicles, offers of suitable vehicles for Audi mobility services or suitable used vehicle offers as well as vehicle functionalities such as Functions on Demand and Connect), campaigns and special offers (e.g. discount campaigns, discounts and co-operation offers) as well as surveys regarding customer satisfaction and customer support and (ii) the optimisation of customer experiences on our website.

1.  Details on personal data to be processed

Web analytics tool: Adobe Analytics
Categories of personal data: Log data which are created following the use of the web analytics tool (Adobe Analytics) used on the website.
Personal data included in categories:
Marketing ID (pseudonymised IP address), URL and name of viewed Internet page; type and version of your Internet browser; operating system used; system language setting; access status of site from where the Internet page was prompted; country of origin (based on IP address); city (based on IP address); the page viewed; the previously viewed page (referrer URL); date and time of view; time spent on the site; exit rate; campaign code; device type and similar metrics. For more information and a list of all possible metrics click here. 
Source of data: Website users
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to conduct web analytics.
Storage period: All metrics are stored for a maximum 37 months by Adobe Analytics.

Web analytics tool: Adobe Analytics
Categories of personal data that are processed: Data saved in cookies (-> Section D) for the web analytics tool (Adobe Analytics) on the user’s terminal device.
Personal data included in categories: Unique visitor ID to identify returning visitors.
Data sources: Website users
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to conduct web analytics.
Storage period: Various. For information regarding the period of the cookie’s validity see Section D.III.

Web analytics tool: Adobe Analytics
Categories of personal data that are processed: Data recorded by the web analytics tool (Adobe Analytics) and which are saved in pseudonymised user profiles.
Personal data included in categories: Data on use of the website, especially page views, frequency of views and time spent on prompted pages.
Data sources: Independently generated.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to conduct web analytics.
Storage period: Various. For information regarding the period of the cookie’s validity see Section D.III.

2. Details on processing of personal data

Purpose of processing personal data: To improve the website and to achieve the website’s goals more easily (e.g. frequency of visitors, increased page views) the behaviour of users of our website is recorded and analysed in pseudonymised form. Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The goal of this is to examine where users originate from; which areas of the website are sought out and how often and for how long which subpages and categories are viewed. For this purpose cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Categories of personal data that are processed: Web analytics tool data (Adobe Analytics).
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 I lit. a) of the General Data Protection Regulation).
Recipient: Provider of the web analytics tool – Adobe.

Purpose of processing personal data: Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The aim of this is to measure the effectiveness with which a targeted group of individuals can be moved to perform the desired actions. For these purposes cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Categories of personal data that are processed: Web analytics tool (Adobe Analytics) data.
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 paragraph 1 lit. a) of the General Data Protection Regulation).
Recipient: Provider of the web analytics tool – Adobe.

Purpose of processing personal data: To evaluate the visitor campaign (conversion tracking) the behaviour of users of our website is recorded and analysed in pseudonymised form. Users of the website are marked in pseudonymised form in order to recognise them on the website. Pseudonymised user profiles are created from this information. The pseudonymised user profiles are not merged with data on the user behind the pseudonym. The aim of this is to measure the effectiveness with which a targeted group of individuals can be moved to perform the desired actions. For this purpose cookies (-> Section D) of the web analytics tool (Adobe Analytics) are used.
Categories of personal data that are processed: Web analytics tool data (Adobe Analytics).
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 I lit. a) of the General Data Protection Regulation).
Recipient: Provider of the web analytics tool - Adobe.

3. Details on recipients of personal data and the transmission of personal data to third countries and / to international organisations

Recipient: Adobe Systems Incorporated
Role of recipient: Processor
Seat of recipient: 
US head office
Adobe Systems Incorporated
345 Park Avenue
San Jose, CA 95110-2704, USA
Tel.: +1 408-536-6000
Fax: +1 408-537-6000

Germany
Adobe Systems GmbH
Georg-Brauchle-Ring 56/58
D-80992 Munich
Germany
Tel.: +49 (0) 89 31 705 0
Fax: +49 (0) 89 31 705 432

Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations EU-U.S. Privacy Shield Certification

Recipient: Adobe Systems Incorporated
Role of recipient: Processor
Seat of recipient: 
US head office
Adobe Systems Incorporated
345 Park Avenue
San Jose, CA 95110-2704, USA
Tel.: +1 408-536-6000
Fax: +1 408-537-6000

