Data Protection Notice Audi Connect

In this Data Protection Notice, we are informing you (as the owner, driver, passenger, etc.) about the processing of your personal data by AUDI AG, Auto-Union-Straße 1, 85057 Ingolstadt, Germany ("we") in connection with data processing in and data transmission from an AUDI AG vehicle.

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

I. Who is responsible for data processing

The entity responsible for the processing of your personal data (the Controller) is:
AUDI AG, Auto-Union-Straße 1, 85057 Ingolstadt, Germany.

II. Whom can I contact?

If you want to assert your data protection rights, please use the contact options at gdpr.audi.com.

There, you will find more information on how to assert your data protection rights.

You can also contact the following address by post:

AUDI AG, DSGVO-Betroffenenrechte (Data Subject Rights pursuant to GDPR), Auto-Union-Straße 1, 85057 Ingolstadt, Germany.

If you have general questions about this Data Protection Notice or the processing of your personal data by Audi, please address them to:

Audi Kundenbetreuung Deutschland (Customer Service Germany), PO Box 10 04 57, 85045 Ingolstadt, Germany.
Email: kundenbetreuung@audi.de

III. Contact details of the data protection officer

If you have concerns about data protection, you can also contact our company's data protection officer:

AUDI AG, Datenschutzbeauftragter (Data Protection Officer), 85045 Ingolstadt, Germany.
Email: datenschutz@audi.de

IV. What rights do I have?

Depending on your vehicle's equipment, you can deactivate the collection of certain personal data via the privacy settings in your vehicle. With the deactivation, services that use this data cannot be provided and are therefore not usable. Please note that the emergency call service will not be deactivated via this feature and will continue to send the data necessary to provide the services. We inform you about special features of the privacy settings for individual services in section C.II. "Privacy Settings".

Other online services in your vehicle may be protected against deactivation through privacy settings for legal or contractual reasons, such as the Audi Connect key (if available) or the Audi Connect theft tracking system (if installed). Find out about the services protected in your vehicle in the information on "Activate Privacy" in the privacy settings in your HMI (Human Machine Interface).

As the data subject, you are entitled to the following data protection rights, depending on your place of jurisdiction. Please note that such rights might be extended or restricted under applicable local law.

1. Right to be informed

You have the right to be informed about the collection and use of your personal data by us, in a readily accessible manner, and in plain and clear language. We are implementing your right to be informed, also through this notice, whose content may be updated from time to time.

2. Access

You have the right to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, to have access to your personal data stored by AUDI AG, be provided with information about to what extent your personal data will be processed or shared and to receive a copy of your stored personal data.

3. Rectification

You have the right to obtain from AUDI AG without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed.

4. Erasure

You have the right to obtain erasure of your personal data stored by AUDI AG without undue delay if the legal requirements are met.

This is particularly the case if

• your personal information is no longer needed for the purposes for which it was collected;
• the legal basis for processing was your consent, and you have withdrawn your consent;
• you have objected to processing your data which was based on the legal basis of legitimate interests due to personal reasons, and we cannot prove that there are overriding legitimate grounds for such processing;
• your personal data were processed unlawfully; or
• your personal data must be erased in order to comply with legal requirements.

If we have transmitted your data to third parties, we will inform them about the erasure to the extent required by law.

Please note that your right to erasure is subject to certain limitations. For example, we may not and/or must not erase data that we are still required to retain due to statutory retention obligations. In addition, your right of erasure does not extend to data that we need for the establishment, exercise or defence of legal claims.

5. Restriction of Processing

Under certain conditions, you have the right to obtain restriction of processing (i.e., the marking of stored personal data with the aim of limiting its processing in the future). The requirements are:

• The accuracy of your personal data is contested by you and AUDI AG must verify the accuracy of the personal data;
• the processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead;
• AUDI AG no longer needs the personal data for the purposes of the processing, but you require the data to establish, exercise or defend your legal claims;
• you have objected to processing pending the verification of whether the legitimate grounds of AUDI AG override your legitimate grounds.

Where processing has been restricted, such data will be marked accordingly and, with the exception of storage, will be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or an EU Member State, or the region where you are located at the relevant time, in each case only to the extent permitted under applicable data protection laws.

6. Data Portability

To the extent that we automatically process your personal data that you have provided to us based on your consent or any contract with you (including your employment contract), you have the right to receive such data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from AUDI AG. You also have the right to have the personal data transmitted directly from AUDI AG to another controller where technically feasible, provided that such transmission does not adversely affect the rights and freedoms of others.

7. Right to Object

If we process your personal data on grounds of legitimate interests or in the public interest, then you have the right to object to the processing of your personal data on grounds relating to your particular situation. In addition, you have an unrestricted right to object if we process your data for our direct marketing purposes (or other rights if laws of the region where you are located at the relevant time stipulate another legal basis for direct marketing). Please see our separate note in the section "Information about your Right to Object".

In certain situations, and in the context of a balancing of interests, we will also grant you an additional unrestricted right to object that goes beyond the privacy settings (deactivation option). For more details in connection with this, please see the section D. "Special Information about Online Services”.

If you wish to exercise your right to object, please use the contact details provided in section B.II.

8. Withdrawal of Consent

If you have given consent to the processing of your personal data, then you can withdraw such consent at any time. Please note that the withdrawal applies prospectively only. Processing that occurred before the withdrawal of consent is unaffected.

If you wish to exercise your right to withdraw your consent to the processing of your personal data, please use the contact details provided in section B.II.

9. Complaint

Furthermore, you have a right to lodge a complaint with a data protection authority if you believe that the processing of your personal data is unlawful. The right to lodge a complaint is without prejudice to any other administrative or judicial remedies. The address of the lead data protection supervisory authority responsible for AUDI AG is:

Bayerisches Landesamt für Datenschutzaufsicht (Bavarian State Office for Data Protection Supervision)
Promenade 18
91522 ANSBACH
DEUTSCHLAND

The above indicated contacts of the supervisory authority are without prejudice to your right under the conditions and procedures of applicable law to lodge a complaint with a supervisory authority in the state of your habitual residence, place of work or place of the alleged infringement (e.g., for Romania: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal 28-30 G-ral Gheorghe Magheru Bld., District 1, post code 010336, Bucharest, Romania, anspdcp@dataprotection.ro).

