A. Scope of the privacy policy

In this Privacy Policy, we are informing you about the processing of your personal data by AUDI AG, Auto-Union-Straße 1, 85057 Ingolstadt, Deutschland/Germany (“We”, or “Audi”) in connection with the myAudi portal (website solution) and the myAudi app (both hereinafter “myAudi”) and the Audi ID. Please note that, depending on the country, myAudi may not be available via both touchpoints and the range of functions of the website and app may differ.

Audi manufactures vehicles that communicate in certain countries with the Audi IT system or over the Internet with servers of service providers by means of a cellular communication unit (pre-installed or provided by the user). Subject to availability, Audi provides information and control services for your vehicle on the IT system (“Audi connect Services”). Please note that not all Services may be available for your vehicle or in your country.

myAudi allows you to use personalized Audi connect Services and other applications by Audi (hereinafter “Services”) related to your vehicle. You require an Audi ID in order to access myAudi. Separate privacy notes may apply to the use of Audi connect Services in the vehicle as well as to other websites beyond myAudi or other data processing of Audi.

For users in Australia, this privacy policy forms a notice regarding the collection of personal information by Audi in connection with the Services. References in this privacy policy document to the GDPR, and certain concepts which relate to the GDPR, such as data controllers, data processors and legitimate interests, are not applicable and this privacy policy document should be interpreted accordingly. If you have any questions or concerns regarding the application of this policy to you, please contact Audi for further information using the details set out below.

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

For individuals in Malaysia: By using myAudi, you acknowledge that you have read this privacy policy and that you agree and give consent to Audi to process your personal data in accordance with the terms of this privacy policy. The declaration of consent in this regard is only for the purpose of compliance with applicable local data protection law. It does not affect the data processing under the GDPR and does not constitute consent in terms of Articles 4 no. 11, 6 para. 1 lit. a) and 7 GDPR.

B. General Information

I. Who is the controller for the processing?

The controller for the processing activities within the meaning of Art. 4(7) GDPR – as described below in section C – is the AUDI AG, Auto-Union-Straße 1, 85057 Ingolstadt, Deutschland/Germany.

If and when you log in to an importer's website using the myAudi login, Audi and the respective importer responsible for that website are joint data controllers for data processing in connection with the myAudi services provided on that website. You can find a list of importers in Appendix A. For more information, see Section C.II.

If there is an Audi Functions Store for the respective country, different responsibilities apply to it; more information can be found on this in Section D.

II. Who can I contact?

If you want to assert your data protection rights, please use the contact options on www.audi.de/betroffenenrechte.

On this page, you will find further information on how you can assert your data protection rights. You can also contact us by post at the following address:

AUDI AG, DSGVO-Betroffenenrechte/GDPR Data Protection Rights, 85045 Ingolstadt, Deutschland/Germany

If you wish to assert your data protection rights vis-à-vis the importer in the context of using myAudi services while logged in on the relevant country website, please use the contact options provided in Appendix A for the relevant regional importers.

If there is an Audi Functions Store for the respective country, you will find further contact options for the other responsible parties in Section D.

III. Contact details of the data protection officer

If you have concerns about data protection, you can also contact our company data protection officer:

AUDI AG, Data Protection Officer, 85045 Ingolstadt, Deutschland/Germany

E-mail: datenschutz@audi.de

IV. Which rights do I have?

Depending on your jurisdiction, as the data subject, you may be entitled to the following data protection rights.

1. Access

You have the right to obtain information on the data stored concerning you at Audi and the scope of data processing and data transfer performed by Audi, and to obtain a copy of the personal data stored concerning you.

2. Rectification

You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you as well as the completion of incomplete personal data stored concerning you at Audi.

3. Erasure

You have the right to obtain the erasure of the personal data concerning you stored at Audi without undue delay if the statutory requirements are met.

This may be the case, in particular, if

Your personal data are no longer necessary in relation to the purposes for which they were collected;
The sole legal ground for the processing was your consent and you have withdrawn it;
You have objected to the processing based on the legal ground of a balancing of interests on grounds relating to your particular situation and We cannot prove that there are overriding legitimate grounds for the processing;
Your personal data have been unlawfully processed; or
Your personal data have to be erased for compliance with a legal obligation.

If We have shared your data with third parties, We will inform them about the erasure, insofar as required by law. Please note that your right to erasure is subject to restrictions. For example, We are no required or allowed to delete data that We are still obligated to retain due to statutory retention periods. Similarly, data that We need for the establishment, exercise or defence of legal claims are excluded from your right of erasure.

4. Restriction of processing

You have the right to obtain, under certain conditions, restriction of processing (i.e. the marking of stored personal data in order to restrict their future processing). The requirements are:

The accuracy of your personal data is contested and Audi must verify the accuracy of your personal data;
The processing is unlawful, but you oppose the erasure of the personal data and instead request the restriction of the use of the personal data;
Audi no longer needs your personal data for the purposes of processing, but you require the data for the establishment, exercise or defence of legal claims;
You have objected to the processing and the verification is pending whether the legitimate grounds of Audi override yours.

In the event of a restriction of the processing, such data will be marked accordingly and will be – except for their storage – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

5. Data portability

To the extent that We automatically process your personal data provided to us based on your consent or a contract with you (including your employment contract), you have the right to receive the data in a structured, commonly used and machine-readable format and to transfer those data to another controller without hindrance from Audi. You also have the right to have the personal data transferred directly from Audi to another controller where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

6. Withdrawal of consent

If you have given consent to the processing of your personal data, you may withdraw it at any time. Please note that the withdrawal shall only be effective for the future. Processing that occurred before the withdrawal shall not be affected.

If you want to exercise your right to withdraw your consent to the processing of your personal data, please use the contact information in section B. II. Beyond this, you can also view and manage your consent to advertising communication in your myAudi account.

7. Complaint

In addition, you have the right to lodge a complaint with a data protection supervisory authority and, depending on the country you come from, with us where appropriate, if you believe that the processing of your personal data is unlawful. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy. The address of the data protection supervisory authority responsible for Audi is:

Bayerisches Landesamt für Datenschutzaufsicht

Promenade 18

91522 Ansbach

Deutschland/Germany

For individuals in Mexico, you may also lodge a complaint to the National Institute of Transparency, Access to Information and Protection of Personal Data. Located at: Av. Insurgentes, Sur No. 3211, Colonia Insurgentes Cuicuilco, Alcaldía Coyoacán, Mexico City. CP 04530.

For individuals in Australia, you may also make a privacy related complaint to Audi directly, or to the Office of the Australian Information Commissioner. Located at: Level 10, 175 Pitt Street Sydney NSW 2000.

If you are located in Ukraine, you may also lodge a complaint to a local data protection supervisory authority – Ukrainian Parliament Commissioner for Human Rights, located at: Instytutska Str., 21/8, Kyiv, 01008, Ukraine.

For individuals in New Zealand, you may also lodge a complaint with a data protection supervisory authority from New Zeeland if you believe that the processing of your personal data is unlawful.

8. Information on your right to object

a. Right to object on grounds relating to your particular situation

You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balancing of interests. This also applies for any profiling. Insofar as We base the processing of your personal data on a balancing of interests, We generally assume that compelling legitimate grounds can be demonstrated, but We will, of course, examine each individual case. In the event of an objection, We will no longer process your personal data.

Unless,

We can demonstrate compelling legitimate grounds for the processing of such data which override your interests, rights and freedoms or
Your personal data are used for the establishment, exercise or defence of legal claims.

If you are located in Ukraine, you have a right to reasonably object against procession of your personal data irrespective of the ground of procession of your personal data.

b. Objection to the processing of your data for our direct marketing purposes

Where We process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, We will no longer process your personal data for such purposes.

c. Objection to the processing of your data for product improvement and general customer analysis

As part of the balancing of interests, We grant you a separate right of objection with regard to the processing of your personal data for product improvement and general customer analysis.

If you object to the processing for the purpose of product improvement and/or general customer analysis, We will no longer process your personal data for these purposes. Purely statistical evaluations of aggregated or otherwise anonymous data remain unaffected by this.

d. Exercise of the right to object

The objection can be exercised in any form and should preferably be addressed to the contact details listed in section B. II.

V. Which data do We process for which purposes and which legal bases apply?

We process your personal data from the vehicle and from the device you use (smartphone, tablet, etc.) in accordance with the provisions of the General Data Protection Regulation (“GDPR”) and the German Federal Data Protection Act (Bundesdatenschutzgesetz, “BDSG”) and other local law for various purposes. The specific data and purposes of data processing are primarily based on the respective vehicle and vehicle equipment and on the Audi connect Services used as well as the device used. If the purposes of processing change, we shall notify you immediately and, if required by applicable law, take the measures required by applicable law (e.g. obtain your consent for different processing purposes).Please note that not all of the Audi connect services listed may be available in your vehicle or country.

We, in general, may process your personal data based on the following legal grounds for the following purposes. Please note: If the applicable local law of the country where you are located at the relevant time foresees additional requirements regarding the legal bases, we will comply with such additional requirements and will inform you accordingly. This in particular applies, where such local law requires (express) consent for the processing of your personal data.

Purpose	Legal grounds	Legitimate interest in the balancing of interests
Support for law enforcement authorities in the event of vehicle theft by tracking vehicles and vehicle parts using the vehicle identification number, which uniquely identifies your vehicle and allows it to be linked to a specific owner, known as the VIN	Public interest (Art. 6(1)(e) GDPR)
Prevention of fraud and money laundering	Compliance with our legal obligations (Art. 6(1)(c) GDPR), Legitimate interest (Art. 6(1)(f) GDPR)	Fulfilment of legal and regulatory requirements
Prevention, combat and investigation of financing of terrorism and asset threatening crimes, comparisons with European and international anti-terror lists	Compliance with our legal obligations (Art. 6(1)(c) GDPR), Legitimate interest (Art. 6(1)(f) GDPR)	Fulfilment of legal and regulatory requirements
Fulfilment of control and reporting obligations under applicable tax law, archiving of data	Compliance with our legal obligations (Art. 6(1)(c) GDPR), Legitimate interest (Art. 6(1)(f) GDPR)	Fulfilment of legal and regulatory requirements
Disclosure within the scope of administrative/judicial measures for the purposes of evidence, prosecution and enforcement of civil law claims	Compliance with our legal obligations (Art. 6(1)(c) GDPR), Legitimate interest (Art. 6(1)(f) GDPR)	Fulfilment of legal and regulatory requirements
Accounting and tax evaluation of operational performances	Performance of a contract (Art. 6 (1)(b) GDPR), Legitimate interest (Art. 6(1)(f) GDPR), Compliance with our legal obligations (Art. 6(1)(c) GDPR)	Fulfilment of legal and regulatory requirements
Audits and special audits, internal investigations	Legitimate interest (Art. 6 (1)(f) GDPR)	Review and compliance with contractual and legal obligations by Audi, its employees and distribution partners, suppliers, etc., if necessary by using the vehicle identification number
Statistical evaluations for management control, cost finding and controlling	Legitimate interest (Art. 6 (1)(f) GDPR)	We have a legitimate interest in carrying out evaluations for the management of our business processes and cost control on the basis of the analysis of sales and order data according to the model sales channel, order status, analysis of requested versions and equipment, reporting on business indicators, if necessary by using the vehicle identification number.
Enforcement of legal claims and defence in legal disputes	Legitimate interest (Art. 6 (1)(f) GDPR)	We have a legitimate interest in the establishment, exercise or defence of legal claims.
General customer analysis, statistical evaluations for corporate management, cost recording and controlling using the VIN	Legitimate interest (Art. 6(1)(f) GDPR)	Analysis of sales and order data pursuant to model, distribution channel, order status Analysis of variants and different equipment with a higher demand Reporting on key business figures using the vehicle identification number if necessary Displaying of retrofit solutions and customer-specific follow-up products to the customer and as information for the Audi partner with whom the customer has a business relationship
Data consolidation between Audi and Audi partners to create a uniform customer database	Legitimate interest (Art. 6(1)(f) GDPR), consent	Setting up of a current and uniform customer database at the Audi partner that has been chosen or contacted by you
Data consolidation between Audi and Audi importers to create a standardised vehicle database	Legitimate interest (Art. 6(1)(f) GDPR)	Creation of an up-to-date vehicle database at the importer in the market of vehicle delivery/support using the VIN
Compliance checks, documentation of compliance requests and observance of compliance requirements	Legitimate interest [In the case of employee privacy policy: carrying out the employment relationship]	Verification of adherence to legal regulations, internal company policies, rules and standards of AUDI AG, group companies, employees, business partners and other third parties
Data consolidation as part of customer support by Audi	Legitimate interest (Art. 6(1)(f) GDPR)	We have a legitimate interest in an up-to-date and consolidated data profile as part of customer support by Audi. Consolidation serves to minimise data and ensures that our customers’ data is up-to-date and correct.

If we process further data for other purposes or on a different legal basis, we shall state this separately with the applicable legal bases in these notes under Sections C and D and obtain your consent if this is required by law.

VI. Who receives my data?

Within Audi, those entities receive your data that they need to fulfil our contractual and statutory obligations and to safeguard our legitimate interests. Our service providers (so-called processors) that We utilise and engage may also receive data for these purposes. We will generally share your personal data with third parties only if this is necessary for the performance of the contract, if We or the third party have a legitimate interest in the disclosure, or if you have given your consent.

