Privacy Policy for Tableau
We are pleased about your visit on this website (Tableau Server). In the following, we inform you about the processing of your personal data (hereinafter "data") by us and the claims and rights to which you are entitled under the data protection regulations.
A. Who is responsible for data processing?
Volkswagen AG Berliner Ring 2 38440 Wolfsburg registered in the commercial register of the Braunschweig District Court under the number HRB 100484 (hereinafter "Volkswagen AG or VW AG")
B. Collection, processing and use of your data
I. What data do we process and from which sources does it originate?
We process data that we generally receive from you. Relevant personal data is regularly the following:
- Professional work and organizational data
- Contact details (professional): name, address, e-mail
- IT usage data
- User and login data: username, roles, permissions
- Logging data: Technical logs, login times
- Software and hardware data: IP address, MAC address, computer name
In addition, to the extent necessary for the performance of obligations imposed by law or the authorities, we process data that we have lawfully received from authorities (e.g. on the basis of legal authority, to execute orders, to fulfil contracts or on the basis of consent given by you).
II. Is there an obligation to provide data?
You only have to provide the data that is necessary for the initiation, establishment, implementation and termination of a business relationship or that we are legally obliged to collect. Without this data, we will usually have to refuse to conclude a contract or execute an order, or we will not be able to perform an existing contract or service.
If we are asking you for your consent to the processing of your personal data, such consent will always be voluntary. However, if you do not give your consent, we might not be able to provide a particular service, if the relevant service cannot be provided without such data.
III. For what purposes and on what legal basis do we process your data?
1. General
In principle, the processing of your data can be carried out on the basis of the following legal bases:
- If you have given us your consent in accordance with Art. 6 para. 1 lit. a) GDPR for certain purposes (e.g. advertising, market or opinion research, or the recording and publication of recordings), the lawfulness of the processing on the basis of consent is given. A given consent can be withdrawn at any time. A withdrawal is only effective for the future. Processing that took place before the withdrawal remains unaffected.
- The processing is necessary for the initiation and/or performance of a contract to which you are a party or to which you represent a contracting party, or for the implementation of pre-contractual measures that are taken upon request, Art. 6 (1) (b) GDPR.
- The processing is necessary for compliance with a legal obligation under EU law or the law of an EU member state to which Volkswagen AG is subject, Art. 6 (1) (c) GDPR.
- The processing is necessary to protect your vital interests or those of another natural person, Art. 6 para. 1 lit. d) GDPR.
- The processing is necessary for the performance of a task that is in the public interest or is carried out in the exercise of official authority vested in Volkswagen AG, Art. 6 (1) (e) GDPR.
- The processing is necessary to safeguard the legitimate interests of Volkswagen AG or a third party, unless your interests or fundamental rights and freedoms, which require the protection of personal data, prevail over Art. 6 (1) (f) GDPR.
If special categories of personal data are processed, this may be done differently on the following legal bases:
- You have given your explicit consent, Art. 9 para. 2 lit. a) GDPR.
- The processing is necessary to protect your vital interests or those of another natural person and the data subject is unable to give his or her consent for physical or legal reasons, Art. 9 para. 2 lit. c) GDPR.
- The processing refers to data that you have obviously made public, Art. 9 para. 2 lit. e) GDPR.
- The processing is necessary for the establishment, exercise or defence of legal claims, Art. 9 para. 2 lit. f) GDPR.
- The processing is necessary for the purposes of preventive health care or occupational medicine, e.g. for the assessment of the ability to work, Art. 9 para. 2 lit. h) GDPR.
2. Data processing
IV. Who receives your data?
Within Volkswagen AG, only those departments will have access to your data that need it to fulfil the above-mentioned purposes.
A transfer to third parties will only take place if this is necessary for the aforementioned purposes and a legal basis exists or if you have given your prior consent. If Volkswagen AG has commissioned service providers for the processing of data or the associated provision of services, the transfer is usually carried out on the basis of a data processing agreement in accordance with Art. 28 GDPR or there are professional obligations that ensure a sufficient level of data protection.
