This data protection and privacy statement serves to inform you with regard to the processing of your personal data by Audi Interaction GmbH, Zeppelinstr. 48, 14471 Potsdam ("we") in connection with the website www.audiinteraction.com.
On our website www.audiinteraction.com, you will find company-relevant information pertaining to Audi Interaction GmbH.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
This Data Protection Notice and privacy statement describes how Audi Interaction GmbH processes your personal data in the context of www.audiinteraction.com and practices and applications offered there. For other websites and other data handling processes by AUDI AG, separate data protection information may apply (e.g., www.audi.com/connect). General information with respect to the processing of personal data at AUDI AG is available on our website www.audi.de/datenschutz
The entity responsible for datae processing of your personal datae (the Controller) is:
Audi Interaction GmbH, Zeppelinstr. 48, 14471 Potsdam.
If you have concerns with regard to data protection (GDPR) issues, you may also contact our data protection officer:
Audi Interaction GmbH
Data Protection Officer
If you would like to assert your data protection rights vis-à-vis AUDI AG, please refer to the contact options at
There, you will find further information with regard to how you may assert your data protection rights
2.1 What types of data do we process and from which sources do these originate?
We process personal data that we collect about you in the context of the use of our website or our business relationship, e.g., when you contact us.
Personal data generally include personal details (name, address, and other contact information [e.g., telephone, e-mail address], date and place of birth, and citizenship). In addition, depending on the nature of the business relationship, additional personal data may be processed.
2.1.1 Access to the Website
In general, you may access the website www.audiinteraction.com ("Website") without disclosing personal data. Each time you use access the Website, certain information is automatically transmitted by your Internet browser and is retained by us in so-called log files.
The following data, in particular, are transmitted automatically:
• IP address (Internet protocol address) of the terminal from which the online service is accessed;
• Internet address of the website from which the online service was accessed (so-called source or referrer URL);
• Name of the service provider via which the online service is accessed;
• Names of the files or data accessed;
• Date and time as well as duration of access;
• amount of data transmitted;
• Operating system and information regarding the Internet browser used, including add-ons installed (e.g., for Flash Player);
• HTTP status code (e.g., "query successful" or "requested data not found").
In the log files, the aforementioned data are stored without their complete IP address, so that your IP address will not be traceable.
2.1.2 Data provided by you
The use of certain services requires registration or indication of personal data. Furthermore, we will process your respective personal data when you contact us through the Website. We will process the data that you enter when you use the functionalities:
Contact form: You have the option of contacting us through the contact form on our Website at any time. In order to be able to process your inquiry, we require some information that is provided in the contact form. We will use the personal data transferred in this way only for the purpose for which you make it available for us when contacting us. The data provided by you in the contact form will be deleted after your request is processed or sent to our partners for further processing.
You also have the option of consenting to the further use of the data from the contact form for the purposes of customer support, surveys, and receiving customer information that is personally tailored to you. To do this, you must consent separately at the end of the contact form.
The sharing of this information is done on an explicitly voluntary basis and with your consent. If it involves information about communication channels (e.g., email address, telephone number), you also consent to our possibly contacting you via these communication channels to respond to your inquiry.
You may, of course, withdraw your declaration of consent at any time with future effect.
Job advertisements: Via our "Job Advertisements" page, you will be able to view current job advertisements at Audi Interaction GmbH. From there, you will be redirected to the Audi Job Portal. The Audi Job Portal is made available by AUDI AG. When you register or enroll via the Audi Job Portal, you will be leaving the website Audi Interaction GmbH. Further information regarding the processing of your data may be accessed at: www.audi.de/datenschutz.
2.1.3 Additional data
We will further process your personal data that you provide to us in the course of contacting us, e.g., via our e-mail address.
As part of the existing business relationship with you, we also process the following data or categories of data:
• Contact details (e.g. name, e-mail address, address, telephone number, salutation)
2.2 What are the purposes for which we process your data and what is the legal basis for this?
Unless otherwise specified in section 2.1, we process your personal data on the following legal basis and for the following purposes:
Purpose: Making the Website available for the public and offering contact options for customers and interested parties
Legal basis: Fulfillment of a contract or the Balancing of Interests, respectively
Legitimate Interest in the Balancing of Interests: We have a legitimate interest in providing an Internet presence, even for non-registered users, to provide general information about our company.
Purpose: Processing of inquiries
Legal basis: Fulfillment of contract
Legitimate interest in the Balancing of Interests: We have a legitimate interest in processing your inquiries.
Purpose: Collection of statistical information with regard to use of the Website (so-called website analysis)
Legal basis: Balancing of Interests
Legitimate interest in the Balancing of Interests: We have a legitimate interest in obtaining information regarding the use of the Website, especially for the purpose of improving our product range.