In addition, data may be shared with third parties (including investigative or security authorities) to the extent We should be required to do so by law or by enforceable regulatory or judicial orders.

Details of the processors We use and the other recipients who receive personal data are included in the following section B. VI. 1. Due to the size and complexity of data processing by Audi, it is not possible to list each recipient of your personal data individually in this privacy policy, which is why generally only categories of recipients are specified.

1. Processors

Service providers which are used and act on behalf of Audi (so called processors) may receive data for the following purposes. We utilise processors of the following categories for the provision of specific services, who support us in the execution of our business processes. Specifically, this includes undertakings in the following categories:

Hosting providers
Service providers for operation, support and development

2. Third parties

Third parties (e.g. law firms or public authorities and courts) may also receive data for the purposes stated in paragraph V. of this section.

If We share your data with additional processors or third parties within the framework of individual Services, We will inform you in the Service in section C. or in section 3 below.

3. Is data transferred to a third country?

A transfer of data to third countries (i.e. countries that are neither members of the European Union nor of the European Economic Area) may take place, to the extent this is required for the provision of Services to you, is required by law, or you have given us your consent. In individual cases, personal data may also be passed on to authorities and courts in third countries. In addition, We may also share your personal data with processors in third countries. These include:

Hosting providers
Support service providers
Tracking service providers

Please note that not all third countries have a level of data protection recognised as adequate by the European Commission. Audi will transfer your personal data to third countries only in as far as this is permissible as per Art. 44 – 49 GDPR. In as far as Audi relies on appropriate safeguards for data transfer to third countries as per Art. 46(2) GDPR (e.g. standard contract clauses or binding corporate rules), Audi will take additional technical and/or organisational measures in as far as this is required to maintain appropriate protection of your personal data.

You can obtain a copy from us of the specific applicable or agreed rules to ensure the adequate level of data protection. Please use the information in the Contact section for this purpose.

Details of data transfers to third countries, where relevant, are given in this section or in section C. with regards to individual Services.

VII. How long will my data be stored?

We store your data as long as it is necessary for the provision of our services to you or We have a legitimate interest in the further storage, in particular for reasons of troubleshooting.

In addition, We are subject to various retention and documentation obligations, which result, inter alia, from the German Commercial Code (Handelsgesetzbuch, “HGB”) and the German Tax Code (Abgabenordnung, “AO”). The periods specified therefore for retention and documentation are up to ten years. Finally, the storage period is also assessed according to the statutory limitation periods, which can be up to thirty years, for example, according to Sections 195 et seqq. of the German Civil Code (Bürgerliches Gesetzbuch, “BGB”), with the regular period of limitation being three years.

Under certain circumstances, your data may also need to be retained for a longer period of time, such as when a so-called legal hold or litigation hold (i.e. a prohibition of data deletion for the duration of the proceedings) is ordered in connection with administrative or judicial proceedings.

To the extent further details are possible, you will find further information on retention obligations in section C with regards to individual Services.

C. myAudi and Audi connect services

I. Processing not related to specific services

1. Access to the features of your mobile device

When you activate the myAudi app for the first time, you will be asked to grant the following access rights to additional features on your mobile device:

Calendar, in order to allow you to display your calendar on the MMI and to use calendar entries with location information as a navigation destination;
Contacts, in order to use them as a navigation destination – Location data, in order to display location-based information and to enable queries regarding location-based Audi connect services;
Contacts, in order to pre-fill these fields as part of user management;
Files, in order to store country-specific language files;
Media, in order to offer them as a media source on the MMI.

These access rights are required to provide you with the features of the myAudi app. However, any access to these features is only possible after your activation and with your consent.

We describe which data from the mobile device is processed in each case within the scope of the respective Audi connect services.

a. Receiving messages (push notifications)

The app offers you the option of receiving a push notification for certain features (push technology or server push is a type of communication in which data is transferred even when the receiving app is running in the background or not being used). For example, when new vehicle status information is available, there are pending warnings or deadlines, or non-promotional information on vehicle, service and product topics is available. The legal basis for sending these push notifications is Article 6(1)(b) GDPR. If you use an Android device, the authorisation to send push notifications is automatically stored in your settings as soon as you have downloaded the myAudi app. If you use an iOS device, the authorisation to send push notifications is requested the first time you start your myAudi app. On Android devices, you can also configure this service in the myAudi app by going to App settings and enabling/disabling notifications. On iOS devices you can configure this service at any time by going to the settings of your smartphone and enabling/disabling notifications. To enable the delivery of messages we need to store a push token from your mobile device.

Push notifications may also be used for marketing purposes such as promotional communications, customer surveys or personalised customer information. Regardless of the operating system (iOS, Android), marketing push notifications are only sent if you have consented to this (Article 6(1)(a) GDPR). You may withdraw this consent at any time. This can be done in the myAudi app by going to Account settings followed by Declaration of consent/Data protection declaration of consent.

If you disable push notifications for the myAudi app on your smartphone or log out of the app, you may still, for technical reasons, receive push notifications from us for a short period (usually a few minutes).

b. Location data

Some Audi connect services require information about your location. In the event of a corresponding request by an Audi connect service, Audi or the processor (as stated in this section under II. ff.) will collect the geographical position of your vehicle in order to be able to quickly provide you with information on your immediate surroundings. If you have given your permission for this on your mobile device, the geographical position of your mobile device can also be requested. Data on your location will only be used to process your request. Your location data will only be transferred at the interval that is necessary for the functionality of the respective Audi connect service of the myAudi app.

c. Adobe Analytics

1. General information

The myAudi app uses the Adobe Analytics tool. (For the use of Adobe Analytics on the website, see the separate Cookie Policy on the respective website.) Adobe Analytics is provided by Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. When using Adobe Analytics for apps, the “Adobe Mobile” SKD (Software Development Kit) is used. This is a “cookie-like” technology that allows the data defined in the following to be collected and sent to the Adobe Server.

Using Adobe Analytics, interactions of myAudi app users are recorded and systematically analysed. The following data is collected in this context:

IP address of the user (anonymised)
Unique user ID associated with the device
Information on app installations, as well as updates, starts and crashes
myAudi app name and version
The click behaviour of the user in the myAudi app
The subpages and functions that the user accesses
Device description, operating system version, mobile service provider, screen resolution
Region settings of the device
Time stamp

The IP address is anonymised before being stored. The last octet of the IP address is removed. The truncated IP address cannot be linked to the user's device.

2. Purpose and legal basis of processing

Processing the user’s personal data using Adobe Analytics allows us to analyse the app behaviour of our users. By analysing the collected data, we can compile information on how the individual components of our myAudi app are used. This helps us to continuously improve our myAudi app and its user-friendliness. You can also access our myAudi app if we do not have this information.
The legal basis for this processing of personal data is your consent according to Article 6(1)(a) GDPR.

3. Retention period

The data stored by Adobe Analytics is deleted (erased) as soon as the data is no longer used for our above purposes. This means that it is deleted after 24 months.

4. Withdrawal of consent

With effect for the future, you may stop Adobe Analytics from collecting your information when you use our myAudi app. You can do this by withdrawing your consent to tracking in the myAudi app under Profile > App Settings > User Tracking.

2. Customer support

For support purposes and to provide you with answers regarding your queries, we process the following personal information: salutation, surname, first name and country of residence, language and user name (email address you used for the myAudi registration process) and contact information. Furthermore, to provide you with a comprehensive answer to your queries (e.g. in the case of vehicle-related complaints), we also require the VIN. Depending on your query, further personal information may be necessary, e.g. address, date of birth, screenshots of error messages or the location of your vehicle. Without this data we cannot provide you with comprehensive answers.

All further information is voluntary, including, for example, place of birth, nickname, profile picture or invoicing address.

In connection with providing customer support services, we process the personal data you provided on the following legal bases: Performance of a contract or steps prior to entering into a contract, insofar as necessary (Article 6(1)(b) GDPR). Processing is carried out for the purpose of service provision.

In connection with customer support, we engage processors to provide these support services. The data is processed in the European Union.

Your personal data will be deleted as soon as their information is no longer required to fulfil the purpose, at the latest after 5 years, if no other statutory retention and documentation obligations apply.

3. Addressing customers with personalised information

To address customers with personalised details or to provide personalised information to customers via an Audi partner based on your purchase and order data or interests communicated to us, e.g. to contact you regarding suitable offers for accessories, (successor) products or retrofit solutions, we send the following data to the Audi partner whose services you use or with whom you are in contact, provided you have given your consent for this:

Private/work contact and identification data
Agreement data
Vehicle data

4. Data consolidation between Audi and importers

To create a uniform and up-to-date database of customer data for Audi importers based in the European Union or the European Economic Area and in England, we share the following personal data with these importers:

Private/business contact details and identification data that you have stored in your myAudi profile (surname, first name, email address, post code, town)
IDK ID (identification number assigned to your myAudi account)

Your data is only shared with the importer responsible for your market. This is determined based on the country of origin that you entered when registering. A list of importers as possible data recipients can be found in Appendix A of this privacy policy. This data processing is based on our legitimate economic interest in promoting sales within the meaning of Article 6(1)(f) GDPR. This enables importers to keep their customer bases up-to-date and to assign various interactions and purchases to specific customers using the IDK ID. This makes it easier to carry out statistical analyses and provide more personalised customer communication, and ultimately to generate additional sales and registrations for digital Audi offers.

1. 5. Analyses for corporate management, product optimisation and offer management

We are constantly striving to improve our products and offers for you and to provide you with information that is as personally tailored to you as possible. In order to achieve this goal, we need a detailed analysis of the usage data of products and services listed in the following. We process the personal data we collect from you in the context of providing services or the use of our products, in particular, Audi connect or myAudi (including location data) in pseudonymised form for the purposes of optimising our products and services and our product range, e.g. offering variants of equipment, as well as optimising our business processes and offers for you.

Statistical evaluation for corporate management/sales and performance reporting

We process your data for analyses of the market shares of Audi products in relation to each other, between markets and, where applicable, in relation to competitors' products in a market segment. In addition, we generate various key figures through data analyses for the above-mentioned purposes in order to continuously improve sales management (consisting of strategic and operative sales planning, sales preparation and implementation as well as distribution control). More specifically, we try to shorten delivery times for our customers and shift investments to popular services. For these analyses, we process the following data:

IT usage data from Audi portals and apps (or myAudi, Audi connect plug and play, etc.) (e.g. user ID, last login to services, use of functions)
Contract data (e.g. products and services purchased (incl. charging), purchase price, vehicle equipment, warranty periods)
Information on warranty or product liability cases
Vehicle usage data (e.g. comfort settings such as seat settings, air-conditioning settings, multimedia usage, e.g. preferred radio stations, navigation settings, use of assistance systems, vehicle operating values)
Location data of your vehicle (e.g. truncated GPS data)
Audi online vehicle purchase data (e.g. user ID, order information, etc.)

We only process your vehicle data (vehicle usage data, vehicle equipment, location data as specified above) within the scope of the analysis if you have linked your vehicle to your myAudi account. Only then can we assign this data to your other data.

Customer and interest segmentation based on our own data and external data (data and usage analyses)

We process your data together with data from external sources to form pseudonymous customer and interest segments that allow us to draw conclusions in order to individualise our marketing measures and offers for you and to interact even more appropriately with our customers. For these analyses, we process the following data:

IT usage data from Audi portals and apps (or myAudi, Audi connect plug and play, etc.) (e.g. user ID, last login to services, use of functions)
Contract data (e.g. products and services purchased (incl. charging), purchase price, vehicle equipment, warranty periods)
Information on warranty or product liability cases
Vehicle usage data (e.g. comfort settings such as seat settings, air-conditioning settings, multimedia usage, e.g. preferred radio stations, navigation settings, use of assistance systems, vehicle operating values)
Location data of your vehicle (e.g. truncated GPS data)
Audi online vehicle purchase data (e.g. user ID, order information, etc.)

If you have linked a vehicle to your myAudi account, we also process the VIN and supplement the above data with further data on the vehicle equipment. If we have your address, we supplement the aforementioned data on the basis of this address with socio-economic and socio-demographic data (e.g. residential environment, income situation in an area).

Before we process your data for the aforementioned analyses, we pseudonymise this data. Pseudonymise means that direct personal identifiers are removed (e.g. name, email address, street and house number, telephone number, VIN), meaning that the data can no longer be directly traced back to you or your vehicle. Indirectly traceable characteristics are retained. Only after this pseudonymisation is the data processed in the analytics systems. This processing is based on our legitimate interest in meeting the high expectations of our customers for high-quality products and services as well as corresponding offers and processes, and taking account of our customer's wish for corresponding advertising.

We do not use the results to re-create a direct personal link and will not merge the results and data with your personal data unless you have given your corresponding consent to receive advertising (Article 6(1)(a) GDPR). For more information on this, please see the section below entitled "Promotional communication and market research based on consent".

To protect your interests, in addition to pseudonymisation, we implement additional safeguards and controls as required, e.g. strict data access restrictions, data use restrictions, security measures, retention periods.

We use hosting providers as processors in connection with the above data analyses and purposes. The data is processed in the European Union.

In the course of the above-mentioned data analyses and purposes, we only store personal data temporarily and for a maximum of 24 hours. In the event of deletion of your Audi ID account, the data will be automatically removed from the analyses after 24 hours.

