Two Audi TT together on the road Two Audi TT together on the road

Data Protection Notice Audi Genuine Accessories Catalogue

In this Data Protection Notice, we are informing you about the processing of your personal data by Audi AG, Auto-Union-Straße 1, 85045 Ingolstadt (“we”) in the context of the Audi Genuine Accessories Catalogue.

The Audi Genuine Accessories Catalogue contains information about original Audi accessories for your vehicle.

1. Who is responsible for data processing and whom can I contact?

The entity responsible for the processing of your personal data (the Controller) is:

AUDI AG, Auto-Union-Straße 1, 85045 Ingolstadt.

If you have concerns about data protection, you can also contact our company's data protection officer:

AUDI AG, Data Protection Officer, Auto-Union-Straße 1, 85045 Ingolstadt

Email: datenschutz@audi.de

If you want to assert your data protection rights, please use the contact options at

www.audi.de/betroffenenrechte

There, you will find more information on how to assert your data protection rights.

If you have general questions about this Data Protection Notice or the processing of your personal data by Audi AG, please address them to the following:

Audi Kundenbetreuung Deutschland, Postfach 10 04 57, 85045 Ingolstadt
Email: kundenbetreuung@audi.de

2. General Information

2.1 What data do we process and what sources do such data come from?

We process your personal data for various purposes and in compliance with the EU General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (“BDSG”). The specific purposes of the data processing are based primarily on the functions and services that you use.

2.1.1 Access to the Website

In general, you can access the website www.audi.com (“Website”) without providing personal data. Each time you access the website, your Internet browser automatically transmits certain information, which we store in so-called “log files”.
In particular, the following information are transmitted automatically:

  • IP address (Internet Protocol address) of the terminal from which the online service is accessed;
  • Internet address of the website from which the online service was accessed (the so-called “source URL” or “referrer URL”);
  • Name of the service provider used to access the online offer;
  • Name of the files or information retrieved;
  • Date and time as well as duration of the retrieval;
  • Transferred data volume;
  • Operating system and information about the Internet browser used, including installed add-ons (e.g., Flash Player);
  • http status code (for example, “request succeeded” or “requested file not found”).

In the log files, the above data is stored without your complete IP address, so that it is not possible to trace back to your IP address.

2.1.2 Data provided by you

You can add products to your wish list. To do so, you must first log-in to your own myAudi account, where you can add the desired products to your profile. You can Information about how your personal data is processed find in Privacy Notice on the myAudi portal.

2.1.3 Other Data

Information about data processing in connection with the use of cookies and user tracking as well data processing in connection with specific functions can be found in the relevant sections below.

2.2 For what purposes do we process your data and on which legal basis?

We process your personal data on the following legal bases for the following purposes:

Purpose Legal Basis Legitimate Interest in the Balancing of Interests
Providing the website for the general public and for the purpose of enabling contact by customers and interested parties Performance of the contract or balancing of interests We have a legitimate interest in providing an Internet presence (website), also to unregistered users, in an effort to provide general information about our company.
Collection of statistical information on the use of the website (so-called “web analysis”) Balancing of interests We have a legitimate interest in receiving information about the use of the website including, in particular, for purposes of improving our offerings.
Identification of disruptions and assurance of system security, including detection and tracking of unauthorized access attempts and access to our web servers Satisfaction of our legal obligations with respect to data security and balancing of interests We have a legitimate interest in receiving information about the use of the website, in particular to improve our services.
Protecting and defending our rights Balancing of interests We have a legitimate interest in asserting and defending our rights.

2.3 Who receives my data?

We deploy the services of the following categories of processors in order to support the provision of our business services:

  • Tracking service providers (see section on “Cookies and user tracking”)
  • Web agencies
  • Hosting providers

2.3.1 Third Parties

  • Log files are shared with investigative authorities on a case-by-case basis.

2.4 Are data transmitted to a third country?

There is no transfer of data to third countries (i.e., countries that are neither members of the European Union nor of the European Economic Area). Information about the data transmission in connection with the site’s user tracking can be found in the relevant section.

2.5 How long will my data be stored?

We store your data as long as necessary for providing our services to you or as long as we have a legitimate interest to do so, in particular to eliminate disruptions.

In addition, we are subject to various retention and documentation obligations pursuant to, inter alia, the German Commercial Code (Handelsgesetzbuch - “HGB”) and the Tax Code (Abgabenordnung - “AO”). The retention and documentation periods specified therein last up to ten years. Finally, the storage period is also governed by statute of limitations periods, which can be up to thirty years, for example, pursuant to sec. 195 et seq. of the German Civil Code (Bürgerliches Gesetzbuch - “BGB”), whereby the general limitations period is three years.