10. Information about your Right to Object

a.    Right to object on grounds relating to your particular situation

You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing takes place in the public interest or on the basis of a balancing of interests. This also applies for any profiling.

Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can demonstrate compelling legitimate grounds but will, of course, examine each individual case.

In the event of an objection, we will no longer process your personal data, unless

• we can demonstrate compelling legitimate grounds for the processing of these data that override your interests, rights and freedoms, or
• your personal data serves the establishment, exercise or defence of legal claims.
  

b. Objection to the processing of your data for our direct marketing purposes

To the extent that we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of the personal data concerning you for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. If you object to the processing for direct marketing purposes, then we will no longer process your personal data for these purposes.

c. Exercise of the right to object

The objection may be lodged without any form and should be made to the contact details listed in this Data Protection Notice under section B.II.

V. What data do we process for what purposes and on what legal basis?

We process your personal data in accordance with the provisions of the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (Bundesdatenschutzgesetz – "BDSG") as well as local regulations. References to articles in the GDPR in this Data Protection Notice are the equivalent articles in any applicable local regulations (if any) where those regulations implement or retain the GDPR.

The specific data and purposes of the data processing depend primarily on the particular vehicle and the vehicle equipment and the services used.

Please note that not all services listed may be available for your vehicle or in your country. The features available in your vehicle and their functional scope can be found in the service description.

The list and specification of all the maximum available features, regardless of your vehicle model and the specific software version, is only for the purposes of this Data Protection Notice and does not intend or lead to an expansion of the features or functional scope of your specific vehicle.

Your vehicle sends certain data to our IT systems or to the IT systems of the service providers we use. On the basis of the data sent from your vehicle, we provide you with a service or content that we deliver directly from our IT systems or via the IT systems of our service providers to your vehicle or app. This always requires at least a technical assignment of a request to a service and to a vehicle. This assignment is effected either via the vehicle identification number of your vehicle or a pseudonym. The personal data are pseudonymised if they can no longer be assigned to a specific data subject without additional information.

With so-called swarm services, data from many vehicles help you to experience new safety and convenience features in your vehicle. As with the online navigation features, the data transfer from your vehicle is pseudonymised, with a different pseudonym (session ID) in each driving cycle. Since these are location-based services, accurate location information must be sent and processed in a timely manner. The vehicle identification number is not transmitted to either the processing systems of AUDI AG or to the service providers involved. The data is only collected if the associated services are activated in your vehicle. The specific data that are transmitted for the respective service can be found in the description of the services marked as swarm services in section D. In addition to this service-specific data, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used, key position, ignition on/off, engine on/off.

Further details on the specifically processed data categories and the corresponding sources can be found in the following sections for each service under "Specific Information about Online Services".

The processing of the data listed for each service takes place in order to provide and perform the services you use (necessary for the performance of a contract with you or for the implementation of pre-contractual measures that are based on your requests (Article 6 (1) (1) (b) GDPR)) as well as to identify disruptions and maintain system security, including detection and tracking of inadmissible access attempts and access to our IT systems based on our legal obligations in the area of data security (Article 6 (1) (1) (c) GDPR) and our legitimate interest in the elimination of disruptions, the maintenance of system security and the detection of tracking of inadmissible access attempts and access our IT systems (necessary for the purposes of the legitimate interests pursued by AUDI AG or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data, in particular where the data subject is a child (Article 6 (1) (1) (f) GDPR)).

In individual cases, processing takes place for the exercise or defence of legal claims on the basis of our corresponding legitimate interest (Article 6 (1) (1) (f) GDPR).
If, in individual cases, we process personal data of passengers or other occupants, this is done to provide the service you and/or the passenger or occupant are using for the performance of the contract or for the purposes of pursuing our legitimate interest in the performance of the contract towards the respective contracting party (Article 6 (1) (1) (b) GDPR or Article 6 (1) (1) (f) GDPR).

For so-called swarm services, the service provider aggregates the data that it processes for the provision of the service with data from other vehicles, and saves the aggregation result without reference to the vehicles. Our service provider processes these data to optimise and further develop services to protect legitimate interests in order to offer customers a high-quality service (necessary for the purposes of the legitimate interests pursued by AUDI AG or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data, in particular where the data subject is a child (Article 6 (1) (1) (f) GDPR)). This requires processing and storing the exact location information with the respective events, where no reference to your vehicle or your person is made.

Insofar as we process your personal data otherwise, the processing is based on the following legal grounds for the following purposes:

Insofar as we process further data for other purposes or based on another legal ground, we will state this separately with the respective legal grounds in the notes in section D. “Specific Information about Online Services”.

Please note: We do not process your personal data for automated individual decision-making (including profiling).

VI. Who receives my data?

Within AUDI AG, those entities receive your data that they need to comply with our contractual and statutory obligations and for the purposes of the legitimate interests pursued by us.

1. Processors

Our service providers (processors) that we employ and engage may also receive data for these purposes. If we use processors to provide our services, we ensure that personal data is protected in accordance with the relevant statutory provisions by means of suitable legal precautions and appropriate technical and organisational measures.

We employ processors of the following categories for the provision of specific services, who support us in the execution of our business processes. Specifically, this includes undertakings in the following categories:

• Hosting providers
• Service providers
  

2. Third Parties

As a matter of principle, we will only disclose your personal data to third parties if this is necessary for the performance of the contract, if we or the third party have a legitimate interest in such disclosure, or if you have given your consent.

In addition, data may be transferred to third parties (including investigative or security authorities) if we are obliged to do so by law or by enforceable official or court order.

Regarding the processors employed in each case and the other recipients, please see the special information on the individual services in section D. “Specific Information about Online Services”.