2. 6. Data processing for personalised marketing and communication by Audi

If you would like to stay up to date and receive personally relevant information from Audi about current products and services from Audi World via your contact options, you can consent to personalised marketing/communication from Audi (Article 6(1)(a) GDPR). Audi processes your data from using Audi World for this purpose, creates an individual customer profile and personalises marketing/communication for you:

Audi World includes all products and services from Audi World (e.g. AUDI AG, Volkswagen Financial Services AG, Volkswagen Group Charging GmbH (Elli)) that you use with your central Audi user account (Audi ID) or the email address disclosed to Audi or that are related to it.
Your data includes all data from products and services that you use with your central Audi user account (Audi ID) or the email address disclosed to Audi or that are related to it, as well as data from vehicles ordered or purchased by you. Among other things, this includes all your:

o Contact details (e.g. name, address, contact options);

o Contract details (e.g. related lease or charging tariff agreements);

o Vehicle master data (e.g. production and optional equipment data);

o Vehicle usage data (e.g. driving and usage habits) as well as feature usage for all your vehicles on file (e.g. infotainment system, software and feature updates, driver assist system, sensor readings);

o Location data (e.g. GPS positioning data, saved routes, locations visited);

o Online use and usage habits (e.g. use of our apps or mailing and click behaviour, campaign data, saved vehicle configurations, preferred partners, website use).

Audi creates an individual customer profile for you when it processes your data. Your data can therefore be combined with socioeconomic data (e.g. education, occupation, social class) and publicly available information (e.g. weather data), segmented and statistically analysed in order to evaluate and improve the results of marketing and campaigns. Audi also uses artificial intelligence to assess your interests as effectively as possible and create personalised marketing/communication for you. In addition, you allow Audi to share segmented data with publishers for digital advertising purposes. This data contains pseudonymised identifiers that are hashed and cannot be traced back to individuals by the data recipients.
Personalised marketing/communication includes in particular information and offers on existing and new products, including accessories and services, and communication about technical innovations, connect services, (follow-on) offers for leasing and financing options and insurance products, products from the charging and mobility services sector, as well as maintenance and service packages, test drives, competitions, surveys, invitations to service programmes and loyalty programmes and events from the Audi World (e.g. AUDI AG, Volkswagen Financial Services AG, Volkswagen Group Charging GmbH (Elli)). For this purpose, Audi may contact you using your contact options (e.g. by phone, email, text message, push notification (in-app/in-car)). If national regulations require a specific selection of contact options, Audi shall contact you via the channels you have selected.

To improve marketing, Audi pseudonymises and segments the personal data stored in your Audi ID user account and in the associated services. If you consent to marketing (Article 6(1)(a) GDPR), Audi uses the results of segmenting and establishes a direct personal link to the above data.

You can find the services that you use and that are associated with the Audi ID user account at any time on the Audi ID Portal under the “Connected Apps” menu item. Please note that apps where you cannot withdraw consent are not shown.

Your consent is voluntary. You can easily change this at any time or withdraw your consent without giving reasons with immediate effect for the future (e.g. via an unsubscribe link included in every personalised marketing message, in the Audi ID user account or by sending an email to info-datenschutz@Audi.de). Audi ID shall then stop processing your data for personalised marketing/communication.

Audi shall delete your data 5 years after your withdrawal of consent or pursuant to the statutory requirements, e.g. as soon as the purpose for which the data has been collected not longer applies and where deletion (erasure) does not conflict with any other retention obligations.

Data processing for personalised marketing and communication from the distribution company responsible for your country (importer)

If you would like to stay up to date and receive personally relevant information from the importer on current products and services from Audi World via your contact options, you can consent to personalised marketing/communication from the importer (Article 6(1)(a) GDPR).

Your consent authorises the importer to process your data from using Audi World, create an individual customer profile and personalise marketing for you. For this purpose, AUDI AG analyses, segments and sends your data as described above under Data processing for personalised marketing and communication by AUDI AG as well as an individual customer profile created by Audi to the importer, which can process and combine this information with its personal data about you as a separate data controller. The importer can also independently make part of your data (e.g. opening emails and links in emails) available to Audi again to continually improve the personalisation of marketing/communication.

For more information on data processing by the importer, your rights and options to withdraw consent (e.g. via the Audi user account (Audi ID) or unsubscribe link included in every personalised marketing message), please see the privacy policy of your applicable importer.

VIII. II. myAudi services

If you access the myAudi services directly through the website https://my.audi.com or via the app, the data controller for processing operations in connection with the myAudi services (see Section C.II.) is Audi.

If - and as long as - you instead log in to an importer website via the myAudi login, Audi and the importer responsible for that website are joint data controllers for processing operations related to myAudi services provided on that website. A list of importers can be found in Appendix A. In this case, “we” and “our” always refers to both Audi and the importer. The respective importer and Audi have entered into contractual agreements in accordance with the legal requirements regarding the data protection obligations that are to be fulfilled by the importer and Audi respectively:

B. Task	C. AUDI AG	D. Importer (website operator)
E. Point of contact for data subjects	F. X	G. X
H. Information obligations where personal data is collected from the data subject, in accordance with Article 13 GDPR	I. X	J. X
K. Processing of requests under the right of access from data subjects, in accordance with Article 15 GDPR	L. X	M. X
N. Processing of requests for rectification of data, in accordance with Article 16 GDPR	O. X	P. X
Q. Processing of requests for erasure of data or restriction of processing, in accordance with Articles 17 and 18 GDPR	R. X	S. X
T. Processing of requests to be provided with personal data, in accordance with Article 20 GDPR	U. X	V. X
W. Processing of objections to processing of data, in accordance with Article 21 GDPR	X. X	Y. X
Z. Notification of personal data breaches, in accordance with Articles 33 and 34 GDPR	AA. X	BB. X

Notwithstanding this agreement on the distribution of responsibilities, you may exercise your rights as described under section B. IV. both with the importer and with Audi.

Please note that not all services may be available in your country and the service portfolio may differ, especially between the app and the website (both https://my.audi.com and country-specific websites).

We process your personal data as listed below to provide and deliver the various services and functions of myAudi. The legal basis for this is the performance of contract or to take steps prior to entering into a contract in accordance with Article 6(1)(b) GDPR, unless otherwise specified in the following sections.

Insofar as we process the personal data of passengers or other occupants of the vehicle in individual cases, this is done in order to provide the service used by you for the performance of the contract or to safeguard our legitimate interest in the performance of the contract towards the respective contractual partner (Article 6(1)(b) or (f) GDPR).

In addition, we may not be able to provide you with certain services if you do not provide data that is absolutely necessary for the provision of these services.

1. Access to the myAudi website and use of country-specific websites by logging in to myAudi

Each time you use the websites, your Internet browser automatically transfers certain information that we store in so-called log files. In particular, the following information is transferred automatically:

IP address (Internet protocol address) of the device from which the online offering is accessed
Internet address of the website from which the online offering was accessed (so-called origin or referrer URL)
Name of the service provider via which the online offering is accessed
Name of the files or information retrieved
Date, time and duration of retrieval
Volume of data transferred
Operating system and information on the Internet browser used, including installed add-ons (e.g. for the Flash Player)
http status code (e.g. “request successful” or “requested file not found”)

The above data is stored in the log files without your complete IP address so that no connection to your IP address is possible.

We process your personal data for accessing and using the website based on the following legal bases and for the following purposes:

Purpose	Legal bases	Legitimate interest in the balancing of interests
Provision of the website for the general public and for the purpose of contact options for customers and prospective customers	Performance of a contract (Article 6(1)(b) GDPR), Legitimate interest (Article 6(1)(f) GDPR)	We have a legitimate interest in the provision of a website, including to unregistered users, in order to provide general information about our company.
Collection of statistical information on the use of the website (so-called web analysis)	Legitimate interest (Art. 6(1)(f) GDPR)	We have a legitimate interest in receiving information on the use of the website, in particular to improve our offering.
Identification of disruptions and maintaining system security, including detection and tracking of inadmissible access attempts and access to our web servers	Compliance with our legal obligations in the area of data security (Art. 6(1)(c) GDPR) and Legitimate interest (Art. 6(1)(f) GDPR)	We have a legitimate interest in eliminating disruptions, maintaining system security and detecting and tracking inadmissible access and access attempts.

In addition to section B. VII., log files with personal data are stored for 7 days to identify malfunctions and for security reasons (e.g. for investigating attack attempts), and then deleted. Log files whose further retention is required for evidentiary purposes are exempt from deletion until the final clarification of the respective incident.

Information on data processing in connection with the use of cookies and user tracking as well as data processing in connection with specific features can be found in the Cookie Policy of myAudi or on the relevant website.

2. Audi ID

With the creation of an Audi ID account you automatically have access to the myAudi ecosystem. The Audi ID is a single-sign-on (“SSO”) solution for our services and third-party services outside of the myAudi ecosystem (hereinafter collectively called “services”). This means you can access a variety of services in the digital world of Audi with just the one account.

a. Audi ID account and myAudi

In order to register and create the Audi ID, you only need to provide the personal data technically required for creating the Audi ID. This includes the following mandatory data fields: user name (your email address), password, surname, first name, country and language. Without this data Audi will have to refuse access to the myAudi ecosystem, or may have to terminate an existing myAudi agreement. This data is required to use applications and Audi connect services in your vehicle.

All other information for completing your profile is voluntary and not required to create the Audi ID or to access the myAudi ecosystem. This information is only stored for the future provision and use of additional myAudi applications, Audi connect services or other services. The optional data includes: address, telephone number, place of birth, date of birth, nickname, profile picture, academic degree/title, billing address and nationality. You can change or adjust all data at any time under “Account” and then under “Account settings” (website) or under “Settings” and then under “Account settings” (app). The exception to this is the country/language combination of the registration.

Processing is carried out for the purpose of providing an SSO solution for myAudi and other services (see section b. Use of the Audi ID for other services (SSO solution)).

Later on, you can also add a profile picture to your myAudi account. This picture is displayed there and in the vehicle. Your profile picture is processed based on your consent (Article 6(1)(a) GDPR).

Audi uses the following processors for the Audi ID:

CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany, for operating and hosting the Audi ID.

b. Use of the Audi ID for other services (SSO solution)

At your request, services can be linked with the central Audi ID and the personal data you have provided in this context will be shared with the respective service. The service must offer login via Audi ID. If this is the case, you do not need to re-register. You can use the data provided during the initial registration and, if applicable, the data provided during the administration of your profile.

In order to use the Audi ID for third-party services, you need to confirm a so-called access authorisation prior to the use of the respective service of that third party. The access authorisation form states which data fields the third-party service needs to access. The type and extent of personal data that is transferred to a third-party service is based on what is necessary for the performance of the service. Mandatory data fields are marked as such in the access authorisation form. We transfer the data for performing a contract (Article 6(1)(b) GDPR) between you and the third party for the purpose of providing the service. You can view and adjust any access authorisation on the account page under “Connected applications” (e.g. withdraw access).

We store changes to the data that you make when using services in the Audi ID and also forward such changes to data within the Audi ID to the linked services. This enables central data administration via the Audi ID. If a service requires data that you have not yet entered in the course of optional data input for the Audi ID, this information is additionally requested for the first time directly at the beginning of the service.

3. Key user verification

When you verify that you are the key user of your Audi vehicle and conclude the key user agreement, the following data is processed: Name, private or business contact details (if applicable, telephone number or email address), date of birth, place of birth.

If you select verification via mobile phone as part of the key user verification process, Audi sends text messages (SMS) with a mobile transaction authentication number (mTan) to the telephone number provided for the purpose of verifying your identity, which must then be entered in myAudi. If you verify by email, we send you the mTan by email.

To use particularly sensitive Audi connect services, additional verification via the Audi partner/support or via the ID document procedure in myAudi is necessary, as this checks the accuracy of the above data.

If you select verification with an Audi partner or support, the Audi partner/support you have chosen is granted access to the above data stored in your myAudi account so that they can carry out verification by comparing your identification document and can confirm your data in our systems.

There is also the option of verification via myAudi using a form of ID. This is an identification solution that allows you to identify yourself online and in real time. You have to upload a machine-readable form of identification, such as an identity card, passport or driving licence (depending on the conditions in your country) and take a short selfie video of yourself. Software then automatically checks the authenticity of the document and compares it against the video, to make sure that you are actually the person trying to identify themselves. Your ID data (first name, surname, country of issue, identification data, other data visible in the ID document such as date of birth, place of birth, date of issue and expiry), including your portrait photo, is processed.

The technical Audi ID (internal identification number for uniquely assigning customer data) is also sent to the processor we have appointed for this purpose (IDnow GmbH, Auenstrasse 100 80469 Munich, Germany).

Data is processed for the identification document procedure on the basis of your express consent (Article 6(1)(a) GDPR and Article 9(2)(a) GDPR) and solely for the purpose of identification to activate sensitive mobile online services. The data is only sent in encrypted format. Sensitive data, such as on the front and reverse sides of the document, recorded security features of the ID document, and photos of your face, are stored by IDnow for verification purposes and are deleted after a maximum of 72 hours.

After identification has been completed, your surname, first name, date of birth, place of birth and your technical Audi ID, as well as the time of identification, is sent back to us by the processor for the purpose of documenting the results and activating the remote connect services. We analyse whether the verification in myAudi has been completed successfully. For this purpose, we store the status of a customer’s verification process. We process this data in order to fulfil the key user agreement (Article 6(1)(b) GDPR).

