Privacy policy

In our privacy policy, we inform you about the processing of your personal data by Audi Interaction GmbH, Zeppelinstr. 48, 14471 Potsdam ("we").

In addition, below you will find information about the processing of your personal data as well as information about the use of cookies (point 11) in connection with the website www.audiinteraction.com 

The terms used hereinafter, such as "controller", have the meanings assigned to them in Article 4 of the General Data Protection Regulation ("GDPR").

This privacy policy describes how Audi Interaction GmbH processes your personal data. Separate data protection notices may apply to other websites or other data processing of AUDI AG (e.g. www.audi.com/connect). General information on the processing of personal data at AUDI AG can be found on our website www.audi.de/datenschutz.

1. Responsible for data processing (Controller)

The controller for the website and the processing of personal data described in this privacy policy is:

Audi Interaction GmbH

Zeppelinstr. 48

14471 Potsdam

Germany

E-Mail: audiinteraction@audi.de

- hereinafter referred to as ("we") -

2. Contact details of the Data Protection Officer of the Controller

You can contact our data protection officer as follows:

Audi Interaction GmbH

Mr. Andreas Hoffmann

Data Protection Officer

Zeppelinstr. 48

14471Potsdam

Germany

E-Mail: aia-datenschutz@audi.de

If you wish to assert your data protection rights vis-à-vis AUDI AG, please use the contact options via

www.audi.de/betroffenenrechte

There you will find more information on how to exercise your data protection rights.

3. Information on the processing of personal data

Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination,  restriction, deletion or destruction.

We process your personal data in accordance with the provisions of the GDPR and the German Federal Data Protection Act ("BDSG") for various purposes. The specific purposes of data processing depend on the respective request or .dem selected product.

The processing of your personal data is based on one of the following legal bases:

• You have given your consent (Article 6(1)(a) GDPR);
  
• The processing is necessary for the performance of a contract with you, or for the implementation of pre-contractual measures taken at your request (Article 6(1)(b) of the GDPR);
  
  
• The processing is necessary for compliance with a legal obligation under EU law or the law of an EU member state (Article 6(1)(c) GDPR);
  
  
• The processing is necessary for the purposes of the legitimate interests pursued by Audi Interaction GmbH or a third party, unless such interests are overridden by your interests or fundamental rights and freedoms that require the protection of personal data (Article 6(1)(f) GDPR).
  
  

If, in exceptional cases, we process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a person, health data or data relating to sex life or sexual orientation) about you, one of the following must also be legal bases may be relevant:

• You have given your explicit consent (Article 9(2)(a) GDPR);
  
  
• the processing is necessary for the protection of your vital interests or those of another person and the data subject is unable to give consent for physical or legal reasons (Article 9(2)(c) GDPR);
  
  
• Processing relates to personal data that you have obviously made public (Article 9(2)(e) GDPR);
  
  
• The processing is necessary for the establishment, exercise or defence of legal claims (Article 9(2)(f) of the GDPR);
  
  
• The processing is necessary for reasons of substantial public interest on the basis of EU law or the law of an EU Member State that is proportionate to the objective pursued, respects the essence of the right to data protection and provides for adequate and specific measures to safeguard your fundamental rights and interests (Article 9(2)(g) GDPR).

Please note your rights to object to the processing of data for the purpose of direct marketing or for personal reasons and your right to withdraw consent (see point 16, in particular 16.6 on your right to object).

3.1 Personal data on the website

In connection with the www.audiinteraction.com website, various personal data are processed for different purposes.
Insofar as we, as the so-called controller, alone or jointly with others, decide on the purposes and means of the processing of personal data, you will find in the following in particular information about:

• the personal data or categories of personal data that are processed,
  
  
• the purposes for which the personal data is to be processed,
  
  
• the legal basis for the processing and, if the processing is based on Article 6(1)(f) GDPR, the legitimate interests pursued by us or a third party,
  
  
• where applicable, the recipients or categories of recipients of the personal data,
  
  
• where applicable, our intention to transfer the personal data to a third country or an international organisation, as well as the existence or absence of an adequacy decision by the Commission or, in the case of transfers pursuant to Article 46 or Article 47 or Article 49(1) of the GDPR, a reference to the appropriate or adequate safeguards and the possibility of obtaining a copy of them;  or where they are available,
  
  
• the period for which the personal data will be stored or, if this is not possible, the criteria used to determine this period.
  