Purpose: Investigation of disruptions and verification of system security, including discovery and tracking of illegal access attempts and illegal access to our web servers
Legal basis: Fulfillment of our legal obligations in the area of data security and the Balancing of Interests
Purpose: Protection and defense of our rights
Legal basis: Balancing of Interests
Legitimate interest in the Balancing of Interests: We have a legitimate interest in asserting and defending our rights.
Purpose: Delivery of customer information
Legal basis: consent
Purpose: Customer Satisfaction Surveys
Legal basis: Balancing of Interests
Legitimate interest in the Balancing of Interests: We have a legitimate interest in measuring the customer satisfaction of our customers. The surveys are always conducted anonymously.
2.3 Do I have an obligation to provide data?
In the context of our business relationship, you need to provide only those personal data that are required for initiating and implementing a business relationship or that we are legally required to collect. These data are marked as mandatory fields in the respective forms or functions. Without these data, we will generally be required to refuse the conclusion of the contract or the processing of an inquiry, or will be unable to continue the execution of an existing contract and may have to terminate it. This means that for the use of a service or a functionality, it is necessary for you to provide the data stated. If you do not supply the data, we will not be able to provide you with the service.
2.4 Who receives my data?
Within Audi Interaction GmbH, the departments that receive your data are those that require them for the fulfillment of our contractual and statutory obligations, as well as for safeguarding our legitimate interests.
Service providers employed by us and who operate on our behalf (so-called processors) may also receive data for the purposes stated.
In principle, your personal data will be provided to third parties only insofar as this is necessary for the fulfillment of the contract, if we or the third party have a legitimate interest in the disclosure, or if you have provided your consent for this purpose.
In addition, data may be transmitted to third parties (including investigation and security authorities) insofar as we may be obliged to do this based on statutory provisions or enforceable official directives or judicial dispositions.
In the performance of specific services, we employ processors in the following categories who support us in the execution of our business processes. Among these, specifically, are companies in the following categories:
• Hosting providers
• Shipping providers
• IT service providers
2.4.2 Third parties
• In particular cases, log files are disclosed to investigating authorities.
• Authorities in the context of competency (e.g., tax office, police, public attorney, social insurance agencies)
• Other third parties, if they instruct us to disclose data or provide their consent.
2.5 Will data be transferred to a third country?
A transfer of data to third countries (i.e., countries that are neither members of the European Union nor of the European Economic Area) may occur insofar as this is required or statutory for the provision of services to you, or you have given us your consent.
Please note that not all third countries offer a level of data protection that is recognized as adequate by the European Commission. For a transfer of data to third countries in which an adequate data protection level does not exist, we will ensure, prior to the disclosure, that either the recipient offers an adequate level of data protection (e.g., by self-certification of the recipient for the EU-U.S. Privacy Shield or by an agreement with the recipient on so-called EU standard contract clauses of the European Union), or that we have the explicit consent of our users.
A copy of the specific applicable and agreed-on regulations for ensuring an adequate level of data protection may be obtained from us. For this purpose, please use the information in the "Contact" section.
For this, see the section "User tracking and usage-based online advertising."
2.6 How long will my data be stored?
We store your data for as long as this is necessary for us to be able to provide you with our services or we have a legitimate interest in continued retention, especially for reasons of fault clearance.
Furthermore, we are subject to various retention and documentation obligations arising from, among other things, the German Commercial Code (Handelsgesetzbuch/HGB) and the tax code (Abgabenordnung/AO). The periods indicated therein for retention, for documentation, respectively, are specified as being up to ten years. Ultimately, the retention period is also determined by statutory limitation periods, which, for instance pursuant to sections 195 et seqq. of the German Civil Code (Bürgerliches Gesetzbuch/BGB), may be up to thirty years, with the regular limitation period being three years.
Under certain circumstances, your data may be retained longer, for instance when in connection with an administrative or legal proceeding an order for a so-called legal hold or litigation hold (i.e., a ban on data erasure for the duration of the proceeding) is issued.
2.7 Do I have a special right to object?
In connection with user tracking, you may technically implement your right to object. For this, see the section "User tracking and usage-based online advertising."
2.8 What are my rights?
As a data subject, you are generally entitled to the following data protection rights:
Access: You have the right to request access to data retained about you by Audi Interaction GmbH and the full range of data processing and transfer performed by Audi Interaction GmbH and to obtain a copy of the personal data retained about you.
Rectification: You have the right to immediately request the rectification of incorrect data concerning you as well as the completion of incomplete personal data retained about you by Audi Interaction GmbH.
Erasure: You have the right to request the immediate erasure of the personal data retained about by Audi Interaction GmbH, provided statutory requirements are met.
This is especially the case if
• your personal data are no longer required for the purposes for which they were collected;
• the processing was exclusively based on your consent and this consent has been withdrawn by you;
• you objected to the processing for personal reasons on the legal basis of the weighing up of interests, and we are unable to prove that there are overriding legitimate reasons for a processing;
• your personal data were processed unlawfully; or
• your personal data must be erased in order to comply with statutory requirements.
