Data Protection Notice
Data Protection Notice www.audi.com
In this Data Protection Notice, we are informing you about the processing of your personal data by AUDI AG, Ettinger Straße 70, 85057 Ingolstadt (“we”) in the context of www.audi.com.
Information related to our company, AUDI AG, is available on our website, www.audi.com.
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
This Data Protection Notice describes how AUDI AG processes your personal data in the context of www.audi.com and the utilisation and applications offered therein. Separate data protection or privacy notices may apply to other websites or other data processing operations of AUDI AG (e.g., www.audi.com/connect). General information on the processing of personal data at AUDI AG can be found on our website, www.audi.com/datenschutz.
1. Who is responsible for data processing and whom can I contact?
The entity responsible for the processing of your personal data (the Controller) is:
AUDI AG, Ettinger Straße 70, 85057 Ingolstadt.
If you have concerns about data protection, you can also contact our company's data protection officer:
AUDI AG, Data Protection Officer, 85045 Ingolstadt
If you want to assert your data protection rights, please use the contact options at
There, you will find more information on how to assert your data protection rights. You can also contact the following address by post:
AUDI AG, DSGVO-Betroffenenrechte, 85045 Ingolstadt
If you have general questions about this Data Protection Notice or the processing of your personal data by AUDI AG, please address them to the following:
2. General Information
2.1 What data do we process and what sources do such data come from?
We process personal data that we collect about you in connection with the use of our website or our business relationship, such as your initiation of contact with us.
Relevant personal data generally include, for example, personal details (name, address and other contact information (e.g. telephone number, email address), date and place of birth, and nationality). In addition, depending relationship with you, additional personal data may be processed.
2.1.1 Access to the Website
In general, you can access the website www.audi.com (“Website”) without providing personal data. Each time you access the website, your Internet browser automatically transmits certain information, which we store in so-called “log files”.
In particular, the following information are transmitted automatically:
- IP address (Internet Protocol address) of the terminal from which the online service is accessed;
- Internet address of the website from which the online service was accessed (the so-called "source URL" or "referrer URL");
- Name of the service provider used to access the online offer;
- Name of the files or information retrieved;
- Date and time as well as duration of the retrieval;
- Transferred data volume;
- Operating system and information about the Internet browser used, including installed add-ons (e.g., Flash Player);
- http status code (for example, "request succeeded" or "requested file not found").
2.1.2 Data provided by you
The use of certain services requires registration or the disclosure of personal data. In addition, we process your personal data if you contact us via the website. We process the data that you provide when using the following functionalities:
Contact Form: You can contact our customer service department using the contact form. For handling your request, we process the data provided by you on the form and your disclosed contact data (using a third-party processor). To the extent necessary for processing, we transmit your data to our Audi partners in order to fully address your concern, such as following up on a complaint regarding a specific Audi partner. We take your concerns seriously and would like to resolve such concerns together with the affected sales partners. Please let us know if you do not wish this course of action in a particular case.
Car Dealership Careers: You can contact our applicant service using the contact form. For handling your request, we process the data provided by you on the form and the contact data you disclosed (using a third-party processor).
Career Chatbot : The chatbot provider is e-bot7 GmbH, Perusastraße 7, 80333 Munich. This website uses the chatbot to answer user questions regarding their career at Audi. We selected this provider carefully. E-bot7 doesn’t collect or process personal data for behavior analysis. Usage data like chat duration, message time stamps, number of chats and users approximate location will only be used for statistical purposes and are saved anonymously. Customer questions will be saved and processed for a maximum of 7 days to answer their concerns and for internal purposes, for example control and improvement of our business and service processes (Art.6 Paragrph.1 lit. b, Art. 6 Paragrph. 1 lit. f GDPR).
Audi Experience Booking Form: After entering your contact details, you can book factory tours, etc. When you submit the booking form, we process the data provided by you (with the assistance of a processor) to check availability and, if applicable, book the requested event and contact you to confirm your participation. For changes on short notice, we shall inform you by telephone, if you have provided your telephone number.
