Data Protection Declaration 

Information on Data Protection and our Privacy Policy.

This Data Protection Declaration pursuant to Art. 13 and 14 EU-GDPR serves as information on how your personal data is processed by Audi AG, Auto-Union-Strasse 1, 85045 Ingolstadt, Germany (hereinafter referred to as “we” or “us”) in connection with www.audiquattroskicup.com.

The website www.audiquattroskicup.com provides information on the Audi quattro Ski Cup and solely contains a description of the Audi quattro Ski Cup. It presents the Audi quattro Ski Cup and lists the applicable racing data. To sign up for a race, contact the respective importer at the destination.

Personal data refers to all information that relates to an identified or identifiable natural person. A natural person is deemed identifiable if he/she can be identified either directly or indirectly by an identifier such as a name, a reference number, location data, an online identifier or one or more special features that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. Processing is any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, querying, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.

1. Who is responsible for data processing and whom can I contact if I have questions?

 The controller responsible for the processing of your personal data is:

 AUDI AG Auto-Union-Strasse 1, 85045 Ingolstadt, Germany.

If you have any concerns related to data protection, you can also contact our company data protection officer:

AUDI AG, Datenschutzbeauftragter, Auto-Union-Strasse 1, 85045 Ingolstadt, Germany

E-mail: datenschutz@audi.de

 If you would like to assert your data protection rights, please contact us via

www.audi.de/betroffenenrechte

There you will find further information about how you can assert your data protection rights.

If you have any general questions about this data protection notice or about the processing of your personal data by Audi AG, please contact us using the following contact details:

Audi Kundenbetreuung Deutschland, Postfach 10 04 57, D-85045 Ingolstadt

E-mail: kundenbetreuung@audi.de

2. What data do we process and where does this data come from?

2.1 Access to the website

In principle, you can use the website to sign up without providing personal data. Registration for the event, however, requires that you provide your personal data (for more information, see subsection 2.2).

Every time you visit the website, your Internet browser automatically sends us specific information which we store in so-called log files.

Specifically, the following information will be sent automatically:

  • IP address (Internet protocol address) of the terminal being used to access the online offer
  • Internet address of the website from which the online offer was called up (the referrer URL)
  • Name of the service provider through which the online offering is being accessed
  • Name of the files or information accessed
  • Date, time and length of the visit
  • Volume of data transferred
  • Operating system and information about the Internet browser used, including any add-ons installed (i.e. for Flash Player)
  • http status code (i.e. “Request successful” or “Requested file not found”).

The above data is stored in the log files without your complete IP address, so that it is not possible to draw conclusions about your IP address.

2.2 Using the website / data provided by you

We process personal data we receive from you when you access our website (see subsection 2.1).

3. For which purposes do we process your data and on what legal basis?

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for various purposes:

The processing of your personal data must be supported by one of the following legal bases:

  • You have provided your consent (Art. 6, para. 1, sub-para. 1a) GDPR).
  • Processing is necessary for performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract (Art. 6, para. 1, sub-para. 1b) GDPR).
  • Processing is necessary for compliance with a legal obligation pursuant to EU law or the law of an EU member state to which we are subject (Art. 6, para. 1, sub-para. 1c) GDPR).
  • Processing is necessary to protect your vital interests or the vital interests of another person (Art. 6, para. 1, sub-para. 1d) GDPR).
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Art. 6, para. 1, sub-para. 1e) GDPR).
  • Processing is necessary to safeguard the legitimate interests of Audi AG or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child (Art. 6, para. 1, sub-para. 1f) GDPR).

If in exceptional cases we process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation) pertaining to you, one of the following legal bases must also be provided:

  • You have provided your express consent (Art. 9, para. 2a) GDPR);
  • Processing is necessary to protect your vital interests or the vital interests of another person and the data subject is physically or legally incapable of giving his/her consent (Art. 9, para. 2c) GDPR)
  • Processing relates to personal data which you have made publicly available (Art. 9, para. 2e) GDPR)
  • Processing is essential for the purpose of establishing, exercising or defending legal claims (Art. 9, para. 2f) GDPR)
  • Processing is necessary for reasons of substantial public interest, on the basis of EU law or the law of an EU member state which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9, para. 2g) GDPR)

Based on the foregoing, we process your personal data based on the following legal principles and for the following purposes:

Purpose

Legal basis

Legitimate interest when balancing interests

Provision of the website for the general public and to offer contact options to customers and interested parties 

Contract fulfilment or weighing of interests

We have a legitimate interest in providing an Internet presence, also to non-registered users, in order to provide general information about our company.