3. Are data transmitted to a third country?

A transfer of data to third countries (i.e., countries that are neither members of the European Union nor of the European Economic Area) may occur to the extent necessary to perform services for you, if required by law, or where you have given us your consent (in the absence of any other appropriate safeguarding mechanism under the GDPR). Please note: Under applicable local law, a third country transfer might be defined differently, e.g., as a transfer outside of the country where you are located at the relevant time. In addition, we also share your personal data with processors in third countries in individual cases and insofar as this is necessary for the provision of the specific features. Please note that not all third countries have a level of data protection recognised as adequate by the European Commission. For data transfers to third countries where there is no adequate level of data protection, we ensure that, prior to disclosure, the recipient has either an adequate level of data protection (e.g., an adequacy decision of the EU Commission or the agreement of so-called EU standard contractual clauses of the European Union with the recipient or any other safeguard required under local law), or we have obtained express consent from our users.

You can find more information on the European Commission's adequacy decision on the website of the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).

You can obtain a copy from us of the specific applicable or agreed provisions to ensure an adequate level of data protection. Please refer to the information in the section B.II. “Whom can I contact?”

Details on data transfers to third countries are contained in section D. “Specific Information about Online Services”.

VII. How long will my data be stored?

We store your data only for as long as is necessary for fulfilling the purposes for processing personal data as described in this notice (e.g., providing our services to you or as long as we have a legitimate interest to do so, in particular to eliminate disruptions or to optimise our services). We only store the data that we require for the respective purpose and pseudonymise or anonymise the data that is processed beyond the provision of our services as far as possible.

In addition, we are subject to various retention and documentation obligations pursuant to, inter alia, the German Commercial Code (Handelsgesetzbuch – “HGB”) and the German Tax Code (Abgabenordnung – “AO”). The retention and documentation periods specified therein last up to ten years. Finally, the storage period is also governed by statute of limitations periods, which can be up to thirty years, for example, pursuant to Sections 195 et seqq. Of the German Civil Code (Bürgerliches Gesetzbuch – “BGB”), where the general limitation period is three years.

Under certain circumstances, your data may also need to be retained for a longer period of time, such as when a legal hold or litigation hold (i.e., a prohibition of data deletion for the duration of the proceedings) is ordered in connection with an administrative or judicial proceeding.

We may also be subject to retention and documentation obligations in line with the local legislation of your country.

To the extent further details are possible, you will find further information on retention obligations in section D. "Specific Information about Online Services."

VIII. Is there an obligation for me to provide data?

As part of our business relationship, you only need to provide the personal data that is required to enter into and conduct a business relationship, or that we are required to collect by law. Without this data, we will generally have to refuse to enter into the contract or to execute the order, or will be unable to perform an existing contract and possibly have to terminate it. This means that the use of a service requires that you provide the specified data. Unless you provide the data, we cannot provide the service to you. You can find further information about the privacy settings in section C. II.

I. What data does my vehicle process?

1. Electronic Control Units

a. General

Electronic control units are installed in your vehicle. Control units process data that they receive, for example from vehicle sensors, generate themselves or exchange with one another (vehicle data). Some control units are necessary for the safe functioning of your vehicle, others support you when driving (driver assistance systems), others enable convenience or infotainment features.

Below you will find general information on data processing in the vehicle. Specific information can be found in the respective owner's manual, which is available online and, depending on the equipment, also digitally in the vehicle, in direct connection with the notes on the relevant functional features and below under section D. "Specific Information about Online Services".

b. Personal Reference

Each vehicle is marked with a unique vehicle identification number. In some countries this vehicle identification number can be traced back to the current and former owner of the vehicle via information from the relevant national motor transport authority of the domicile (e.g., in Germany the German Federal Motor Transport Authority (Kraftfahrtbundesamt). In other countries, this might be possible via information from other local ministries or authorities). There are also other ways of attributing data collected from the vehicle to the owner or driver, for example via the license plate number.

The data generated or processed by control units can therefore be personal or become personal under certain conditions. Depending on which vehicle data is involved, it may be possible to draw conclusions about your driving behaviour, your location or your route or usage behaviour.

c. Legal Requirements for the Disclosure of Information

Insofar as there are legal regulations, manufacturers are generally obliged to release the data stored by the manufacturer to the required extent at the request of government agencies in individual cases (e.g., when investigating a criminal offence).

Government agencies are also authorised under applicable law to read data from vehicles themselves in individual cases. In the event of an accident, for example, information can be read from the airbag control unit that can help to investigate it.

2. Operating Data of the Vehicle

Control units process data to operate the vehicle. This includes for example:

• Vehicle status information (e.g., speed, deceleration, lateral acceleration, wheel revolution speed, whether the seat belts are fastened),
• Environmental conditions (e.g., temperature, rain sensor, distance sensor).
  This data is generally volatile – it is not stored after the vehicle is switched off and is only processed in the vehicle itself. Control units often contain data memory (sometimes also including the vehicle keys). These are used to temporarily or permanently document information about vehicle status, component stress, maintenance requirements and technical events and errors.
  Depending on technical equipment, the following information is stored:
• Operating conditions of system components (e.g., fill levels, tyre pressure, battery status)
• Deviations from system states in important system components (e.g., lights, brakes) that are documented in the internal vehicle systems event memory,
• System responses in specific driving situations (e.g., deployment of airbags, use of stability control systems)
• Information about vehicle-damaging events,
• For electric vehicles, the charge level of the high-voltage battery, estimated range.
  In special cases (e.g., when the vehicle has detected a malfunction), it may be necessary to store data that would otherwise be volatile.

If you use services (e.g., repair services, maintenance work), the stored operating data and the vehicle identification number (VIN) might, to the extent necessary, be read out and accessed. The data may be read out from the vehicle by an employee of the service network (e.g., workshops and manufacturer) or third parties (e.g., roadside assistance services). The same applies to warranty cases and quality assurance measures.