In certain circumstances, your data may also need to be retained for a longer period of time, such as when a legal hold or litigation hold (i.e., a prohibition of data deletion for the duration of the proceedings) is ordered in connection with an administrative or judicial proceeding.

2.6 Do I have a specific right to object?

In connection with user tracking, you may assert your right to object by technical means. In this connection, see the section “User tracking”.

2.7 What rights do I have?

As the data subject, you are generally entitled to the following data protection rights:

Access
You have the right of access to your personal data stored by Audi AG, be provided with information about to what extent your personal data will be processed or shared and to receive a copy of your stored personal data.


Rectification:
You have the right to obtain from Audi AG without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed.


Erasure:
You have the right to obtain erasure of your personal data stored by Audi AG without undue delay, when the legal requirements are met.

This is particularly the case if

  • your personal information is no longer needed for the purposes for which it was collected;
  • the legal basis for processing was your consent, and you have withdraw your consent;
  • you have objected to processing your data which was based on the legal basis of legitimate interests due to personal reasons, and we cannot prove that there are overriding legitimate grounds for such processing;
  • your personal data were processed unlawfully; or
  • your personal data must be erased in order to comply with legal requirements.
If we have transmitted your data to third parties, we will inform them about the erasure to the extent required by law.

Please note that your right to erasure is subject to certain limitations. For example, we may not and/or must not erase data that we are still required to retain due to statutory retention obligations. In addition, your right of erasure does not extend to data that we need in order to establish, exercise or defend against legal claims.


Restriction of Processing:
Under certain conditions, you have the right to obtain restriction of processing (i.e., the marking of stored personal data with the aim of limiting its processing in the future). The requirements are:

  • The accuracy of your personal data is contested by you and Audi AG must verify the accuracy of the personal data;
  • the processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
  • die Verarbeitung ist unrechtmäßig, Sie lehnen die Löschung der personenbezogenen Daten jedoch ab und verlangen stattdessen die Einschränkung der Nutzung der personenbezogenen Daten;
  • Audi AG no longer needs the personal data for the purposes of the processing, but you require the data to establish, exercise or defend your legal claims.
  • you have objected to processing pending the verification of whether the legitimate grounds of Audi AG override your legitimate grounds.
Where processing has been restricted, such data will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest the EU or an EU Member State.


Data Portability:
To the extent that we automatically process your personal data that you have provided to us based on your consent or any contract with you (including your employment contract), you have the right to receive such data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from Audi AG. You also have the right to have the personal data transmitted directly from Audi AG to another controller where technically feasible, provided that such transmission does not adversely affect the rights and freedoms of others.


Right to Object:
If we process your personal data on grounds of legitimate interests or in the public interest, then you have the right to object to the processing of your personal data on grounds relating to your particular situation. In addition, you have an unrestricted right to object if we process your data for our direct marketing purposes. Please see our separate note in the section titled “Information about your right to object”.

In certain situations, and in the context of a balancing of interests, we will also grant you an additional unrestricted right to object that goes beyond the privacy settings.


Withdrawal of Consent:
If you have given consent to the processing of your personal data, then you can withdraw such consent at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.


Complaint:
Furthermore, you have a right to file a complaint with a data protection authority (Datenschutzaufsichtsbehörde), if you believe that the processing of your personal data is unlawful. The right to file a complaint is without prejudice to any other administrative or judicial remedies. The address of the data protection authority responsible for Audi AG is:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 27 (Schloss)

91522 Ansbach

Germany


2.8 Information about Your Right to Object

Right to object for personal reasons

You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balancing of interests. This applies also to profiling.

Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can demonstrate compelling legitimate grounds but will, of course, examine each individual case.

In the event of an objection, we will no longer process your personal data, unless

  • we can demonstrate compelling legitimate grounds for the processing of these data that override your interests, rights and freedoms, or
  • your personal data serves the establishment, exercise or defence of legal claims.

Objection to the processing of your data for our direct marketing purposes

To the extent that we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, then we will no longer process your personal data for these purposes.

Exercise of the right to object

The objection may be lodged without any form and should be made to the contact details listed in this Data Protection Notice.

3. Special information - Cookies

For purposes of targeted advertising, we generate pseudonym user profiles (pursuant to § 15 para. (3) of the German Telemedia Act). To that end, the website uses so-called “cookies”. These are small files that are stored on the user’s computer when he or she visits the website. Cookies can store various types of data and help in providing additional functionality (thereby making the website generally more user-friendly, more effective and more secure). To the extent that cookies are used, they contain no personal data, unless you have provided your exclusive consent. Pseudonymization involves replacing the name and other identification features with an indicator, for the purpose of preventing or significantly complicating the identification of the data subject by a third party.

We use cookies as part of the configuration processes of the website so that you do not have to enter your personal data multiple times during a single visit to our website. These cookies are so-called “session cookies” which are erased automatically when the browser is closed.