Insofar as we collect your personal data from you as a data subject, you will also receive information below as to whether the provision of the personal data is required by law or by contract or is necessary for the conclusion of a contract, whether you are obliged to provide the personal data and what possible consequences this failure to provide would be.
Insofar as we do not collect personal data from you as a data subject, you will also find information below about the source of the personal data and, if applicable, whether it comes from publicly available sources.

4. Log Files

In principle, you can access our website without providing any personal data. However, each time you use the website, certain information is automatically transmitted by your internet browser and stored by us in so-called log files.

In particular, the following information is transmitted automatically:

• IP address (Internet Protocol address) of the device from which the online offer is accessed;
  
  
• Internet address of the website from which the online offer was accessed (so-called origin or referrer URL);
  
  
• Name of the service provider through which the online offer is accessed;
  
  
• Name of the files or information accessed;
  
  
• the date and time and duration of the retrieval;
  
  
• amount of data transferred;
  
  
• Operating system and information about the Internet browser used, including installed add-ons (e.g. for Flash Player);
  
  
• http status code (e.g., "request successful" or "requested file not found").
  

In the log files, the above data is stored without your full IP address, so that no conclusions can be drawn about your IP address.

5. Use of the online contact form

On the website, we offer you the opportunity to get in touch with us via a contact form. We process the information you provide in the contact form in order to process your request.

You can find more detailed information on this below:

Details of the personal data that is processed

Categories of personal data processed: data that you provide to us in the contact form of the website ("Contact Form Data").

Personal data included in the categories: This includes the information you provide to us in the relevant contact form on the website. This may include, in particular, the following data: title, first name, last name, telephone number, this is only optional and not mandatory, e-mail address and the content of your enquiry.

Sources of data: Users of the contact form.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. If you do not provide the data, we will not be able to process your request.

Storage period: Data will be stored until your request has been resolved. We store this data for evidentiary purposes for the possible establishment, exercise or defend legal claims, as well as for a transitional period of three years from the end of the year in which you provided us with the data and, in the event of any legal disputes, until their termination. We also store this data in addition to the extent that there are statutory retention obligations, in particular commercial and tax law. Depending on the type of documents, there may be retention obligations of six or ten years under commercial and tax law (Section 147 of the German Fiscal Code ("AO"), Section 257 of the German Commercial Code ("HGB")).

Categories of personal data that are processed: Log data that is generated for technical reasons when consent is given for advertising purposes ("consent data").

Personal data included in the categories: date and time of giving consent.

Sources of data: users of the website.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. In case of non-provision of the data, we will not be able to provide you with product information.

Storage period: We store this data for as long as you have consented to be contacted for promotional purposes. We also store this data for evidentiary purposes for the possible assertion, exercise or defend of legal claims for a transitional period of three years from the end of the year in which you unsubscribed and, in the event of any legal disputes, until their termination.

Details on the processing of personal data

Purpose of the processing of personal data: To process your request.

Categories of personal data processed: Contact form data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: To the extent that your enquiry relates to a contract to which you are a party or the implementation of pre-contractual measures: Article 6 (1) (b) GDPR. Otherwise: balancing of interests (Article 6(1)(f) GDPR). In this case, our legitimate interest is to process your request.

Recipient: Audi Interaction GmbH.

Purpose of the processing of personal data: To process your request by e-mail or telephone.

Categories of personal data processed: contact form data; Consent Data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: To the extent that your enquiry relates to a contract to which you are a party or the implementation of pre-contractual measures: Article 6 (1) (b) GDPR. Otherwise: balancing of interests (Article 6(1)(f) GDPR)

Recipient: Audi Interaction GmbH.

Purpose of the processing of personal data: storage and processing for evidentiary purposes for the possible establishment, exercise or defend legal claims Article 9 (2) (f) GDPR.

Categories of personal data processed: contact form data; Consent Data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Balancing of interests (Article 6(1)(f) GDPR). Our legitimate interest is the assertion, exercise or defend legal claims.

Recipient: Audi Interaction GmbH.

Purpose of the processing of personal data: Storage of data for the fulfilment of statutory retention obligations, in particular commercial and tax law. Depending on the type of documents, there may be retention obligations of six or ten years under commercial and tax law (§ 147 AO, § 257 HGB).

Categories of personal data processed: Contact form data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Fulfilment of a legal obligation (Article 6(1)(c) GDPR).

Recipient: Audi Interaction GmbH.

Details of the recipients of personal data and the transfer of personal data to third countries and/or international organizations

Recipient: Form provider (AUDI AG, Audi Interaction GmbH)

Role of the recipient: Data processor.

Registered office of the recipient: EU.