The readout is generally carried out via the statutorily prescribed connection for OBD ("on-board diagnostics") in the vehicle. The readout operating data records the technical conditions of the vehicle or individual components and helps with error diagnostics, compliance with maintenance obligations and with quality improvement. This data, especially information about component stress, technical events, operating errors and other errors, is sent with the respective vehicle identification number (VIN) to the manufacturer, if necessary. In addition, the manufacturer is subject to product liability. For liability issues, such as vehicle recalls, the manufacturer also uses operating data from the vehicle. This data may also be used to review warranty and guarantee claims by customers.

Error memories in the vehicle can be reset by a service provider as part of repair/service work or at your request.

3. Convenience and Infotainment Features

You can save convenience settings and customisations in the vehicle and change or reset them at any time. These include, depending on the equipment, e.g.,

• Settings of seat and steering wheel positions,
• Suspension and climate control settings,
• Driver assistance and driver information systems,
• Settings in instrument cluster and infotainment system
• Customisations such as interior lighting.
  
  

As part of the selected equipment, you can enter data into the vehicle's infotainment functions yourself. These include, depending on the equipment, e.g.,

• Multimedia data such as music, movies or photos for playback in an integrated multimedia system,
• Address book data for use in connection with an integrated hands-free device or an integrated navigation system,
• Entered navigation destinations,
• Data on the use of Internet services.
  
  

This data for convenience and infotainment functions can be stored locally in the vehicle or it can be on a device that you have connected to the vehicle (e.g., smartphone, USB flash drive or MP3 player). If you have entered data yourself, you can delete it at any time.

This data is only transmitted from the vehicle at your request, in particular when using online services in accordance with the settings you have selected. For further information on online services, please refer to section D.

4. Smartphone Integration e.g., Android Auto or Apple CarPlay

If your vehicle is equipped accordingly, you can connect your smartphone or another mobile device to the vehicle so that you can control it using the controls integrated in the vehicle. The smartphone's image and sound can be output via the multimedia system. At the same time, certain information is transmitted to your smartphone. Depending on the type of integration, this includes, for example, position data, day/night mode and other general vehicle information. Please refer to the owner's manual for the vehicle/infotainment system and to "Special Information".

The integration enables the use of selected smartphone apps, such as navigation or music playback. There is no further interaction between smartphone and vehicle, in particular active access to vehicle data. The type of further data processing is determined by the provider of the app used in each case. Whether and which settings you can make depends on the respective app and the operating system of your smartphone.

5. Online Services

If your vehicle has a wireless network connection, this enables the exchange of data between your vehicle and other systems (data servers of AUDI AG or data servers of service providers). In certain countries, the wireless network connection is enabled possibly by an on-board transmitter and receiver unit (built-in by us) or by a mobile device (e.g., smartphone) brought in by you. Online features (information and control services for your vehicle) can be used via this wireless network connection. This includes online services and applications/apps that are made available to you by us or by other providers ("Audi Connect services" or "services").

For information about each service, please see section D. "Specific Information about Online Services."

Please note that not all services listed may be available for your vehicle or in your country.

a. Manufacturer's Services

In the case of online services from AUDI AG, the respective features are described at the relevant place (e.g., vehicle infotainment system (MMI), manufacturer's website). The associated data protection information can be found below in section D. "Specific Information about Online Services". Personal data may be used to provide online services. The exchange of data for this takes place via a protected connection, e.g., with the IT systems provided for this purpose by AUDI AG. Any collection, processing and use of personal data that goes beyond the provision of core services takes place exclusively on the basis of legal permission, e.g., a statutory emergency call system, a contractual agreement or on the basis of consent.

You can activate or deactivate the services and functions (some of which are subject to a fee) and – depending on the vehicle – also the entire wireless network connection of the vehicle. This does not apply to functions and services required by law, such as an emergency call system.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

b. Data transmission in connection with charging

When a vehicle is connected to a charging station that includes a communication interface, function-related data (e.g. vehicle identification data) will be transmitted to the charging station as part of the charging process.

c. Third-Party Services

If you make use of the opportunity to use online services of other providers (third parties), these services are subject to the responsibility and the data protection terms and terms of use of the respective provider. We generally have no influence on the content exchanged here.

Therefore, please obtain information on the nature, extent and purpose of the collection and use of personal data in the context of third-party services from the respective service provider.

II. Privacy Settings

The "Privacy Mode" feature allows you to partially or completely restrict data communication via the vehicle's internal SIM card. To do this, you can deactivate/activate the data processing displayed in the vehicle for each group. Safety-relevant services are excluded from deactivation through Privacy Mode. You can find an overview of which services and data processing are assigned to the respective group under "Privacy Settings" in your vehicle's MMI.

Depending on the vehicle equipment and country, the primary user has the option of deactivating/activating individual services for all users of the vehicle in the myAudi portal, or the individual user can deactivate/activate individual services in the vehicle itself.

As part of this feature, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the selected privacy setting and the current deactivation/activation status per service or service group.
We process the above data to implement the settings and to enable you and authorised users (main and secondary users) to view the privacy settings in the myAudi web portal or in the Audi smartphone app.

Please note that changes to privacy settings only affect data transfer via the in-vehicle SIM card. Other wireless data interfaces such as Bluetooth, Bluetooth Low Energy (BLE), Wireless LAN (WLAN), CV2X Communication, Near Field Communication (NFC), Electronic Toll Collect (ETC), Integrated Toll Module (ITM) must be connected separately. Wired data transmission via USB, charging communication (high-voltage system) or on-board diagnostics (OBD) is similarly unaffected by the settings in "Privacy Mode".

III. Anonymisation of Vehicle Data

We may further use your personal data from the vehicle in an anonymised form. Anonymous means that it is no longer possible to draw conclusions or identify an individual person. For example, we remove identifying features such as the vehicle identification number, aggregate the data or only process statistical data. Anonymising the data serves to protect your privacy. If a legal basis for the anonymisation is required, this is done for the purposes of the legitimate interest pursued by us in the data protection-compliant further use of vehicle data, inter alia for the development and optimisation of our products and services and to increase road and product safety (Article 6 (1) (1) (f) GDPR).