Ordering Publications: On this website, you have the possibility of requesting publications such as the AUDI AG's annual report. For this purpose, we process the following personal data from you: last name, first name, address. We process this data (using a processor) only to establish, structure or modify the contract between you and us for ordering publications free of charge (Art. 6 para. 1 sentence 1 lit. b GDPR).
Newsletter Registration/Reminder for New Releases: This website also offers the possibility to order a newsletter, such as a reminder about new releases of our publications. We process the data provided by you in connection with the newsletter registration (email address, last name, first name and title) for the purpose of sending you the newsletter in accordance with the scope of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). To activate the email newsletter, we use the so-called “double opt-in procedure”, in which we will send you an email to the email address you provided with a request that you confirm your consent. You can withdraw your consent to AUDI AG with prospective effect at any time without stating reasons, either by clicking the “unsubscribe” link included in each newsletter or by contacting our customer service department. If you unsubscribe from the newsletter, your personal data will be deleted, unless we process your data on another legal basis or retention obligations have to be met. The newsletter is dispatched by a processor.
Online Survey: This website also offers the possibility to participate in an online survey on current topics. The participation takes place without processing further personal data than required for accessing the website. Your personal data will be anonymized as early as possible.
Consent to Advertising and Market Research: If you would like to receive information about our products, you can request such advertising. For this purpose, the following data will be processed for the purpose of providing advertising in accordance with the scope of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR): last name, first name, email address and/or telephone number). If you give consent to contacting you via email, we will use the so-called “double opt-in procedure”, in which we will send you an email to the email address you provided with a request that you confirm your consent. To learn how you can withdraw your consent, please see the section “What rights do I have?”.
E-mail address email@example.com: You can use this e-mail address to notify us regarding cybersecurity vulnerabilities/incidents or hacking. We process the information contained in your e-mail and the contact information you provide for the purposes of handling your message and, if necessary, to contact you with follow-up questions. Where this is necessary for processing, we pass on the information to other VW Group brands, and/or service providers or suppliers of hardware and software (e.g. control units). In doing so, we pass on only that information which does not allow inferences to be made regarding the identity of the individual who reported the issue. If processing the message requires passing on the vehicle identification number as well, we ensure adherence to data protection requirements through the implementation of relevant data protection agreements.
2.1.3 Other Data
We will process the personal data that you provide us when contacting us, such as via our customer service department.
2.2. For what purposes do we process your data and on which legal basis?
Unless already stated in section 2.1, we process your personal data on the following legal bases for the following purposes:
|Purpose||Legal Basis||Legitimate Interest in the Balancing of Interests|
|Providing the website for the general public and for the purpose of enabling contact by customers and interested parties||Performance of the contract or balancing of interests||We have a legitimate interest in providing an Internet presence (website), also to unregistered users, to provide general information about our company.|
|Processing of orders and queries||Contract performance|
|Online surveys||Contract performance|
|Collection of statistical information on the use of the website (so-called “web analysis”)||Balancing of interests||We have a legitimate interest in receiving information about the use of the website, in particular to improve our services.|
|Identification of disruptions and assurance of system security, including detection and tracking of unauthorized access attempts and access to our web servers||Satisfaction of our legal obligations with respect to data security and Balancing of interests||We have a legitimate interest in eliminating disruptions, ensuring system security, and detecting and tracking unauthorized access attempts.|
|Protecting and defending our rights||Balancing of interest||We have a legitimate interest in asserting and defending our rights.|
|Submitting customer information||Consent|
|Identifying faults and ensuring product safety, including detecting unauthorised access and attempts at access to our products in customer possession||Fulfilment of our legal obligations in the area of product liability, as well as balance of interests||We have a legitimate interest in ensuring product safety, and detecting and pursuing unauthorised access/attempts at access.|
2.3 Do I have an obligation to provide data?
In the context of our business relationship, you need to provide only the personal information that is required to enter into or conduct a business relationship or that we are obligated to collect by law. These data are marked as mandatory fields in the respective forms or functions. Without this data, we will generally have to refuse to enter into the contract or to execute the order, or we will be unable to perform under an existing contract and possibly may have to terminate it. This means that the use of a service or a functionality requires that you provide the specified data. Unless you provide the data, we cannot provide the service to you.