6. Telephone contact, call recording

In the case of calls to the customer hotline of AUDI AG, we record the call for the purpose of quality assurance and improvement of our service quality or to improve the customer experience, provided that you give your consent before the start of the call. Furthermore, we also store technical data (telephone number of the caller, date, time and duration of the call) in our system to record the call. The recordings of the conversations and the associated technical data are stored in our company for a maximum of 90 days.

To assert your rights as a data subject (see point 16), especially for the recording of the conversation, please use the following form, which we offer you for download here:

Form Data Subject Rights Call Recording (available in German language only)

Please print out this form, complete the form and send it to us by post to the address given in the form. We will process your request and provide you with the requested information. Please note that in the event of a data request or data transmission of the call recording, we will provide you with an audio file with the recorded conversation. For data protection reasons, only your own voice can be heard in this audio file, we will not provide information about the voice of the interlocutor in our company for data protection reasons.

You can find more detailed information on this below:

Details of the personal data that is processed

Categories of personal data that are processed: data that you provide to us by telephone ("telephone call data").

Personal data included in the categories: This includes the information you provide to us for the further processing of your request. This may include, in particular, the following data: title, surname, first name, telephone number, your e-mail address and the content of your enquiry.

Sources of data: caller.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. If you do not provide the data, we will not be able to process your request.

Storage period: Phone recordings are stored as voice files for a maximum of 90 days. Only in exceptional cases, where there are strong indications and an initial suspicion, do we store this data for evidentiary purposes for the possible assertion, exercise or defend legal claims, as well as for a transitional period of three years from the end of the year in which you provided us with the data and, in the event of any legal disputes, until their termination. 

Details on the processing of personal data

Purpose of the processing of personal data: To improve the quality of our service.

Categories of personal data processed: Call recording (voice files)

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Call recordings will only be recorded with your voluntary, active consent before the start of the conversation: Article 6 (1) (a) GDPR.

Beneficiary: Audi Interaction GmbH; if applicable, other processors.

Purpose of the processing of personal data: To improve the customer experience.

Categories of personal data processed: Call recording (voice files)

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Call recordings will only be recorded with your voluntary, active consent before the start of the conversation: Article 6 (1) (a) GDPR.

Recipient: Audi Interaction GmbH, possibly other service providers for evaluation purposes.

Purpose of the processing of personal data: Storage of data for the fulfilment of statutory retention obligations, in particular commercial and tax law. Depending on the type of documents, there may be retention obligations of six or ten years under commercial and tax law (§ 147 AO, § 257 HGB).

Categories of personal data processed: Telephone call data (voice files).

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Fulfilment of a legal obligation (Article 6(1)(c) GDPR).

Purpose of the processing of personal data: To automate and improve contact.

Categories of personal data processed: Telephone call data (voice files).

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: Balancing of interests (Article 6(1)(f) GDPR). In this case, our legitimate interest is to provide and continuously improve the way we contact us.

Recipient: Audi Interaction GmbH.

Usage data such as call duration, timestamps of phone calls and number of dialogues are only stored anonymously for statistical purposes.

7. Links to other websites

If we provide links to websites of other companies ("Third Parties"), this Privacy Policy does not apply to the processing of personal data by such third parties. We therefore recommend that you read the privacy notices on the other websites you visit.

We have no influence on the content of third-party websites and cannot assume any liability for these third-party contents. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal content was not recognizable at the time of linking. If we become aware of any legal violations, we will remove the corresponding link immediately.

8. Processor

In the provision of specific services, we use processors of the following categories to assist us in handling our business processes. Specifically, this includes companies in the following categories:

• Hosting Providers
• Shipping Service Providers
• IT Service Providers
• AUDI AG
• Service providers such as: Smartrecruiters.com (career page)

9. Information about the use of cookies

We use cookies in connection with the www.audiinteraction.com website. These are intended to facilitate the use of the website and to improve the user-friendliness or provide various functionalities (in order to make the website more user-friendly, effective and secure overall). In doing so, we use processing and storage functions of your device's browser and collect information from the memory of your device's browser.

You can find more detailed information on this below.

10. General information about cookies

Cookies are small text files containing information that can be placed on the user's device via the browser when visiting a website. When the website is accessed again with the same device, the cookie and the information stored in it can be retrieved.

10.1 Categories of cookies that are used

Necessary cookies: These cookies are necessary for the website to function. Without these cookies, certain services would not work.
Performance cookies: These cookies are used to improve the user-friendliness of our website and thus the user experience. They collect information about how our website is used, number of visits, average time spent on the site, pages viewed. Performance cookies help us, for example, to identify the most frequently used elements of the website and to further develop the website based on your needs.