The following categories of recipients may receive data:
- Service providers/suppliers
- Hosting service providers
V. Will your data be transferred to a third country or to an international organisation?
As a rule, your data will be processed within the EEA (European Economic Area), to which the GDPR applies without restriction. As a globally active company, it is necessary in exceptional cases to store and process data outside the EU. In individual cases, data may also be passed on to authorities and courts in third countries. Please note that not all third countries have an adequate level of data protection recognised by the European Commission. Unless an adequacy decision has been made by the European Commission, Volkswagen AG will only transfer your data to third countries if this is permissible under Art. 44 – 49 GDPR. To the extent that Volkswagen AG relies on appropriate safeguards in accordance with Article 46 para. 2 GDPR for the transfer to third countries (e.g. standard contractual clauses or binding corporate rules), Volkswagen AG will take additional technical and/or organizational measures if this is necessary to maintain adequate protection of your data. The agreements with processors regularly provide for the conclusion of to ensure an adequate level of data protection. You can obtain a copy of the specifically applicable or agreed regulations to ensure the appropriate level of data protection from us. Please use the information in section B. VII for this purpose.
VI. How long will your data be stored?
Where necessary, we process and store your data for the purposes mentioned. If the purpose has been fulfilled and there are no retention obligations, the data will be deleted regularly. It should be noted that a business relationship is usually a permanent relationship, which is usually designed for years.
We delete the User E-mail, User ID, Username (First- and last name of the User E-mail) at the latest 1 year after expiry of the permission. The storage duration for the Login timestamp (date) can be up to 90 days similar to the data field (Date and time of access) of the Logging files above due to the following reasons:
- If there are performance problems with many concurrent users, this information can be used as a basis to order more or reduce server capacity.
- The timestamp gives the administrator the ability to detect unusual activity and see when user login. As example if user login on saturday, sunday or holidays.
- The Login timestamp (date) is overwritten every time the user logs in. Only the last login is stored.
VII. Data Protection Officer and Rights of Data Subjects
If you have general questions about this privacy policy or the processing of your data by Volkswagen AG, you can contact our data protection officer via:
- Post: Volkswagen AG, Data Protection Officer, Berliner Ring 2, 38440 Wolfsburg, Germany
- E-mail:
- Phone: 00800-8932836724889 (00800-VWDATENSCHUTZ)
What rights do you have?
You have the following rights vis-à-vis us, subject to the respective legal requirements:
- Right to information (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure or "right to be forgotten" (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR).
Furthermore, you have the right to contact a data protection supervisory authority at any time in accordance with Art. 77 GDPR if you believe that the processing of the data concerning you violates applicable law. The address of the data protection supervisory authority responsible for VOLKSWAGEN is:
Der Landesbeauftragte für den Datenschutz Niedersachsen Prinzenstraße 5 30159 Hannover Deutschland / Germany
However, you can also lodge a complaint with any other data protection supervisory authority competent for you within or outside the EU, in particular with the one in the Member state of your habitual residence, place of work or place of the alleged infringement. Please find hereinafter a link where you can find all contact details of the national authorities in all member states: .
Asserting your rights
If you want to assert your rights as a data subject, please use our data protection portal
C. Further information on individual processing
Use of cookies and tracking tools
Volkswagen AG uses cookies on its websites. Cookies are small files containing configuration information that are stored on your end device. Cookies can basically be divided into three categories. There are cookies which are essential for the functionality of the website (so-called functional cookies), cookies which increase the level of comfort when visiting a website and, for example, save your language settings (so-called comfort cookies) and cookies which are used to create a pseudonymised user profile (so-called tracking cookies).
The processing of functional cookies is necessary to enable you to visit the website (Article 6 Paragraph 1 lit. b GDPR).
For the website only functional cookie are used for more information about our cookies, please see the Cookie Policy on the website.
D. Amendments to country-specific data protection regulations
Please note that the data protection level of GDPR, as described above, displays the baseline requirements. If country-specific data subject rights apply or further information on processing or contact persons are required, you will find these in the following country-specific supplements.