The customer’s personal data is stored by Audi until they delete their myAudi user account.

4. User administration

For the registration of additional users for a vehicle and the configuration of required authorisations, we process the following data: Name, nickname, private or business contact details (e.g. email address).

If you would like to add the user using the function (“Select contact”), myAudi requires access to the contacts stored on your device (smartphone) as part of the user management function to get the email address of the potential additional user. To do this, you have to grant myAudi access to your contacts, if you have not already done so. This data is used exclusively to manage your user account and is not disclosed to third parties.

5. Vehicle management

Vehicle management provides the user with an overview of their personal vehicle fleet. In this area, a vehicle can be added, removed, renamed (given an individual vehicle name) or set as the main vehicle.

To add a vehicle to vehicle management in myAudi, the VIN must be saved in your myAudi account. When you enter your VIN, myAudi sends it to our IT and vehicle systems to retrieve the image and equipment details.

6. Fleet vehicle

This function shows you in myAudi whether a vehicle is part of a fleet. We process the following data and categories of data for this purpose: VIN of your vehicle. We do not save any other personal data. The VIN is shared with the fleet operator if the vehicle is part of a fleet. Information on data processing where fleet operators are the data controller is provided in Appendix B.

7. Wish list

This function allows you to save and display your configured vehicles on the wish list in myAudi. The following data is processed for this purpose: technical Audi ID, which is linked to the Audi code generated by the configurator.

8. Digital service schedule

This feature allows you to view and retrieve the service schedule for your vehicle in myAudi. We process the following data and categories of data for this purpose: The VIN of your vehicle: information on the service measures carried out (from the service back-end). You can view and access this data in myAudi.

9. Audi Partners

At your request, the dealer can support you with features and services regarding the myAudi system world (e.g. with creating the Audi ID and key user verification). The dealer is listed as a so-called Audi partner in myAudi during registration by the dealer and thereby gains access to the data stored for your myAudi account through a system interface (see II. 2., Audi ID). This data may be changed or adjusted at all times after registration). It is an essential requirement for the registration process and the listing as an Audi partner that you have given your instructions to the Audi partner. Without this, registration via the partner is not allowed. To conclude the registration process, you also need to confirm a link sent to you via email after the Audi partner has created the Audi ID according to your instructions.

You can also search for a Audi partner using the myAudi partner search within myAudi, and then save the desired Audi partner – if you have already created an Audi ID. We will then store the Audi partner ID together with your Audi ID. To store your data, we use processors for operation, development and support, as well as hosting. When you assign an Audi partner to your Audi ID, you give your consent for the Audi partner to access your profile data for support and service purposes (see II. 2., Audi ID). It is possible at any time to save, substitute or delete the Audi partner.

10. Customer folder

In the context of individual customer support by your Audi partner, we process your contact details (name, address, email address, mobile phone number), data related to your stored configurations and additional data relating to your registered vehicles (VIN, model name, connect status, key user status, contract number). If you have given your consent, we show this data to the Audi partner you contacted or whose services you have used, or who you organised for consultations or the provision of services.

11. Service request/booking

As part of the service request/booking process you can request and book service appointments with your selected Audi service partner. When you send your request and/or make your booking, we process the following data and data categories that you have provided in the request/booking: Service appointment booking: Name, contact details (postal address, email address, mobile number), vehicle registration plate number, mileage, VIN.

We process the data to carry out the specific request/booking and for further use on your behalf in myAudi for future requests and/or bookings. We transfer the data to your selected Audi service partner to arrange and carry out the appointment.

If the service partner cannot process or enable the service request for technical or organisational reasons, the above data will be forwarded to the sales company (importer) responsible for your country so that you can be offered an appointment with a suitable service partner. Data transfer to the importer is carried out to protect our legitimate interests in accordance with Article 6(1)(f) GDPR; this is also to meet your request for a service appointment and to help provide a satisfactory outcome for you.

In connection with service requests/bookings, we use processors as operating, hosting and support service providers. It may happen that for technical support purposes a support service provider accesses your information from the USA. We have therefore concluded relevant EU standard contractual clauses (a set of contractual clauses approved by the European Commission that gives personal data the same protection as it has in the EU when data is processed in non-EU countries).

You can delete or change the data at any time within myAudi. We store the data until you delete or change it or delete your Audi ID.

12. Equipment details

To display the equipment details in myAudi, the VIN must be added and saved in your myAudi account.

This VIN is needed so that the equipment details and technical data (e.g. standard equipment, optional equipment, technical data / consumption) of the vehicle can be displayed in myAudi.

When the user enters the VIN and adds the vehicle, the VIN is validated by the vehicle backends and the user's technical identification number (technical Audi ID) is linked to the VIN, creating the user/VIN relationship.

Given that the equipment details provide very detailed vehicle information, they are only made accessible to users with the “Owner”, “Key user” or “Secondary user” roles to restrict who can view the details.

13. Extended warranty

If your vehicle has an extended warranty, this information, including the validity period, will be displayed in myAudi. We process the stored VIN for this purpose.

14. Additional work

On the basis of the VIN stored by you, the table of additional work for your Audi vehicle will be displayed.

15. Owner’s literature

You can access the online owner’s manual for your vehicle in myAudi. We process the stored VIN for this purpose.

16. Data plans

If you want to book data plans for your vehicle, you can be forwarded via myAudi to the website of the provider Cubic Telecom. If you want, we will share your personal data with Cubic Telecom (for Wi-Fi data plans) so that you do not need to re-enter your information when making your booking.

17. Individual upgrades

In the context of individual upgrades, you can find out about product upgrades that are relevant for your vehicle from your chosen Audi service partner. To do this we process the contact details you provided: Name, contact details (email address, mobile phone number), vehicle licence plate, approximate mileage and your vehicle’s VIN. We process this data for the specific consultation. We transfer this data to your chosen Audi service partner for the consultation.

In connection with individual upgrades, we use processors as operating, hosting and support service providers. It may happen that for technical support purposes a support service provider accesses your information from the USA. We have therefore concluded relevant EU standard contractual clauses (a set of contractual clauses approved by the European Commission that gives personal data the same protection as it has in the EU when data is processed in non-EU countries).

18. Engine oil

You can use the standard oil function to find out what engine oil is recommended for your vehicle. We process your vehicle’s VIN in order to provide this service in myAudi. For the engine oil standard, we use Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany for operation within the European Union.

19. Navigation map updates

This service offers map updates for navigation systems and driver assistance systems for downloading that are suitable for the currently selected vehicle. The selected and downloaded update can then be updated in the vehicle using the USB stick or SD card (depending on the vehicle model and generation). To access the function, the vehicle must have been added to the myAudi account using the VIN. The app can also be used to send an email to the verified email address of the myAudi profile. The direct link to the relevant update package is included in this email.

To provide the right map update, the IT systems determine the VIN, vehicle model, year of manufacture and vehicle equipment. Based on this data, the appropriate map update is found and provided for download.

All personal data used in this context is used only to present the appropriate map packages and is not stored in the systems involved.

To process personal data when using the Audi ID, we use CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

20. Pre-filling contract forms

We transfer the following data to

[VW Financial Services AG] for pre-filling the contract request form, to make the renewal request and contract preparation with VW Financial Service AG easier for you or
[VW Leasing GmbH] to pre-fill the contract request form to simplify your leasing request with VW Leasing GmbH

if you select "Submit data":

VIN, mileage, brand/model/model year (model code), first name, surname, street, house number, post code, city, email address, telephone number, delivery date.

You can delete or change this data on the website of VW Financial Services AG or VW Leasing GmbH.

21. Google Maps consent

This app integrates the map service Google Maps by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, (subsequently referred to as “Google”). A direct connection to the Google servers is established for the purpose of providing maps from Google Maps. By integrating and using the maps from Google Maps, the IP address, information on use of the maps, entered search terms and – if you have consented to this – your current location will be processed independently by Google. More information on data processing and potential transmission of personal data to third countries, e.g. U.S.A., by Google can be found in the Google Privacy Policy: https://policies.google.com/privacy. This data processing is based on your express consent, which we request the first time you open the app or the first time you call up the respective function with an integrated map from Google Maps (cf. Article 6(1)(a) GDPR ). This consent is valid for the period during which you have the app installed. Please note that you can withdraw your consent for the integration of Google Maps at any time with effect for the future by deactivating it in the account settings.

III. Audi connect services

1. General information

To use personalised Audi connect services, you must register and open a separate individual myAudi account/Audi ID (hereinafter referred to as “personalised Audi connect service”). In order to provide personalised Audi connect services in your vehicle, Audi transfers your Audi ID data (email address and password token) to your vehicle. The Audi connect services available for your vehicle and licence periods are assigned to your Audi ID and saved to the myAudi system world. You can specify a preferred notification method (e.g. email address) for application notification features, e.g. information on your vehicle’s climate status and charge level (in the case of Audi e-tron vehicles). Your vehicle also transfers certain data to the Audi back end for some Audi connect services (as described in the Audi connect service below) so that you can view and retrieve it in myAudi.

Your vehicle transfers specific data described in the following to our IT systems or the IT systems of the processors we use. Based on the data transferred from your vehicle, we provide you with a service or content that we deliver directly from our IT systems or the IT systems of our processors to your vehicle or the app. This always requires at least the technical assignment of a query to a service and to a vehicle. This assignment is made either using the VIN of your vehicle or a pseudonym.

For unforeseen events, we also collect data for monitoring and analysis purposes to guarantee the quality of the services that are provided. In this case, information such as the nature, origin and time of the event, the affected vehicle systems and the general conditions are send to and processed by the backend.

In addition, we may not be able to provide you with certain services if you do not provide data that is absolutely necessary for the provision of these services.

2. Specific Audi connect services

a. Privacy settings

The privacy settings in the vehicle and in myAudi provide the option of controlling data being sent by Audi connect services. The privacy settings can only be activated fully in the vehicle by the driver and are displayed in myAudi. The key user of the vehicle can also prevent individual Audi connect services from sending data for certain vehicle models in myAudi. This restricts the use of the services. All services except those required by law (i.e. EU emergency call system) or services protected by authorised personnel (e.g. vehicle tracking system) can be deactivated.

As part of the service, we process the following data or categories of data from your vehicle: VIN and the selected privacy setting. We process the aforementioned data to enable you and authorised users to display the privacy settings in myAudi (Article 6(1)(b) GDPR).

b. Personal profiles

The personalised Audi connect service “Personal profiles” allows the automatic configuration of the latest personal settings in the context of comfort and infotainment features in the vehicle, after identification of the user in the vehicle using the Audi ID. As part of the service we process the following data or data categories from your Audi ID:

Nickname
Profile picture

As part of the service, we process the following data or categories of data from your vehicle: VIN.

For comfort settings, we process the following data, depending on equipment: e.g. settings for seat and steering wheel positions or suspension and air conditioning settings, driver assistance and driver information systems, settings in the instrument cluster and infotainment system, and customisations such as interior lighting.

For data that you enter in infotainment functions, we process the following, depending on the equipment: e.g. multimedia data (such as music), films and photos for playback in an integrated multimedia system, address book data for use with an integrated hands-free system or an integrated navigation system, entered navigation destinations and data regarding the use of Internet services.

We process the aforementioned data in order to provide the service (Article 6(1)(b) GDPR). Your personal settings relating to comfort and infotainment features will be linked to your personal Audi ID in Audi’s IT systems. If you sign up with your Audi ID in any vehicle, your personal settings will be used automatically, depending on the vehicle equipment.

The processing of data to display the myAudi profile picture in myAudi and in the vehicle is based on your consent (Article 6(1)(a) GDPR).

We store the data until you delete the data or delete your Audi ID.

c. Vehicle status report

The vehicle status report allows you to view a range of vehicle data via myAudi. As part of the service, we process the following data or categories of data from your vehicle: the VIN, as well as the current status of the doors (locking status), windows and openings, if applicable the folding/sliding roof, the spoiler status, the fuel and oil levels (OK/NOK), the maintenance interval data for service and oil changes, if applicable; the mileage; the total or individual range; the status of the parking light; current warnings; the status of the parking brake; the battery charge level for e-tron vehicles and AdBlue values for diesel vehicles.

Depending on vehicle model. the corresponding data is sent directly to our IT systems upon turning on or turning off the vehicle, locking and unlocking it, opening or closing doors as well as upon reaching the critical charge level of the 12V battery or if you request it by accessing the app on your mobile device, and is subsequently available for retrieval through myAudi. The vehicle status is visible to every registered myAudi user who has been authorised by the key user for this vehicle.

The processor for providing the service and for developing and optimizing the service is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

We process the aforementioned data for the provision of the service in order to provide the information to you and the authorised myAudi user in myAudi for retrieval (Art. 6(1)(b) GDPR). In addition, you can activate push notifications. These inform the user about vehicle statuses or recommendations (e.g. temperature-dependent charging information on drive power for e-tron vehicles), provided that these are available for the vehicle.

Only the last record sent by the vehicle is stored so that it can be displayed to you, and this is overwritten when a new record is sent.

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR).

e. Remote auxiliary heating

Remote auxiliary heating is a personalised Audi connect service. You can use your myAudi account to configure the service, schedule your auxiliary heating, and send certain data and content for the functions of your Audi connect services (via your mobile connection) to your vehicle, and also allow certain vehicle data to be sent to us from the vehicle (as described below).