Most browsers are configured in such way that cookies are automatically accepted. You may, at any time and with prospective effect, object to the use of cookies by adjusting the settings in your browser in a way that it no longer accepts any cookies or accepts only certain cookies or that you are informed as soon as any cookies are sent. As a consequence you will be unable to fully utilize all functions on our website. You can find more information in our Cookie Policy. In addition, we also use so-called “analysis cookies” as part of the web analysis (for information here, see also the section below “User Tracking”).

The table below presents an overview of the cookies that are used by us showing the purpose and nature of the respective cookie and about how long such a cookie is stored.

Name of the application Name of the cookie Type and purpose of the cookie Retention (storage) period
audi.com ADRUM Session Cookie wird von einer Java-Anwendung verwendet, um den Fluss durch eine Anwendung zu verwalten. Bis Beenden der Browsersitzung
audi.com AMCVS_...%40AdobeOrg Dieser Cookie wird verwendet, um einen eindeutigen Besucher zu identifizieren. Bis Beenden der Browsersitzung
audi.com AMCV_...%40AdobeOrg Dieser Cookie wird verwendet, um einen eindeutigen Besucher zu identifizieren. 2 Jahre
audi.com mbox Erfasst, welche Online-Inhalte und Angebote relevant für Website-Besucher sind. 90 Tage
audi.com s_cc Dieses Cookie dient dazu festzustellen, ob Cookies aktiviert wurden. Dieses Cookie ist ein Sitzungs-Cookie. Bis Beenden der Browsersitzung
audi.com s_fid Dieses Cookie wird zur Identifizierung eines eindeutigen Besuchers verwendet. 5 Jahre
audi.com s_sq Dieses Cookie enthält Informationen über den vorherigen Link, der vom Benutzer angeklickt wurde. Dieses Cookie ist ein Sitzungs-Cookie. Bis Beenden der Browsersitzung
audi.com myAudi SingleSignOn Session Cookie von myAudi Bis Beenden der Browsersitzung
audi.com SMSESSION SMSESSION-Cookie repräsentiert die Benutzersitzung Bis Beenden der Browsersitzung
audi.de SMSESSION SMSESSION-Cookie repräsentiert die Benutzersitzung Bis Beenden der Browsersitzung
audi.de myAudi SingleSignOn Session Cookie von myAudi Bis Beenden der Browsersitzung
audiag.tt.omtrdc.net mboxPC (Erforderlich) Die T & T-Profil-ID des Benutzers, der den übergebenen Segmentdaten zugeordnet ist. 2 Jahre
audiag.tt.omtrdc.net mboxSession Eine eindeutige ID für eine Benutzersitzung. 30 Minuten
demdex.net demdex Die demdex-ID und Ihre Organisations-ID sind die gemeinsamen Werte, die es dem ID-Dienst ermöglichen, die richtige Besucher-ID auszugeben, wenn Benutzer verschiedene Sites aufrufen. 190 Tage
doubleclick.net IDE Dieser Cookie dient zur Neuausrichtung, Optimierung, Berichterstellung und Attribution von Online-Anzeigen. 25 Tage
dpm.demdex.net dpm Dieser Cookie teilt internen Adobe-Systemen mit, dass ein Anruf vom Audience Manager oder vom ID-Dienst Kundendaten zur Synchronisierung weiterleitet oder eine ID anfordert. 180 Tage
everesttech.net everest_g_v2 Dieser Cookie weist Klicks auf andere Ereignisse auf der Website des Kunden zu und wird in der Domäne "everstech.net" festgelegt. 2 Jahre
everesttech.net everest_session_v2 Dies sind Werbe-Cookies, die dabei helfen, Werbung auf anderen Websites zu optimieren und Traffic für Bupa International zu generieren. Bis Beenden der Browsersitzung
pingdom.net __cfduid CloudFlare, dient zur Überwachung der Website-Leistung. 1 Jahr
shops.audi.com COOKIE_SUPPORT Liferay Cookie Support - Zeigt an, ob die Cookies unterstützt werden. 1 Jahr
shops.audi.com GUEST_LANGUAGE_ID Liferay Language - Zeigt ausgewählte Sprache an. 1 Jahr
shops.audi.com LBCOOKIE Audi Webcenter Loadbalancer Cookie, verteilt Anfragen auf unterschiedliche Server. Bis Beenden der Browsersitzung
shops.audi.com TS0143b342 Liferay Session Cookie Bis Beenden der Browsersitzung
shops.audi.com aswPortalID ASW Session Cookie Bis Beenden der Browsersitzung
shops.audi.com JSESSIONID JSESSIONID ist ein Cookie, der bei der Sitzungsidentifikation verwendet wird. Bis Beenden der Browsersitzung
shops.audi.com TS017a18c0 Liferay Session Cookie Bis Beenden der Browsersitzung
shops.audi.com TS0125d5d5 Liferay Session Cookie Bis Beenden der Browsersitzung
shops.audi.com psyma_participation_abshops Speichert Benutzerpräferenz bei der Teilnahme an der Psyma-Umfrage. 30 Tage
websso.audi.com JSESSIONID SESSIONID ist ein Cookie, der beim Sitzungsidentifikation verwendet wird. Bis Beenden der Browsersitzung
websso.audi.com JSESSIONID SESSIONID ist ein Cookie, der beim Sitzungsidentifikation verwendet wird. Bis Beenden der Browsersitzung

