Privacy Policy for the Development of ADAS
This privacy policy explains how SEAT, S.A. processes and uses your personal data to develop and enhance driver assistance and automated driving functions, as well as to provide additional services aimed at improving overall road safety. SEAT, S.A. is a Spanish manufacturer of certified commercial vehicles, operating under the SEAT and CUPRA trademarks. Hereinafter, SEAT, S.A. may be referred to as SEAT or CUPRA indistinctly.
1. Who is the Data Controller?
- SEAT, S.A.U. with NIF A-28049161 (SEAT / CUPRA)
- Address: Autovía A-2, Km. 585, Martorell (Barcelona, Spain)
- Contact: customercare@cupraofficial.com
2. What type of data do we process and what is its origin?
Our vehicles are equipped with cameras and sensors outside the vehicle, capable of collecting certain data and information from public roads in certain circumstances:
- Video and film recordings
- Image and photo recordings
- Audio recordings
- Location data: stationary location data (GPS position and the timestamp.)
Note that the identification of individual persons is not intended at any time and is not required for the purposes listed below. Persons, vehicles and other objects are only considered as “objects” in the context of traffic and environmental situations, e.g., “pedestrian at the right‑hand roadside”. Without your active contribution and provision of further data, we will not be able to attribute the data collected to a natural person.
3. For what purpose do we process your data and what is the legal basis?
The main purpose of data recording and processing is to develop and improve driver assistance and automated driving functions (ADAS functions, necessary for the approval of future vehicles, as well as those services and functions related to the vehicle, which may be suitable to increase general road safety. Data recording and processing take place in predefined traffic scenarios through events or campaigns specifically designed for this purpose, using sensors and image-capture technology. These “events” or traffic situations may involve safety-critical scenarios, such as emergency braking, or local conditions, such as poorly marked lanes or unusual traffic signs. Identifying critical road safety situations, along with developing and optimizing related systems and functions, is essential to the ongoing improvement of our vehicles’ driver assistance systems.
This data processing may involve individuals who are near the vehicle or directly engaged in a traffic situation that is critical to the safety of people. In such cases, our vehicles may capture an image of an individual at a specific moment. Nevertheless, we inform you that any images and data collected are anonymized through a pixelation process within a maximum of 48 hours. From this point on, any people, vehicles, or other objects in the surrounding area are treated as ‘anonymous objects’ within the context of traffic, such as ‘pedestrians on the right side of the road.’ We process this information solely to improve the software and ensure that any personal characteristics not essential to the development of the driving and road safety system are excluded, in compliance with applicable data protection regulations.
We will process your personal data in full compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. Specifically, the purposes and legal bases for the processing of your data are as follows:
Purpose | Data | Legal basis | Examples |
Data collection for the development of driver assistance and automated driving functions and services | Recordings (video/film, image/photo, audio), location data (stationary location data) | Art. 6(1)(f) GDPR – legitimate interests of SEAT/the third party on developing, testing, validation and release of safety relevant driver assistance systems for active and passive safety up to automated and autonomous driving systems that can improve overall road safety.
| Extracting recordings from the vehicle environment only in narrowly defined safety-critical situations (such as emergency braking or sudden evasive manoeuvres) for the sole purpose of developing and validating driver assistance and automated driving functions and services, thereby enhancing product integrity, vehicle performance, and overall road safety. |
Evaluation of recordings captured from real traffic situations | Recordings (video/film, image/photo, audio), location data (stationary location data) | Art. 6(1)(f) GDPR – processing based on legitimate interests to detect the vehicle environment, identify obstacles and road conditions, and recognise traffic participants, including their movement patterns, in order to determine the appropriate vehicle response. | Assessment of recordings from the vehicle environment, including the collection, processing, and secure storage of video, audio, and image data, for the purpose of enhancing driver assistance and information systems by improving the recognition of road users, traffic situations, and other relevant objects. |
Safeguarding and defending our rights and disclosure in the context of governmental/judicial measures | Recordings; location data | Art. 6(1)(c) GDPR - legal obligation under EU/member state law. Art. 6(1)(f) GDPR – legitimate interests of SEAT/the third party.