Germany
Adobe Systems GmbH
Georg-Brauchle-Ring 56/58
D-80992 Munich
Germany
Tel.: +49 (0) 89 31 705 0
Fax: +49 (0) 89 31 705 432

Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations EU-U.S. Privacy Shield Certification

Recipient: Adobe Systems Incorporated

Role of recipient: Processor
Seat of recipient: 
US head office
Adobe Systems Incorporated
345 Park Avenue
San Jose, CA 95110-2704, USA
Tel.: +1 408-536-6000
Fax: +1 408-537-6000

Germany
Adobe Systems GmbH
Georg-Brauchle-Ring 56/58
D-80992 Munich
Germany
Tel.: +49 (0) 89 31 705 0
Fax: +49 (0) 89 31 705 432

Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations EU-U.S. Privacy Shield Certification

IV. Use of Online Contact Form
You have the possibility to contact us on the website by using a contact form. We will process the information that you provide via the contact form to handle your request.

Below we provide you with detailed information of this:

1. Details on personal data to be processed

Categories of personal data that are processed: Data that you share with us via the website’s contact form (‘Contact Form Data’).
Personal data included in categories: This includes information which you provided to us via the individual contact form on the website. This may include the following data in particular: salutation, first name, last name, telephone number, email address and the content of your request.
Data sources: Contact form users.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data is not provided, we will not be able to process your request.
Storage period: Data will be stored until your request has been completed. We save these data for evidential purposes, to potentially establish, exercise or defend legal claims and moreover, beyond this, for a transition period of three years from the end of the year in which you shared these data with us and, in the event of potential legal disputes, until those disputes have been concluded. Moreover, we save these data beyond this insofar as legal retention requirements apply, and here in particular commercial law-related and tax law-related requirements. Depending on the nature of the documents, commercial law-related and tax law-related retention requirements of six or ten years may apply (Section 147 of the German Fiscal Code (Abgabenordnung - AO), Section 257 of the German Commercial Code (Handelsgesetzbuch - HGB).

Categories of personal data that are processed: Log data which may be created for technical reasons when giving your consent to being contacted for marketing purposes (‘Consent Data’).
Personal data included in categories: Date and time of issuing the consent.
Data sources: Website users.
Obligation to provide the data: The provision is not mandatory by law or contract or necessary to conclude a contract. There is no obligation to provide the data. If said data are not provided, we will not be able to provide product information to you.
Storage period: We will store these data for as long as you consent to being contacted for marketing purposes. We save these data for evidential purposes, to potentially establish, exercise or defend legal claims and moreover, beyond this, for a transition period of three years from the end of the year in which you unsubscribed and, in the event of potential legal disputes, until those disputes have been concluded.

2. Details on the processing of personal data

Purpose of processing of personal data: Processing of your request.
Categories of personal data that are processed: Contact form data.
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: If your request regards the performance of a contract to which you are party or aims at taking steps prior to entering into a contract: Article 6 I lit. b) of the General Data Protection Regulation. Otherwise: Balancing of interests (Article 6 I lit. f) of the General Data Protection Regulation). In this case our legitimate interest constitutes the processing of your request.
Recipient: Audi Business Innovation GmbH

Purpose of processing of personal data: Processing of your request by email or by phone.
Categories of personal data that are processed: Contact form data; consent data.
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Consent (Article 6 I lit. a) of the General Data Protection Regulation).
Recipient: Audi Business Innovation GmbH

Purpose of processing of personal data: processing is necessary to establish, exercise or defend legal claims Art. 9 II lit. f) GDPR.
Categories of personal data that are processed: Contact form data; Consent data.
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Legitimate interest (Article 6 I lit f.) Our legitimate interest is to potentially establish, exercise or defend legal claims.
Recipient: Audi Business Innovation GmbH.

Purpose of processing of personal data: We save these data insofar as legal retention requirements apply, and here in particular commercial law-related and tax law-related requirements. Depending on the nature of the documents, commercial law-related and tax law-related retention requirements of six or ten years may apply (Section 147 of the German Fiscal Code (Abgabenordnung - AO), Section 257 of the German Commercial Code (Handelsgesetzbuch - HGB).
Categories of personal data that are processed: Contact form data; Consent data.
Automated individual decision-making: There is no automated individual decision-making.
Legal basis and where appropriate, legitimate interests: Compliance with legal obligations (Art. 6 I lit c. GDPR).
Recipient: Audi Business Innovation GmbH.