4. Special information - User Tracking and usage-based online advertising

Adobe Analytics
In order to keep the webpages updated, user-oriented and complete, this website relies on Adobe Analytics, Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Republic of Ireland (including Omniture Site Catalyst, Omniture Genesis, Omniture Discover, Omniture TagManager, Omniture SaintBernard), which is a web analysis tool that allows our services to be optimized and tailored to your needs. Adobe Analytics uses cookies that can track your preferences when visiting our pages. In this manner, for example, the navigation will be simplified, and we would be able to further improve the user-friendliness of our services. ). As a standard practice, the information generated thereby (including IP address) is rendered anonymous prior to storage in order to prevent any personal reference or connection.. To that end, this website was adjusted to guarantee an anonymized collection of IP addresses (so-called “IP masking”). A direct personal connection (tracing) to the information stored on the Adobe servers is precluded, as Adobe Analytics is used with the settings “Before Geo-Lookup: Replace visitor’s last IP octet with 0” and “Obfuscate IP-Removed”. The use of the setting “Before Geo-Lookup: Replace visitor’s last IP octet with 0” guarantees that by replacing the last octet of the IP address with a zero, the IP address will be anonymized prior to such so-called “geo-localization”. The approximate location of the user will be added for statistical purposes to the tracking package, which still contains the complete IP address. Prior to storing the tracking package, the IP address will be replaced by a fixed IP address – often referred to as a generic IP address – if the “Obfuscate IP –Removed” setting is configured. The IP address is thereby no longer contained in a stored data set.
An analysis for reporting purposes is carried out only after the data is rendered anonymous. As a rule, the information generated by these cookies will be transmitted to an Adobe server located within the European Union. Nevertheless, there is a risk that in the event of a technical emergency, the data will be transferred to the United States and stored there, meaning that a relevant EU standard contract (reasonable guarantee for data processing in non-European countries) was concluded. You have the right to be informed about such standard contract.

As a user of our webpages, you have the opportunity, of course, to refuse the acceptance of any cookies at any time by adjusting your browser settings. Most browsers generally allow cookies to be stored. If you adjust the setting, such change could result in some functional limitations in our offerings. You may at any time object to the acquisition of the data that are generated by the cookie and that relate to your use of the website – with prospective effect – for Adobe as well as the processing of such data by Adobe, by inserting an “OPT-OUT” cookie generated for that purpose. To do so, please use the “opt-out” button found at https://www.adobe.com/privacy/opt-out.html. Please note that your objection in the form of an opt-out cookie will function only if your browser is configured to allow the use of cookies. If you delete this cookie, use another browser or switch the device, then you once again need to reject the use of the Adobe Analytics. We would like to point out that upon deleting all of your cookies, the aforementioned cookie will also be deleted and would need to be reinstalled.

{Track:js}
In order to give you a secure and disruption-free access to our webpages, we use a tool known as “Track.js”. This tool allows us to continually analyse and improve the compatibility between our web content and your operating/browser version in the event that there are any disruptions (e.g., when there is a change in the model or version of our pages or there is a pattern of delayed loading of individual pages/content). In this regard, absolutely no personal data about you (and no IP address) will be collected, processed or used. For the analysis, only technical information from your browser (type and version) and your operating system (type and version) will be used with the then-current time stamp. To this end, the last conditions existing prior to a disruption will be transmitted to a cloud-based central server of Track.js and will be processed and used there for additional analysis. If you do not wish the collection of anonymous data relating your visit, then please click the following opt-out link. Opt-out

Psyma
When visiting our website, you may be selected from time to time to participate in an anonymous online survey for market research purposes. By actively clicking the link displayed to you, you will directly access the online questionnaire. . If you do not wish to participate in the survey, we insert an opt-out cookie on your client so that you are not selected again. During the ongoing survey, this cookie information will be used for approximately 30 days. Additional data protection or privacy notices for Psyma can be found at http://www.psyma.com/en/automotive/.
Follow the aforementioned link in order to insert an opt-out cookie. For your settings to take effect, Your browser must be configured to allow the use of cookies. If you delete or deactivate your cookies or if you use another browser, then you must readjust your settings.