| Exercising and asserting rights and claims; disclosure for evidence collection; criminal prosecution and enforcement of civil claims |
Compliance with legal requirements / processing based on legal provisions | Recordings; location data | Art. 6(1)(c) GDPR - legal obligation under EU/member state law. | Handling data subject requests under the GDPR; handling reports of potential personal data breaches |
4. How is your data protected, and what are the retention periods?
Pixelated images will be retained for up to one year for the purposes outlined above, unless a longer retention period is required to comply with legal obligations. Extended retention may be required for quality assurance and error resolution Data will be deleted as soon as the purpose for which it was collected and processed no longer applies, and at the latest within the legally required timeframe.
5. Who are the recipients of your data?
In general, we inform you that we will not disclose your personal data to third parties except when required to comply with a legal obligation or in the specific cases detailed below:
As certified vehicle manufacturers, we are obliged, upon request from the competent authorities, to process and share certain data stored in your vehicle. Some of these obligations may arise from the investigation of criminal offenses, traffic accidents, second-hand sales control, and similar circumstances. Any disclosure of data to the authorities will always be covered by compliance with the corresponding applicable legal obligations (Art. 6.1(c) GDPR).
Furthermore, our company is part of the Volkswagen Group. In this regard, we inform you that we use data servers, IT service providers, and other suppliers and third parties contracted by the Volkswagen Group, which also provide maintenance and technical support for the IT systems in our vehicles. These third parties, as well as SEAT and Volkswagen suppliers, will always process personal data on our behalf and in accordance with our instructions.
Finally, under certain circumstances, SEAT may share your data with companies within the Volkswagen Group for the purpose of improving and innovating products related to your vehicle’s safety. These companies are: Volkswagen AG, Škoda Auto a.s., and Cariad SE.
6. Will your data be transferred outside the European Economic Area?
As a rule, your data will be processed within the EEA (European Economic Area), to which the GDPR applies without restriction. However, as a globally active company, we may, in exceptional cases, need to store and process data outside the EU. Please note that we will only transfer your personal data to third countries when permitted under the GDPR. Unless an adequacy decision has been made by the European Commission, we will only transfer your data to third countries if this is permissible under Art. 44 – 49 GDPR. To the extent that SEAT S.A. relies on appropriate safeguards in accordance with Article 46 para. 2 GDPR for the transfer to third countries (e.g. standard contractual clauses or binding corporate rules), we will take additional technical and/or organizational measures if this is necessary to maintain adequate protection of your data. The agreements with processors regularly provide for the conclusion of standard contractual clauses of the European Commission to ensure an adequate level of data protection.
7. What are your rights as a data subject?
Your rights as a data subject are set out below:
Right | Content |
Access | You have the right to request confirmation of whether we process your personal data and to access the personal data contained in our records |
Rectification | You have the right to correct inaccurate personal data and to complete any incomplete information. |
Suppression | You may request the erasure of your personal data when, among other reasons, it is no longer necessary for the purposes for which it was collected |
Opposition | You have the right to request that your personal data not be processed. Our organization will cease processing your data, except where there are compelling legitimate grounds or for the establishment, exercise, or defense of legal claims |
Limitation | You may request the restriction of processing of your personal data in the following circumstances: • While the accuracy of your data is being challenged; • When the processing is unlawful, you object to the deletion of your data, and request the limitation of its use; • When we do not need to process your data, but you need it for the exercise or defence of claims; • When you have objected to the processing of your data for the fulfilment of a mission in the public interest or for the satisfaction of a legitimate interest, while it is verified whether the legitimate grounds for the processing override yours. |
Portability | You may receive, in electronic form, the personal data you have provided to us and those obtained from your contractual relationship with us, as well as transmit them to another entity. |
8. How can you exercise your rights?
You can exercise these rights by submitting a written request to SEAT, S.A Autovía A-2 Km. 585, Martorell (Barcelona), Spain, or to the email address customercare@cupraofficial.com. The exercise of these rights is free of charge except in the case of manifestly unfounded or excessive requests. In the event that there is reasonable doubt about your identity, you may be asked for additional information necessary for us to confirm it and thus be able to respond to your right. In the event that you consider that we have not processed your personal data in accordance with the applicable regulations, you may file a complaint with the Spanish Data Protection Agency through the website www.aepd.es. or competent supervisory authority.
