A. Data controller
We are pleased about your visit on a website of Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, vw@volkswagen.de, registered in the Register of Companies of the Brunswick District Court under No. HRB 100484 (‘Volkswagen AG’). In the following we inform you about the processing of your personal data by Volkswagen AG in connection with your visit to the website.
B. Processing of your personal data
I. Processing of log files
When you visit our website, we process the following log files from you, which do not allow any inference to your person:
- the operating system you are using, the web browser you are using and the screen resolution you have set, and
- date and time of your visit.
The legal basis for processing this personal data is our legitimate interest of being able to provide the website properly (Article 6 paragraph 1 letter f GDPR). This personal data is only being processed as long as you access our website.
II. Enrollment process for using the open configurator API (further mentioned as “OKAPI”)
In order to use the OKAPI service from Volkswagen AG, a representative person of an interested
company must sent an E-Mail with his name to
sasd@volkswagen.de
to request for application credentials (Client ID and Client Secret). The name and E-Mail will
be stored in order to link an application ID to an company / customer and to provide
credentials via E-Mail.
The data processing is based on a contractual relationship (Article 6 paragraph 1 letter b GDPR).
The personal data will be stored inside an encrypted Amazon web services cloud storage.
Data processor is Amazon. The data will be deleted as soon as the Application ID is invalid.
In order to maintain OKAPI, the number of requests and the intensity will be tracked by
application ID. No personal data will be used in this process.
C. Your Rights
You may assert the following rights vis-à-vis Volkswagen AG at any time free of charge. Additional information on exercising your rights can be found under Section F.
Right to information:
You have the right to obtain information from us regarding the processing of your personal data (Article 15 GDPR).
Right of rectification:
You have the right to request that we rectify any of your personal data that is incorrect or incomplete (Article 16 GDPR).
Right to erasure:
You have the right, in the event that the requirements specified in Article 17 of the GDPR have been met, to demand the deletion of your data. Accordingly, you may request the deletion of your data, for instance, if it is no longer necessary for the purposes for which it was collected. Furthermore, you may request deletion if we process your data on the basis of your consent and you revoke this consent.
Right to restriction of processing:
You have the right to request the restriction of the processing of your personal data if the requirements specified under Article 18 of the GDPR have been met. This is the case, for example, if you dispute the accuracy of your data. You may request that processing is restricted for as long as it takes to examine the correctness of your data.
Right to object:
If the processing is based on a predominantly legitimate interest, you have the right to object to the processing of your data. In the event of objection, we ask you to inform us of the reasons for which you object to data processing. In addition, you have the right to object to data processing for direct marketing purposes. This also applies to profiling in so far as it is related to direct marketing.
Right to data portability:
If data processing is based on consent or contract fulfilment and is also based on the use of automated processing, you have the right to receive your data in a structured, standard and machine-readable format and to transmit it to another data processor.
Right of revocation:
Insofar as the data processing is undertaken based upon consent, you have the right to revoke your consent for the data processing, with future effect at any time, free of charge.
Right to lodge a complaint:
You also have the right to lodge a complaint with a supervisory authority (e.g.: with the State Data Protection Officer for Lower Saxony) regarding our processing of your data.
D. Your points of contact
Points of contact for the exercise of your rights
For information on your points of contact for the exercise of your rights and for further information, please visit the following website https://datenschutz.volkswagen.de.
Data protection officer
Our data protection officer is your point of contact for issues related to data protection:
Volkswagen AG Data Protection Officer
Berliner Ring 2, 38440 Wolfsburg, Germany
datenschutz@volkswagen.de
Version dated: January 2020