Porsche Drive S.r.l., a company belonging to the Porsche Group (hereinafter referred to as "we", "us" or "Porsche Drive"), is pleased that you have chosen to visit its website www.porsche-drive.it. Thank you for your interest in our company and our services. Your privacy is an essential priority for us. We take the protection of your personal data very seriously, which we process in accordance with the applicable data protection legislation, and in particular with the provisions of the General Data Protection Regulation of the European Union (EU Regulation 2016/679, hereinafter referred to as "GDPR").

We hereby inform you about the processing of your personal data and your rights as a data subject in connection with the use of our website. For information about other products and services offered by other companies of the Porsche Group, please refer to the respective privacy policies of those services or companies of the Porsche Group.

Should there be links to this privacy policy on external social media sites, the provisions hereof shall only apply to the extent that the data processing operations within the scope of these social media actually fall within our area of responsibility and there are no more specific, and therefore prevailing, privacy guidelines, related to the processing activities carried out on these social media.

1. Data Controller
The data controller within the meaning of data protection legislation is:
Porsche Drive S.r.l.
Via Alessandro Manzoni 16
38122 Trento
Italy

If you have any questions or comments on data protection, you can send a communication by mail to the aforementioned address or by e-mail to the privacy.drive@porsche.it address or to the certified e-mail address poschedrivesrl@legalmail.it.

2. The protection of your personal data
As a data controller, we protect your personal data. Personal data is any information relating to an identified or identifiable natural person (the so-called "data subject"). This information includes, but is not limited to, type of customer (natural person/legal entity), first and last name, gender, date of birth, citizenship, tax identification number, postal address, e-mail address/certified e-mail address or telephone number, contractual and billing data, as well as other information, which is automatically collected during the use of our website and better detailed in the following paragraphs.

3. Type, scope, purpose and legal basis of automatic data processing
In general, you can use our website without registration. However, the use of some services and features may be restricted to registered users. Even if you use our website without registration, personal data may also be processed.
Below you will find an overview of the types, scopes, purposes and legal bases of automatic data processing carried out via our website. Information relating to the processing of personal data in connection with the use of specific services and functionalities is provided in the following paragraphs.

3.1 Provision of our website
When you access our website via your device, we process data relating to the date and time of access, duration of visit, type of device, operating system used, functionalities used by you, amount of data sent, type of event, IP address, referring URL, domain name.
We process this data on the basis of Article 6(1)(f) GDPR for the purpose of providing the website, ensuring its technical functioning, and identifying and remedying malfunctions of the website. In this way, we pursue the interest of making the use of our website possible and ensuring its technical functionality over time. When you visit our website, this data is processed automatically. If you do not provide this data, you will not be able to use our website. We do not use this data for the purpose of drawing conclusions about you personally or your identity.

3.2. Cookies, tracking technologies and related services
We use cookies and tracking technologies on our website. Please read our cookie policy.

3.3. Integration of third-party content
We also use the services of external providers on our website to supplement our offers and content (hereinafter referred to as the "Content"). Unless otherwise specified below in connection with individual services of external providers, data processing is carried out on the basis of Article 6(1)(f) GDPR, in light of our legitimate interest in using the Content and services of third-party providers to enable effective and optimized operation of our website.

4. Device access permissions
Some features of our website require that you grant permission to access your device (e.g. access to location data).
The granting of authorizations is optional. However, if you want to use the corresponding features, you must grant permissions, otherwise you will not be able to use that feature. Your permissions will remain in effect until you cancel them on your device and/or Internet browser by disabling the relevant setting.

5. Registration process and contact request
You may voluntarily provide personal data or register for services or functionalities with an individual profile on various pages of our website, e.g. in the context of searching and booking vehicles for short-term rental, requests for information and contacting Porsche Centres for the processing of your request for rental services; when registering and using the services and the As described below, we store, process and use data as described below. Without registration, the above services cannot be used or can only be used to a limited extent.
The mandatory information required for functional registration for the short-term rental service is marked with a "*" on the respective input field and generally consists of at least the following data: E-mail, Name, Surname, Telephone or Mobile Phone. If you do not provide the required information, you will not be able to proceed with registration and create a user profile. The personal data you provide during registration will be used by us to create your profile and identify you after each login. The applicable legal basis for these data processing operations is Article 6(1)(b) GDPR. Depending on the service for which you register, additional data may be collected and thus linked to your profile data; in some cases such data may be collected and processed directly by our Company and in others may be collected and processed by third parties who operate as autonomous Data Controllers to provide the services and offers you requested; this includes, for example, the Porsche Centre you have selected, which will provide its privacy policy when signing the short-term rental contract, or the company in charge of managing payment services as part of the booking phase of the vehicle you have chosen, which will provide you with its privacy policy when booking the vehicle.
Otherwise, the mandatory information necessary for the functional contact request for the long-term rental service is marked with a "*" on the respective input field and generally is, at least, the following data: E-mail, Name, Surname, Mobile phone. If you do not provide the mandatory information, you will not be able to proceed with the processing of the contact request.