10.1.1 First- and third-party cookies

Depending on where a cookie originates, a distinction can be made between so-called first-party cookies and third-party cookies:
First-party cookies: cookies that are set and retrieved by the website operator as the data controller or by a processor appointed by the latter.
Third-party cookies: cookies that are set and retrieved by data controllers other than the website operator, who do not act as data processors on behalf of the website operator.

10.1.2 Transient and persistent cookies

Depending on the period of validity, a distinction can also be made between so-called transient and persistent cookies:
Transient cookies (session cookies): Cookies that are automatically deleted when you close your browser.
Persistent cookies: cookies that remain on your device for a certain period of time after you close your browser.

10.1.3 Cookies that do not require consent and those requiring consent

Depending on their function and purpose, the user's consent may be required for the setting of certain cookies. In this respect, cookies can be differentiated according to whether they are strictly necessary for us to be able to provide you with our service at your explicit request or whether this is not the case.
The legal basis for the setting of cookies, which are absolutely necessary for the provision of our service at your request, is Section 25 (1) No. 2 of the Telecommunications-Telemedia Data Protection Act ("TTDSG"). Your consent is not required for this. However, if we set cookies that are not absolutely necessary to provide you with our service, we rely on your consent in accordance with § 25 (1) sentence 1 TTDSG to set these cookies.
The legal basis for the processing of the information extracted from the cookies can either be your consent in accordance with Article 6 (1) (a) GDPR or a legitimate interest on our part in accordance with Article 6 (1) (f) GDPR.
You can revoke your consent at any time, which you have given for the setting of cookies that require consent or for the reading of the information obtained from the cookies. However, this does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal. Further details and information on the revocation options can be found in point 16.

10.2 Handling of cookies

In principle, it is also possible to access our website without cookies. However, if you want to make full use of the functionalities of our website, you should accept cookies that enable the use of certain functions or make them more convenient.
By default, most web browsers are set to automatically accept all cookies. You can object to the use of cookies at any time with effect for the future by setting your browser so that it does not accept cookies or only certain cookies or you are notified as soon as cookies are sent. As a result, you may not be able to use all the functions of our website to their full extent. If you accept cookies according to your browser settings, you agree to the use of these cookies by using our website.
Please note that the settings in your browser only apply to the respective browser. If you use different browsers or devices, you will have to make the settings again. In addition, you have the option of deleting cookies from your memory at any time. For information on cookie settings, how to change them and how to delete cookies, please refer to the help function of your web browser.
In addition, there are software products that can manage cookies for you. You can also find more information about cookies and how to handle them on help pages on the Internet.

11. Overview of cookies

12. Use of service providers

We use the services of service providers for our consent management tool (so-called "cookie consent management tool") and for the technical provision of our cookies. Below you will find more information about our individual service providers with whom we work to manage, set and read cookies.

12.1 Ensighten Privacy Manager

To give you control over the cookies used on our websites, we use the "Ensighten Privacy Manager", a cookie consent management tool provided by Ensighten Inc., which is provided to us by our service provider TagMan Ltd.

If you are located in Argentina, Belarus, Malaysia, Oman, Russia, the United Arab Emirates or Turkey, your continued use of this website will be deemed to be your consent to the processing of personal data under the Ensighten Privacy Manager as described in this point 12.1.

Details of the personal data that is processed

Consent management tool: Ensighten Privacy Manager.

Categories of personal data: Log data that is generated for technical reasons when using the consent management tool (Ensighten Privacy Manager) used on the website.

Personal data included in the categories: anonymized IP address, URL and name of the website accessed, type and version of your Internet browser, operating system used, country of origin (based on IP address), city (based on IP address), date and time of access.

Source of data: users of the website.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. In the event of non-provision of the data, we will not be able to carry out consent management.

Storage period: All data will be stored for a maximum of 1 year.

Consent management tool: Ensighten Privacy Manager.

Categories of personal data processed: data stored in cookies as described in point 16 for the consent management tool (Ensighten Privacy Manager) on the user's terminal.

Personal data included in the categories: Unique visitor ID to recognize returning visitors.

Sources of data: users of the website.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. In the event of non-provision of the data, we will not be able to carry out consent management.

Storage period: Varies. For the duration of the cookie, see point 11.

Details on the processing of personal data

Purpose of processing the personal data: The processing of your personal data using the Ensighten Privacy Manager allows us to store information about the consent you have given. This helps us to provide you with additional content and to prevent certain cookies from being set even though you have not given your consent to the use of such cookies. In addition, the Ensighten Privacy Manager allows you to save your cookie preferences so that you do not have to make a new choice every time you visit our website again. If we did not collect this information, we would not be able to ensure that your preferences regarding the use of cookies are remembered.

