Data Privacy Policy

When you use this website and the FS ID service (hereinafter "FS ID"), your personal data will be processed by Volkswagen Financial Services AG (hereinafter "controller") and stored for the period required to fulfil the specified purposes and legal obligations. In the following, you will be informed about what data is involved, how it is processed and what rights you are entitled to in this regard, in particular with regard to the General Data Protection Regulation (EU) 2016/679 (GDPR). Data labelled as mandatory information is either required by law or contract or is necessary for the conclusion of the contract. Failure to provide the requested data may have legal or economic disadvantages for you. For example, you may not be able to continue with your application process.

1. General information on data processing

The controller processes your data from this business relationship (e.g. from the application and contract processing) as well as the data collected in the course of using the website (hereinafter: "your data"). Your data is shared with processors and other contractors (e.g. from the following sectors) for the purpose of checking applications, creating transactions, processing contracts, providing customer advice and analyses and providing the controller's website and services: Logistics, telecommunications, receivables management, marketing, printing, market and opinion research). In addition, the data controller exchanges your data with the companies of the Volkswagen Financial Services Group (e.g. companies from the sectors: Banking, leasing, insurance, mobility and fuel/service cards - hereinafter: "VW Financial Services Group"). There is also an exchange with public authorities, publicly accessible sources and, if applicable, with insurers, credit institutions, payment service providers and co-operation partners. The processing and exchange of your data takes place in particular if

-this is necessary for the fulfilment of a contract that you have concluded or for the implementation of pre-contractual measures that take place at your request (Art. 6 para. 1 sentence 1 lit. b GDPR). Data processing is necessary in particular to ensure the completeness and accuracy of the data and its digitisation, to execute the contract or its initiation if necessary and to enable you to use the services offered by the VW Financial Services Group (e.g. customer portal);

-this is necessary for compliance with a legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR). Data processing is required in particular to fulfil the legal obligation of the controller in the area of data security;

-this is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Art. 6 para. 1 sentence 1 lit. f GDPR). Data processing is necessary in particular to ensure the provision and functionality of the website and to be able to provide you with the portals and services, to ensure and optimise informed decisions by the parties involved, also in your interest, and to ensure a permanently high quality and uniformity of customer advice by the controller and the VW Financial Services Group. In addition, data processing is necessary to protect the assets of the controller, the VW Financial Services Group or its customers and to fulfil internal group administrative and accounting purposes. Furthermore, data processing is necessary to analyse and evaluate the interests and preferences of customers and to create general evaluations for internal purposes (e.g. for business monitoring and product optimisation);

-this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

-this is covered by your voluntarily given consent (Art. 9 para. 2 lit. a GDPR) or another legal basis (Art. 9 para. 2 lit. b to j GDPR) if your data also contains special categories of personal data pursuant to Art. 9 para. 1 GDPR (e.g. health data)

2. Third country transfer

The controller may also transfer your data to a country outside the European Economic Area (EEA). This transfer takes place in compliance with the special requirements of Art. 44 - 49 GDPR, whereby the appropriate level of protection is guaranteed in particular either by an adequacy decision of the European Commission pursuant to Art. 45 GDPR, concluded EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c and d GDPR or binding internal data protection regulations pursuant to Art. 47 GDPR. You can access and view the EU standard contractual clauses on the website of the European Commission or request a copy directly from the controller.

3. General retention periods

The general duration of the storage of your data depends on the possible conclusion of a contract via the website and on the termination of the contract.

If you enquire about the controller's products/services but have not initiated a contract, your data will be stored for a maximum of 6 months after the last contact between you and the controller.

Otherwise, the retention period begins at the end of the calendar year of the last event in the context of this business relationship and the following periods apply:

-If a contract has been initiated but not concluded, your data will be stored for a maximum of 3 years.

-Your personal data relevant to a contract, in particular data relevant to tax law, will be deleted after expiry of the statutory retention periods, at the latest 10 years after termination of the contract. The general storage period of your personal data may exceptionally be up to 30 years, insofar as this is necessary for the assertion, exercise or defence of legal claims.

You will be informed of deviating storage periods for individual data categories within this data protection information at the end of the respective section. The storage periods may be extended in exceptional cases if further storage is legally permissible (e.g. to protect assets or to safeguard and, if necessary, enforce the rights of the controller) or necessary (e.g. retention period for advertising consents or in the context of tax audits).

4. Use of a log-in area

When setting up and using a password-protected user account, the controller processes the data you enter in order to give you access to its portals and their functions and services. Processing for this purpose takes place insofar as

-this is necessary for the purposes of the legitimate interests pursued by the controller or by a third party (Art. 6 para. 1 sentence 1 lit. f GDPR). Data processing is necessary in particular to provide you with the portals and their services;- this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR);

5. Customer profiles

Based on your data and other advertising-relevant data, the controller creates your individual customer profile and assigns it to specific customer segments. The controller uses these results to control the type, content and frequency of advertising measures for specific target groups. In particular, this may result in you receiving or not receiving certain advertising in contrast to other customers. This happens insofar as

-this is necessary to safeguard the legitimate interests of the controller or those of a third party (Art. 6 para. 1 sentence 1 lit. f GDPR). Data processing is particularly necessary in order to better tailor offers to you based on simple analyses of usage data and obvious preferences and to avoid unwanted or unsuitable offers (limited analyses);

-this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR) (extensive analyses).