We carry out the processing activities described in this paragraph to process your requests regarding the rental service you have chosen.

6. How to contact us
If you provide us with personal data by e-mail or via a contact form, this is always done on a voluntary basis. Your information will be processed by us in order to process your contact request and in accordance with Article 6 GDPR(1)(b) (if your request relates to a possible contract to be concluded with us or a contract already concluded with us) or f) (for any other type of request) and may also be passed on to third parties (e.g. Porsche dealers) in this context.

7. Pursuit of legitimate interests
Data processing operations in the context of our website are carried out for the purposes of the following legitimate interests of ours:

• ensuring the availability, operation and security of technical systems, as well as management of technical data;
• further development of products, services and service offerings;
• analysis of customer needs, e.g. processing of warranty claims as well as non-contractual questionnaires for interested parties and customers;
• prevention of violations of the law and cases of fraud, actions related to legal claims.

The respective data processing for the pursuit of legitimate interests is carried out on the basis of Article 6(1)(f) GDPR.

8. Consent: Marketing
With your free and optional consent (Article 6, paragraph 1, letter a) of the GDPR), we will process your data provided in relation to short-term and long-term rental services, for marketing purposes (sending advertising material, carrying out market research, commercial communication and customer satisfaction survey), also through appropriately selected and formally appointed third-party suppliers, by sending you information and offers relating to Porsche Group products and services, which we think may be of interest to you by mail, e-mail, text message, fax and landline/mobile telephone with or without operator, social media. Consent to the processing of your personal data is free and optional and in case of lack of consent you will not suffer any detrimental consequences. You can withdraw your consent to the processing of data for marketing purposes at any time and free of charge, without any consequences, in the manner indicated in paragraph 16 below, even selectively, by informing us that you no longer want to be contacted through one or more contact methods. We therefore ask you to inform us if you wish to consent to the processing of your data for marketing purposes and to be contacted by Porsche Drive S.r.l., by selecting the appropriate consent request box. In this context, it should be noted that, again on the basis of your free and voluntary consent, the aforementioned marketing activities may also be carried out by communicating your data to Porsche Dealers, Porsche Service Centres and other companies belonging to the Porsche Group.

9. Recipients of personal data
Internal recipients: within Porsche Drive S.r.l., only those persons who need it for the purposes indicated may access the data.
External recipients: we only transmit personal data to external recipients outside Porsche Drive S.r.l., if this is necessary for the processing or fulfilment of your request and/or to provide you with a service and/or for the performance of a contractual relationship, if there is another legal basis or obligation and/or if you have given us your consent to do so and/or if this is otherwise permitted under applicable law.
External recipients can be:

a) Data Processors
External service providers that we use for the provision of services, e.g. in the areas of technical infrastructure and maintenance for the offer of Porsche Drive S.r.l. or the provision of contractually relevant content. These processors (in some cases they may be companies belonging to the Porsche Group) are carefully selected also from a technical and IT point of view, and evaluated by us to ensure that your privacy is preserved. Service providers may only use the data for the purposes specified by us and in accordance with our instructions.

b) Public bodies
Government authorities and institutions, such as prosecutors, courts or tax authorities to whom we need to transfer personal data to comply with legal obligations. The transmission takes place on the basis of Article 6(1)(c) GDPR.

c) Private entities
The Dealer to whom the Porsche Centre selected by you during registration or contact request refers and third-party service providers for the purpose of processing an enquiry or the performance of a contract. The transmission takes place on the basis of Article 6(1)(b) GDPR.

9.1 Disclosure of data to third parties for marketing purposes
With your voluntary consent (Article 6(1)(a) GDPR), your personal data provided in connection with short-term and long-term rental services may be disclosed by us to other companies belonging to the Porsche Group. If you give your consent, these third parties may in turn process your personal data for marketing purposes (sending advertising material, carrying out market research, commercial communication and customer satisfaction surveys) and send you information and offers relating to their own products and services or those of the Porsche Group that may be of interest to you, by mail, e-mail, sms, fax and landline/mobile phone with or without operator, social media.