Categories of personal data that are processed: Log data that is generated for technical reasons when using the consent management tool (Ensighten Privacy Manager) used on the website.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: The legal basis for such processing of personal data is our legitimate interest in ensuring compliance with legal requirements regarding the use of cookies in accordance with Article 6 (1) (f) GDPR.

Recipient: Consent management tool provider: TagMan Ltd.

Purpose of processing the personal data: The processing of your personal data using the Ensighten Privacy Manager allows us to store information about the consent you have given. This helps us to provide you with additional content and to prevent certain cookies from being set even though you have not given your consent to the use of such cookies. In addition, the Ensighten Privacy Manager allows you to save your cookie preferences so that you do not have to make a new choice every time you visit our website again. If we did not collect this information, we would not be able to ensure that your preferences regarding the use of cookies are remembered. Cookies (-> point 11) of the Consent Management Tool (Ensighten Privacy Manager) are used for these purposes.

Categories of personal data processed: data stored in cookies see point 11 for the consent management tool (Ensighten Privacy Manager) on the User's terminal.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: The legal basis for such processing of personal data is our legitimate interest in ensuring compliance with legal requirements regarding the use of cookies in accordance with Article 6 (1) (f) GDPR.

Recipient: Consent management tool provider: TagMan Ltd.

Details of the recipients of personal data and the transfer of personal data to third countries and/or international organizations

Recipient: TagMan Ltd.

Role of the recipient: Sub-processor

Registered office of the recipient:

101 Jefferson Dr 1st Floor, Menlo Park,

CA 94025, USA

adequacy decision or appropriate or proportionate safeguards for transfers to third countries and/or international organisations.

Entering into standard contractual clauses for the transfer of personal data to the United States in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council.

12.2 Adobe Analytics

In order to keep the offer on our websites up-to-date, user-oriented and comprehensive, this website uses Adobe Analytics from Adobe Systems Software Ireland Limited, a web analysis tool that enables us to optimize our services to your needs. Adobe Analytics uses cookies that can track your preferences when you visit our sites. This makes navigation easier, for example, and allows us to further improve the user-friendliness of our services.

The information generated in this process (including the IP address) is anonymized by default before it is stored, so that a personal reference is excluded. For this purpose, this website has been adapted to ensure an anonymized collection of IP addresses (so-called IP masking). A direct personal reference of the information stored on the Adobe servers is excluded, as Adobe Analytics is used with the settings "Before Geo-Lookup: Replace visitor's last IP octet with 0" and "Obfuscate IP-Removed". The setting "Before Geo-Lookup: Replace visitor's last IP octet with 0" ensures that the IP address is anonymized before this so-called geolocation by replacing the last octet of the IP address with zeros. Based on the abbreviated IP address, it is only possible to determine the approximate location (assignment at city level) of the user. The information generated by these cookies is usually transmitted to an Adobe server within the European Union. However, it cannot be ruled out that, in the event of a technical emergency, this data will be transferred to third countries and stored there. The EU Commission has issued so-called adequacy decisions for the transfer of personal data to third countries, which offer an equivalent level of protection to the GDPR. For all other recipients in third countries, corresponding EU standard contractual clauses (adequate safeguards for data processing in non-European countries) have been concluded. You have the right to be informed about these Standard Contractual Clauses as part of your right of access.

If you have given your consent to this, we use web analytics technologies to record and analyse usage behaviour on our website by means of cookies (see section points 10 and 11 of this privacy policy) in order to improve the website and to better achieve the website's goals (e.g. frequency of visits, increase in page views). You can adjust or revoke this consent either on your first visit to the website via the consent banner or at any time in the cookie settings. Your choice will be documented for your browser.

Details of the personal data that is processed

Web-Analyse-Tool: Adobe Analytics.

Categories of personal data Log data that is generated for technical reasons when using the web analysis tool (Adobe Analytics) used on the website.

Personal data included in the following categories: Experience Cloud ID (Unique User ID, assigns a unique, persistent ID to each site visitor), URL and name of the website accessed, type and version of your Internet browser, operating system used, system language used, access status of the page from which the website was accessed, country of origin (based on IP address), city (based on IP address), the page accessed,  the previously visited page (referrer URL), date and time of access, time spent on page, bounce rate, campaign code, device type, and similar metrics. More information and a list of all possible metrics can be found here.

Source of data: Users of the website.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. If the data is not provided, we will not be able to carry out any web analysis.

