Privacy Policy

We, Dr. Ing. h.c. F. Porsche AG (hereafter "we" or "Porsche AG"), appreciate your visit to our Porsche Drive Website and your interest in our company and our products. Your privacy is extremely important to us. We therefore take the protection of your personal details very seriously, and treat them in strictest confidence. Your personal data is processed only within the scope of the legal provisions of the European Union's data protection law, in particular the General Data Protection Regulation (hereafter "GDPR"). In this privacy policy we provide you with information about the processing of your personal data and your rights as a data subject within the scope of the use of our Porsche Drive Website. For information on other products and services offered by other companies in the Porsche Group, please consult the respective privacy policy for these services or companies.


1. Controller and data protection officer for data processing; contact

Controller for data processing within the meaning of the data protection legislation is:

Dr. Ing. h.c. F. Porsche AG
Porscheplatz 1
70435 Stuttgart
Tel.: (+49) 0711 911-0

Please do not hesitate to contact us if you have questions or ideas relating to data protection.

You can contact our data protection officers at the following address:

Dr. Ing. h.c. F. Porsche AG
Data protection officer
Porscheplatz 1
70435 Stuttgart


2. Subject matter of data protection

The subject matter of data protection is personal data. This is all the information that relates to an identified or identifiable natural person (known in the legislation as the data subject). This covers, for example, information such as name, postal address, e-mail address, or telephone number as well as information that necessarily originates during the use of our Porsche Drive Website, such as details about the start, end, and scope of use, and the communication of your IP address.


3. Type, scope, purposes of, and legal basis for automated data processing

In general, it is possible to use our Porsche Drive Website without registering. Even if you use our Porsche Drive Website without registering, personal data can still be processed.

An overview of the type, scope, purposes of, and legal basis for data processing within the scope of our Porsche Drive website is provided below.


3.1 Provision of our Porsche Drive Website

When you access our Porsche Drive Website using your device, we automatically process the following data:

  • date and time of access
  • duration of your visit
  • type of device
  • operating system used
  • quantity of data sent
  • type of event
  • IP address
  • referrer URL
  • domain name

We process this data on the basis of Article 6 (1) (f) GDPR to provide the service, to ensure the technical operation, and to identify and rectify faults. In this way, we pursue the interest of facilitating and ensuring the long-term use of our Porsche Drive Website and its technical functional capability. When our Porsche Drive Website is selected, this data is automatically processed. You cannot use our services unless this data is provided. We do not use this data for the purpose of drawing conclusions about you or your identity.


3.2 Cookies

When you visit our Porsche Drive Website, "cookies", which are small files, may be stored on your device in order to provide you with a comprehensive scope of functions, make it easier to use our service, and optimize our offerings. If you do not wish to allow the use of cookies, you can prevent them from being stored on your device by configuring the relevant settings in your Internet browser or using the specific opt-out options. Please note that the functional capability and functional scope of our offering could be restricted as a result. Please refer to our Cookie Policy for details on the type, scope, purposes of, legal basis for, and opt-out options for data processing in relation to cookies.


4. Individual services and functionalities

You can voluntarily enter personal data or register for services and functions at several locations on our website. When you register for and use the services and functions described below, we record, process, and use personal data as outlined here.


4.1 Making a reservation

(a) Mandatory data when reserving a vehicle

When booking a vehicle, the following mandatory information, which is flagged with a "*", is requested:

  • Gender
  • First and last name
  • Date of birth
  • E-mail address
  • Mobile phone number
  • Address
    • Street and number
    • Postal code and location
    • Country
  • Driver’s license data
    • Driver’s license number
    • Issue Date
    • Issue Location
  • Identification data
    • ID number
    • Issue Date
    • Issue Location

It is not possible to make a reservation unless this mandatory data is specified.

(b) Voluntary data when registering

When registering, you also have the option of voluntarily entering other information: Company name, further telephone numbers. Please note that this information is not required for reserving a vehicle and you alone must decide whether you wish to provide us with this data.

We process the data collected on the basis of Article 6 (1) (b) and (f) GDPR in order to create your profile for you for your reservation and to identify you each time you log in.

Depending on your reservation request, you will be redirected to a payment service provider's website as part of the reservation process. The personal data provided there as well as bank or credit card data will not be processed by us.


4.2 Create a Porsche Drive User Profile

You can create an optional profile at Porsche Drive as part of a reservation you have made. We store the information you provide there in a personal user profile and provide you with your access data by e-mail.
With this access data you can identify yourself for future reservations by logging in and use the previously entered data for a time-saving reservation.
When using the profile function, the following categories of personal data are processed:

  • All data mentioned under 4.1
  • Access data (e-mail and password)
  • Your previous reservations
  • Your desired vehicle including license plate and configuration details

We process the data collected on the basis of Article 6 (1) (b) and (f) GDPR in order to provide you with the requested services in this context and to carry out the associated contractual relationship with you.
Your data will only be passed on to third parties to the extent described below and for the purposes described below:

Service providers at the respective locations:

Porsche Drive Stuttgart
Fullmoon People GmbH
Löffelstraße 40
70597 Stuttgart

Porsche Drive Berlin
First-Class Autovermietung GmbH
Friedrich-Ebert-Damm 315
22159 Hamburg

Porsche auf Sylt
Porsche Deutschland GmbH
Porschestraße 1
74321 Bietigheim

Porsche Schweiz AG (Rotkreuz)
USP Partner AG
Seestrasse 93
8800 Thalwil

Porsche Zentrum Zurich
Bernstrasse 59
8952 Zurich-Schlieren

Porsche Center Geneva
Orchid Sports Cars SA
Impassa Colombelle 2
1218 Le Grand-Saconnex

Centre Porsche Tours
550 rue Henri Potez
37210 Parcay-Meslay

Centre Porsche Vélizy
21 Avenue Louis Breguet
CS 80544
78457 Vélizy-Villacoublay Cedex

Centre Porsche Levallois
53 rue Marjolin
92300 Levallois

Centre Porsche Dijon
7 Rue Paul Langevin
21300  Chenôve

Centre Porsche Toulouse
71 Impasse De La Bourgade
13670 Labège

Centre Porsche Lorient
Rue Lavoisier
56600 Lanester

A payment service provider is used to process the payment:

Concardis GmbH
Helfmann-Park 7
65760 Eschborn


5. Recipients of personal data

Internal recipients: Within Porsche AG the only people who have access are those who need it for the purposes named in Sections 3 and 4.