As part of the service, we process the following data or categories of data from your vehicle: the VIN, the planned departure timer you have entered, the heating effect, the availability of the auxiliary heating functionality, the current status of the air conditioning and, if the air conditioning is running, the remaining running time. Your vehicle sends this data with time stamp to the Audi IT systems when the ignition is turned off, a timer changed, the air conditioning status changes, the remaining running time is changed and/or the availability of the auxiliary heating functionality changes.

We process the aforementioned data to provide the service (Article 6(1)(b) GDPR) so that you can remotely control your auxiliary heating via the app.

We store the settings for your timers until you change them yourself or remove the assignment of your vehicle from your myAudi account. The air conditioning information from your vehicle is deleted each time a new data record is sent, so that we only save the current data record. The last 10 actions in each case are saved for the purpose of fulfilling our contractual obligations and to protect our legitimate interests in safeguarding system security (Article 6 (1)(f) GDPR).

f. Remote locking and unlocking

This Audi connect service allows you to lock and unlock your vehicle via your mobile device. As part of the Audi connect service, we process the following data or categories of data from your vehicle:

VIN
executed action (lock/unlock)
status of the vehicle doors and hatches
time stamp
ID of the mobile device used.

The corresponding data will be sent directly to Audi upon execution of the Audi connect service and will then be available for retrieval using your smartphone via the app. The Audi connect service can be deactivated by the key user in myAudi. We process the aforementioned data for providing the Audi connect service (Article 6(1)(b) GDPR) to enable you to remotely lock and unlock your vehicle via the app. We log the use of the Audi connect service and store the actions for the purposes of system security and theft prevention as well as for tracking fulfilment of the contract and safeguarding our legitimate interests in securing the Audi connect service for up to 5 years.

g. Remote horn and flashing

This Audi connect service enables you to trigger the vehicle's horn and signals via your app. As part of the Audi connect service, we process the following data or categories of data from your vehicle:

VIN
executed action
time stamp
ID of the mobile device used
current position of your vehicle (location data)
position of your mobile device

We process the aforementioned data for providing the Audi connect service (Article 6(1)(b) GDPR) to enable you to remotely control your vehicle’s horn and flashing lights within a certain radius of your vehicle via the app. The position of the vehicle and the terminal are required for perimeter detection.

The position data of your mobile device will be deleted after the action has been performed. We store the data of the last 10 actions (action and time) for the fulfilment of the contract and the safeguarding of our legitimate interests in the security of our systems (Article 6(1)(f) GDPR) until you remove the assignment of the vehicle to your Audi ID or until you delete your Audi ID. The oldest data is deleted each time a new record is sent.

h. Push notification for the anti-theft alarm

You can get a push notification in the app when your vehicle’s anti-theft alarm is triggered. As part of the service, we process the following data or categories of data from your vehicle: VIN, detected event (triggering event) and time stamp.

The last alarm is displayed in your app and an alarm history is saved to your myAudi account.

We process the aforementioned data to deliver the service (Article 6(1)(b) GDPR) so that we can provide you, as the key or authorised user, with alerts via push notification in the app when your vehicle’s anti-theft alarm is triggered. You can view the last alarm via your app and delete the alarm in the app. We save the data associated with your myAudi account until you delete it or remove the assignment of the vehicle from your myAudi account.

i. Vehicle tracking system

The vehicle tracking system is a personalised Audi connect service. The key user can configure the service and activate or deactivate it in the myAudi account.

To activate the service, we process the following data that you provide when you activate the service in myAudi:

Name and contact details (address, up to 3 mobile numbers)
Information on the vehicle (colour, body type, licence plate),
VIN

This data is transferred to our processor Vodafone Automotive Telematics SA, Via S. Franscini 10, 6850 Mendrisio, Switzerland, or to a local service provider commissioned by the processor to create the registration and activation.

If the vehicle detects tampering, the vehicle sends the following data or categories of data to us and the processor:

Tampering event
Current vehicle position (location data, time and place)
Vehicle status data (mileage, battery voltage, speed, fuelling level, time out of vehicle, ignition status, engine status)

The vehicle then cyclically sends the current vehicle position.

We transfer this data to our processor. The processor then uses the contact information stored by the key user in order to forward the alarm.

With the consent of the key user and upon confirmation of a theft or notification of a theft by the key user, the processor transfers the last known vehicle position to national security or investigation authorities.

If the key user reports a theft, the aforementioned data can also be actively queried from the vehicle via the processor.

We process the aforementioned data to provide the service (Article 6(1)(b) GDPR) of detecting tampering events and to enable the localisation of your vehicle in case of theft.

This service can only be activated or deactivated by the key user. It will not turn off when privacy settings are activated.

j. Speed Alert

With this Audi connect service, you can save a speed alert and an associated time frame in myAudi. As part of the Audi connect service, we process the following data or categories of data from your vehicle: VIN, information on when the speed alerts stored in myAudi are exceeded within the defined times. Your vehicle notifies you in myAudi when the vehicle exceeds the defined speed and when the violation ends.

Depending on the vehicle, the service can be protected from deactivation either directly via the vehicle MMI or in the myAudi privacy settings.

We save the data until you delete it from myAudi or delete the Audi ID itself.

We process the aforementioned data for providing the Audi connect service (Article 6(1)(b) GDPR) in order to inform you of the defined speed violation. The processor for providing this service is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR). The data for this purpose may be transferred to the processor: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

k. Geofence Alert

With this Audi connect service, you can use GPS localisation data to define and save a radius or area for a geofence in your Audi ID account. For each zone, a one-off or periodic time frame for when the zones should be active can be defined. Your vehicle notifies you in myAudi when the vehicle leaves the defined permitted area or enters a prohibited area. After re-entering or exiting the respective zone, a notification is provided stating that the violation has ended.

Depending on the vehicle, the service can be protected from deactivation either directly via the vehicle MMI or in the myAudi privacy settings.

As part of the Audi connect online services, we process the following data or categories of data from your vehicle: VIN, events when exiting/re-entering the defined permitted geo area, events when entering/re-entering the defined prohibited geo area.

We process the aforementioned data for providing the Audi connect service (Article 6(1)(b) GDPR) in order to inform you of the defined area violation. The processor for providing this service is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

We save the data until you delete it from myAudi or delete the Audi ID itself.

l. Valet Alert

With this Audi connect service, you can use GPS localisation data to define and save a radius or area for a geofence and, at the same time, define and save a speed alert, in myAudi. Your vehicle notifies you in myAudi when the vehicle leaves the defined permitted area or if the defined speed has been exceeded. After re-entering the permitted zone or the permitted speed range, you are notified that the violation has ended. As part of the Audi connect service, we process the following data or categories of data from your vehicle: VIN, events when exceeding/going below the stored speed limit, events when exiting/re-entering the defined geo area.

Depending on the vehicle, the service can be protected from deactivation either directly via the vehicle MMI or in the myAudi privacy settings.

We save the data until you delete it from myAudi or delete the Audi ID itself.

We process the aforementioned data for providing the Audi connect service (Article 6(1)(b) GDPR) in order to inform you of the defined violations. The processor for providing this service is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

m. Automatic service reminder

To use the "automatic service reminder" service, activation via your personal myAudi account is required. In this process, you can select your Audi partner designated for the service and store your personal contact data (name, telephone number, email address, communication preferences via telephone or email) for the provision of the desired service of the automatic service reminder.

If you use the automatic service reminder service, the technical data required for an upcoming service interval for your vehicle:

Vehicle status data (mileage, fuel tank level, oil filling level, etc.)
Service-relevant data (maintenance interval data, event log entries, warning lights)
Vehicle identification number

is transmitted to Audi’s IT systems.

This data is merged with your contact details and transmitted to the Audi partner you have selected for the automatic service reminder and stored there. The Audi partner uses this data for the purpose of preparing for the appointment, contacting you and carrying out the individual service. Your Audi partner selected for the automatic service reminder will then contact you by telephone or email for this scope of service, as indicated in your contact preferences, to arrange an appointment.

The Audi partner specified for the automatic service reminder will not use your personal data for any other purpose beyond the purpose described. Audi uses your data to provide the service, then it uses anonymised data to optimise the service. Your data is not forwarded to third parties.

If the Audi partner cannot process or enable the service request for technical or organisational reasons, the aforementioned data will be forwarded to the sales company (importer) responsible for your country so that you can be offered an appointment with a suitable Audi partner. In Germany, the data is forwarded to AUDI AG. Data transfer to the importer is carried out to protect our legitimate interests in accordance with Article 6(1)(f) GDPR; this is also to meet your request for a service appointment and to help provide a satisfactory outcome for you.

In connection with the automatic service reminder, we use processors as operating, hosting and support service providers. It may happen that for technical support purposes a support service provider accesses your information from the USA. We have therefore concluded relevant EU standard contractual clauses (a set of contractual clauses approved by the European Commission that gives personal data the same protection as it has in the EU when data is processed in non-EU countries).

To activate the Audi connect service, for technical reasons you have to enter the data requested during the service configuration. All requested data must be provided for activation, otherwise we will be technically unable to implement it. You can view, change or delete your data at any time in the service configuration. However, deleting your data will deactivate the service.

n. Predictive maintenance reminder

The Audi connect service for predictive maintenance reminders monitors wear parts in the vehicle. Monitoring only runs if the service for predictive maintenance reminders has been activated by the key user.

The selected service partner and the contact information (name, phone number, email address, preferred communication method) from your myAudi profile are used to deliver the service. This information is requested on activation of the service as necessary and can be changed in your myAudi profile at any time.

For predictive maintenance, the following vehicle data is sent to our IT systems and stored for up to 4 years:

VIN,
time stamp of data recording,
vehicle status and diagnostic data (e.g. mileage, outside temperature, tyre pressure, information about the condition of the 12V battery and the tyre pressure monitoring battery, currently active warning lights/messages on brake fluid level), service-related information (e.g. remaining mileage and time until the next oil change, date and mileage at last inspection, maintenance interval data, vehicle master data, event memory entries, warning messages, history of warning lights/messages, error code of the event (including time stamp and mileage of when the error was entered))

The specific data for data processing are primarily based on the applicable vehicle and vehicle equipment.

Your selected service partner uses this data for the purpose of preparing for an appointment, contacting you and providing the individual service.

We process the aforementioned data in order to provide the service (Article 6(1)(b) GDPR). In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR).

o. Remote vehicle diagnostics

The service “remote vehicle diagnostics” is a personalised Audi connect service and makes it possible to collect data on the current state of the vehicle and, in the event of a complaint, to carry out remote vehicle diagnostics on request. The result of the diagnostics is saved in myAudi and at the customer support contact points, and contains a recommendation of what to do next based on the specific diagnostics result.

The remote vehicle diagnostics service is activated as part of key user registration.

To provide this service, we process the following data and data categories regarding your vehicle and make this information available in myAudi and at the customer support contact points:

VIN, the time stamp for data collection and the mileage, as well as certain other operating data in the vehicle.

This includes operational data that provide an indication of existing faults: vehicle status information, environmental conditions, operating conditions of system components, and deviations from system statuses that lead to an entry being made in the vehicle’s event memory.

Your vehicle sends the aforementioned data when a change of operating condition leads to an entry being made in the vehicle’s event memory, when certain conditions are met (e.g. change of environmental or operating conditions) and at regularly recurring intervals, e.g. when the vehicle starts or when it is charging.

This service can only be activated or deactivated by the key user.

p. Audi incident assistance and online roadside assistance

The Audi connect services “Audi incident assistance” and “Online roadside assistance” offer you an easy way of being put through to your importer’s call centre (in the case of market Germany, this is Audi) in case of an accident or breakdown. Your importer is the importer of the country in which the myAudi key user is registered.
In case there is no key user you will be put through to the importer of the vehicle´s destination country. Both services have to be triggered proactively in the car. Alternatively, the service can also be used without Audi connect via the telephone hotline. Alternatively, the driver can call the telephone hotline and use the service without Audi connect.

The call centre employee may access your myAudi profile data so that rapid and targeted steps can be taken to log the case and provide you with assistance. Your profile data will be forwarded to the importer. In the case of market Germany, no data will be forwarded. Your name and date of birth will be used for identification purposes (as well as the telephone number of the SIM card integrated into the vehicle where applicable or the vehicle identification number). The data will be forwarded for further processing to the dealer that you have selected in myAudi as your preferred dealer (or a different dealer if you indicate a different preference to the call centre employee). For faster processing of the claim, you additionally have the option of forwarding your data to your insurance (if it is digitally linked).

You can use the service once you confirm (e.g. from the vehicle, the Audi apps or by actively accepting a call from the call centre).

We process the following data or categories of data in connection with this service and forward it to the importer for service delivery (in the case of market Germany, no data will be forwarded): customer data (title, salutation, name, date of birth, address, country, telephone number, email address, number plate), vehicle data (VIN, brand, mileage, remaining range, model name, model year, colour, transmission, drive type, year of manufacture, vehicle type, equipment features), insurance data (e.g. name of insurance company of the person reporting the accident, insurance policy number of the person reporting the accident, type of damage), claim data (area of impact, severity of impact, date of the accident, time of the accident, cause, warning lights, DTC, GPS data, accuracy of GPS data, direction of travel, type of damage, date on which the claim was logged, precalculation of damage, next inspection, last inspection).