9. Data Protection Officer
If you have any questions about data protection or wish to contact our Data Protection Officer ("DPO"), you can contact them by emailing them at dataprotection@seat.es
10. Country-specific supplements
Please note that the data protection level of GDPR, as described above, displays the baseline requirements. If country-specific data subject rights apply or further information on processing or contact persons are required, you will find these in the following country-specific supplements.
Albania/Shqipëria: Besides, from the legal bases described in Part I the legal bases for processing personal data under Albania law is a consent given by the data subjects. The consent of the data subjects is given either by registering for the mobile online services, after they have confirmed that they have read and accepted the Privacy Policy, or by using the vehicle in knowledge of the data processing. In addition or rather supplementary to your rights listed above under B. VII. the following applies. You have the right to file a complaint regarding the processing of your personal data to the Information and Data Protection Commissioner (https://www.idp.al/?lang=en) as the competent data protection authority. Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.
Data controller representative in Albania:
Porsche Albania Sh.p.k
Autostrada Tirane-Durres
Km. 3, Tirane,1051
dataprotection@porsche.al
(Shqip) Përveç bazave ligjore të përshkruara në pjesën B, baza ligjore për përpunimin e të dhënave personale sipas ligjit shqiptar është pëlqimi i subjekteve të të dhënave. Pëlqimi i personave të prekur jepet ose duke u regjistruar për shërbimet celulare në internet pasi të kenë konfirmuar se e kanë lexuar dhe pranuar politikën e privatësisë ose duke përdorur automjetin me njohuri për përpunimin e të dhënave. Përveç bazave ligjore të përshkruara në pjesën B, baza ligjore për përpunimin e të dhënave personale sipas ligjit shqiptar është pëlqimi i subjekteve të të dhënave. Pëlqimi i personave të prekur jepet ose duke u regjistruar për shërbimet celulare në internet pasi të kenë konfirmuar se e kanë lexuar dhe pranuar politikën e privatësisë ose duke përdorur automjetin me njohuri për përpunimin e të dhënave. Përveç të drejtave tuaja të renditura më lart sipas VII., zbatohen sa më poshtë: Keni të drejtë të paraqisni një ankesë në lidhje me përpunimin e të dhënave tuaja personale pranë përgjegjësit për informacionin dhe mbrojtjen e të dhënave (https://www.idp.al/?lang=en) për t'iu dorëzuar autoritetit përgjegjës të mbrojtjes së të dhënave. Personat e kontaktit për ushtrimin e të drejtave tuaja: Nëse dëshironi të ushtroni të drejtat tuaja në lidhje me përpunimin e të dhënave tuaja personale, mund të na kontaktoni duke përdorur të dhënat e kontaktit të përmendura më sipër ose nëpërmjet personit të autorizuar të kontaktit lokal duke përdorur të dhënat e mëposhtme.
Përfaqësuesi i palës përgjegjëse në Shqipëri:
Porsche Albania Sh.p.k
Autostrada Tirane-Durres
Km. 3, Tirane,1051
dataprotection@porsche.al
Andorra: In addition or rather supplementary to your rights listed above under B. VII. the following applies You have the right to file a complaint regarding the processing of your personal data at the Andorran Data Protection Agency (https://www.apda.ad). (Català) A més dels drets esmentats anteriorment a l’apartat B. VII., s’aplica el següent: Teniu dret a presentar una reclamació davant l’Agència Andorrana de Protecció de Dades (https://www.apda.ad) en relació amb el tractament de les vostres dades personals. (Español) De manera adicional o complementaria a sus derechos anteriormente indicados en el punto VII., es aplicable lo siguiente: Tiene derecho a presentar una reclamación sobre el tratamiento de sus datos personales ante la autoridad andorrana de protección de datos (https://www.apda.ad).