Please note that some of the online services are offered not only via the MMI, but also on the optionally available Audi Rear Seat Entertainment (Rear Seat Entertainment for MMI 3G+, Audi Tablet for MIB2 and MIB2+) and can be used there as well. The following information on data processing applies accordingly

The specific data and purposes of the data processing depend primarily on the particular vehicle and the vehicle equipment and the services used. Please note that not all services listed may be available for your vehicle or in your country. The features available in your vehicle and their functional scope can be found in the service description.

The list and specification of all the maximum available features, regardless of your vehicle model and the specific software version, is only for the purposes of this Data Protection Notice and does not intend or lead to an expansion of the features or functional scope of your specific vehicle.

I. Registration and Login of Your Vehicle

To provide the online services in your vehicle and to secure your vehicle's communication, your vehicle registers with our IT systems for each driving cycle. For this purpose, your vehicle sends the following data or categories of data from your vehicle in the course of the registration: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner). If you use personalised services, your login data for your myAudi account, which you enter in the vehicle, will be transmitted to our IT systems. This means that certain data that you store in your myAudi account is also available in the vehicle (further information can be found in the information for the respective services).

For the use of certain online services, signed proof of authorisation (so-called "credentials") is transferred to your vehicle (e.g., OAuth token), with which our service providers can verify the authorisation to use a service. We only transmit the proof of authorisation to the service provider, without having to transmit your vehicle identification number or any other specific reference to you or your vehicle (pseudonymous authorisation). Information on the use of pseudonymous authorisation can be found under the individual services.

We process the above data to check, register and authenticate your vehicle on our IT systems in order to provide the Audi Connect services and display your license status in the vehicle (Article 6 (1) (1) (b) GDPR). In order to check your authorisation to use services, your vehicle registers with the IT systems of Audi AG in each driving cycle.

In addition to your vehicle identification number, we also log the time and type of service used in order to identify and analyse disruptions for the purposes of the legitimate interests pursued by us. The log data is stored for 4 months for this purpose.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

For unforeseen events, we additionally collect data for monitoring and analysis purposes to ensure the quality of the services offered. In this case, information such as type, origin and time of the event, the affected vehicle systems, and the general conditions are extracted and processed in the backend.

II. Special Information – Audi connect Navigation & Infotainment

1. Special Information – Navigation with Google Satellite Map™

From model year 2019 and use with MMI Rear Seat Entertainment or myAudi app:
To be able to display a high-resolution navigation map with satellite images in the MMI or the myAudi app, information about the map section that is to be displayed is transmitted to our service provider for the delivery of the satellite images. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. The satellite images are delivered by the following service provider: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands. If the service provider does not have current satellite images on file for the map section to be displayed, it contacts the following service provider to request the satellite images: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. This provider does not receive any personal data from you for this purpose, in particular it does not receive the session ID or vehicle-related data. Information about the stored data and the duration of storage can be found in the service provider's privacy policy: https://policies.google.com/privacy?hl=en&gl=us

Before model year 2019 and use with MMI Rear Seat Entertainment:

In order to be able to display a high-resolution navigation map with satellite images in the MMI, information about your current vehicle position, the exact course of your current navigation route (including destination and waypoints) and the roaming status of your mobile phone connection as well as the software version used and the system language set is periodically sent to our service provider. The service provider for providing the satellite images is: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Information about the stored data and the duration of storage can be found in the service provider's privacy policy: https://policies.google.com/privacy?hl=en&gl=us

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

2. Special Information – Personal Route Assistant

The personal route assistant supports you intuitively in reaching your navigation destinations. After successful registration, the parking locations of your vehicle, relationships between parking locations, specific routes driven, charging stations used as well as the day of the week and times are processed in the background.
Based on the learned data, probable navigation destinations are suggested to you when you get into the vehicle. If you do not select any of the destinations offered, you will be shown alternative routes in the event of traffic disruptions on routes that have already been learned.

The prerequisite for using the service is the registration and opening of a myAudi account. For the personalised service, the assignment to your pseudonym across driving cycles is necessary. For this purpose, a unique pseudonym (user ID) is assigned to your myAudi user name. The data is synchronised using your pseudonymous user ID. The service provider HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands only receives the pseudonym.
After you delete data in one of your MMI systems, it is also deleted at our service provider after the next successful synchronisation of all end devices. You have the option of deleting the data learned from you from the vehicle completely or relating to the last 24 hours at any time. The service provider is: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

3. Special Information – Online Map Update

With this service, the navigation database can be updated online directly in the vehicle. To do this, the vehicle analyses which regions within a country (e.g., Bavaria) are relevant for the vehicle and transmits this information to our service provider. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. The data are transmitted to the service provider with a different pseudonym for each driving cycle (pseudonymous vehicle ID). If you are logged in as a user in the vehicle, a pseudonymous user ID will also be transmitted. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, available memory for the update package, installation result, information about the software versions used, map or map tile versions used, data consumption. The service is provided by the following service providers: e.solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt. HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

4. Special Information – myAudi Navigation

myAudi Navigation provides you with personalised navigation services. The prerequisite for using the services is the registration and opening of a separate and individual myAudi account. With your myAudi account, you can configure the services in the myAudi portal and transfer certain data and content for the features of your Audi Connect services (via your mobile phone connection) to your vehicles, as well as allow the transfer of certain vehicle and user data between the compatible vehicle, mobile device and the service provider. For the personalised services of myAudi Navigation, the assignment to your pseudonym across driving cycles is necessary. For this purpose, your myAudi user name and your vehicles are each assigned a unique pseudonym (user ID and vehicle ID); the service provider only receives the pseudonyms. The data is synchronised using your pseudonymous user ID and your pseudonymous vehicle IDs. The service provider does not receive your name or your vehicle identification number (VIN). After you delete data in one of your MMI systems or your myAudi app, it is also deleted at our service provider after the next successful synchronisation of all of your end devices. The service provider is: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

If your vehicle supports the e-tron route planner, additional information about energy consumption, climate vehicle data and vehicle climate control settings as well as the charging data is sent so that we can provide route suggestions in the myAudi app, taking into account the available charging stations and the electric range of your vehicle. This data is stored in your myAudi account until it is overwritten by sending a new data record from the vehicle or until you delete your myAudi account.