We process the aforementioned data for providing the service so that we can provide rapid assistance in the event of an accident. In order to provide the service, the importer (or Audi, for the German market) will forward your data to your service partner and your insurance at your request. Outside of Germany, please read the importer’s privacy policy terms & conditions for further information related to data processing by the importer.

Your importer (in the case of market Germany Audi) will pass on data to contracting parties in order to meet contractual obligations or to third-parties for whom you have given explicit consent (insurance). You then will be granted access to Audi connect services.
In connection with Audi incident assistance and online roadside assistance, we use processors as operation, hosting and support service providers.

Audi incident assistance and online roadside assistance data processing might require data access from the US during technical support. Your data will be stored for as long as is necessary to provide the Audi connect service to you or for as long as there is a legitimate interest in continuing to store it.

q. Audi connect key

The Audi connect service “Audi connect key” is a personalised and safety-related service. It allows the user to unlock, start and lock the vehicle. The prerequisite for using the service is verification as the key user via myAudi. Furthermore, the use of the Audi connect key requires you to download the app.

To correctly assign the Audi connect key to a user's mobile device, this device transfers the following personal data to the Audi IT systems for the purposes of authentication and authorisation: ICCID, device type, app version and OS version and Google Cloud Messaging/Firebased Cloud Messaging Token. This data is stored in the Audi IT systems together with the VIN and the assigned Audi connect key for the purpose of authentication and verification of authorisation until the assignment of the terminal device is removed. This is required for the device to be recognised as an authorised key. Audi uses processors as hosting and support service providers for the provision of the service. When assigning a key to a user, you can allow the app to access the address book and select users there.

With the assignment of an Audi connect key to a user, the vehicle in question is also linked to the user and the user can see the vehicle and the vehicle equipment in myAudi. The key user can see which users (email address) and which key names (assigned by the key user) are assigned to the vehicle.

When using the Audi connect key, i.e. when unlocking, starting and locking the vehicle using the mobile terminal, data is transferred from the mobile terminal to the vehicle by means of Near Field Communication (NFC). This data is not transferred to Audi.

In addition, when using the Audi connect key, the following data is transferred to the Audi IT systems and logged and stored for the purpose of monitoring and ensuring the security of the service for the fulfilment of the contract: CPLC of the mobile device, VIN, key type, status of the key card, status of the service, changes in the type of use (e.g. change of vehicle key when starting the vehicle, key card activated/deactivated, function activated/deactivated), time of use and mileage.

r. Online Car Care

The Audi connect Online Car Care service is a personalised service, i.e. use of the service requires registration and the opening of a separate individual myAudi account. The Online Car Care service is activated within the framework of key user registration. As a key user, you can activate or deactivate the service in your myAudi account.

The service comprises the following functions:

Anomaly assistant (swarm function): A four-stage function that monitors the vehicle’s health with the aid of online vehicle data about the fleet. How it works:

1. Incident monitoring: The vehicle’s state is monitored online to identify unusual repeat occurrences of anomalies within specific parts of the vehicle fleet.

2. Analysis: In the next step, the causes of the anomalies in the affected vehicles are analysed.

3. Customer notification: If the analysis detects acute defects with a vehicle that require a visit to a workshop, the customer is notified in the vehicle and in myAudi and can use the service appointment request/booking service to easily contact the service partner.

4. Prediction: Some anomalies can already be detected predictively, i.e. vehicle data suggests that the applicable anomaly will occur in the future. The customer is notified in the vehicle and in myAudi and can use the service request/booking service to easily contact the service partner.

Notification assistant: This mirrors the current warning-lamp status of the vehicle in myAudi.

Display: Additional display of relevant driver notifications and control lights in the instrument cluster via myAudi.

Reminder function: If a critical warning lamp is lit in a vehicle for a longer period or over a longer distance, the customer is sent a reminder by email.

Field measures assistant: A function that steers field measures in a vehicle-specific manner and displays this on all customer front ends:

•Needs-oriented steering of field measures: Collecting online vehicle data enables certain field measures to be checked in advance to determine whether the customer’s vehicle is affected by a field measure. The customer is thus notified only about field measures that apply to his/her vehicle. This enables the customer to avoid needless visits to a repair shop.

Customer notification: If a vehicle is affected by a field measure, the customer is notified about this in the vehicle and in myAudi and can use the Audi service request/booking service to easily contact the service partner.

To provide this service, we process the following data and data categories regarding your vehicle and make this information available on myAudi and in the vehicle:

the VIN, the time stamp for data collection and the mileage, as well as certain other operating data in the vehicle.

This includes operating data that suggests repair is needed soon: vehicle status information, environmental states, the operational state of system components, deviations from system states that lead to incident log entries in the internal vehicle systems, reactions by the systems in special driving situations, the charge level of the high-voltage battery (of electric vehicles) and the estimated range. The data transmission follows the principle of data economy, i.e. Audi evaluates all the collected data to make predictions about repairs. Your vehicle sends this data at regular intervals (partly while the vehicle is in use) or if certain conditions are met (e.g. incident log events, changes to environmental or operational states, etc.).
This also includes the operational states of system components which provide information about the display of control lights and driver notifications on the vehicle’s instrument cluster. Your vehicle sends this data to Audi after the start and end of a trip in which a control lamp or a driver notification is active or its state changes.
Operational states of system components that provide information about the software variant of the installed control devices. This data is required to translate the raw data sent by your vehicle about detected deviations from system states into a legible format.
Operational states of system components that are required to monitor important components, e.g. the charge of the high-voltage battery.
Operational states of system components required to analysis certain deviations from system states, e.g. the engine’s RPM.
Internal logs for error analysis and error correction
GPS data that is collected event-based only if this is required to ensure the purposes listed above; this will be deleted or anonymised immediately when the data is no longer required for the purpose.

Your vehicle sends the aforementioned data, in certain cases when an operational state changes, leading to an incident log entry in the vehicle. Alternatively, this can be sent out cyclically, e.g. every 500-1000 kilometres, when starting the vehicle or during charging.

In the AUDI AG IT systems, this data is connected to technical data from production and earlier workshop visits with the aid of the VIN in order to draw conclusions about the vehicle’s equipment, such as the transmission, engine/motor identification, etc. as well as the production period, software and hardware versions. If the VIN is not necessarily required for further analysis, it is replaced by a pseudonym so that we process the data in relation to a specific vehicle (via the pseudonym) without a connection to the specific driver or user. The connection to a person is only re-established in justified exceptional cases, e.g. to be able to conduct recalls or if safety-related anomalies are detected.

This service can only be activated or deactivated by the key user. You can temporarily switch off the sending of certain data from your vehicle within the framework of your privacy settings, although this restricts the usefulness of the connect services.

We do not use this data to create profiles.

In addition to the data from your vehicle, we only ever process your name and email address in myAudi to notify you about detected potential repairs to your vehicle (so-called “predictive information” and field measures) and important control lamps and driver notifications.

s. Online logbook

The service “Online logbook” allows the semi-automatic use of electronic logbooks. In addition, you can view various vehicle data via myAudi. The prerequisite for the use of this service is the registration of an Audi ID, registration as key user and the nomination as key user in the vehicle. As part of the service, we process the following data or categories of data from your vehicle: the VIN (with which your motor vehicle can be uniquely identified and assigned to a specific owner) and the user ID linked to the Audi ID as well as:

At the start of a journey: date, time, mileage, GPS position, street name and number, city, postcode, country
At the end of a journey: date, time, mileage, GPS position, street name and number, city, postcode, country, name of key user

The function takes this data from the navigation system and generates a logbook entry. We also process the logbook entry category entered via the vehicle display (business trip, commute, private journey, not categorised) and if applicable, the business purpose and business partner. If a mobile device is connected to the vehicle, the key user can transfer the business purpose and business partner from the smartphone’s system calendar via myAudi to the logbook and transfer this data to the Audi IT systems. To do this, myAudi accesses your calendar. With regard to the calendar, the subject matter of the meeting will be used for the data field “Business purpose” and the organiser of this meeting will be used for the data field “Business partner”. The relevant data is then available for you to access via myAudi. You can re-categorise logbook entries until 7 days after the departure in myAudi. Logbook entries that are not fully categorised will be automatically categorised as private journeys after 7 days. We save your data for a period of 10 years or until you delete it via myAudi. Logbook entries will not be transferred from the vehicle to our IT systems if you have deleted your Audi ID or denominated the key user in the vehicle. You can created a PDF export of the logbook in myAudi. For this purpose, we process the data entered by you as the key user in myAudi. This data includes your name and place of residence, and the vehicle’s registration number.

No data will be transferred to Audi if you activate the privacy mode before the end of your journey.

We process the aforementioned data for providing the service and to provide the information to you in the vehicle and in myAudi for retrieval (Article 6(1)(b) GDPR). The service is provided via the processors Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, and CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

t. Automatic user identification

This service allows you to identify yourself via Bluetooth in your vehicle using your mobile phone. Automatic user identification is a requirement for additional services that use the Bluetooth connection for direct communication with your vehicle (e.g. remote park assist, light technology). If you activate automatic user identification, a pairing is established at Audi between:

Mobile device, including the following data

User ID to uniquely identify the user registered in the app
Client ID to uniquely identify the installation of the app on the mobile device
Software key of the mobile device for safe communication via Bluetooth

Vehicle, including the following data

VIN
Software key of the vehicle for secure communication via Bluetooth

The pairing on the mobile device is set up on the initiative of the app, by the app making its data available to the vehicle via Audi. The data is only made available to the vehicle if the user is also registered in the vehicle. In this case, the vehicle makes its keys available to the app via Audi so that an encrypted connection can be established between the mobile device and the vehicle.

We process and save the above-mentioned data for providing the service in order to provide you with automatic user identification via the app and other services via Bluetooth. The service can be deactivated by the key user in myAudi.

We store the pairing between the mobile device and the vehicle until you deactivate automatic user identification in the app or remove the vehicle from the account.

u. Remote park assist

This service allows you to park and unpark your vehicle via Bluetooth using your mobile device. Automatic user identification will be used to establish a secure connection via Bluetooth. In addition to the data listed in this context we process the following data for remote park assist for each parking procedure:

Action carried out (parking the vehicle, unparking including vehicle ignition)
Status information about the parking procedure (status of the parking procedure, display of orientation lines for the driving route during the parking process)

We process the aforementioned data for providing the service to enable you to park and unpark the vehicle using your mobile device. The additional data for remote park assist for each parking procedure will only be processed during the respective parking process and will not be stored.

v. Lighting technology

You can use this service to experience the light technology in your vehicle when in a parked position. Automatic user identification will be used to establish a secure connection via Bluetooth. In addition to the data listed in this context we process the following data for the lighting technology:

Action carried out (Leaving-Home/Coming-Home animation, Matrix LED functions)
Status information about the light technology (status of individual light functions)

We process the aforementioned data for providing the service in order to let you experience the light technology in your vehicle.

The data that is additionally processed for experiencing the lighting technology is only stored in the app on the mobile device until you exit the function in the app.

w. HV battery data provision

The service transmits specific data from your vehicle to save these in the backend and to use them for generating information regarding the residual energy in the HV battery, which can be displayed in (chargeable) front-end applications. These applications can access the data online whenever required. This enables, for example, the creation of a report about the battery state, information to be supplied for inquiries to Customer Care or for vehicle evaluations at dealerships.

x. Themes

The management (activation/deactivation) of purchased products in the themes shop can be carried out via myAudi. In doing so, we process the following data:

Purchased products assigned to VIN
Price
Time of purchase
Validity

y. Audi rear occupant detection

The Audi connect service rear occupant detection reduces the risk of accidentally leaving behind a person on the rear seat of the vehicle thanks to increasing warnings for people linked to the vehicle or in the vicinity of the vehicle. As part of the warning cascade, contacts linked with the vehicle’s VIN (key user and secondary user of the vehicle) are sent a push notification in their app.

z. (Basic service) HV battery data provision

The service for the provision of HV battery data is a personalised service, meaning that you need to register and open a separate and individual myAudi account to use the service. This is activated as part of key user registration. As a key user, you can activate or deactivate the service in your myAudi account.

The service comprises the following functions:

If you have any questions or complaints, a dealer or customer service representative can provide information on the battery condition. As part of the statutory obligation to provide access to data, the vehicle owner and vehicle keeper must be able to obtain information on the high-voltage battery status at any time. The service allows the data to be provided easily and flexibly.

For the provision of the service, we process the following data or categories of data from your vehicle:

VIN, time stamp for data collection and mileage, operating data and operating states of system components in the vehicle, which provide information on the use and condition of the vehicle and the high-voltage battery. These include the charge level of the high-voltage battery, charging energy, battery capacity, power and fuel consumption.

Your vehicle sends the data to Audi at the beginning and end of a journey. If the VIN is not necessarily required for further analysis and storing of data, it is replaced by a pseudonym so that the data is processed and saved in relation to a specific vehicle (via the pseudonym) without a connection to a specific driver or user and user behaviour.

The data may be made available to subsequent vehicle owners and keepers if this is necessary to fulfil legal disclosure obligations or to generate vehicle condition reports.