Belgium/Belgien/Belgique/België: We are legally obliged to publish mileages (km) of networked vehicles at regular intervals (usually once every quarter) on request from Car-Pass vzw. The data is retained by Car-Pass vzw in a “Car-Pass” so that relevant information about a vehicle can be provided to potential purchasers when buying and selling used cars. Personal data processed: Vehicle identification number (VIN), mileage (km), time of data collection in the vehicle Legal basis: Article 6 para. 1 lit. c) GDPR in conjunction with Art. 6 Act of 11 June 2004 and Article 3/1, § 2 Royal Decree of 26 August 2006 Recipients: Car-Pass vzw, Woluwedal 46/2, 1200 BRUSSELS, BELGIUM; D’Ieteren Automotive SA /NV, Leuvensesteenweg 639, 3071 KORTENBERG, BELGIUM; CARIAD SE, Berliner Ring 2, 38440 WOLFSBURG, GERMANY; Audi AG, Auto-Union-Straße 1, 85057 INGOLSTADT, GERMANY (all recipients with the exception of Car-Pass vzw process data solely on our behalf and in accordance with our instructions). (Deutsch) Wir sind gesetzlich verpflichtet, auf Anfrage von Car-Pass vzw in regelmäßigen Abständen (in der Regel einmal pro Quartal) Kilometerstände (km) von vernetzten Fahrzeugen zu veröffentlichen. Die Daten werden von Car-Pass vzw in einem "Car-Pass" gespeichert, damit potenziellen Käufern beim Kauf und Verkauf von Gebrauchtwagen relevante Informationen zu einem Fahrzeug zur Verfügung gestellt werden können. Verarbeitete personenbezogene Daten: Fahrzeugidentifikationsnummer (FIN), Kilometerstand (km), Zeitpunkt der Datenerfassung im Fahrzeug. Rechtsgrundlage: Art. 6 Abs. 1 lit. c) DSGVO i.V.m. Art. 6 des Gesetzes vom 11. Juni 2004 und Art. 3/1 Abs. 2 Königlicher Erlass vom 26. August 2006. Empfänger: Car-Pass vzw, Woluwedal 46/2, 1200 BRÜSSEL, BELGIEN; D'Ieteren Automotive SA /NV, Leuvensesteenweg 639, 3071 KORTENBERG, BELGIEN; CARIAD SE, Berliner Ring 2, 38440 WOLFSBURG, DEUTSCHLAND; Audi AG, Auto-Union-Straße 1, 85057 INGOLSTADT, DEUTSCHLAND (alle Empfänger mit Ausnahme von Car-Pass vzw verarbeiten ihre Daten ausschließlich in unserem Auftrag und nach unseren Weisungen). (Français) Nous sommes tenus légalement, à la demande de Car-Pass vzw, de transmettre à intervalles réguliers (généralement une fois par trimestre) les relevés kilométriques (km) des véhicules connectés. Les données sont enregistrées par Car-Pass vzw dans un « Car-Pass » afin de fournir aux potentiels acheteurs des informations pertinentes sur un véhicule lors de l'achat ou de la vente d'un véhicule d'occasion. Données personnelles traitées : numéro d'identification du véhicule (VIN), kilométrage (km), date de collecte des données dans le véhicule. Base juridique : article 6 paragraphe 1 point c) du RGPD en lien avec l'article 6 de la loi du 11 juin 2004 et l'article 3/1 paragraphe 2 de l'arrêté royal du 26 août 2006. Destinataires : Car-Pass vzw, Woluwedal 46/2, 1200 BRUXELLES, BELGIQUE ; D'Ieteren Automotive SA /NV, Leuvensesteenweg 639, 3071 KORTENBERG, BELGIQUE ; CARIAD SE, Berliner Ring 2, 38440 WOLFSBURG, ALLEMAGNE ; Audi AG, Auto-Union-Straße 1, 85057 INGOLSTADT, ALLEMAGNE (tous les destinataires, à l'exception de Car-Pass vzw, traitent vos données exclusivement pour notre compte et selon nos instructions). (Nederlands) Wij zijn wettelijk verplicht om op verzoek van Car-Pass vzw periodiek (meestal één keer per kwartaal) de kilometerstanden (km) van de verbonden voertuigen openbaar te maken. De gegevens worden door Car-Pass vzw opgeslagen in een "Car-Pass" zodat potentiële kopers bij de aan- en verkoop van een tweedehandswagen relevante informatie over een voertuig kunnen ontvangen. Verwerkte persoonsgegevens: voertuigidentificatienummer (VIN), kilometerstand (km), tijdstip