2.4 Who receives my data?
Within AUDI AG, your data is provided to the respective departments that need such data to fulfil our contractual and legal obligations and to protect our legitimate interests.
Third-party service providers engaged by us (so-called “processors”) may also receive data for these purposes.
Your personal data will be disclosed by us to third parties only if this is necessary for the performance of the contract, if we or the third party have a legitimate interest for sharing, or if you have given consent.
In addition, data may be transferred to third parties (including investigative or security authorities) where required by applicable law or by enforceable regulatory or judicial order.
Due to the size and complexity of data processing by AUDI AG, it is not possible to list each recipient of your personal data individually in this Data Protection Notice, which is why we generally indicate only categories of recipients.
For the provision of specific services we use following categories of processors, which support us in the performance of our business processes. Specifically, these include companies in the following categories:
- Tracking service providers
- Web agencies
- Hosting providers
- Audi customer service (Audi Interaction GmbH)
- Shipping service providers
- Print service providers
- Archiving service providers
- IT Service Providers
2.4.2 Third Parties
- Log files are shared with investigative authorities on a case-by-case basis.
- Authorities within the scope of their jurisdiction (e.g., tax authority, police, prosecuting authority, or social security agency)
- Other third parties, to the extent that you instruct us to share data or give your consent.
2.5 Are data transmitted to a third country?
A transfer of data to third countries (i.e., countries that are neither members of the European Union nor of the European Economic Area) may occur to the extent necessary to perform services for you, if required by law, or where you have given us your consent. In addition, we may also share your personal information with third-party processors in third countries.
Please note that not all third countries have a data protection level considered as adequate by the European Commission. For data transfers to third countries where there is no adequate level of data protection, before we share data, we will ensure that the recipient either has an adequate level of data protection (e.g., through self-certification by the recipient of the EU-US Privacy Shield or by agreement containing so-called “EU standard contractual clauses” of the European Union with the recipient) or if our users give their explicit consent.
You can obtain from us a copy of the specific applicable or agreed provisions to ensure an adequate level of data protection. To do so, please use the information in the Contact section.
See the section "User tracking and usage-based online advertising".
2.6 How long will my data be stored?
We store your data as long as necessary for providing our services to you or as long as we have a legitimate interest to do so, in particular to eliminate disruptions.
In addition, we are subject to various retention and documentation obligations pursuant to, inter alia, the German Commercial Code (Handelsgesetzbuch - “HGB”) and the Tax Code (Abgabenordnung - “AO”). The retention and documentation periods specified therein last up to ten years. Finally, the storage period is also governed by statute of limitations periods, which can be up to thirty years, for example, pursuant to sec. 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch - “BGB”), whereby the general limitations period is three years.
In certain circumstances, your data may also need to be retained for a longer period of time, such as when a legal hold or litigation hold (i.e., a prohibition of data deletion for the duration of the proceedings) is ordered in connection with an administrative or judicial proceeding.
2.7 Do I have a specific right to object?
In connection with user tracking, you may assert your right to object by technical means. See the section “User tracking and usage-based online advertising”.
2.8 What rights do I have?
As the data subject, you are generally entitled to the following data protection rights:
Access: You have the right of access to your personal data stored by AUDI AG, be provided with information about to what extent your personal data will be processed or shared and to receive a copy of your stored personal data.
Rectification: You have the right to obtain from AUDI AG without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed.
Erasure: You have the right to obtain erasure of your personal data stored by AUDI AG without undue delay, when the legal requirements are met.
This is particularly the case if
- your personal information is no longer needed for the purposes for which it was collected;
- the legal basis for processing was your consent, and you have withdraw your consent;
- you have objected to processing your data which was based on the legal basis of legitimate interests due to personal reasons, and we cannot prove that there are overriding legitimate grounds for such processing;
- your personal data were processed unlawfully; or
- your personal data must be erased in order to comply with legal requirements.
Please note that your right to erasure is subject to certain limitations. For example, we may not and/or must not erase data that we are still required to retain due to statutory retention obligations. In addition, your right of erasure does not extend to data that we need in order to establish, exercise or defend against legal claims.
