Data Privacy Police
MQ! – The Mobility Quotient
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
1. Who is responsible for data processing and who can I contact?
The responsible authorities for the processing of your personal data are:
AUDI AG, Auto-Union-Straße 1, 85045 Ingolstadt, Germany. (“AUDI AG”)
Audi (China) Enterprise Management Co. Ltd., Beijing 100015, People’s Republic of China
Audi China is responsible under privacy law solely or jointly with AUDI AG within the meaning of Art. 4 no. 7 GDPR for the data processing described below.
If you have concerns about data privacy which are within the responsibility of the Audi China, you can also contact our company Data Protection Officer:
Audi (China) Enterprise Management Co. Ltd., 751 D. Park Building B, No. 4 Jiuxianqiao Road, Chaoyang District, Beijing 100015, P.R. China
If you have concerns about data privacy which are within the responsibility of AUDI AG you can also contact the Data Protection Officer of AUDI AG:
AUDI AG, Data Protection Officer, Auto-Union-Straße 1, 85045 Ingolstadt, Germany
Audi Customer Service Germany, PO Box 10 04 57, 85045 Ingolstadt, Germany
If you want to exercise your privacy rights against the Audi China, please use the contact options via
Audi (China) Enterprise Management Co. Ltd., Beijing 100015, People’s Republic of China, HR Department
2. Which data do We process and which sources does it come from?
2.1 Use of the Website
In principle, you can use the website for registration without providing any personal data. However, the registration for the event requires the provision of personal data (see 2.2).
Each time you use the Website, your Internet browser automatically transmits certain information and stores it in so-called log files.
In particular, the following information is transmitted automatically:
- IP address (Internet Protocol address) of the terminal from which the online offering is accessed;
- Internet address of the website from which the online offering was retrieved (so-called origin or referrer URL);
- Name of the service provider via which the online offering is accessed;
- name of the files or information retrieved;
- date, time, and duration of retrieval;
- volume of data transmitted;
- Operating system and information on the Internet browser used, including installed add-ons (e.g. for the Flash Player);
- http status code (e.g. “request successful” or “requested file not found”).
In the log files, the above data is stored without your complete IP address, so that no attribution to your IP address is possible.
2.2 Registration and participation
AUDI AG as the joint controller with Audi China process the data of a participant provided on the webpage for registration for the event and those personal data about you, which we collect during the event (e.g. [name, telephone number, email address, expertise/qualification, nationality).
This includes the following data:
In connection with the registration and with the conduct for the event:
Name, business and private contact (mobile phone, email, and poss. employee number), gender, title, service with a company, travel data. We process further personal data of users which they provide additionally, e.g. in blank spaces, e.g. number of ID or passport, eating habits.
3. For what purposes do we process your data and on which legal ground?
3.1 Use of the website
AUDI AG process your personal data based on the following legal grounds for the following purposes:
|Purpose||Legal grounds||Legitimate interest in the balancing of interests|
|Provision and performance of various Services and functionalities for registered users, e.g. provision of content or Audi Connect Services||Contract fulfilment|
|Provision of the Website for the general public and for the purpose of contact possibilities for customers and prospective customers||Contract fulfilment or balancing of interests||We have a legitimate interest in the provision of a website, including to unregistered users, in order to provide general information about our company.|
|Collection of statistical information on the use of the Website (so-called web analysis)||Balancing of interests||We have a legitimate interest in receiving information on the use of the Website, in particular to improve our offering.|
|Identification of disruptions and maintaining system security, including detection and tracking of inadmissible access attempts and access to our web servers||Fulfilment of our statutory obligations in the area of data security and balancing of interests||We have a legitimate interest in eliminating disruptions, maintaining system security, and detecting and tracking inadmissible access and access attempts.|
|Safeguarding and defending our rights||Balancing of interests||We have a legitimate interest in asserting and defending our rights.|
|Sending product and service information||Contract fulfilment or consent|
3.2 Registration and participation
AUDI AG as the joint controller with Audi China process your personal data for the purpose of login and registration at the event, booking and organisation of arrival and departure as well as overnight stays, mailing of travel details and invitations as well as for the conduct of the event.