Retention period: All metrics are stored by Adobe Analytics for a maximum of 37 months.

Web analytics tool: Adobe Analytics.

Categories of personal data processed: data stored in cookies (-> section D.III.) for the web analysis tool (Adobe Analytics) on the user's terminal.

Personal data included in the categories: Unique visitor ID to recognize returning visitors.

Sources of data: users of the website.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. In the event that the data is not provided, we will not be able to carry out any web analysis.

Storage period: Varies. For information on the validity period of cookies, see point 11.

Web analytics tool: Adobe Analytics.

Categories of personal data that are processed: data collected by the web analytics tool (Adobe Analytics) and stored in pseudonymous user profiles.

Personal data included in the following categories: data on the use of the website, in particular page views, frequency of visits and time spent on pages viewed.

Sources of data: Independently generated.

Obligation to provide the data: Provision is not required by law or contract or necessary for the conclusion of a contract. There is no obligation to provide the data. In the event that the data is not provided, we will not be able to carry out any web analysis.

Storage period: Varies. For the duration of the cookie, see point 11.

Details on the processing of personal data

Purpose of the processing of personal data: In order to improve the website and to better achieve the objectives of the website (e.g. frequency of visits, increase in page views), the behaviour of users on our website is recorded and analysed in pseudonymised form. Users of the website are tagged in pseudonymous form in order to be able to recognise them on the website. This information is used to create pseudonymous user profiles. The pseudonymous user profiles are not merged with data about the bearer of the pseudonym. The aim of the procedure is to examine where users come from, which areas of the website are visited and how often and for how long which subpages and categories are viewed.

Categories of personal data processed: web analytics tool (Adobe Analytics) data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: The setting of Adobe cookies on our website on the basis of § 25 para. 1 sentence 1 TTDSG only takes place after your prior consent. The data processing is carried out for the purpose of analysing the performance and optimisation of the website and is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR.

Recipient: Provider of the web analysis tool: Adobe Systems Software Ireland Limited.

Purpose of the processing of personal data: Users of the website are marked in pseudonymous form in order to be able to recognise them on the website. This information is used to create pseudonymous user profiles. The pseudonymous user profiles are not merged with data about the bearer of the pseudonym. The aim of the procedure is to measure the effectiveness with which an addressed group of people is persuaded to carry out desired actions.

Categories of personal data processed: web analytics tool (Adobe Analytics) data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: The setting of Adobe cookies on our website on the basis of § 25 para. 1 sentence 1 TTDSG only takes place after your prior consent. The data processing is carried out for the purpose of analysing the performance and optimisation of the website and is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR.

Recipient: Provider of the web analysis tool: Adobe Systems Software Ireland Limited.

Purpose of the processing of personal data: For the purpose of evaluating visitor actions (conversion tracking), the behaviour of users on our website is recorded and analysed in pseudonymised form. Users of the website are tagged in pseudonymous form in order to be able to recognise them on the website. This information is used to create pseudonymous user profiles. The pseudonymous user profiles are not merged with data about the bearer of the pseudonym. The aim of the procedure is to measure the effectiveness with which an addressed group of people is persuaded to carry out desired actions.

Categories of personal data processed: web analytics tool (Adobe Analytics) data.

Automated decision-making: There is no automated decision-making.

Legal basis and, if applicable, legitimate interests: The setting of Adobe cookies on our website on the basis of § 25 para. 1 sentence 1 TTDSG only takes place after your prior consent. The data processing is carried out for the purpose of analysing the performance and optimisation of the website and is therefore based on your consent in accordance with Art. 6 (1) (a) GDPR.

Recipient: Provider of the web analytics tool – Adobe Systems Software Ireland Limited.

13. Details of the recipients of personal data and the transfer of personal data to third countries and/or international organizations

Beneficiary: Adobe Systems Software Ireland Ltd.

Role of the recipient: Processor

Registered office of the recipient:

4-6 Riverwalk, Citywest Business Campus,

Dublin 24, Irland

Beneficiary: Adobe Systems Engineering GmbH

Role of the recipient: Sub-processor

Registered office of the recipient:

Große Elbstraße 27,

22767 Hamburg, Deutschland

Beneficiary: Adobe Systems Romania S.r.l.

Role of the recipient: Sub-processor

Registered office of the recipient:

Anchor Plaza, Vol. Timișoara 26Z,

București 061331, Romania

Beneficiary: Adobe Inc.

Role of the recipient: Sub-processor

Registered office of the recipient:

345 Park Avenue, San Jose,

CA 95110-2704, USA

Adequacy decision or appropriate or adequate safeguards for transfers to third countries and/or international organisations: Conclusion of standard contractual clauses for the transfer of personal data to the USA in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council.