Restriction of Processing: Under certain conditions, you have the right to obtain restriction of processing (i.e., the marking of stored personal data with the aim of limiting its processing in the future).
The requirements are:
- The accuracy of your personal data is contested by you and AUDI AG must verify the accuracy of the personal data;
- the processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
- AUDI AG no longer needs the personal data for the purposes of the processing, but you require the data to establish, exercise or defend your legal claims.
- you have objected to processing pending the verification of whether the legitimate grounds of AUDI AG override your legitimate grounds.
Data Portability: To the extent that we automatically process your personal data that you have provided to us based on your consent or any contract with you (including your employment contract), you have the right to receive such data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from AUDI AG. You also have the right to have the personal data transmitted directly from AUDI AG to another controller where technically feasible, provided that such transmission does not adversely affect the rights and freedoms of others.
Right to Object: If we process your personal data on grounds of legitimate interests or in the public interest, then you have the right to object to the processing of your personal data on grounds relating to your particular situation. In addition, you have an unrestricted right to object if we process your data for our direct marketing purposes. Please see our separate note in the section "Information about your right to object".
In certain situations, and in the context of a balancing of interests, we will also grant you an additional unrestricted right to object that goes beyond the privacy settings. In this connection, please see the section "Special Information - Service".
Withdrawal of Consent: If you have given consent to the processing of your personal data, then you can withdraw such consent at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.
Complaint: Furthermore, you have a right to file a complaint with a data protection authority (Datenschutzaufsichtsbehörde), if you believe that the processing of your personal data is unlawful. The right to file a complaint is without prejudice to any other administrative or judicial remedies. The address of the data protection authority responsible for AUDI AG is:
Bayerisches Landesamt für Datenschutzaufsicht
2.9 Information about Your Right to Object
Right to object for personal reasons
You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balancing of interests. This applies also to profiling.
Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can demonstrate compelling legitimate grounds but will, of course, examine each individual case.
In the event of an objection, we will no longer process your personal data, unless
• we can demonstrate compelling legitimate grounds for the processing of these data that override your interests, rights and freedoms, or
• your personal data serves the establishment, exercise or defence of legal claims.
Objection to the processing of your data for our direct marketing purposes
To the extent that we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, then we will no longer process your personal data for these purposes.
Exercise of the right to object
The objection may be lodged without any form and should be made to the contact details listed in this Data Protection Notice.
3. Cookies and User Tracking
For purposes of targeted advertising, we generate pseudonym user profiles (pursuant to § 15 para. (3) of the German Telemedia Act). To that end, the website uses so-called “cookies”. These are small files that are stored on the user’s computer when he or she visits the website. Cookies can store various types of data and help in providing additional functionality (thereby making the website generally more user-friendly, more effective and more secure). To the extent that cookies are used, they contain no personal data, unless you have provided your exclusive consent.
3.2 User Tracking and usage-based online advertising
An analysis for reporting purposes is carried out only after the data is rendered anonymous. As a rule, the information generated by these cookies will be transmitted to an Adobe server located within the European Union. Nevertheless, there is a risk that in the event of a technical emergency, the data will be transferred to the United States and stored there, meaning that a relevant EU standard contract (reasonable guarantee for data processing in non-European countries) was concluded. You have the right to be informed about such standard contract.
When visiting our website, you may be selected from time to time to participate in an anonymous online survey for market research purposes. By actively clicking the link displayed to you, you will directly access the online questionnaire. The data processing is carried out for purposes of advertising, market research and in order to design the website in a needs-based manner (pursuant to § 15 para. (3) of the German Telemedia Act). If you do not wish to participate in the survey, we insert an opt-out cookie on your client so that you are not selected again. During the ongoing survey, this cookie information will be used for approximately 30 days. Additional data protection or privacy notices for Psyma can be found at http://www.psyma.com/en/automotive/.
Usage-based online advertising
Usage-based online advertising, also referred to as “targeting”, allows advertising companies to identify a user for certain ad deliveries and to allocate them to a certain target group. With the help of this information, it is possible to present the user with more relevant advertisements. The data processing is carried out for purposes of advertising, market research or in order to design the website in a needs-based manner (pursuant to § 15 para. (3) of the German Telemedia Act).
