A. Controller

We are pleased that you are visiting a website of Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, registered in the Commercial Register of the Amtsgericht Braunschweig (Brunswick District Court) under No. HRB 100484 ("Volkswagen AG"). This document explains how we collect, process, and use your data.

B. General Information, Protocol Data

Basically you can visit the Volkswagen AG websites without revealing who you are. We then only learn the following protocol data:

1. The operating system and web browser you use and the screen resolution settings and
2. the date and time of your visit.

Unless the following sections contain information to the contrary, data processing is carried out exclusively by Volkswagen AG.


C. Collection, Processing, and Use of Your Personal Data

I. Use of the Web Form for Information Requests

On this website you can request information about your personal data processed by Volkswagen AG in accordance with Article 15 GDPR via web form. The data provided in this context (surname, forename, DUNS, business email address, B2B user ID, Company name and address and mandatory date and place of birth, address and Volkswagen Group user ID (WindowsID) and email address) shall be used by us exclusively for the purposes of providing information, identification and legitimation subject to your information request (Art. 6 Para. 1 Clause 1 lit. c GDPR).

If you no longer want your request to be processed by Volkswagen AG, you have the option of withdrawing this request via the email address datenschutz@vwgroupsupply.com.

When using the web form, an encrypted connection is created between your end device and our server. Our security measures correspond to the state-of-the-art standards and are continuously improved based upon the technological developments.

II. Processed Data

The following explains the purpose for which your personal data are required in the context of an inquiry:

Name: Your full name shall be used for the collection of the personal data processed within Volkswagen AG. Moreover, your name shall also be used for the identification of your person.

Birthdate: Your birthdate shall be only used for the identification of your person and the collection of your personal data processed within Volkswagen AG. Surname, forename and date of birth in combination ensures a correct identification as these information are available on all international identification cards. Thus, we can ensure that no personal data is disclosed to unauthorized third parties.

Company address: Your address (with the obligatory data: DUNS, Company name, street, house number, postal code, city, country) shall be used for the collection of the personal data processed within the Volkswagen AG. Moreover, we shall require your address (with the aforementioned obligatory data) for the identification of your person and, as required, for the legitimation of your vehicle ownership(s). Additionally your address is needed in order to send you the information report via post.

Volkswagen Group User ID / email Address: If you have an inquiry about your personal data stored in your profile as a contractors employee, we will use the email address you provided for your corporate user ID. Your corporate user ID or email address will be used to determine the personal data processed within Volkswagen AG and for communication with you, e.g. if you have any questions about your request.

If you want to provide multiple Volkswagen ID / email addresses, please submit an additional information request.

III. Retention Timeframe for Your Issue

Protocols of the communication with you will be retained by Volkswagen AG for five years including the personal data you transmitted to Volkswagen AG. The documented communication also contains, among other things, the information report which you receive from Volkswagen AG. The processing is based on a balance of interests in accordance with Art. 6 (1) lit. f GDPR. Volkswagen AG represents the following interests: During the retention period, the documentation of your request enables queries and complaints on your part to be checked and processes easier and quicker. The identification and legitimation carried out can be reused for the exercise of additional rights, avoiding you to have to repeat your identification and legitimation.

IV. Digital Data Delivery

To offer the information report or the copy of the data available to you electronically, you have the option of using our download portal provided on this website. Access is granted by entering your request ID and a one-time password, which we will be sent to you by post. If you wish to log in a second time, you have to request a new one-time password for security reasons. The data will be available for download for 30 days and will then be deleted automatically.

V. Use of Data Processing Companies

We are using processors to meet our statutory obligations and to observe our own legitimate interests. When doing so, the data provided by you is always processed within the European Economic Area (EEA). In case of technology-based system errors that cannot be resolved in the normal support process, access to the personal data outside of the EEA cannot be excluded. We have safeguarded against this fact with appropriate EU standard contract provisions. You can access the applied provisions via the URL below https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.

