Data Protection Statement

A. Controller

We are pleased that you are visiting a website of Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, registered in the Commercial Register of the Amtsgericht Braunschweig (Braunschweig District Court) under No. HRB 100484 ("Volkswagen AG"). This document explains how we collect, process, and use your data.

B. General Information, Protocol Data

You are in general able to visit the websites of Volkswagen AG without telling us who you are. We will in this case receive only the following protocol data:

  1. the operating system and browser that you are using and your screen resolution setting and
  2. the date and time of your visit.

Insofar as the following sections contain no opposing information, the data processing shall be undertaken exclusively by Volkswagen AG.

C. Collection, Processing, and Use of Your Personal Data

I. Use of the Web Form for Information Requests

On this website you can request information about your personal data processed by Volkswagen AG in accordance with Article 15 GDPR via web form. The data provided in this context (surname, forename, date of birth, address and optionally Volkswagen ID or e-mail address, vehicle identification number, beginning and end of ownership as well as corresponding ownership documentation) shall be used by us exclusively for the purposes of providing information, identification and legitimisation subject to your information request (Art. 6 Para. 1 Clause 1 lit. c GDPR). For this, Volkswagen AG uses the so-called double opt-in procedure. In this procedure, you will receive an email to the provided e-mail address asking you to confirm. You may, at any time, withdraw your information request vis-à-vis Volkswagen AG, using the e-mail address: privacy@volkswagen.de at any time.

When using the web form, an encrypted connection is created between your end device and our server. Our security measures correspond to the state-of-the-art standards and are continuously improved based upon the technological developments.

II. Processed data

In the following, it is discussed in detail for what purpose the input fields on the web form are required:

Name: Your full name shall be used for the collection of the personal data processed within Volkswagen AG. Moreover, your name shall also be used for the identification of your person and, as required, for the legitimisation of your vehicle keepership(s).

Birthdate: Your birthdate shall be used only for the identification of your person and the collection your personal data processed within Volkswagen AG. Surname, forename and date of birth in combination ensures a correct identification as these information are available on all international identification cards. That is how we make sure that personal data are not forwarded to unauthorised third parties. Thus, we can ensure that no personal data is disclosed to unauthorized third parties.

Address: Your address (with the obligatory data: Street, house number, postal code, city, country) shall be used for the collection of the personal data processed within the Volkswagen AG. Moreover, we shall require your address (with the aforementioned obligatory data) for the identification of your person and, as required, for the legitimisation of your vehicle ownership(s). Additionally your address is needed in order to send you the information report via post.

Volkswagen ID / e-mail address: If you would like to receive information about the personal data stored in the central Volkswagen ID user account including the linked digital services, we shall require the e-mail address which you provided as an Volkswagen ID. If you should have no central Volkswagen ID user account, you may provide your e-mail address. Your Volkswagen ID and/or e-mail address shall be used for the collection of the data processed within the Volkswagen AG and for the double opt-in procedure and for communication with you, e.g. for queries regarding your request.

If you want to provide multiple Volkswagen ID / e-mail addresses, please submit an additional information request.

Vehicle identification number: If you would like to likewise receive information regarding your personal data associated with a Vehicle Identification Number (VIN), we shall require that you provide the corresponding vehicle identification numbers and in addition, the timeframe (beginning and end of ownership) for which you are entitled to receive information. In order to verify whether you are entitled to receive information, we shall require that you provide vehicle ownership documentation and/or a consent/permission from the respective vehicle owner (legitimisation). On the corresponding documents which provide proof of the vehicle ownership, any data which are not required should be redacted by you, see Information Sheet on the Redaction of Unrequired Data on Verification Documents .

III. Retention Timeframe for Your Issue

Protocols of the communication with you will be retained by Volkswagen AG for one calendar year–including the personal data you transmitted to Volkswagen AG. The documented communication also contains, among other things, the information report which you receive from Volkswagen AG. The processing is based on a balance of interests in accordance with Art. 6 (1) lit. f GDPR. Volkswagen AG represents the following interests: During the retention period, the documentation of your issue will enable the Volkswagen AG to review queries and complaints which you submit and will also enable the Volkswagen AG to process your issue quicker. If you already passed the identification and legitimisation process the results can thus be re-used for exercising additional rights, avoiding you to have to repeat your identification and legitimisation.

IV. Use of data processing companies

In oder to fulfil legal obligations as well as to make use of our own justified interests we engage data processing companies. Your data provided is just processed within European Economic Area (EEA). The following data processing companies are engaged to work on your request:

  • Volkswagen Group Services GmbH
  • Salesforce.com EMEA Limited

V. Processing of Additional Data During the Identification Process via the POSTIDENT Procedure

Insofar as we cannot clearly identify you in the Volkswagen AG’s systems, additional identification measures shall be required in order to ensure that no personal data are disclosed to unauthorised third parties. For this, Volkswagen AG shall use the POSTIDENT process of the German Postal Service AG which enables you to make identification via video-chat or at a post office branch within 4 weeks after our notification. After completing the process, the German Postal Service AG will send us your identification data which we shall use exclusively for the purpose of verifying your identity. After successful identification has been made, we shall erase your personal data that have been processed during the POSTIDENT process. Information on how our identity provider, Deutsche Post AG, processes personal data is accessible on: https://www.deutschepost.de/en/p/postident/postid.html

D. Your Rights

You may assert your rights below against Volkswagen AG at any time upon a free-of-charge basis. For further information concerning the exercise of your rights, please see section E.

Right to Information: You shall have the right to receive information from us regarding the processing of your personal data.

Right to Correction: You shall have the right to demand that we correct your personal data which are incorrect and/or incomplete.

Right to Erasure: You shall have the right, in the event that the requirements specified in Art. 17 GDPR have been met, to demand the erasure of your data. Thus, in accordance with this Art. 17, for example, you may demand the erasure of your data insofar as these data are no longer required for the purposes for which they were collected. Furthermore, you may demand the deletion of these data if we process your data based upon the consent which you have granted and you then withdraw this consent.

Right to Restrict the Processing: You shall have the right to demand the restriction of the processing of your data if the requirements specified in Art. 18 GDPR have been fulfilled. This is, for example, the case if you dispute the correctness of your data. For the duration of the verification of the correctness of the data, you may demand the restriction of the processing.

Right to Object: Insofar as the processing is undertaken based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data. An objection shall be permissible (sic!) if the processing either is carried out in the public interest or in the exercising of official authority or owing to a justified interest of Volkswagen AG or of a third party. In the event that you object, we request that you state your reasons to us regarding why you are objecting to the data processing. In addition, you shall have the right to object to the data processing for the purposes of direct advertising. This shall also be valid for profiling insofar as this is undertaken in conjunction with the direct advertising.

Right to Data Transferability: Insofar as the data processing is undertaken based upon a consent or a fulfilment of a contractual agreement and this is also undertaken while using an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider.

Right of Revocation: Insofar as the data processing is undertaken based upon a consent, you shall have the right to withdraw your consent for the data processing, with effectiveness for the future, at any time and upon a free-of-charge basis.

Right to Complain: You shall also have the right to complain to a government supervisory authority (e.g. to the State Data Protection Officer for Lower Saxony, Germany) regarding our processing of your data.

E. Your Contact Persons

Contact Person for Exercise of Your Rights

For further information concerning the exercise of your rights, please see https://datenschutz.volkswagen.de .

Data Protection Officer

Our Data Protection Officer shall support you as your contact person on all data protection-related matters:

Data Protection Officer of Volkswagen AG

Berliner Ring 2, 38440 Wolfsburg

Status: September 2018