If we have disclosed your data to third parties, we will inform them about the erasure, if this is legally required.
Please note that your erasure right is subject to restrictions. We must not or cannot, respectively, erase any data that we must continue to maintain due to statutory retention periods. Data that we require for the establishment, exercise, or defense of legal claims are exempt from your erasure right.
Restriction of processing: You have the right, under certain conditions, to request the restriction of processing (i.e., the marking of retained personal data with the objective to limit their future processing). The conditions are the following:
• the accuracy of the personal data is being contested and Audi Interaction GmbH must verify the accuracy of the personal data;
• the processing is unlawful; however, you object to the erasure of the personal data and instead request the limitation of the use of the personal data;
• Audi Interaction GmbH no longer requires your personal data for the purposes of processing; however, you require the data for the establishment, exercise, or defense of your legal claims.
• you have objected to the processing, and it is not yet certain whether the legitimate reasons of Audi Interaction GmbH will outweigh yours.
In the case of a restriction of processing, the data will be marked accordingly and, aside from their retention, will be processed only with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the EU or of an EU member state.
Data Portability: Insofar as we electronically process your personal data that you provided to us on the basis of your consent or an agreement with you (including your employment contract), you are entitled to receiving the data in a structured, conventional, and machine-readable format and to transmit these data to another controller without interference by Audi Interaction GmbH. In addition, you have the right to effect that the personal data are transmitted directly to a third controller insofar as this is technically possible and as the rights and freedoms of other individuals are not impacted thereby.
Right to Object: If we process your personal data based on legitimate interests or in the public interest, you have the right to object to the processing of the data for personal reasons. You have an unrestricted right to object if we process your data for our direct marketing. Please note our separate reference in the section "Information about your right to object."
In certain cases, we will, even outside of the privacy settings, grant you an additional unrestricted right to object in the context of the weighing up of interests. You can find information about this in the section "Special Information - Service."
Withdrawal of consent: If you have given consent in processing your personal data, you may withdraw this consent at any time. Please note that the withdrawal will only take effect in the future. Processings that occurred prior to the withdrawal will not be affected by it.
Complaint: In addition, you have the right to lodge a complaint with a data protection supervisory authority if you are of the opinion that the processing of your personal data is not done lawfully. The right to lodge a complaint exists regardless of other administrative or legal remedies.
2.9 Information about your right to object
Right to object for personal reasons
You have the right to file an objection to the processing of your personal data for reasons arising from your special situation. A requirement for this is that the data processing is effected in the public interest or on the basis of a weighing up of interests. This also applies to profiling.
Insofar as we base the processing of your personal data on a weighing up of interests, we essentially proceed from the assumption of the provision of compelling and legitimate reasons, but will, of course, examine each individual case.
In the case of an objection, we will no longer process your personal data, unless
• we can provide compelling and legitimate reasons for the processing of these data that outweigh your interests, rights, and freedoms, or
• your personal data serves to establish, exercise, or defend your legal claims.
Objection to the processing of your data for our direct marketing purposes
Insofar as we process your personal data in order to carry out direct marketing, you have the right to object at any time to the processing of personal data pertaining to you for the purpose of such advertising; this also applies to profiling insofar as it is connected with such direct marketing.
If you object to the processing for purposes of direct marketing, we will no longer process your personal data for these purposes.
Exercise of the right to object
The objection may be exercised informally and should, if possible, be directed to the contacts listed in this data protection and privacy notice.
For purposes of needs-based advertising (targeting), we are creating pseudonymized user profiles (pursuant to Sec. 15 Par. 3 German Telemedia Act (Telemediengesetz)). For this purpose, the Website uses so-called cookies. Cookies are small data files that are stored on the user's computer when visiting a website. Cookies can store information and assist in making available additional functionalities (and thereby make the website more user-friendly, effective, and safe overall). If cookies are used, they do not contain personal data unless you have given your explicit agreement.
In addition, we use so-called analysis cookies in connection with the Web analysis (see also the section titled "User Tracking").
3.2 User tracking and usage-based online advertising
The information generated in this way (including the IP address) is routinely anonymized before it is saved, so that identification of the person is not possible. For this reason, this website was customized to ensure the anonymized recording of IP addresses (so-called “IP masking”). An evaluation for reports is carried out only after this anonymization. The information generated by these cookies is generally transmitted to an Adobe server in the European Union. However, it cannot be ruled out that in the case of a technical emergency, this data is transferred to the USA and saved there.
Audi Interaction GmbH uses technical and organizational security measures in order to protect any personal data provided to us from accidental or deliberate manipulation, loss, destruction or access by unauthorized individuals. Our security measures are improved and adapted to the state of the art on an ongoing basis.
Status: September 2019