I. 3. Audi e-tron services

The following online services are available to you in Audi e-tron vehicles. Again, please note that not all listed services may be available in your vehicle or country. For Audi A3 Sportback e-tron vehicles, you need to enter the mileage in myAudi to activate the following services. In addition, the vehicle always transfers the mileage to Audi during the ignition process.

a. Audi Wallbox

Please note that the use of the Audi Wallbox and the corresponding online services requires – in advance – the electrical commissioning and configuration of a Wallbox with connectivity functions (Audi Wallbox pro/plus), which is provided by Volkswagen Group Charging GmbH, Mollstraße 1, 10178 Berlin, Germany (also known as “Elli”). In order to ensure the communication capability of your Wallbox, and to ensure that it is up to date with regard to electrical commissioning and configuration, Volkswagen Group Charging GmbH processes the technical data on its own responsibility (e.g. device ID, make, generation, device type, and software version). We are not responsible for this specific data processing. For further details on how your personal data is processed by Volkswagen Group Charging GmbH, and to assert your rights in dealings with Volkswagen Group Charging GmbH, please refer to the Volkswagen Group Charging GmbH privacy policy at https://www.elli.eco/en/privacy.

If you wish to use the Audi Wallbox and the corresponding online services, you must use a pairing code to pair your Wallbox with an existing Audi ID or your app. You can then access the charge history and the current capacity charged at any time (Pro models only) and manage and remotely control your Wallbox, or manage RFID charging cards (“charging cards”) (e.g. activate or deactivate them for use with the Wallbox). In the scope of the use of the Audi Wallbox and corresponding online services, we process the following personal and further technical for the provision of services: customer and user ID (email address from your Audi ID user account and technical Audi ID), the Wallbox ID and charging card ID, the Wallbox management status (e.g. administrative authorisation), the numbers of the charging cards you have enabled, the charging history (e.g. charging capacity, duration and or time of day, start and stop of a charging procedure, charging ID, authorisation and authentication information), the connection status and time stamp of the last communication session established (session and logging data), and optionally the location and location description of your charging station (address of the charging point (EVSE)).

We process your personal data for the purpose of fulfilling the contract (cf. Art. 6(1)(b) GDPR) as long as this is necessary for the aforementioned purpose and generally delete this data immediately after the legal basis ceases to exist, if it is no longer necessary for the aforementioned purposes or the aforementioned purposes cease to exist, and if there is no other legal basis (e.g. commercial and tax retention periods); otherwise, after the other legal basis ceases to exist, or if we are obliged to do so for other legal reasons.

We use Volkswagen Group Charging GmbH as the processor for the data processing stated above.

b. Remote operation and displaying charging/charging equipment status

As part of the service, we process the following data or categories of data from your vehicle:

VIN
Information and status of the charging process (e.g. charge time, charge level)
Properties of the charging process (e.g. current, amount of energy, charging performance, charging rate)
Selected departure time
Remaining charging time
User's own power requirement
Drive type
Range
Charging timer
Planned departure times
Charging location

Depending on your vehicle, we may not process all of the data listed above.

We process the aforementioned data for providing the service to display the information on your charging process in myAudi and to program and control the charging process via myAudi and to optimise the charging process according to your requirements stored in myAudi and the MMI.

We save your charging settings until you change them or remove the assignment of the vehicle to your myAudi account. The information on the charging process is overwritten each time a new record is sent, so that we only store the current status.

c. Remote air conditioning

We process the following data and categories of data from your vehicle as part of the service: the VIN, current status of the air conditioning in the vehicle, availability of the auxiliary air conditioning functionality (tank empty, battery empty, system error status). We also process the air conditioning timers that you have scheduled in myAudi, the choice of heating source and special configurations for the auxiliary air conditioning (e.g. heating glass surfaces, seat heating and seat cooling). If the air conditioning is running, the remaining running time is also sent. Your vehicle sends this data with the time stamp to the Audi IT systems when a timer is changed, the air conditioning status changes (start and end of a air conditioning process), the remaining running time is changed and/or the availability of the auxiliary air control functionality changes.

We process the aforementioned data for providing the service to communicate with your vehicle and to allow you to configure and manage the air conditioning process using your smartphone or myAudi and to display the air conditioning status. The air conditioning timers and settings you have configured are saved until you change them.

The air conditioning information from your vehicle is overwritten each time a new data record is sent, so that we only save the current status.

d. Audi charging

For access to public charging points on the Audi charging network, Audi is offering the Audi charging service to every user of an Audi e-tron vehicle. This offer is a service from Volkswagen Group Charging GmbH (“Elli”), Mollstraße 1, 10178 Berlin, Germany, which is independently responsible for processing data. Those wishing to make use of this service will be required to use myAudi and to enter into a contract with Elli. Audi transfers the Audi ID, VIN, your first name, surname and email address to Elli for the purposes of providing the service and identifying you as an Audi customer (Article 6(1)(b) GDPR).

Beyond that we have no influence on the scope of data that Elli collects in connection with the conclusion of your contract and your use of the service.

The collection, processing, transmission and use of personal data, as well as the purpose of its use is determined solely by Elli. For further information, the privacy policies of our partner, as well as your rights and options for protecting your privacy, please refer to our partner’s privacy policy: Privacy Policy (elli.eco)

With regard to the storage period of your personal data by Elli, please refer to privacy policy of Elli as the independent data controller. Privacy Policy (elli.eco)

e. e-tron Charging System connect

As part of the e-tron Charging System connect service, we process the following data and categories of data from your vehicle and your e-tron Charging System connect:

Necessary data:

Serial number to identify the charging system and connect the user
Device type, device status
Software version and date of update
User IDs to assign users to display the charging system in the user's myAudi account
Charging statistics
Charging status
Charging infrastructure information
Electricity tariff data
Audi ID to identify the user
VIN
Time of use for electronic data processing in each case

Optional data:

We process the above data in order to display the information about your e-tron Charging System connect in myAudi, to allow you to configure your e-tron Charging System connect and to optimise the charging process to suit the preferences you set up in myAudi.

We use CARIAD SE as a hosting provider in connection with the Audi Charging System connect. The data is processed in the European Union.

We save the settings of your e-tron Charging System connect until you change them or delete the assignment of the charging system to your myAudi account. The information about the charging process is overwritten each time a new data record is sent, so we only display the current status. Data regarding completed charges is continuously updated and displayed in table format in myAudi.

f. Plug & Charge

The Plug & Charge service enables you to insert your digital Plug & Charge charging card into your vehicle. This automatically authorises your e-tron at compatible charging stations – you no longer have to start the charging process with an RFID card or in the app.

Plug & Charge is a personalised Audi connect service which requires the key user of your vehicle to be linked as well as a charging agreement with one of our cooperation partners that is compatible with Plug & Charge. An overview of the current cooperation partners can be found in myAudi.

We process the following data or data categories from your vehicle as part of the service: VIN, availability and functional status (activated/deactivated/error), hardware and software version of your vehicle, as well as data from your charging contract: provider information, your contract number, period of validity.

In order to show you the correct data when using the service, we use your personal Audi ID as an identification feature. The data from your vehicle is transmitted to the IT systems of CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany, with each vehicle start and in the event of changes to the functional status with a time stamp (operation, support and development).

If the card provider changes the data from your charging contract, it will be received by the IT systems of our system operator and forwarded to your vehicle.

We process the aforementioned data for providing the service (Article 6(1)(b) GDPR) to enable you to add your digital charging card to your vehicle and to then automatically activate charging stations with the digital charging card.

We save the settings for your function and contract status until you change them yourself or cancel the link between the vehicle and your myAudi account. The information from your vehicle is deleted each time a new data record is sent, so that only the current data record is stored. The last 10 actions in each case are saved for the purpose of fulfilling the contractual obligations and to protect our legitimate interests in safeguarding system security (Article 6(1)(f) GDPR).

g. Driving data

The driving data service helps you to optimise your driving style. Personal driving data such as acceleration, road speed, engine speed and braking behaviour are measured and displayed with detailed statistics.

As part of the service, we process the following data or categories of data from your vehicle:

Driven distance
Track length
Consumption (tank consumption, electric power consumption)
Mileage before departure and on arrival
Average speed
Duration of travel
Date of data transfer.

Depending on the vehicle model or equipment of your vehicle, not all of the above data will be transferred from your vehicle.

The data is sent after a journey has been completed or by manually sending from the vehicle and can be accessed at any time via myAudi. You can delete your data from myAudi at any time, or it is deleted automatically when your Audi connect licence expires.

The data is available to you until erasure. You can erase the data in myAudi or using your smartphone.

As part of the service, we process the following data or categories of data from your vehicle: Distance travelled, consumption (fuel/electricity), total mileage at the beginning and end of the journey, average speed and journey time. Depending on the vehicle model or equipment of your vehicle, not all of the above data will be transferred from your vehicle.

After completing a journey, the data is transferred so that it can be displayed in myAudi or on your smartphone. You can access the transferred data via myAudi or your smartphone at any time.

The processor for the service is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany. The following processors are commissioned for development and optimisation purposes: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

We process the aforementioned data for providing the service in order to show you the information regarding your last journeys in myAudi or on your smartphone (Article 6(1)(b) GDPR). The aforementioned data is available to you until erasure. You can erase the data in myAudi or using your smartphone.

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR).

II. 4. Third-party services

If you make use of the opportunity to use online services of other providers (third parties), these services are subject to the responsibility and the privacy and terms of use of the respective provider. We generally have no influence on the content exchanged here.

As such, please obtain information on the nature, extent and purpose of the collection and use of personal data in the context of third-party services from the respective service provider.

1. Data plans

This offer enables each user to purchase data plans for the use of the Wi-Fi hotspot from an Audi mobile service provider partner and to use them in the linked vehicle. Prerequisite is the registration of an SIM owner with the mobile service provider. Audi will not transfer any personal data to the mobile service provider unless you have given your consent to such use or transmission. We have no control over the amount of data that the wireless service provider collects in connection with the purchase of the data plan and your use of the offering. The collection, processing, transmission and use of personal data as well as the purpose are determined exclusively by the mobile service provider. For more information, the privacy policies of the mobile service provider and your rights and settings options for the protection of your privacy, please refer to the privacy policies of the mobile service provider: https://audi.cubictelecom.com/de

III. 5. MMI services

a. Audi Online Music

Audi Online Music allows you to use the Amazon Music service of Amazon EU S.à r.l. (Société à responsabilité limitée), 5 rue Plaetis, L-2338 Luxembourg in your MMI display. The prerequisite for this is generally that you are registered as a user of Amazon Music. You can also access web radio on www.audials.com via Audi Online Music. Registration with the Audi connect service is not required. If you use Amazon Music through myAudi, the myAudi app will only forward the login and password you have entered for your Amazon Music member account to Amazon in order to verify your eligibility and allow you access to the Audi connect service. For future logins, only your authorisation (so-called token) will be saved in myAudi. Your login data is not stored in myAudi. It is not transmitted to our IT systems either. When you listen to the web radio via www.audials.com, your current position is only sent from the mobile device when searching in the area. If you create a list of preferred radio stations, it will be stored in myAudi. For more information on Amazon Music privacy, visit https://www.amazon.de. For more information on web radio privacy, visit www.audials.com.

b. Online news

In order to use the service, please log in to the vehicle by specifying your Audi ID. If you save your Audi ID in the vehicle, you will be automatically logged in when using the service in the future depending on the vehicle, i.e. without having to log in again. An online connection (e.g. through your mobile phone, plug-in SIM or fixed SIM) is required. Please note that the personalised service is also accessible to third parties if you have not logged out of the system or if you have allowed them to use your mobile phone (and your myAudi PIN, if you have created one) or if they can also use the plug-in SIM card registered to you. This online service is a personalised service, i.e. to use the service you must register and open a separate and individual Audi ID. In myAudi, you can configure the service and transfer certain data and content for the features of your Audi connect services (via your mobile phone connection or Internet connection) to your vehicle as well as permit the transfer of specific vehicle data from the vehicle to us or to the processor, as described below. As part of the service, we process the following data or categories of data from your vehicle: Time of access to the service and the nature of your request submitted via the MMI, the VIN and your myAudi user ID. We process the aforementioned data for providing the service in order to transmit the data stored under your Audi ID for the features of online news to your vehicle (e.g. RSS feeds that you have saved on myAudi). The time of access to the service and the VIN are also stored for a short time for the purpose of error analysis. Within the scope of Audi connect, Audi only permits the use of the communication or information service in the vehicle that you have already purchased separately for online news (“service provider”). Accordingly, we will forward your specified identification data (user name and password) to the service provider for the request so that it can allow you to access the service and make the service available within the connect services portfolio. The necessary identification and connection data is processed and used for the provision of services and the proper functioning of the services in accordance with the applicable legal requirements. Your identification data will be stored at Audi for the use of the personalised information service, so that you do not have to log in separately for each individual use. For further data processing in the context of the use of the service, the terms of use already agreed between you and the service provider or their associated privacy notices apply. Up-to-date information of the service provider (in particular with regard to the legal notice, the terms of use that may apply to the services and any data processing by the service provider) may be provided on the following website of the service provider: News: www.afp.com, www.tagesschau.de, www.partner.dw.com and any other RSS feed providers added by the user.

c. Connected Navigation

1. Car finder

The service “Car finder” allows you to call up the last known location of your vehicle after parking and locking. The address and navigation to the location can be displayed in myAudi.

As part of the service, we process the following data or categories of data from your vehicle: last known position of the vehicle when locking the vehicle together with the VIN. It is not possible to call up the position while driving.

Car finder is visible for any registered myAudi user who has been approved for this vehicle by the key user.