Destinations created while the privacy settings are activated (last destinations, favourites) are assigned to your profile and synchronised again with your myAudi account after the privacy settings have been switched off. If you want to prevent subsequent synchronisation of certain destinations, you must manually delete these destinations before deactivating the privacy settings.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

5. Special Information – e-tron Route Planner (Remote Service)

With the e-tron route planner service, you can calculate charging routes using your mobile device. In order to calculate a suitable route with the specific consumption of your vehicle, we process the following data or categories of data from your vehicle as part of the service:

• Pseudonymised vehicle identification number (which can uniquely identify your motor vehicle)
• Consumption values for different speed ranges
• Data on secondary consumers, including air conditioning
• Characteristic curves for electrical consumption
• Climate settings
• Range calculation mode
• Current range
• Maximum range
• Time of data transmission
• Battery charge level
• Planned target charge level at the charging stop
  

The corresponding data is sent to our IT systems after the vehicle is switched on or switched off and is then available for retrieval via the myAudi app. The e-tron route planning is available to every authorised myAudi user who has been activated by the primary user for this vehicle.

We process the above data for the provision of the service in order to provide you and the authorised myAudi users with the information in the app for retrieval. Only the last record sent by the vehicle is stored so that it can be displayed to you, and this is overwritten when a new record is sent.

The service is provided by the following service provider: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands. We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR). For this purpose, the above data can be transferred to the service provider: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany.

6. Special Information – Map Display in myAudi app and MMI Rear Seat Entertainment

In order to be able to display a current navigation map in the MMI Rear Seat Entertainment and the myAudi app, information on the map section to be displayed is transmitted to our service provider. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. The service is provided by the following service provider: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

7. Special Information – Destination Feed via myAudi or Google Maps™:

With this service, you can use your myAudi account and the mobile connection you use to transfer data stored in your myAudi account (e.g., navigation destinations stored in the myAudi account, settings, etc.) to your vehicle via Google Maps™ for the features of the service.

For this service, we process your myAudi user ID for the assignment of your myAudi account. We provide the data in your myAudi account and store the data until you delete it in your myAudi account.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

8. Special Information – Online Points of Interest (charging stations, fuel prices, parking information, weather, restaurant search, hotel search), point of interest search with Google

Various service providers are connected to make it easy to search for numerous POIs (Points of Interest) in different categories via your MMI system, MMI Rear Seat Entertainment or your myAudi app. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are anonymised as far as possible.

As part of the services, when you make a search query, your vehicle sends the following data or categories of data to the IT systems of AUDI AG in order to be able to process your search query: the time you accessed the service and the type of query you sent via the MMI, pseudonymous information to check the authorisation of your vehicle or the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the search term, the selected system language, the vehicle position (location data place and time), model, drivetrain type, model year and/or the position that you have defined yourself (search position) – whether you have specified the vehicle position or the search positions is not transmitted.

If you use the option of voice control for the PoI search, your vehicle will also send your voice data after activating this function. The IT systems of AUDI AG, in turn, forward the queries to the respective content provider to provide the requested information. The vehicle identification number or another identifying feature for assigning the request to a vehicle or a person is not transmitted. However, since these are location-based services, it is necessary for each service to transmit your current position (vehicle or myAudi app) or the search position or route you have selected. The type of POI (e.g., hotel, restaurant, car parks) or searched name are transmitted as parameters for the search. In addition, the system language and type of units of measurement, e.g., kilometres or miles, are transmitted in order to provide the search result in the correct language and unit of measurement. We or the content provider process the above data to provide the service in order to be able display the desired information to you (e.g., charging stations, petrol stations, parking spaces, restaurants, train and bus timetables, arrival and departure times, etc.) in proximity to your current position or destination and for the other purposes mentioned below.

Below you will find a list of the individual services with details of the service provider:

Online POI search: This service allows you to search for numerous POIs of different categories, e.g., restaurants, hotels, transport facilities, leisure activities, etc. The following content providers are involved: HERE Global B.V. Kennedyplein 222 -226, 5611 ZT Eindhoven, The Netherlands; Yelp Inc., 140 New Montgomery, San Francisco, CA 94105, USA; Unless you have activated the privacy mode, you will find an “offer icon” next to certain POIs in the search results indicating that special offers and promotions are available for that POI. In order to determine promotions and offers that may be relevant for you, we process fuel type, vehicle model and location of the POI as selection criteria. You can retrieve the available offers and promotions by selecting the POI and clicking on “Details”. The service is facilitated by 4.screen GmbH, Sailerstrasse 17, 80809 Munich, with whom we have entered into a Joint Controllership Agreement (Art. 26 GDPR) determining our respective responsibilities for compliance with the obligations under the GDPR; but we do not transmit any personal data to 4.screen.

Service provider is: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich.

Fuel prices: This service allows you to search for current fuel prices. In addition to the general parameters, the type of fuel relevant to your vehicle is also transmitted. The content provider is: OPISNAVX, Chemin de la Mairie 24, CH-1258 Perly. Service provider is: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany.

Charging stations: This service allows you to search for suitable charging stations. The content provider is: Cariad POI Management, CARIAD SE, Berliner Ring 2, Brieffach 1080/2, 38440 Wolfsburg.

Parking information: This service allows you to search for parking spaces and car parks. The content provider is: Parkopedia Limited, 1st Floor, Apex Yard, 29-35 Long Lane, London, SE1 4PL, UK. Service provider is: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany.

Weather: This service allows the retrieval of weather information. The content provider is: Vaisala GmbH, Notkestraße 11, 22607 Hamburg. Service provider is: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich.