van dataregistratie in het voertuig. Wettelijke grondslag: artikel 6 lid 1c van de AVG in combinatie met artikel 6 van de wet van 11 juni 2004 en artikel 3/1 lid 2 van het Koninklijk Besluit van 26 augustus 2006.Ontvangers: Car-Pass vzw, Woluwedal 46/2, 1200 BRUSSEL, BELGIË; D'Ieteren Automotive SA/NV, Leuvensesteenweg 639, 3071 KORTENBERG, BELGIË; CARIAD SE, Berliner Ring 2, 38440 WOLFSBURG, DUITSLAND; Audi AG, Auto-Union-Straße 1, 85057 INGOLSTADT, DUITSLAND (alle ontvangers met uitzondering van Car-Pass vzw verwerken hun gegevens uitsluitend in onze opdracht en volgens onze instructies).
Bosnia and Herzegovina/Босна и Херцеговина: In deviation from the legal bases described in Part B the legal bases for processing personal data under the law of Bosnia and Herzegovina is a consent given by the data subjects. The consent of the data subjects is given either by registering for the mobile online services, after they have confirmed that they have read and accepted the Privacy Policy, or by using the vehicle in knowledge of the data processing.Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.
PORSCHE BOSNA I HERCEGOVINA
Porsche BH d.o.o. Sarajevo
Porsche Inter Auto BH d.o.o. Sarajevo
BIH-71000 SARAJEVO | Bulevar Meše Selimovića 16
Bosnia and Herzigovina
zastita.podataka@porschebh.ba
(Босански) Одступајући од правних основа описаних у дијелу Б, правна основа за обраду личних података према законодавству Босне и Херцеговине је сагласност лица чији се подаци обрађују. Лица чији се подаци обрађују сагласност дају или регистрацијом за мобилне онлајн услуге након што потврде да су прочитала и прихватила изјаву о заштити података или кориштењем возила знајући за обраду података. Особа за контакт за остваривање ваших права: Ако желите остварити своја права у погледу обраде ваших личних података, можете нас контактирати кориштењем горе наведених података за контакт или преко овлаштене локалне особе за контакт кориштењем података за контакт наведених у наставку.
PORSCHE BOSNA I HERCEGOVINA
Porsche BH d.o.o. Sarajevo
Porsche Inter Auto BH d.o.o. Sarajevo
BIH-71000 SARAJEVO | Bulevar Meše Selimovića 16
Bosna i Hercegovina
zastita.podataka@porschebh.ba
Faroe Islands/Færøerne/Føroyar: In addition or rather supplementary to your rights listed above under B. VII. the following applies.You have the right to file a complaint regarding the processing of your personal data at the Data Protection Authority in the Faroe Islands, Dátueftirlitið. You can find the Data Protection Authority’s contact information here: www.dat.fo. (Danskt) Yderligere, eller som supplement til dine rettigheder anført under punkt B. VII., gælder følgende: Du har ret til at indgive en klage over behandlingen af dine personoplysninger til datatilsynsmyndigheden på Færøerne, Dátueftirlitið. Datatilsynsmyndighedens kontaktoplysninger kan findes her: www.dat.fo. (Føroyskt) Harumframt, ella sum ískoyti til tíni rættindi nevnd undir punkt VII, er fylgjandi galdandi: Tú hevur rætt til at kæra til Dátueftirlitið um viðgerðina av tínum persónupplýsingum. Kontaktupplýsingarnir hjá Dátueftirlitinum eru at finna her: www.dat.fo
France: To the extent the access to the data and the data processing fall within the scope of the data protection laws of France, you also have the right to define directives concerning the fate of your personal data after your death (post-mortem right). (Français) Dans la mesure où l'accès aux données et leur traitement relèvent du champ d'application de la législation française sur la protection des données, vous avez également le droit de définir les directives concernant le sort de vos données personnelles après votre décès (droit post-mortem).