The following data processing companies are engaged to work on your request:

• Volkswagen Group Services GmbH
• Salesforce.com Germany GmbH
• Volkswagen Software Asset Management GmbH

For the support of our IT system the following data processors are used:

• Arlanis Reply AG
• COMbridge IT Consulting GmbH
• NTT DATA Deutschland GmbH

D. Use of Cookies

Volkswagen AG uses various cookies on its websites. Cookies are small files containing configuration information that are stored on your end device. There are basically three categories of cookies.

1. So-called Functional Cookies are essential for the functionality of the website. The processing of the Functional Cookies is necessary to enable your visit to the website (cf. Art. 6 Para. 1 lit. b GDPR).
2. The comfort of a website visit is increased by so-called Comfort Cookies, which save your language settings, for example. The legal basis for Comfort Cookies is a legitimate interest (Art. 6 para. 1 lit. f GDPR). The legitimate interest is providing comfort when visiting the website. You can object to data processing at any time with effect for the future. Further information can be found in section F. Your Rights
3. So-called Tracking Cookies are used to create a pseudonymised user profile. Tracking Cookies are only set if the website visitor has given their consent (Art. 6 Para. 1 lit. a GDPR). Consent is given via the so-called cookie banner, which must be actively clicked on. Further information on the tracking tools used and how you can revoke your consent can be found in section E. Your Rights.

For more information about our cookies, please see the Cookie Policy.

E. Your Rights

You may assert your rights below against Volkswagen AG at any time upon a free-of-charge basis. For further information concerning the exercise of your rights, please see section F.

Right of Access by the Data Subject: You shall have the right to receive information from us regarding the processing of your personal data.

Right to Rectification: You shall have the right to demand that we correct your personal data, which are incorrect and/or incomplete.

Right to Erasure: You shall have the right, in the event that the requirements specified in Art. 17 GDPR have been met, to demand the erasure of your data. Thus, in accordance with this Art. 17, for example, you may demand the erasure of your data insofar as these data are no longer required for the purposes for which they were collected. Furthermore, you may demand the deletion of these data if we process your data based upon the consent, which you have granted, and you then withdraw this consent.

Right to Restriction of Processing: You shall have the right to demand the restriction of the processing of your data if the requirements specified in Art. 18 GDPR have been fulfilled. This is, for example, the case if you dispute the correctness of your data. For the duration of the verification of the correctness of the data, you may demand the restriction of the processing.

Right to Object: Insofar as the processing is undertaken based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data. An objection shall be permissible, if the processing either is carried out in the public interest or in the exercising of official authority or owing to a justified interest of Volkswagen AG or of a third party. In the event that you object, we request that you state your reasons to us regarding why you are objecting to the data processing. In addition, you shall have the right to object to the data processing for the purposes of direct advertising. This shall also be valid for profiling insofar as this is undertaken in conjunction with the direct advertising.

Right to Data Portability: Insofar as the data processing is undertaken based upon a consent or a fulfilment of a contractual agreement and this is also undertaken while using an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider.

Right to Revocation: Insofar as the data processing is undertaken based upon a consent, you shall have the right to withdraw your consent for the data processing, with effectiveness for the future, at any time and upon a free-of-charge basis.

Right to Lodge a Complaint: You shall also have the right to lodge a complaint to a government supervisory authority (e.g. to the State Data Protection Officer for Lower Saxony, Germany) regarding our processing of your data.

F. Your Contact Persons

Contact Person for Exercise of Your Rights

For further information concerning the exercise of your rights, please visit privacy.volkswagen.com.

Data Protection Officer

Our Data Protection Officer shall support you as your contact person on all data protection-related matters:

Datenschutzbeauftragter der Volkswagen AG
Berliner Ring 2
38440 Wolfsburg
GERMANY
dataprivacy@volkswagen.de 

Status: May 2023