Beneficiary: Adobe Systems Canada Inc.

Role of the recipient: Sub-processor

Registered office of the recipient:

560 Rochester Street

Ottawa, Ontario K1S 1N4, Canada

adequacy decision or appropriate or adequate safeguards for transfers to third countries and/or international organisations:

Adequacy decision of the EU Commission of 20.12.2001 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the data protection provided by the Canadian Personal Information Protection and Electronic Documents Act.

Beneficiary: Adobe Systems India Pvt. Ltd.

Role of the recipient: Sub-processor

Registered office of the recipient:

D-107 Sector 2 Noida,

201 301 Noida – 201304, U.P. (India)

Adequacy decision or appropriate or adequate safeguards for transfers to third countries and/or international organisations: Conclusion of standard contractual clauses for the transfer of personal data to third countries in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council.

Beneficiary: Adobe Research Schweiz AG

Role of the recipient: Sub-processor

Registered office of the recipient:

Barfüsserpl. 6,

4051 Basel, Switzerland

Adequacy decision or appropriate or adequate safeguards for transfers to third countries and/or international organisations: Adequacy decision of the EU Commission of 26.07.2000 pursuant to Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection of personal data in Switzerland.

14. Management of the cookies used on this website / revocation options

14.1 Granting consent to the use of cookies

When you visit our website, we display a so-called "cookie banner" in which you can declare your consent to the use of different cookies on this website by clicking on various buttons. By clicking on the buttons provided for this purpose, you have the option of consenting to the use of all or some of the cookies described in detail in point 11 of this cookie information.

14.2 Managing all cookies through our website

As a user of our website, you have the option of changing your preferences via the "cookie banner" at any time with effect for the future. To do this, simply click on the "Cookie Settings" button in the footer of this website. You will now be shown the "cookie banner" of our website again and you can decide again whether to give your consent for the use of cookies on this website.

14.3 Management of all cookies via browser settings

As a user of our website, you have the option of refusing to accept cookies at any time via your browser settings. The methods to do this differ from browser to browser. You can find more detailed information on this, for example, on http://www.allaboutcookies.org/ge/cookies-verwalten/.

By default, most browsers allow cookies to be stored. If you change this setting, this may lead to functional limitations in our offers.

Due to technical developments and/or changes in legal and/or regulatory requirements, it may become necessary to adapt this data protection information.

15. Security of processing

Audi Interaction GmbH uses technical and organizational security measures to protect the personal data you provide to us from accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted in line with the state of the art.

16. Information regarding the rights of data subjects

As a data subject, you have the following rights in relation to the processing of your personal data:

• Right of access to information(Article 15 GDPR)
• Right to the correction of data (Article 16 GDPR)
• Right to erasure ("right to be forgotten" - Article 17 GDPR)
• Right to restriction of processing (Article 18 GDPR)
• Right to data portability (Article 20 GDPR)
• Right to object (Article 21 GDPR)
• Right to withdraw consent (Article 7(3) GDPR)
• Right to lodge a complaint with the supervisory authority (Article 57(1)(f) GDPR)

To exercise your rights, you can contact our Data Protection Officer.

Information on any specific modalities and mechanisms to facilitate the exercise of your rights, in particular to exercise your rights to data portability and opposition, can be found in the information on the processing of personal data contained in this Privacy Policy.

Below you will find more detailed information about your rights in relation to the processing of your personal data:

16.1 Right of access to information

As a data subject, you have a right of access under the conditions of Article 15 GDPR.

This means, in particular, that you have the right to obtain confirmation from us as to whether we are processing your personal data in question. If this is the case, you also have the right to access this personal data and the information listed in Article 15 (1) GDPR. This includes, for example, information on the purposes of processing, on the categories of personal data that are processed, and on the recipients or categories of recipients to whom the personal data have been or will be disclosed (Article 15(1)(a), (b) and (c) of the GDPR).

The full scope of your right of access can be found in Article 15 GDPR, which can be accessed under this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.2 Right to rectification

As a data subject, you have the right to rectification under the conditions of Article 16 GDPR.

This means, in particular, that you have the right to obtain from us without undue delay the rectification of your inaccurate personal data and the completion of incomplete personal data.

The full scope of your right to rectification can be found in Article 16 GDPR, which can be accessed under this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.3 Right to erasure ("right to be forgotten")

As a data subject, you have a right to erasure ("right to be forgotten") under the conditions of Article 17 GDPR.