External recipients: We only forward your personal data to external recipients outside Porsche AG if this is necessary for the administering or processing of your issue, if another legal authorization exists, or if we have your consent to forward the data.

External recipients can be:

a) Processors

Group companies in Porsche AG or external service providers that we use to provide services, for example in the areas of technical infrastructure and maintenance for the Porsche AG offering or the provision of content. We carefully select and regularly inspect these processors to make sure that your privacy is protected. The service providers may use the data only for the purposes we have specified and in accordance with our instructions.

b) Public bodies

Authorities and public institutions, such as public prosecutors, courts, or financial authorities to which we must transfer personal data for legal reasons. The data is transferred on the basis of Article 6 (1) (c) GDPR.

c) Private bodies

The respective service provider named in the booking process and specified in more detail in Section 4.2 at the location of your Porsche Drive offer as well as Porsche dealers and service companies, cooperation partners, service providers or persons to whom data is transmitted on the basis of a consent, for the execution of a contract with you or to safeguard legitimate interests, for example Porsche centers, financing banks, providers of other services or transport service providers. The data is transferred on the basis of Article 6 (1) (a), (b) and/or (f) GDPR.


6. Data processing in third countries

If data is transferred to bodies whose headquarters or whose place of data processing is not located in a member state of the European Union or in another country outside of the European Union who is a signatory to the treaty, we ensure before forwarding the data that, outside of legally permitted exceptional cases pertaining to the recipient, either an appropriate level of data protection exists (e.g., through an adequacy decision of the European Commission, through suitable guarantees such as self-certification by the recipient for the EU-US Privacy Shield, or the agreement of EU standard contractual clauses between the European Union and the recipient) or you give sufficient consent for the transfer of the data.

We can provide you with an overview of the recipients in third countries and a copy of the specifically agreed regulations to ensure the appropriate level of data protection. To obtain these, please contact the address specified in Section 1.


7. Duration of storage, deletion

We store your personal data only as long as this is necessary for the fulfilment of the intended purposes or - in the case of a consent - as long as you have not revoked the consent. In the event of an objection to processing, we will delete your personal data unless further processing is permitted by the relevant legal provisions. We delete your personal data even if we are obliged to do so for other legal reasons.

In accordance with these general principles, we usually delete your personal data immediately

  • after the legal and other legal basis (e.g. commercial and tax retention periods) has ceased to apply. If the latter is the case, we will delete the data once the other legal basis no longer applies.
  • if they are no longer necessary for the purposes of preparing and executing a contract or justified interests pursued by us and if no other legal basis (e.g. retention periods under commercial and tax law) intervenes. If the latter is the case, we will delete the data once the other legal basis no longer applies.
  • if the purpose of the recording we pursue ceases to apply and no other legal basis (e.g. retention periods under commercial and tax law) intervenes. If the latter is the case, we will delete the data once the other legal basis no longer applies.


8. Rights of data subjects

As the data subject affected by the data processing, you have several rights. Specifically,

Right of access: You have the right to obtain information from us about the data that we have stored about you.

Right of rectification and erasure: You have the right to demand that we rectify incorrect data and – provided the legal requirements are met – that we delete your data.

Restriction of processing: You have the right – provided the legal requirements are met – to demand that we restrict the processing of your data.

Data portability: If you have provided us with data on the basis of a contract or consent, you have the right, in accordance with the legal requirements, to obtain the data you have provided in a structured, standard, and machine-readable format or you can demand that we transfer this data to another controller.

Objection to the processing of data on the legal basis of "legitimate interests": You have the right to object at any time, on grounds relating to your particular situation, to our processing of your data, provided this objection is based on the legal basis of "legitimate interests". If you exercise your right to object, we will cease the processing of your data unless we can – pursuant to the legal requirements – prove compelling legitimate reasons for the further processing, which override your rights.

Objection to cookies: You can also object to the use of cookies at any time. For details on how to object, please refer to our Cookie Policy.

Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data remains unaffected up until the time of the withdrawal of consent.

Right to lodge a complaint with a supervisory authority: You can also submit a complaint to the competent supervisory authority if you believe that the processing of your data is in breach of the legislation. To do so, you can apply to the data protection authority that is responsible for your town/city or country or the data protection authority that is responsible for us.

Contacting us: Please do not hesitate to contact us if you have any questions regarding the processing of your personal data, your rights as a data subject, and any consent that you may have given. To exercise all of these above-mentioned rights, please contact or by post at the address specified above in Section 1. In doing so, please ensure that it is possible for us to uniquely define you.


9. Links to third-party offerings

Websites and services delivered by other providers that are linked to by the Porsche Drive Website have been and are structured and provided by third parties. We do not have any influence over the structure, content, or role of these third-party services. We explicitly distance ourselves from all content in all linked third-party offerings. Please note that the third-party offerings linked to from our Porsche Drive Website may install their own cookies on your device or collect personal data. We have no influence over this. Please contact the providers of these linked third-party offerings as required for the relevant information.


10. Status

The latest version of this privacy policy applies. Status 07/12.2018.