Liechtenstein: To the extent the access to the data and the data processing fall within the scope of the data protection laws of Liechtenstein, references to the European Union (EU) are to be interpreted as references to the European Economic Area (EEA). (Deutsch) Soweit der Zugang zu den Daten und die Datenverarbeitung in den Anwendungsbereich des liechtensteinischen Datenschutzrechts fallen, sind Verweise auf die Europäische Union (EU) als Verweise auf den Europäischen Wirtschaftsraum (EWR) zu verstehen.
Monaco: In addition or rather supplementary to your rights listed above under B. VII. the following applies. You have the right to file a complaint regarding the processing of your personal data at the Commission de Contrôle des Informations Nominatives (CCIN), located at 11 rue du Gabian, 98000 Monaco. (Français) En complément de vos droits mentionnés ci-dessus au point B. VII., vous avez le droit d'introduire une réclamation concernant le traitement de vos données personnelles auprès de la Commission de Contrôle des Informations Nominatives (CCIN) située 11 rue du Gabian, 98000 Monaco.
Montenegro/Crna Gora: Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below.
Porsche Leasing doo
Member of Porsche Bank Group
Josipa Broza Tita 67
81000 Podgorica, Montenegro
info@porscheleasing.me
(Crnogorski) Osoba za kontakt za ostvarivanje vaših prava: Ako želite da ostvarite svoja prava u kontekstu obrade svojih ličnih podataka, možete nas kontaktirati koristeći gore navedene podatke za kontakt ili preko ovlašćene osobe za kontakt na licu mesta koristeći podatke za kontakt navedene u nastavku:
Porsche Leasing doo
Member of Porsche Bank Group
Josipa Broza Tita 67
81000 Podgorica, Montenegro
info@porscheleasing.me
North Macedonia/Maqedonia e Veriut/Северна Македонија: In addition or rather supplementary to your rights listed above under B. VII. the following applies. You have the right to file a complaint regarding the processing of your personal data at the Agency for Personal Data Protection of North Macedonia (https://azlp.mk/). Contact person for exercising your rights: If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below:
Porsche Macedonia DOOEL, Skopje
Blvd. Bosnia and Herzegovina 4
1000 Skopje
North Macedonia
Email: dataprivacy@volkswagen.de
(Maqedonisht) Përveç të drejtave tuaja të renditura më lart sipas VII., vlen sa më poshtë: Keni të drejtë të paraqisni një ankesë në lidhje me përpunimin e të dhënave tuaja personale pranë Agjencisë për Mbrojtjen e të Dhënave Personale të Maqedonisë së Veriut (https://azlp.mk/). Personat e kontaktit për ushtrimin e të drejtave tuaja: Nëse dëshironi të ushtroni të drejtat tuaja në lidhje me përpunimin e të dhënave tuaja personale, mund të na kontaktoni duke përdorur të dhënat e kontaktit të përmendura më sipër ose nëpërmjet personit të autorizuar të kontaktit lokal duke përdorur të dhënat e mëposhtme:
Porsche Macedonia DOOEL, Skopje
Blvd. Bosnia and Herzegovina 4
1000 Skopje
North Macedonia
Email: dataprivacy@volkswagen.de
(Македонски) Дополнително и покрај вашите права наведени погоре под VII., важи следново: Имате право да поднесете жалба во врска со обработката на вашите лични податоци до „Агенцијата за заштита на личните податоци на Северна Македонија” (https://azlp.mk/). Лице за контакт за остварување на вашите права: Ако сакате да ги остварите вашите права во врска со обработката на вашите лични податоци, може да нè контактирате преку горенаведените податоци за контакт, или преку овластено локално лице за контакт користејќи ги податоците за контакт наведени во продолжение:
Porsche Macedonia DOOEL, Skopje
Blvd. Bosnia and Herzegovina 4
1000 Skopje
North Macedonia
E-пошта: dataprivacy@volkswagen.de