10. Data processing in third countries
If a transfer of data takes place to entities whose registered office or place of data processing is not located in a Member State of the European Union or in another State party to the Agreement on the European Economic Area, we will ensure before the transfer that, unless permitted by law, the recipient ensures an adequate level of data protection (e.g. by means of an adequacy decision by the Commission pursuant to Article 45 of the GDPR, through appropriate safeguards pursuant to Article 45 of the GDPR or the conclusion of so-called EU standard contractual clauses with the data importer, pursuant to Article 46(2)(c) of the GDPR, or, alternatively, by fulfilling the obligations and providing the safeguards provided for in Art. 49 (1) GDPR) or you have given your consent to such data transfer pursuant to Art. 49, paragraph 1, letter a) of the GDPR.
It is understood that, should such a transfer take place, you will be able to obtain from us an overview of the recipients in third countries and a copy of the specific provisions agreed to ensure the appropriate level of data protection. To obtain this information, you can contact us as indicated in paragraphs 1 and 16.

11. Sources and categories of data in the case of third-party searches
Through our website, we only process personal data that we collect directly from users. We do not collect personal data through intermediaries or other third parties.

12. Automated decision-making
We do not use any automated decision-making process that produces legal effects on an individual or similarly significantly affects him or her within the meaning of Article 22 of the GDPR.

13. Duration of storage and deletion
We store your personal data only for as long as is necessary for the purpose of the intended purposes or, in the case of consent, until you have revoked your consent. If you object to data processing, we will delete your personal data, unless further processing of your personal data is necessary for other legitimate purposes of the processing. We will also delete your personal data when we are obliged to do so by any legal obligation.
Applying these general principles, we will immediately delete your personal data:

• in the event that the legal basis on which the data processing is based no longer applies, unless further storage is necessary to comply with legal obligations or to pursue other legitimate purposes of the processing. If the latter occurs, we will delete the data after the other legal basis also ceases;
• if they are no longer necessary for the purposes of preparing and performing a contract or for the pursuit of legitimate interests and there is no other legal basis (such as if further storage is necessary for compliance with legal obligations relating to tax or the retention of business records). If, on the other hand, another legal basis exists, we will delete the data when the other legal basis also ceases;
• if the purpose of the data processing pursued by us ceases and there is no other legal basis (e.g. if further storage is necessary for compliance with legal obligations relating to tax or the retention of business records). If there is another legal basis, we will delete the data when the other legal basis also ceases to exist.

Information on the duration of storage of cookies can be found in our cookie policy.

14. Rights of the data subject
As a data subject, you have the right to request from us access to your personal data and the rectification or deletion of your personal data or the restriction of data processing concerning you or to object to its processing, as well as the right to data portability. In detail:

Right of access: you have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, to obtain access to the personal data and information specified in Article 15 of the GDPR;

Right to rectification and right to erasure: You have the right to obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the data processing, you have the right to obtain the completion of incomplete personal data, including by providing a supplementary statement. You also have the right to obtain the erasure of personal data concerning you without undue delay if one of the reasons set out in Article 17 of the GDPR applies;

Right to restriction of data processing: you have the right to obtain the restriction of data processing when one of the hypotheses indicated in Article 18 of the GDPR applies;

Right to data portability: if the processing of your data is based on consent or contract and is carried out by automated means, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format and you have the right to transmit such data to another data controller without hindrance;

Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(f) (processing based on legitimate interest). If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her carried out for such purposes;

Revocation of consent: If you have given us consent to process your data, you can revoke this consent at any time with immediate effect. The lawfulness of the data processing remains unchanged until the moment of revocation;

Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your data infringes applicable law. You can contact the Italian Data Protection Authority (www.garanteprivacy.it) or the other Supervisory Authority of the Member State of the European Union in which you reside or work.

15. Links to third party sites
The websites and services of other parties to which the links contained on our website have been designed and provided by third parties. We have no influence whatsoever on the design, content and function of these third-party websites and services. We assume no responsibility for the content of these websites and services and the associated data processing. Please note that these third parties whose sites and services are linked to on our site may place their own cookies on your device or collect personal data when you use the links. We have no influence on that possibility. If necessary, please inquire directly with the providers of these websites and services.

16. How to contact us
You can contact us free of charge if you have any questions regarding the processing of your personal data and to exercise your rights. Please contact us by e-mail at privacy.drive@porsche.it or certified e-mail address poschedrivesrl@legalmail.it or by mail at the following address making sure you clearly identify yourself:

Porsche Drive S.r.l.
Via Alessandro Manzoni 16
38122 Trento
Italy

17. Version
The latest version of this Privacy Policy applies.

Last updated: December 3, 2024