The last position is stored until the vehicle sends a new position as part of the service. No motion profiles of your vehicle are created. The service can be deactivated by the key user in myAudi.

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR).

2. Map display in the myAudi app

In order to be able to display a current navigation map in myAudi, information about the map section to be displayed is transmitted to our processor. Data transmission follows the principle of data economy. For this purpose, all requests from your vehicle are pseudonymised. Verification of the authorisation for use is pseudonymised. The data is transmitted to the processor with a different pseudonym (session ID) for each drive cycle. The processor does not receive either your name or your VIN. In addition to the aforementioned service-specific data, the metadata required to provide the service is transferred: time stamp, information about the SW versions used, map or map tile versions used. The Audi connect service is provided by the following processor: TomTom Germany GmbH & Co KG, Am Neuen Horizont 1, 31177 Harsum, Germany

3. Online traffic information

The service online traffic information informs you about current traffic events and shows the traffic flow on the map and along the route of your MMI system or in myAudi. To do this, your vehicle sends the following data to Audi's IT systems: current position of your vehicle (used in the vehicle) or the map section currently displayed (used in myAudi), the intended destination, and the traffic information settings in your vehicle.

Data transmission follows the principle of data economy. For this purpose, all requests from your vehicle are pseudonymised. Verification of the authorisation for use is pseudonymised. The data is transmitted to the processor with a different pseudonym (session ID) for each drive cycle. The processor does not receive either your name or your VIN. In addition to the aforementioned service-specific data, the metadata required to provide the service is transferred: time stamp, information about the SW versions used, map or map tile versions used.

The swarm data mentioned above is sent to the processor for further processing: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, Netherlands. The processor for providing traffic information is TomTom Germany GmbH & Co KG, Am Neuen Horizont 1, 31177 Harsum, Germany or HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, Netherlands.

Throughout a drive cycle, this processor continuously receives the position data as well as information from vehicle sensors on vehicle speed, direction of travel and metadata relating to the quality of the sensor data. This data is continuously transmitted from your vehicle – possibly via Audi IT systems – to the processor. Data transmission follows the principle of data economy. For this purpose, all requests from your vehicle are pseudonymised. Verification of the authorisation for use is pseudonymised. The data is transmitted to the processor with a different pseudonym (session ID) for each drive cycle. The processor does not receive either your name or your VIN. We process the aforementioned data in order to provide the service (Article 6(1)(b) GDPR).

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR). For this purpose, data may be transmitted to the processors: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany, and CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

4. Destination input via GoogleMaps

This service allows you to enter navigation destinations in Google Maps in your vehicle using myAudi. For this service, we process your myAudi user ID to link your myAudi account. We store the data until your delete it in myAudi.

We process the aforementioned data in order to provide the service (Article 6(1)(b) GDPR).

In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR). For this purpose, data may be transmitted to the processor: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany.

5. Special information – myAudi navigation

myAudi navigation provides you with personalised navigation services. To use the service, you must register and open a separate and personal myAudi account. Using your myAudi account, you can configure the services in myAudi and send certain data and content for the functions of your Audi connect services to your vehicles (via your mobile phone connection). The personalised services provided by myAudi navigation must be linked to your pseudonym across driving cycles. For this purpose, your myAudi user name and your vehicles are each assigned a unique pseudonym (user ID and vehicle ID). The processor only receives these pseudonyms. The data is synchronised using your pseudonymous user ID and your pseudonymous vehicle ID(s). The processor does not receive either your name or your VIN. After you delete the data in one of your MMI systems or your myAudi account, it is also deleted from our processor’s IT systems after the next successful synchronisation of all of your devices. The processor is: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany. If your vehicle supports the e-tron route planner, additional information about power consumption, vehicle climate data, the vehicle’s air conditioning settings and charging data is sent so we can provide route suggestions in myAudi, taking account of the available charging stations and the electric range of your vehicle. This data is stored in your myAudi account until it is overwritten by sending a new data set from the vehicle or when you delete your myAudi account.

Destinations created when privacy settings are enabled (“Recent destinations” and “Favourites”) are linked to your profile and synchronised with your myAudi account again after the privacy settings have been disabled. If you want to prevent certain destinations being synchronised at a later date, you must manually delete these destinations before disabling the privacy settings.

6. Special information – e-tron route planner (remote service)

You can use the e-tron route planner service to calculate charging routes on your mobile device. To calculate a suitable route for you with the specific consumption of your vehicle, we process the following data or categories of data from your vehicle as part of the service:

- VIN
- Consumption values for different speed ranges
- Information about auxiliary consuming units, including air conditioning
- Characteristic curves for electrical consumption
- Air conditioning settings
- Range calculation mode
- Current range
- Maximum range
- Time of data transfer
- Battery state of charge
- Planned target state of charge at charging stop
- Information about trailer mode
- Set speed limit
- Information about the installed vehicle inlet
- Information on the installed battery and its charging properties
- Individual consumption levels
- Gradient of the route (topographic factor)

After the vehicle is switched off, the corresponding data is sent to our IT systems and is subsequently available for retrieval through myAudi. e-tron route planning can be used by any registered myAudi user who has been approved for this vehicle by the key user.

We process the aforementioned data for providing the service so that you and the authorised myAudi users can retrieve the information in the myAudi app. Only the last record sent by the vehicle is stored so that it can be displayed to you, and this is overwritten when a new record is sent.

The service is provided by the following processor: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany. We process the aforementioned data in order to provide the service (Article 6(1)(b) GDPR). In addition, the aforementioned personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(f) GDPR). For this purpose, the aforementioned data may be transmitted to the processors: CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany, and e.solutions GmbH, Despag-Straße 4a, 85055 Ingolstadt, Germany.

D. Data processing in joint responsibility with the shop operators

Regarding individual data processing operations in connection with transactions in the myAudi Shop, Audi is the joint data controller with the respective myAudi Shop site owner (see list of importers in Appendix A, hereinafter referred to as the Shop Operator), or with J.P. Morgan Mobility Payments Solutions S.A., 161, Rue du Kiem, L-8030 Strassen, Luxembourg (hereinafter referred to as the Electronic Money Institution (EMI)) as the payment service provider. Whether Audi is the sole data controller for data processing or is the joint data controller for data processing with the shop operator or EMI is set out in the sections below. You can obtain further information regarding the processing of your payment details by EMI by contacting: dataprotection@jpmmps.com.

If you would like to exercise your data protection rights with Audi, please use the contact options under B. II.

If you would like to exercise your data protection rights with shop operators, please use the contact options listed in Annex A to contact the appropriate regional shop operator.

If you would like to exercise your data protection rights with EMI, please use the contact options at dataprotection@jpmmps.com

Annex A

List of Importers

Country	Importer Details
Austria	Porsche Austria GmbH & Co OG Louise-Piëch-Straße 2 A-5021 Salzburg
Belgium	D’Ieteren Automotive SA/NV Audi Import Arthur De Coninckstraat 3 B-3070 Kortenberg, Belgium
Canada	Audi Canada Inc. Bayly Street West 777 L1S7G7 Ajax, Ontario
Canary Islands	DOMINGO ALONSO S.L.U. Avenida Pintor Felo Monzón nº34 B 35019 Las Palmas de Gran Canaria, Spain
Croatia	Porsche Croatia d.o.o. Miroslava Miholića 2 HR-10 010 Zagreb
Czech Republic	Porsche Ceska Republika Porsche Ceska Republika s.r.o. Radlicka 740/113 d 158 00 Praha 5 Czech Republic
Denmark	Audi Danmark Park Alle 355 DK-2605 Brøndby
Estonia	Al Mare Auto OÜ Mõisa 4 13522 Tallinn Estonia
Finland	K Auto Oy, Vantaa Y-tunnus 0154578-2 Tikkurilantie 123, 01530 Vantaa
France	Volkswagen Group France S.A. 11, avenue de Boursonne B.P. 62 02600 Villers-Cotterêts Cedex France
Germany	AUDI AG Auto-Union-Straße 1 85057 Ingolstadt
Great Britain	Volkswagen Group United Kingdom Limited trading as Audi UK Yeomans drive MK 14 5AN Milton Keynes United Kingdom
Greece	Kosmocar S.A. 566-568, Vouliagmenis Ave. 164 52 Argyroupoli, Greece
Hungary	Porsche Hungaria Kft. 1139-Budapest Fáy utca 27. Magyarország
Ireland	Audi Ireland Block C Liffey Valley Office Campus Dublin 22 Ireland
Italy	VOLKSWAGEN GROUP ITALIA S.p.A. Sede legale in Viale G.R. Gumpert n.1, 37137 – Verona
Japan	Volkswagen Group Japan K. K. 5-10, Akemicho, Toyohashi-shi Aichi, 441-8550
Latvia	Moller Baltic Import SE Duntes 3 Ryga, LV-1013
Liechtenstein	AMAG Import AG Alte Steinhauserstrasse 12 CH-6330 Cham
Lithuania	Moller Baltic Import SE Duntes 3 Ryga, LV-1013
Luxembourg	Losch Import S.à r.l. 5, rue des Joncs L-1818 Howald Luxemburg
Netherlands	Pon’s Automobielhandel B.V. Zuiderinslag 2 3833 BP Leusden Nederland
Norway	Harald A. Möller AS Frysjaveien 31B, 0884 Oslo Pb. 6671 Etterstad 0609 Oslo Norge
Poland	Volkswagen Group Polska Sp. z o.o. Poznań (61-037), ul. Krańcowa 44
Portugal	SIVA S.A. Rua do Comércio Nº2 2050-541 Vila Nova Rainha Azambuja Portugal
Romania	Porsche Romania SRL 077190 Voluntari, Ilfov B-dul Pipera 2
Slovakia	Porsche Slovakia spol.s r.o. Vajnorska 160 83104 Bratislava Slovakia
Slovenia	Porsche Slovenija d.o.o. Bravnicarjeva 5 1000 Ljubljana Sloveni
Spain	Volkswagen Group España Distribución, S.A.U. Av. Parc Logístic, 12-20, Distrito de Sants-Montjuïc, 08040 Barcelona Spain
Sweden	Volkswagen Group Sverige Audi Sverige Hantverksvägen 9 151 88 Södertälje
Switzerland	AMAG Import AG Alte Steinhauserstrasse 12 6330 Cham

Annex B

Information on data processing which is the sole responsibility of fleet operators

If the vehicle is part of a fleet, then the relevant fleet operator or a service provider that is appointed to do so by management is able to access certain vehicle data and export it from the vehicle.

This includes the VIN, maintenance data when starting the vehicle (e.g. next oil change), trip data when the vehicle is turned off, remaining range data, tank fill level or battery state of charge on e-tron vehicles, and warning lights while driving. The fleet operator can also record the location of the vehicle when the vehicle it turned off, if required.

The fleet operator has sole responsibility regarding the decision to export and process data. Please therefore contact the fleet operator if you have any questions regarding data processing.

Please note that the fleet operator can exclude the services required for exporting data from being deactivated in the privacy settings.

A. Scope of the privacy policy

B. General Information

I. Who is the controller for the processing?

II. Who can I contact?

III. Contact details of the data protection officer

IV. Which rights do I have?

Depending on your jurisdiction, as the data subject, you may be entitled to the following data protection rights.

1. Access

2. Rectification

3. Erasure

4. Restriction of processing

5. Data portability

6. Withdrawal of consent

7. Complaint

a. Right to object on grounds relating to your particular situation

b. Objection to the processing of your data for our direct marketing purposes

c. Objection to the processing of your data for product improvement and general customer analysis

d. Exercise of the right to object

V. Which data do We process for which purposes and which legal bases apply?

VI. Who receives my data?

1. Processors

2. Third parties

3. Is data transferred to a third country?

VII. How long will my data be stored?

C. myAudi and Audi connect services

I. Processing not related to specific services

a. Receiving messages (push notifications)

b. Location data

c. Adobe Analytics

1. 5. Analyses for corporate management, product optimisation and offer management

2. 6. Data processing for personalised marketing and communication by Audi

VIII. II. myAudi services

B. Task

C. AUDI AG

D. Importer (website operator)

E. Point of contact for data subjects

F. X

G. X

H. Information obligations where personal data is collected from the data subject, in accordance with Article 13 GDPR

I. X

J. X

K. Processing of requests under the right of access from data subjects, in accordance with Article 15 GDPR

L. X

M. X

N. Processing of requests for rectification of data, in accordance with Article 16 GDPR

O. X

P. X

Q. Processing of requests for erasure of data or restriction of processing, in accordance with Articles 17 and 18 GDPR

R. X

S. X

T. Processing of requests to be provided with personal data, in accordance with Article 20 GDPR

U. X

V. X

W. Processing of objections to processing of data, in accordance with Article 21 GDPR

X. X

Y. X

Z. Notification of personal data breaches, in accordance with Articles 33 and 34 GDPR

AA. X

BB. X

1. Access to the myAudi website and use of country-specific websites by logging in to myAudi

2. Audi ID

b. Use of the Audi ID for other services (SSO solution)

3. Key user verification

4. User administration

5. Vehicle management

8. Digital service schedule

9. Audi Partners

10. Customer folder

11. Service request/booking

12. Equipment details

13. Extended warranty

14. Additional work

15. Owner’s literature

16. Data plans

17. Individual upgrades

18. Engine oil

19. Navigation map updates

20. Pre-filling contract forms

21. Google Maps consent

III. Audi connect services