With the assistance of DoubleClick (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland), nugg.ad (nugg.ad AG predictive behavioral targeting, Rotherstr. 16,10245 Berlin), AdAudience GmbH (Schwanthalerstraße 99, 80336 Munich using the technology of ADITION technologies AG, Am Gatherhof 44, 40472 Düsseldorf) and Adobe – using the Products Target and Audience Manager (Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland) - data is collected and stored on our website in an anonymized form. When you visit our websites, a cookie will be stored on your device. Information about your activities on the websites you have visited will be collected (e.g., surfing behavior, searched subpages of the Internet offerings, advertising banners clicked, etc.). Based on these data, usage profiles are generated that cannot traced back to your personal information and hence used for personal identification.
Google AdWords User Lists
For this purpose we use the Google AdWords User Lists of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4. Ireland (“Google”). Our website uses a pixel supplied by Google that creates a direct link to the Google servers. Google servers are transmitted information that you have visited our website. Google tags this information with a distinctive ID, which is stored on your end device or terminal in the form of a cookie or is supplied by your end device or terminal (“Advertising-ID” for smartphones). If you visit other websites that also use “Google AdWords User Lists”, then such information will also be linked to your distinctive ID. We will be unable to see, however, what other websites you have visited.
You may at any time object to the use of “Google AdWords User Lists” on our website. To do so, please use the following link: Opt-Out “Google AdWords User Lists”.
We save on your respective end device an opt-out cookie that has an unlimited validity period. If you use our website with two or more end devices or terminals, then you must object to the use on each end device or terminal because we are unable to ascribe numerous end devices or terminals to individual visitors. If an objection is made, the respective described pixel or cookie will not be embedded and there will be no data exchanged with Google.
Moreover, you may deactivate personalized advertisements directly with the ad networks (Werbenetzwerken). You will find more information on this matter, for example, on the webpages of Google.
Doubleclick Ad Exchange
If Doubleclick Ad Exchange, a web advertising service of Google Inc., USA (“Google”), advertises on this website (text displays, banners, etc.), your browser could store a cookie sent by Google Inc. or a third party. The information stored in the cookie could be mapped, collected and analyzed by Google Inc. or a third party. In addition, Doubleclick Ad Exchange also uses so-called “web bacons” (small hidden graphics) to collect information, the use of which allows simple activities like visitor traffic on the websites to be tracked, collected and analyzed. The information generated by the cookie and/or web bacon regarding your use of those websites is transmitted to, and stored on, a Google server located in the United States. Google uses such collected information in order to perform an analysis of your user behavior with respect to the Doubleclick Ad Exchange displays. Google will in some cases also transmit such information to third parties, to the extent prescribed by law or to the extent third parties process such data on behalf of Google.
If IP addresses are transmitted and stored in this context, then such action is carried out only to fight and filter spam/fraud (ad impression spam and click bait/spam). Such data is only available for access by the Anti-Abuse Team. The IP address will not be comingled with any other data stored by Google.
You may prevent cookies from being stored on your hard drive and prevent web bacons from being displayed. For that , you simply need to select the option in your browser’s privacy settings , “Do not accept cookies” (in the German version of Internet Explorer, go to “Extras / Internetoptionen / Datenschutz / Einstellung”; in the German version of Firefox, go to “Extras / Einstellungen / Datenschutz / Cookies”).
For additional information, please go to the following website: https://policies.google.com/technologies/ads?hl=en
Our website uses the remarketing or “similar target groups” function of Google Inc. (“Google”). Using this function, visitors to the website can be targeted with advertising - exposed to personalized, interest-related advertising displays - if they had visited other websites in the Google Display Network. To carry out an analysis of the website use, which serves as the basis for generating the interest-related advertising, Google inserts so-called “cookies”. In this regard, Google stores a small file with a sequence of numbers in the browsers of the website visitors. Using this number, the visits to the websites and anonymized data about the use of the websites are recorded. No personal data of the website visitor is stored. If you thereafter visit another website within the Google Display Network, you will encounter certain advertising that will very likely reflect the products and information that you previously viewed.
Models, products and services – switch to your country / sales region website and discover the regional diversity of Audi.