6. Customised advertising measures

The controller processes your data for direct advertising, both for its own offers and for offers from the VW Financial Services Group, your trading partner and the manufacturer, importer or sales company of your vehicle or from other authorised third parties (e.g. companies from the banking, leasing, insurance and mobility sectors): Bank, leasing, insurance and mobility), and exchanges your data with the aforementioned recipients for this purpose. In addition, the controller uses online marketing services to display interest-based advertising content to specific target groups when they use online services. For this purpose, the controller transmits your data (e.g. email address) in encrypted form (hash value) to the online marketing services. These compare the hash value of the transmitted data with the hash values of their own user data for identification purposes. This is done in each case insofar as

-this is necessary to safeguard the legitimate interests of the controller or a third party (Art. 6 para. 1 sentence 1 lit. f GDPR). Data processing is necessary in particular to be able to send you customised offers in a timely and reliable manner and to display online advertising tailored to you;

-this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

An exchange with other recipients will only take place if this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR).

7. Use of an online application route

If you wish to complete the FS ID on this website via the online application routes, the data you enter will be temporarily stored after each sending process in order to prevent misuse of the application routes, to ensure the security of the information technology systems and to be able to help you in the event of a fault. Processing for the above-mentioned purposes takes place insofar as

-this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR);

8. Data exchange within the Volkswagen Group

The controller exchanges your data with the manufacturer, importer or sales company of your vehicle within the Volkswagen Group, insofar as

-this is necessary for the fulfilment of a contract that you have concluded or for the implementation of pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR). Data processing is necessary in particular to fulfil the performance obligations arising from the contract;

-this is necessary to safeguard the legitimate interests of the controller or a third party (Art. 6 para. 1 sentence 1 lit. f GDPR). Data processing is necessary in particular to fulfil VW Group-internal administrative and billing purposes, if necessary also vis-à-vis the trading partner, as well as to optimise the products and processes and to be able to respond to your interests. In addition, data processing is necessary to ensure and optimise informed decisions by the parties involved, also in your interest, and to protect the assets of the controller, the manufacturer, the importer or the sales company of your vehicle or its customers;

-this is covered by your voluntarily granted consent (Art. 6 para. 1 sentence 1 lit. a GDPR);

9. Cookies

The controller uses cookies on the website and as part of the use of FS ID. These are small files that your browser automatically creates and that are stored on your end device when you visit the website and use the FS ID. Cookies do not cause any damage to your end device and do not contain any viruses, Trojans or other malware.

Information is stored in the cookie that results in each case in connection with the specific end device used. However, this does not mean that the data controller gains direct knowledge of your identity.

Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or a message always appears before a new cookie is created. However, completely deactivating cookies may mean that you cannot use all the functions of the website. Cookies are used to statistically record the use of the website and to make it more user-friendly and effective for you. For example, the controller uses so-called session cookies to recognise that you have already visited individual pages of the website.

The data stored in them (e.g. session ID, time of page view) is automatically deleted at the end of your visit. However, some cookies remain stored on your end device until you delete them or the validity period defined for the cookie expires.

Furthermore, the controller uses tracking measures on this website to ensure that the website is designed to meet requirements and is continuously optimised, and to record its use statistically. In addition, the controller and other companies in the Volkswagen Financial Services Group, e.g. Euro Leasing GmbH, use the data to optimise the display of advertising content.

The use of cookies takes place, as far as

-this is absolutely necessary for technical reasons or for the functionality or optimisation of the website or the service you have requested (Section 25 (2) No. 2 of the Telecommunications Telemedia Data Protection Act).

-this is covered by your voluntarily granted consent (Section 25 (1) Telecommunications Telemedia Data Protection Act; Art. 6 (1) sentence 1 lit. a GDPR);

-this from your voluntarily given consent (§ 25 para. 1 Telecommunications Telemedia Data Protection Act; Art. 9 para. 2 lit. a GDPR) if your data also contains special categories of personal data in accordance with Art. 9 para. 1 GDPR (e.g. health data).

You can revoke your consent at any time with effect for the future, either via the Cookie Consent Tool and/or via the link to the third-party provider listed at the end of each individual analysis cookie. In both cases, an opt-out cookie will be set to prevent the future collection of your data when you visit this website. If you revoke the processing of your data via the cookie consent tool, this will only apply in this browser and only for the website of the controller and will be stored on your device.

10. Rights of data subjects

You have the right:

-in accordance with Art. 15 GDPR, to request information about your personal data processed by the controller;
-in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by the controller;
-in accordance with Art. 17 GDPR, to request the erasure of your personal data stored by the controller, provided that the legal requirements are met;
-in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data, provided that the legal requirements are met;
-in accordance with Art. 20 GDPR, to receive your personal data that you have provided to the controller in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller;
-in accordance with Art. 7 (3) GDPR, to withdraw your consent to the controller at any time;
-to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or our company headquarters.

Right of objection

In accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data if there are reasons for this arising from your particular situation or if the objection is directed against general or personalised direct advertising. In the latter case, you have a general right to object, which is implemented without specifying a particular situation.

Controller Volkswagen Financial Services AG:

Postal address of the controller and the data protection officer:

Volkswagen Financial Services AG

Gifhorner Str. 57
38112 Braunschweig
Germany

If you would like to exercise your right to object or your rights as a data subject, simply send an e-mail to dataprotection.fsid[at]vwfs.com. You can also contact the data protection officer: dataprotectionofficer.fsid[at]vwfs.com.

11. Up-to-dateness and amendment of this data protection information

This data protection information is currently valid and was last updated in 7/ 2024.

It may become necessary to update this data protection information as a result of the further development of the website and offers on it or due to changes in legal or official requirements. You can access and print out the current data protection information at any time on the website.