Train information: This service allows you to search for train stations/bus stops and their arrival and departure times. The content provider is: HaCon Ingenieurgesellschaft mbH, Lister Str. 15, 30163 Hanover.

Flight information: This service allows you to search for airports and arrival or departure times. The content provider is: FlightStats, Inc., 522 SW 5th Avenue, Suite 200, Portland, OR 97204, USA. For the transmission of your data to the content provider in the USA, please note the information presented in section B.VI.3.

Country information: This service allows the display of country-specific regulations for many European countries. The content provider is: wcities, 512 2nd Street Second Floor, San Francisco, CA 94107, USA.

Navigation destinations powered by Google: This service allows you to search for numerous navigation destinations in different categories, e.g., restaurants, hotels, transport facilities, leisure activities, etc. If you use your myAudi app for the search, the queries from the Google destination search are sent directly to the systems of the service providers. In contrast to the POI services described above, your vehicle or the myAudi app sends the requests for the Google destination search directly to the service provider's systems. In addition to pseudonymous information for authorisation to use the service, the current vehicle position or the search position you have selected, the search text and the set system language are transmitted. The service provider is: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Information about the stored data and the duration of storage can be found in the service provider's privacy policy: https://policies.google.com/privacy?hl=en&gl=us

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

9. Special Information – On-Street Parking

The on-street parking service allows you to search for and display parking spaces along streets. To do this, your vehicle sends parking events that include GPS positions of the vehicle before and during a parking event together with time stamps and information from vehicle sensors on vehicle speed, direction of travel and metadata on the quality of the sensor data. These data are transmitted from your vehicle to the IT systems of AUDI AG. They are not stored there, but forwarded directly to the service provider. The data are processed there. The service provider for the on-street parking service is: Parkopedia Limited, 1st Floor, Apex Yard, 29-35 Long Lane, London, SE1 4PL, UK. Further information can be found in the service provider’s privacy policy: https://www.parkopedia.com/privacy. When searching for on-street parking, the search location (which may match your current vehicle location) is sent to the service provider. Communication with the service provider is pseudonymous (session ID).

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

10. Special Information – Online Navigation

The online navigation service provides you with a route calculated online, taking into account the current traffic situation. This requires the transmission of the current position of your vehicle, the desired destination, as well as settings for route criteria and traffic information settings. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). The data transmitted to the service provider are used exclusively for service provision, service optimisation and service development. In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. The service is provided by the following service provider: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

11. Special Information – Highly Detailed 3D City Display

3D City Display provides you with three-dimensional buildings in the map view. For this purpose, current map tiles (ID and version) to be loaded are requested. To do this, we process the following data from your vehicle: tile area in which the vehicle is located. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). The data transmitted to the service provider are used exclusively for service provision, service optimisation and service development. In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. The service is provided by the following service provider: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

12. Special Information – Online Traffic Information

Online traffic information informs you about current traffic events and shows the traffic flow in the map and along the route of your MMI system or myAudi app. To this end, your vehicle sends the following data to the IT systems of AUDI AG: current position of your vehicle (use in the vehicle) or the current map section to be displayed (use in the myAudi App), the desired destination, and settings in your vehicle for traffic information. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. The above data is transmitted to the service provider for delivery: HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands. The service provider for providing the traffic information is TomTom Germany GmbH & Co. KG, Am Neuen Horizont 1, 31177 Harsum, Germany or HERE Global B.V., Kennedyplein 222-226, 5611 ZT Eindhoven, The Netherlands. Throughout a driving cycle, this service provider continuously receives the position data as well as information from vehicle sensors on vehicle speed, direction of travel and metadata about the quality of the sensor data. This data is continuously forwarded to the service provider – if necessary via the IT systems of AUDI AG. The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR). For this purpose, the above data can be transferred to the service provider: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany.

13. Special Information – Online Traffic Sign Information

The online traffic sign service updates the speed limits stored on your MMI system. To do this, your vehicle sends the recognised traffic signs, the GPS positions of the vehicle before, during and after detection together with time stamps and information from vehicle sensors on vehicle speed, direction of travel and metadata on the quality of the sensor data. This data is continuously forwarded to the service providers – if necessary via the IT systems of AUDI AG. The data are processed there. For quality assurance and checking the correctness of the recognition, it is necessary for the transmitted data to be stored for up to one week. After that, the transferred data is automatically deleted. Only the products of the processing, i.e., traffic signs with position and last detection time, remain saved until they are overwritten by new detections. A reference to your pseudonym (session ID) then no longer exists. The service providers for the online traffic sign service are: e.solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt; HERE Global B.V. Kennedyplein 222 -226, 5611 ZT Eindhoven, The Netherlands. For the delivery of the information to your vehicle, the data is transmitted to the service provider HERE Global B.V. Kennedyplein 222 -226, 5611 ZT Eindhoven, The Netherlands using the session ID or without reference to you or your vehicle (without session ID). To query online traffic signs, your vehicle also sends the selection of relevant map tiles (tiles along the route and around the current vehicle position) to the IT systems of this service provider at regular intervals. We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

14. Special Information – Online Traffic Light Information

The traffic light information service shows you information about the traffic light ahead in the form of a speed recommendation for crossing the next traffic light when it is green or, if this is not possible, a waiting time at the next traffic light. To do this, your vehicle sends the current vehicle position (location data/GPS position) to query relevant intersections in the vicinity as well as crossing data after passing an intersection with a connected traffic light to IT systems of AUDI AG. In addition to location and time information, this crossing data also contains information about the intersection and other service-specific attributes without personal reference.
We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, we process the above personal data for the purposes of quality assurance and checking the correctness of the switching forecasts of a traffic light as well as to create anonymised and aggregated evaluations and store the above data for up to 12 months for the purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

The service provider for the online traffic light information service is: CARIAD SE, Berliner Ring 2, 38440, Wolfsburg, Germany. The following service providers have been engaged for the development and quality assurance of the information sent to your vehicle: CARIAD SE, Berliner Ring 2, 38440, Wolfsburg, Germany.