For matters concerning data protection, you can also consult our company data protection officer Dr. Oliver Draf, using your own language:
- via mail: Volkswagen AG, Mail Box 011/80910, 38436 Wolfsburg
- via e-Mail:
- via telephone: 00800-8932836724889 (00800-VWDATENSCHUTZ)
Additional contact details for asserting your rights
You may also send your request
- via mail: Volkswagen AG, Privacy Team, Berliner Ring 2, 38440 Wolfsburg, Germany
- via e-mail:
- via telephone: 00800-8932836724889 (00800-VWDATENSCHUTZ)
Albania
Besides, from the legal bases described in part B. III. 2. the legal bases for processing personal data under Albania law is a consent given by the data subjects. The consent of the data subjects is given either by registering for the mobile online services, after they have confirmed that they have read and accepted the Privacy Policy, or by using the vehicle in knowledge of the data processing.
In addition or rather supplementary to your rights listed above under B. VII. the following applies
You have the right to file a complaint regarding the processing of your personal data to the Information and Data Protection Commissioner () as the competent data protection authority.
Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.
Data controller representative in Albania: Porsche Albania Sh.p.k Autostrada Tirane-Durres Km. 3, Tirane,1051
Argentina
Personal data means any information relating to an identified or identifiable natural or, if intended under local law, legal person, including, as the case may be, sensitive personal data as defined under the laws of the country where you are located at the relevant time (‘data subject’); a data subject is one that can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
In addition or rather supplementary to your rights listed above under B. VII. the following applies
You have the right to file a complaint regarding the processing of your personal data at THE PUBLIC INFORMATION ACCESS AGENCY, which, depending on the facts of the individual case, in its capacity as the Control Entity of Law No. 25,326, has the power to attend complaints and claims filed by those whose rights are affected due to breaches with applicable regulations on personal data protection.
Australia
In addition or rather supplementary to your rights listed above under B. VII. the following applies.
You have the right to lodge a complaint at the Office of the Australian Information Commissioner (“OAIC”) or any other dispute recognition scheme recognised by the OAIC which can be found on the OAIC website .
If you are concerned with the way we have handled your personal data, you may lodge a privacy complaint with the Office of the Australian Information Commissioner (“OAIC”). However, it is a requirement of the OAIC that prior to lodging a complaint, you have raised your complaint with us. If you are not satisfied with our response or we fail to provide a response within 30 days of receipt, you can lodge a complaint with the OAIC. The contact details for the OAIC are set out below:
Phone 1300 363 992 Fax (02) 9284 966 Website Post GPO Box 5288, Sydney NSW 2001
Brazil
In addition or rather supplementary to your rights listed above under B. VII. the following applies.
You have the right to lodge a complaint before ANPD (Autoridade Nacional de Proteção de Dados) against the data controller.
France
To the extent the access to the data and the data processing fall within the scope of the data protection laws of France, you also have the right to define directives concerning the fate of your personal data after your death (post-mortem right).
Japan
Personal information obtained from residents in Japan (“Personal Data”) shall be handled in accordance with the following rules in addition to the rules set forth in Part B of this Privacy Policy.
- Purpose: We will handle the Personal Data in accordance with the Purposes set forth in Part B of this Privacy Policy (“Purposes”), and not use Personal Data for any purpose other than such Purposes. We shall promptly notify the relevant data subjects, or disclose to the public of the Purposes (and any subsequent changes thereof), unless the Purposes have already been disclosed to the public;
- Collection: We will not obtain any Personal Data through any deceptive, fraudulent, or other wrongful means;
- Accuracy: We will make reasonable efforts to ensure that Personal Data handled by us is accurate and up to date and within the scope necessary to achieve the Purposes;
- Retention: We will retain Personal Data in accordance with Section A.IV of Part I, and cease retention as soon as it is reasonable to assume that the Purposes are no longer being served by retention of Personal Data;
- Protection: We will protect Personal Data in its possession or under its control by making reasonable security arrangements to prevent unauthorized access, collection, use, disclosure, copying, modification, disposal, damage, loss or similar risks. We will adequately supervise processing of Personal Data by our officers, employees, third party vendors and any other parties who process Personal Data on our behalf;
- Transfer: Without obtaining the prior consent of the relevant data subjects, we will not transfer or provide any part of Personal Data to any individual or entity unless an exception under the APPI applies.