San Marino In addition or rather supplementary to your rights listed above under B. VII. the following applies. To the extent the access to the data and the data processing fall within the scope of the data protection laws of San Marino, pursuant to Article 13(1)(f) of Law n. 171 of 2018, we specify that, considering the data controller’s intention to transfer personal data to third countries or international organizations, the following means by which to obtain a copy of them or information on where they have been made available are provided: You can contact us for exercising your rights, including the right to access your data and to obtain a copy of them, via the contact details provided above. The EU standard contractual clauses used can be accessed in EU languages at https://eur-lex.europa.eu/legal-content/it/TXT/?uri=CELEX%3A32021D0914. You have the right to file a complaint regarding the processing of your personal data at at the Data Protection Authority of San Marino (https://www.garanteprivacy.sm/).
(Italiano) In aggiunta o a integrazione dei diritti riportati precedentemente in sezione VII. vale quanto segue: Qualora l’accesso ai dati e il trattamento dei dati ricadano nell’ambito di applicazione delle leggi sulla protezione dei dati di San Marino, si precisa in base all’articolo 13 paragrafo 1 lettera f della legge n. 171 del 2018 che, in considerazione dell'intenzione del titolare del trattamento di trasferire i dati personali a Paesi terzi o a organizzazioni internazionali, saranno forniti i seguenti mezzi per ottenere una copia dei dati o informazioni su dove sono stati messi a disposizione: Per esercitare i Suoi diritti, compreso il diritto di accesso ai Suoi dati e di ottenerne una copia, può rivolgersi a noi mediante i dati di contatto forniti. Le clausole contrattuali tipo dell’UE sono disponibili nelle lingue dell’UE al seguente link https://eur-lex.europa.eu/legal-content/it/TXT/?uri=CELEX%3A32021D0914. Sussiste il diritto di presentare un reclamo sul trattamento dei dati personali presso l’autorità di protezione dei dati di San marino (https://www.garanteprivacy.sm/).
Serbia/Srbija: In addition or rather supplementary to your rights listed above under B. VII. the following applies.You have the right to be informed about appropriate safeguards in case of a data transfer to countries or international organizations outside Serbia that do not provide an adequate level of data protection recognized by a Serbian Government Decision. All EU / EEA Member states provide an adequate level of data protection recognized by a Serbian Government Decision.You have the right to file a complaint regarding the processing of your personal data at the Commissioner for Information of Public Importance and Personal Data Protection (https://www.poverenik.rs/sr-yu/kontakt.html), as the supervisory authority for personal data protection in the Republic of Serbia. Contact person for exercising your rights:
If you wish to exercise your rights in relation to the processing of your personal data, you can contact us using the contact details above or via the authorized local contact person using the contact details below:PORSCHE SCG DOO BEOGRAD
Zrenjaninski put 11
11210 Beograd
Serbia
Email: zastita.podataka@porschescg.rs
(Srpski) Dodatno odn. kao dopuna vaših prava navedenih prethodno pod VII. važi sledeće: Imate pravo da budete informisani o adekvatnim garancijama u slučaju prenosa podataka u zemlje ili međunarodne organizacije van Srbije koje ne nude adekvatan nivo zaštite podataka priznat odlukom Vlade Srbije. Sve zemlje članice EU/EEP nude adekvatan nivo zaštite podataka priznat odlukom Vlade Srbije. Imate pravo da na obradu svojih podataka o ličnosti podnesete žalbu kod Poverenika za informacije od javnog značaja i zaštitu podataka o ličnosti (https://www.poverenik.rs/sr-yu/kontakt.html), kao nadzornom organu za zaštitu podataka o ličnosti u Republici Srbiji. Osoba za kontakt za ostvarivanje vaših prava: Ako želite da ostvarite svoja prava u kontekstu obrade svojih podataka o ličnosti, možete nas kontaktirati koristeći gore navedene podatke za kontakt ili preko ovlašćene osobe za kontakt na licu mesta koristeći podatke za kontakt navedene u nastavku:
PORSCHE SCG DOO BEOGRAD
Zrenjaninski put 11
11210 Beograd
Serbia
E-pošta: zastita.podataka@porschescg.rs
- Spain/España: To the extent that access to and processing of data falls within the scope of Spanish data protection law, please note that your personal data will be deleted after the statutory retention period has expired if the legal basis for processing your personal data no longer applies (in particular if you withdraw your consent), if the processing of your personal data is no longer necessary for the respective purpose or if the purpose itself no longer applies. (Español) En la medida en que el acceso a los datos y su tratamiento entren en el ámbito de aplicación de la legislación española de protección de datos, tenga en cuenta que sus datos personales se eliminarán una vez transcurrido el plazo de conservación legal, si se anula la base jurídica para el tratamiento de sus datos personales (en particular, si retira su consentimiento), si el tratamiento de sus datos personales ya no es necesario para la finalidad correspondiente o si desaparece la finalidad en sí.
- Switzerland/Schweiz/Suisse/Svizzera: To the extent data processing falls within the scope of the Swiss Federal Act on Data Protection (FADP), (a) the scope of "personal data" shall be determined in accordance with the FADP, and (b) references to the GDPR shall be understood as references to the FADP. In addition or rather supplementary to your rights listed above under B. VII. the following applies. You have the right to file a complaint regarding the processing of your personal data at the Swiss Federal Data Protection and Information Commissioner (FDPIC https://www.edoeb.admin.ch/edoeb/en/home.html. (Deutsch) Soweit die Datenbearbeitung in den Anwendungsbereich des Schweizerischen Bundesgesetzes über den Datenschutz (DSG) fällt, wird (a) der Umfang der „personenbezogenen Daten“ nach dem DSG bestimmt und (b) Verweise auf die DSGVO sind als Verweise auf das DSG zu verstehen. Zusätzlich bzw. ergänzend zu Ihren oben unter B. VII. aufgeführten Rechten gilt Folgendes: Sie haben das Recht, eine Beschwerde über die Verarbeitung Ihrer personenbezogenen Daten beim Eidgenössischen Datenschutz- und Öffentlichkeitsbeauftragten (EDÖB) einzureichen https://www.edoeb.admin.ch/edoeb/en/home.html. (Français) Dans la mesure où le traitement des données relève du champ d'application de la loi fédérale suisse sur la protection des données (LPD), (a) la notion de « données personnelles » est définie selon la LPD, et (b) les références au RGPD doivent être comprises comme des références à la LPD. En complément de vos droits mentionnés ci-dessus au point VII., vous avez le droit d'introduire une réclamation concernant le traitement de vos données personnelles auprès du Préposé fédéral à la protection des données et à la transparence (PFPDT). https://www.edoeb.admin.ch/edoeb/en/home.html. (Italiano) Nella misura in cui il trattamento dei dati rientra nell'ambito di applicazione della Legge federale sulla protezione dei dati (FADP), (a) l'ambito dei “dati personali” è determinato in conformità alla FADP e (b) i riferimenti al RGPD devono essere intesi come riferimenti alla FADP. In aggiunta o a integrazione dei diritti riportati precedentemente in sezione VII. vale quanto segue: Sussiste il diritto di presentare un reclamo sul trattamento dei dati personali presso l’Incaricato federale della protezione dei dati e della trasparenza (IFPDT) https://www.edoeb.admin.ch/edoeb/en/home.html
Last update: November 2025