3. Details on recipients of personal data and the transmission of personal data to third countries and / to international organisations

Recipient: Form provider (AUDI AG, (Audi Business Innovation GmbH [controller])
Role of recipient: Processor 
Seat of recipient: EU
Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations: - 

Recipient: Email newsletter provider (Audi Business Innovation GmbH).
Role of recipient: controller
Seat of recipient: EU
Adequacy decision or adequate or reasonable guarantees regarding the transmission to third countries and / or to international organisations: - 


D. Information on the Use of Cookies
In connection with the website www.audibusinessinnovation.com, we use cookies. Cookies are to facilitate the use of the website and improve user friendliness or provide different functionalities (to make the website overall more user-friendly, effective and secure). For this, we use processing and storage functionalities of the browser of your terminal device and collect information from the browser cache of your terminal device.

Below we provide you with detailed information of this.

I. General Information on Cookies
Cookies are small text files with information which can be placed during the visit of a website via the browser on the terminal device of the user. When viewing the website again with the same terminal device, the cookie as well as the information it has stored can be retrieved.

1. Categories of cookies that are used
Essential cookies: These cookies are essential for the website to function. Without these cookies, certain services would not function.
Functional cookies: These cookies allow a website to store information already provided (for example, user name, configurations) and to offer to the user improved, more personalised functionalities.
Performance cookies: These cookies are used to improve the user friendliness of our website and therefore the user experience. They collect information about the usage of our website, the number of visits, the average time spent on the website, pages viewed. Performance cookies help us, for example, to identify the most-used elements of our Internet offer and to advance the website based on your needs.

2. First-party and third-party cookies
Depending on the origin of a cookie, cookies are differentiated between first-party cookies and third-party cookies:
First-party cookies: Cookies which are placed and retrieved by the operator of the website as the responsible controller for processing or by a processor which the controller contracted with.
Third-party cookies: Cookies which are placed and retrieved by other parties responsible for processing other than the operator of the website yet that are not active as the processors on the part of the website’s operator.

3. Transient and persistent cookies
The validity of cookies further differentiates so-called transient cookies from persistent cookies:
Transient cookies (session cookies): Cookies that are automatically deleted when you close your browser.
Persistent cookies: Cookies that are saved for a specific period of time on your terminal device after you close your browser.

4. Cookies (not) requiring consent
According to their functionality and designated purpose, certain cookies may require the express consent from the user. To this extent cookies are differentiated between those that require the user’s consent, and those that do not require such consent:

II. Cookies
In principle, it is possible to view our websites without cookies. However, if you wish to use the full functionality of our websites, we recommend that you accept cookies which enable the use of certain functionalities or which make those functionalities more convenient to use.
Most web browsers are set by default to automatically accept all cookies. However, you may object to the use of cookies with an effect for the future at any time by setting your browser as such that it does not accept any cookies, or accepts certain cookies only, or informs you as soon as cookies are sent. This may result in being unable to use the full functionality of our websites. Insofar as you accept cookies in your browser settings, you declare your consent to the use of these cookies when using our websites.
Please note that your browser settings apply to the respective browser only. If you use either different browsers or different terminal devices, you will have to apply the respective settings anew. Moreover, you have the option to delete cookies from your cache any time. For information on cookie settings, how to change and delete cookies, please refer to the help function of your web browser.
Additionally, there are software products that can manage cookies for you. Further information on cookies and how to handle them is also available from online help pages.

III. Management of Cookies Used on This Website

1. Consenting to the use of cookies
When viewing our website, a cookie banner is prompted which allows you to consent to the use of cookies on this website by clicking a button. By activating the designated button for this, you have the possibility to consent to the use of all cookies detailed under Section D.III of this cookie notice.

2. Managing cookies in your browser settings
You can manage the use of cookies in the settings of your browser. Different browsers offer different ways to configure cookie settings. More detailed information on this can be found, for example, at http://www.allaboutcookies.org/ge/cookies-verwalten/.

However, we wish to point that if you deactivate the use of cookies in your browser in general, you may not be able to use the full functionality of the website, or the website’s functionality may not operate properly.

• Cookie Policy

E. Version and Amendments to this Privacy Notice
This privacy notice was last updated in August 2018. 
Technical advancements and/or changed legal and/or official requirements may require an update of this privacy notice.