As far as We process personal data of special categories (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation) one of the following has to apply additionally as a legal basis:
- You have given explicit consent (Art. 9 para. 2 letter a GDPR)
- processing is necessary to protect the vital interests of the data subject or of another natural person where the data subject is physically or legally incapable of giving consent (Art. 9 para. 2 letter c GDPR)
- processing relates to personal data which are manifestly made public by the data subject (Art. 9 para. 2 letter e GDPR)
- processing is necessary for the establishment, exercise or defence of legal claims or whenever courts are acting in their judicial capacity (Art. 9 para. 2 letter f GDPR)
- processing is necessary for reasons of substantial public interest, on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9 para. 2 letter f GDPR)
We always process your personal data only for a certain purpose and just as far as this is necessary for achieving this purpose.
3.3 Is there an obligation for me to provide data?
As part of registration and participation to the event you only need to provide data necessary for the registration and participation or data we have to collect by law. As far as you have to provide any personal data due to a statutory duty or contractual obligation, We will point this out to you by the time of the collection with reference to the particular obligation. If you won’t provide the particular data, some services may not be provided.
4. Who receives my data?
Within AUDI AG and Audi (China) Enterprise Management Co. Ltd. those entities receive your data that they need to fulfil our contractual and statutory obligations and to safeguard our legitimate interests (e.g. Audi Training in the Marketing and Sales Division, Sales Germany, IT).
Our service providers (so-called contract processors, specifically VOK DAMS.Events GmbH, Katernberger Str. 54, 42115 Wuppertal, Germany) that We utilize and engage may also receive data for these purposes. This includes:
- Management of participants
- Event agencies
- Hosting-providers and support-providers
Furthermore, your personal data will be transmitted to the following recipients or categories of recipients who act as controllers in terms of the GDPR:
- Project-based service providers (e.g. hotels, travel businesses, airlines, caterer, driving service, hostess lettershop, [please list any service providers]
- Authorities within their scope (e.g. finance authority, police, prosecution)
- Others, as far as you instruct us to share data or you consent.
As far as a participant needs a visa, we will share the personal data with the authorities in charge.
5. Is data transmitted to a third country?
A transfer of data to third countries (i.e. countries that are neither members of the European Union nor of the European Economic Area) may take place to the extent this is required for the provision of Services to you, is required by law, or you have given the relevant controller your consent. In addition, the controllers may also share your personal data with contract processors in third countries.
Please note that not all third countries have a level of data protection recognised as adequate by the European Commission. For data transfers to third countries where there is no adequate level of data protection, the controllers ensure that, prior to disclosure, the recipient has either an adequate level of data protection (e.g. by a self-certification of the recipient for the EU-US Privacy Shield or the agreement of EU standard contractual clauses of the European Union with the recipient), or they have obtained express consent from users.
You can obtain a copy from the relevant controller of the specific applicable or agreed rules to ensure the adequate level of data protection. Please use the information in the Contact section for this purpose.
6. How long will my data be stored?
We store your data for the duration of the event and beyond for the duration of the applicable statutory retention and documentation obligations (up to 10 years). Furthermore, the documentation obligations result from the statutory limitation periods (up to 30 years, regular period of limitation 3 years).
Under certain circumstances, your data may also need to be retained for a longer period of time, such as when a so-called legal hold or litigation hold (i.e. a prohibition of data deletion for the duration of the proceedings) is ordered in connection with administrative or judicial proceedings.
7. Which rights do I have?
As the data subject, you are generally entitled to the following data protection rights:
|Information:||You have the right to request information on the data stored concerning you at AUDI AG and the scope of data processing and data transfer performed by AUDI AG, and to obtain a copy of the personal data stored concerning you.|
|Rectification:||You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you as well as the completion of incomplete personal data stored concerning you at AUDI AG.|
|Erasure:||You have the right to obtain the erasure of the personal data concerning you stored at AUDI AG without undue delay if the statutory requirements are met.
This may be the case, in particular, if
If We have shared your data with third parties, We will inform them about the erasure, insofar as required by law.
Please note that your right to erasure is subject to restrictions. For example, We are no required or allowed to delete data that We are still obligated to retain due to statutory retention periods. Similarly, data that We need for the establishment, exercise or defence of legal claims are excluded from your right of erasure.
|Restriction of processing:||You have the right to obtain, under certain conditions, restriction of processing (i.e. the marking of stored personal data in order to restrict their future processing). The conditions are:
In the event of a restriction of the processing, such data will be marked accordingly and will be – except for their storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
|Data portability:||To the extent that We automatically process your personal data provided to us based on your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from AUDI AG. You also have the right to have the personal data transmitted directly from Audi AG to another controller where technically feasible and provided that this does not adversely affect the rights and freedoms of others.|
|Objection:||If We process your personal data on the basis of legitimate interests or in the public interest, you have the right to object to the processing of your personal data on grounds relating to your particular situation. In addition, you have an unrestricted right to object if We process your data for our direct marketing purposes. Please see our separate note in the “Information on your right to object” section.