- Extraterritorial Transfer: Without obtaining the prior consent of the relevant data subjects, we will not transfer or provide any part of Personal Data to any individual or entity located outside Japan, European Union or the United Kingdom unless (a) a transferee is located in a country or area certified by the Personal Information Protection Commission of Japan ("PPC") as having data protection standards equivalent to those of Japan or (b) the transferee has data protection standards equivalent to the standards specified by the PPC; and,
- Data Subject's Right: If a data subject requests pursuant to the APPI disclosure of Purposes, access to, correction, or deletion of any of Personal Data relevant to such data subject, or lodge a complaint, we will respond to such request or complaint promptly and in accordance with the APPI. Any fee charged to data subjects shall be reasonable.
In addition or rather supplementary to your rights listed above under B. VII. the following applies
You have the right to file a complaint regarding the processing of your personal data at the Japanese authority, PPC as below:
Personal Information Protection Commission, Government of Japan (PPC), Kasumigaseki Common Gate West Tower 32nd Floor, 3-2-1, Kasumigaseki, Chiyoda-ku, Tokyo, 100-0013, Japan TEL: +81-3-6457-9680
In addition to our information regarding potential recipients above under B. IV., the following applies:
1. Processors
Third-party service providers engaged by us and working on our order to support data processing on behalf of VOLKSWAGEN AG and not for any of its own purposes (so-called “processors”) may also receive data for these purposes. This includes:
2. Third parties
Beyond this, we do not disclose your personal data to recipients or categories of recipients who are acting as controllers.
3. Third country transfers
The Information on the transfer to third countries above under B. V. apply mutatis mutandis to the Japanese Act on the Protection of Personal Information.
As a rule, all recipients are located in Japan and/or EU Member States and the Japanese government has recognized the adequacy of EU standards for the protection of personal data.
A transfer of data to third countries (i.e. countries that are neither members of the European Union nor of the European Economic Area) may take place to the extent this is required for the provision of services to you, is required by law, or you have given us your consent (in the absence of any other appropriate safeguarding mechanism under applicable law). In these cases, Volkswagen AG will take additional technical and/or organizational measures if this is necessary to ensure adequate protection of your data. The agreements with recipients or processors regularly provide for the conclusion of standard contractual clauses of the European Commission in order to ensure an adequate level of data protection.
Mexico
In addition or rather supplementary to your rights listed above under B. VII. the following applies.
You have the right to:
- oppose;
- file data protection measures with the Federal Institute for Access to Information and Data Protection;
- request a reconsideration of a decision made via automated decision making in case you are of the opinion that the data processed in this context is (partly) incomplete or incorrect.
Montenegro
Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.
Porsche Leasing doo Member of Porsche Bank Group Josipa Broza Tita 67 81000 Podgorica, Montenegro
New Zealand
In addition or rather supplementary to your rights listed above under B. VII. the following applies.
You have the right to:
- a response to your request within 20 working days, if you make a request for access to or rectification of your personal information. In limited circumstances, VOLKSWAGEN may extend this 20 working day time limit, but we must tell you the period of the extension and the reasons for the extension.
- lodge a complaint with both VOLKSWAGEN and the Privacy Commissioner. However, it is a requirement that before you can complain to the Privacy Commissioner you must first raise your complaint with VOLKSWAGEN. If you are not satisfied with VOLKSWAGEN’s response or you do not receive a response, you can lodge a complaint to the Privacy Commissioner. In general, you should wait at least 30 working days for a response before contacting the Privacy Commissioner to lodge a complaint.
Serbia
In addition or rather supplementary to your rights listed above under B. VII. the following applies.
You have the right to be informed about appropriate safeguards in case of a data transfer to countries or international organizations outside Serbia that do not provide an adequate level of data protection recognized by a Serbian Government Decision. All EU / EEA Member states provide an adequate level of data protection recognized by a Serbian Government Decision.
You have the right to file a complaint regarding the processing of your personal data at the Commissioner for Information of Public Importance and Personal Data Protection (), as the supervisory authority for personal data protection in the Republic of Serbia.
Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.:
PORSCHE SCG DOO BEOGRAD Zrenjaninski put 11 11210 Beograd