For the purpose of collecting statistical information about a website’s use (web analytics)

Balance of interests

We have a legitimate interest in obtaining information about the use of the website, particularly for the purpose of improving our offering.

To investigate faults and guarantee system security, including detection and tracking of unauthorised access attempts and access to our web servers

To comply with our legal obligations with respect to data security and balancing interests

We have a legitimate interest in rectifying faults, guaranteeing system security and detecting and tracking unauthorised access and access attempts.

Please note your rights of objection when processing data for the purpose of direct marketing or for personal reasons and your right to withdraw consent (see section “What rights do I have?” and section “Information about your right to object”).

4. Who receives my data?

Due to the amount and complexity of data processing undertaken by Audi AG, it is not possible to list every recipient of your personal data individually in this data protection notice. We therefore generally specify only categories of recipients.

Within AUDI AG, your data is made available to the units that require it within the framework of data processing (e.g. IT department).

Service providers (so-called processors) employed and commissioned by us which process data on our behalf also receive data for these purposes. We only use processors domiciled in the EU. Thus, for example, your IP address may be forwarded to a service provider so they can send you a newsletter you have ordered, for instance (not included in the range of functions offered by this website). Service providers may also be asked to make server capacities available. These include:

  • Hosting providers and support partners

Your personal data will generally only be given by us to third parties if this is necessary for the fulfilment of the contract, if we or the third party have a legitimate interest in the disclosure of the data or if you give your consent. In addition, data may be transmitted to third parties if we are required to do so on the basis of statutory provisions or an enforceable regulatory or judicial authority. The third parties to which we forward your personal data and which act as data protection officers include

  • Hosting providers and support partners for the purpose of maintaining and hosting the website

 5. Will my data be transmitted to a third country?

Data may be transmitted to third countries (i.e. countries that are not members of the European Union or the European Economic Area) in exceptional cases if doing so is required for the provision of services to you, if it is required by law or you have given us your consent.

Please note that not all third countries have a level of data protection recognised as adequate by the European Commission. If data is transmitted to third countries where the level of data protection is not adequate, we ensure that the recipient either has an adequate level of data protection (e.g. through self-certification by the recipient as part of the EU-US Privacy Shield, or the agreement of the European Union’s so-called EU standard contractual clauses with the recipient) or we have the express consent of our users. Please use the contact information provided above for this purpose.

You can obtain from us a copy of the specifically applicable or agreed rules ensuring an adequate level of data protection. Please see the contact information under the “Contact” section.

6. How long will my data be stored for?

We store your data for as long as this is necessary to provide our services to you or send you information about this year’s Audi quattro Ski Cup or we have a legitimate interest in continued storage. Concerning the data used for the purpose of providing the website, this is generally the case once the respective meeting has ended.

In addition, we are subject to various storage and documentation obligations, which are based on, among other things, the German Commercial Code (Handelsgesetzbuch, or HGB) and the German Fiscal Code (Abgabenordnung, or AO). These prescribe storage and documentation periods of up to ten years. The storage period is also determined on the basis of the statutory periods of limitation, which under, for example, Sec. 195 ff. of the German Civil Code (Bürgerliches Gesetzbuch, or BGB) can be up to 30 years, although the normal period of limitation is three years.

Under certain circumstances, your data must also be kept longer, e.g. if a Legal Hold or Litigation Hold (i.e. a ban on deleting data for the duration of the case) is ordered in connection with official or legal proceedings.

7. What rights do I have?

As a data subject, you have the following data protection rights:

Information:

You have the right to receive information about the data stored about you at Audi AG as well as the scope of the data that is processed and shared by Audi AG, and to obtain a copy of your personal data that we have on file. 

Correction:

You have the right to request immediate correction of information related to you that is incorrect as well as completion of incomplete personal data that Audi AG has on file for you.