In certain cases, We also grant you, beyond the privacy settings, an additional unlimited right to object within the scope of the balancing of interests. We will inform you about this in the “Special Information – Service” section.
|Withdrawal of consent:||If you have given consent to the processing of your personal data, you may withdraw it at any time. Please note that the withdrawal shall only be effective for the future. Processing that occurred before the withdrawal shall not be affected.|
|Complaint:||In addition, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data is unlawful. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The address of the data protection supervisory authority responsible for AUDI AG is:
Bavarian State Office for Data Protection Supervision
7.1 Information on your right to object
Right to object on grounds relating to your particular situation
You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balancing of interests. This also applies for any profiling.
Insofar as We base the processing of your personal data on a balancing of interests, we generally assume that compelling legitimate grounds can be demonstrated, but We will, of course, examine each individual case.
In the event of an objection, We will no longer process your personal data. Unless
- We can demonstrate compelling legitimate grounds for the processing of such data which override your interests, rights and freedoms or
- Your personal data are used for the establishment, exercise or defence of legal claims.
Objection to the processing of your data for our direct marketing purposes
Where We process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
If you object to the processing for direct marketing purposes, We will no longer process your personal data for such purposes.
Exercise of the right to object
7.2 Division of tasks in the context of joint responsibility
The table below shows which of the controllers assumes which obligations.
|Contact for data subjects||X||X|
|Obligations to provide information under Art. 13 GDPR where personal data is collected||X||X|
|Processing information requests from data subjects under von Art. 15 GDPR||X|
|Processing rectification requests from data subjects under Art. 16 GDPR||X|
|Processing requests for erasure or restriction of processing under Articles 17 and 18 GDPR||X|
|Handling requests for portability under Art. 20 GDPR||X|
|Processing objections under Art. 21 GDPR||X|
|Notification of personal data breaches under Articles 33 and 34 GDPR||X||X|
8. Special Information – cookies
On our website We use technologies making the usage easier and more user-friendly or provide additional functionality (thus making the website more user-friendly, effective and secure overall). Those technologies include e.g. cookies, pixel and scripts (hereinafter “cookies”).
Cookies are small files that are stored on the user’s computer when visiting a website and store various types of data, e.g. personal settings and login data. This data record is created by the web server you use for connection and is sent to you.
Please note that those browser settings always refer to the particular browser. If you use different browsers or devices you have to make the settings again. Moreover, you have the possibility to erase the cookies from your memory at any time. Please use the help feature of your web browser for information about the cookie settings, the adjustment and the erase of cookies.
|Indispensable cookies||Those cookies are indispensable for the function of the website. Without those cookies services like vehicle configurations would not function.|
|Functional cookies||Those cookies enable the website to save already made information (for example user name, configuration) and provide better, more personal features|
|Performance cookies||These cookies are used to improve the user-friendliness of our website and therefore the user experience. They collect information about the usage of our website, number of visits, average time to stay, loaded sites. Performance cookies help us to e.g. identify the elements of the internet offer which is used most and to advance the website according to your needs.|
We further use so called analysing cookies relating to web analysis (please see “user tracking” for more information).
Cookies can be permanent or temporary. So called permanent cookies are storing data for a particular period of time until the termination date of the cookie on your device (or until you delete it). With that e.g. language settings are saved, so you will not have to set that again for our website. A so called Session-Cookie stores the session-ID temporarily while you are active on the website. This ensures that you will not have to log in again, e.g. in case of changing the website. Session-Cookies are deleted by log out or they lose validity as soon as your session expires.
Cookies can also be used as third provider-cookies. Third provider cookies are set by other providers than the operator of the website. For example, they can be used for collecting information for advertisement, user based content and web statistics.
Below is a summary of the cookies We use to inform you of the purpose and nature of each cookie and its storage period.
|Purpose of cookie||Type of cookie||Name of application||Name of cookie||Storage duration|
9. Special Information – user tracking
An evaluation for the purpose of reporting takes place only after this anonymisation. As a rule, the information generated by these cookies is transmitted to an Adobe server within the European Union. However, it cannot be excluded that in the event of a technical emergency, this data will be transferred to and stored in the United States, so that a corresponding EU standard contract (reasonable guarantee for data processing in non-European countries) has been concluded. You have the right to be informed in the context of the information on this standard contract.