This means that, in principle, you have the right to request that we erase your personal data without undue delay and we are obliged to erase personal data without undue delay if one of the grounds listed in Article 17 (1) GDPR applies. This may be the case, for example, if personal data is no longer necessary for the purposes for which it was collected or otherwise processed (Article 17(1)(a) GDPR).

In addition, to the extent that we have made the personal data public and we are obliged to delete it, we are obliged to take reasonable measures, including technical measures, taking into account the available technology and the costs of implementation, to inform other data controllers who process the personal data that a data subject has requested from them the deletion of all links to such personal data. or has requested copies or replications of such personal data (Article 17(2) GDPR).

By way of exception, the right to erasure ("right to be forgotten") does not apply if the processing is necessary for the reasons listed in Article 17 (3) GDPR. This may be the case, for example, if the processing is necessary for compliance with a legal obligation or for the establishment, exercise or defend legal claims (Article 17(3)(b) and (e) GDPR).

The full scope of your right to erasure / right to be forgotten can be found in Article 17 GDPR, which can be accessed under this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.4 Right to restriction of processing

As a data subject, you have the right to restriction of processing under the conditions of Article 18 GDPR.

This means that you have the right to obtain from us the restriction of processing if one of the conditions listed in Article 18 (1) GDPR is met. This may be the case, for example, if you contest the accuracy of the personal data. In this case, the processing will be restricted for a period enabling us to verify the accuracy of the personal data (Article 18(1)(a) GDPR).

Restriction means the marking of stored personal data with the aim of restricting their future processing (Article 4(3) GDPR).

The full scope of your right to restriction of processing can be found in Article 18 GDPR, which can be accessed at this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.5 Right to data portability

As a data subject, you have a right to data portability under the conditions of Article 20 GDPR.

This means that, in principle, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit these data to another controller without hindrance from us, provided that the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(a) b GDPR and the processing is carried out by automated means (Article 20 (1) GDPR).

For information on whether processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR or on a contract pursuant to Article 6(1)(b) GDPR, please refer to the information on the legal bases of processing in point 3 of this Privacy Policy.

When exercising your right to data portability, you also have the right to have the personal data transmitted directly by us to another controller, insofar as this is technically feasible (Article 20 (2) GDPR).

The full scope of your right to restriction of processing can be found in Article 20 GDPR, which can be accessed at this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.6 Right to object

As a data subject, you have the right to object under the conditions of Article 21 GDPR.

We will expressly inform you as the data subject of your right to object at the latest at the time of the first communication with you.

You can find more detailed information on this below:

16.7 Right to object on grounds relating to the particular situation of the data subject

As a data subject, you have the right to object, on grounds relating to your particular situation, at any time to the processing of your personal data relating to Article 6(1)(e) or (f) of the GDPR, pursuant to Article 21(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

Information on whether processing is carried out on the basis of Article 6 (1) (e) or (f) of the GDPR can be found in the information on the legal bases of the processing in point 3 of this data protection information.

In the event of an objection on grounds relating to your particular situation, we will no longer process the personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

The full scope of your right to object can be found in Article 21 GDPR, which can be accessed under this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.8 Right to object to direct marketing

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such advertising in accordance with Article 21 (2) GDPR; this also applies to profiling insofar as it is related to such direct marketing.

Information on whether and to what extent personal data is processed for direct marketing purposes can be found in the information on the purposes of processing in point 3 of this Privacy Policy.

In the event of an objection to processing for direct marketing purposes, we will no longer process the personal data concerned for these purposes.

The full scope of your right to object can be found in Article 21 GDPR, which can be accessed under this link (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679).

16.9 Right to withdraw consent

If the processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR, you as a data subject have the right to withdraw your consent at any time in accordance with Article 7 (3) GDPR. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent before its withdrawal. We will inform you of this before you give your consent. Information on whether processing is based on consent pursuant to Article 6 (1) (a) or Article 9 (2) (a) GDPR can be found in the information on the legal bases of processing in point 3 of this data protection information.

16.10 Right to lodge a complaint with the supervisory authority

As a data subject, you have the right to lodge a complaint with the competent supervisory authority under the conditions of Article 57 (1) (f) GDPR.

The address of the data protection supervisory authority responsible for Audi Interaction GmbH is:

The State Commissioner for Data Protection and the Right of Access to Files

Stahnsdorfer Damm 77

14532 Kleinmachnow

17. Version and Amendments to this data protection information

This data protection information is as of November 2023.

Due to technical developments and/or changes in legal and/or regulatory requirements, it may become necessary to adapt this data protection information.