Deletion:

You have the right to request immediate deletion of the personal data on file for you at Audi AG if the statutory requirements for doing so have been met.

This is the case in particular if

- your personal data are no longer needed for the purposes for which they were collected;

- your consent formed the sole legal basis for processing the data and you have revoked this consent;

- you object to processing for personal reasons on the legal basis of a weighing of interests and we cannot prove that there are overriding legitimate interests in favour of the processing;

- your personal data have been unlawfully processed; or

- your personal data must be deleted in order to comply with statutory requirements.

If we have disclosed your data to third parties, we will inform such third parties about the deletion if this is required by law.

Please note that your right to deletion is subject to restrictions. For example, we must not or may not delete any data that we are required to retain on the basis of statutory retention periods. Data that we need to assert, exercise or defend legal claims is also exempt from your right to deletion.

Restricted processing:

Under certain conditions, you have the right to request that the processing of your personal data is restricted (i.e. the designation of stored personal data with the aim of limiting future processing of it). These conditions are:

- The accuracy of the personal data is disputed and Audi AG must review the accuracy of the personal data;

- The processing is unlawful, but you do not want the personal data deleted and instead request that the use of the personal data be limited;

- Audi AG no longer needs your personal data for the purpose of processing, but you need the data to assert, exercise or defend legal claims.

- You have objected to the processing of your personal data, but it is still not clear whether the legitimate interests of Audi AG outweigh your interests.

If the processing is limited, your data will be designated accordingly and will – apart from being stored – only be processed with your consent or to assert, exercise or defend legal claims or to protect the rights of natural persons or legal entities or if the EU or an EU member state has an important public interest in doing so.

Data portability:

If we automatically process your personal data that you have provided to us on the basis of your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, commonly used and machine-readable format and to transmit this data to another controller without obstruction by Audi AG. You also have the right to request that the personal data be transmitted directly from Audi AG to another controller if this is technically feasible and provided that doing so does not affect the rights and freedoms of other persons.

Objection:

If we process your personal data on the basis of legitimate interests or in the public interest, you have the right to object to the processing of your data for personal reasons. You also have an unlimited right to object if we process your data for our direct advertising. Please see the separate information provided in the section “Information about your right to object”.

Revocation of consent:

If you have granted consent for the processing of your personal data, you can revoke this consent at any time. Note that such revocation applies only to future processing. Any processing carried out before the revocation is not affected.

Complaints:

You also have the right to lodge complaints with a data protection authority if you believe that your personal data was processed unlawfully. You have the right to lodge such a complaint irrespective of any other administrative or judicial remedies. The address of the relevant data protection authority for Audi AG is:

Bayerisches Landesamt fuer Datenschutzaufsicht

Promenade 27 (Schloss)

91522 Ansbach

Germany

 

7.1  Information about your right to object

Right to object for personal reasons

You have the right to object to the processing of your personal data for reasons arising from your particular situation. The prerequisite for this is that the data processing is carried out in the public interest or on the basis of a weighing of interests. This also applies for profiling.

If we process your personal data on the basis of a weighing up of interests, we generally assume that there are compelling legitimate reasons for doing so, but we will, of course, review each individual case.

If we receive an objection, we will no longer process your personal data, unless

  • we can demonstrate compelling legitimate reasons for processing these data that outweigh your interests, rights and freedoms or
  • Your personal data help us to assert, exercise or defend legal claims.

Object to the processing of your data for our direct advertising

If we process your personal data for direct advertising purposes, you have the right to object to the processing of your personal data for such purposes at any time; this also applies to profiling if the profiling is connected with such direct advertising.

If you object to the processing of your personal data for the purpose of direct advertising, we will no longer process your personal data for this purpose.

Object to the processing of your personal data to make product improvements and perform general customer analyses

In the balancing of interests, we grant you a separate right to object with regard to processing your personal data to make product improvements and perform general customer analyses.

If you object to processing for the purpose of product improvements and/or general customer analyses, we will no longer process any data pertaining to your person for these purposes. Purely statistical analyses of aggregated data or data anonymised in another manner shall not be affected by this.

Exercising the right to object

The objection does not require the use of a form; it should be sent to the address specified in this data protection notice.