15. Special Information – Hazard Information

The local hazard information service shows you hazardous spots, such as slippery roads, breakdowns, accidents, impaired visibility.

For this purpose, your vehicle occasionally sends the condition of the road and, depending on the event, the type of hazardous spot as well as the associated time and GPS positions, driving speed and direction of travel of the vehicle and other information on the vehicle condition (e.g., light status) and environmental conditions (e.g., outside temperature).

These data are transmitted from your vehicle to the IT systems of AUDI AG. They are not stored there, but forwarded directly to the service provider.

The service provider for the local hazard information service is: e.solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt and NIRA Dynamics AB, Wallenbergs gata 4, 58330 Linköping, Sweden. The service provider HERE Global B.V. Kennedyplein 222 -226, 5611 ZT Eindhoven has been engaged to deliver the information to your vehicle.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

16. Special Information – Online News

In order to use the service, please log in by specifying your myAudi login in the vehicle (user name (email address) and password)).

If you persistently save your myAudi login data in the vehicle, you may be automatically logged in when using the service in the future depending on the vehicle, i.e., without a new login. The prerequisite for this is that there is an online connection (e.g., through your mobile phone, plug-in SIM or fixed SIM). Please note that the personalised service is also accessible to third parties, if you have not logged out of the system or if you let them use your mobile phone (and your myAudi PIN, if you have created one) or if they can also use the plug-in SIM card registered to you.

This online service is a personalised service, i.e., the prerequisite for the use of the service is the registration and opening of a separate and individual myAudi account. In your myAudi account, you can configure the service and transfer certain data and content for the features of your Audi Connect services (via your mobile phone connection or Internet connection) to your vehicle, as well as permit a transfer of specific vehicle data from the vehicle to us or to the service provider, as described below.

As part of the service, we process the following data or categories of data from your vehicle:

The time of access to the service and the nature of your request submitted via the MMI, the vehicle identification number (with which your vehicle can be uniquely identified and assigned to a specific owner) and your myAudi user ID.

We process the above data for the provision of the service in order to transmit the data stored under your myAudi account for the features of online news to your vehicle (e.g., RSS feeds that you have saved on myAudi) (Article 6 (1) (1) (b) GDPR). The time of access to the service and the vehicle identification number are also stored for a short time for the purpose of error analysis.

Within the scope of Audi Connect, AUDI AG only enables the use of the communication or information service in the vehicle that you have already obtained separately for online news ("service provider"). Accordingly, we will forward your specified identification data (username and password) to the service provider for the request so that it can allow you to access the service and make the service available within the Connect services portfolio. The necessary identification and connection data are processed and used for the provision of services and the proper functioning of the services in accordance with the applicable legal requirements. Your identification data will be stored at AUDI AG for the use of the personalised information service, so that you do not have to log in separately for each individual use process. For further data processing in the context of the use of the service, the terms of use already agreed between you and the service provider or their associated data protection notices apply. Up-to-date information of the service provider (in particular with regard to the imprint, the terms of use that may apply to the services and any data processing by the service provider) may be provided on the following website of the service provider:

News: www.afp.com, www.tagesschau.de, www.partner.dw.com and any other RSS feed providers added by the user.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR). For this purpose, the above data can be transferred to the service provider: Valtech Mobility GmbH, Marsstraße 46, 80335 Munich, Germany.

17. Special Information – Online Radio

The online radio service shows you an up-to-date list of the radio stations available at your location in the vehicle as well as information from the radio station on the current playlist.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), current country, current system language, market, software version as well as current position of the vehicle (location data).

The above data is transmitted via our service provider e.solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt, Germany, without your vehicle identification number to our content provider or, in the case of a proximity search, directly to our content provider Audials AG, Erbprinzenstraße 27, 76133 Karlsruhe, Germany, for the provision of the station list and playlist (Article 6 (1) (1) (b) GDPR) as well as for the purposes of service optimisation and further development for the purposes of the legitimate interests pursued by it in the optimisation and further development of its services (Article 6 (1) (1) (f) GDPR).

18. Special Information – Hybrid Radio

The hybrid radio service adds current station logos and the option of tracking stations online to the lists of receivable radio stations generated in the vehicle.
As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), currently receivable broadcast radio stations, current country, current system language, software version. On this basis, we deliver the information to your vehicle in order to make the online station tracking function as well as current station logos available.

The above data is sent to our service provider e.solutions GmbH
Despag-Strasse 4a. 85055 Ingolstadt without your vehicle identification number and processed by it for the provision of the service (Article 6 (1) (1) (b) GDPR) and also for the purposes of service optimisation and further development to protect its legitimate interests in the optimisation and further development of its services (Article 6 (1) (1) (f) GDPR).

19. Special Information – Amazon Music /Apple Music

Within the scope of Audi Connect, AUDI AG only enables the use of the audio streaming service in the vehicle that you have already obtained separately (currently: Amazon Music, Apple Music). This requires that you first register with the provider of the audio streaming service. A non-personalised token provided by the service provider is transmitted for use in the vehicle. This token will be stored for the use of the service in the vehicle, so that you do not have to log in separately for each individual use process.

The respective conditions and notices of the service provider (e.g., Terms of Use, Data Protection Notices) shall apply to any further data processing within the scope of the use of the service.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

20. Special Information – Online Speech Recognition, Online Speech Output

As part of the services, we process the following data or categories of data from your vehicle: time of access to the service and speech data or text spoken by the user for speech recognition, language settings, the recognised search term and the current vehicle position (location data) when entering a destination, pseudonymised ID for the technical assignment of the request. To use the services, you must explicitly activate them with the associated voice command or via the vehicle menu. The voice data or texts are converted by our service provider into an audio or text/data format and the results are sent back to the vehicle.

The above data is processed to provide the service, to convert spoken audio signals into text or data and return them to the vehicle or to convert text into audio and read them to the user in the vehicle, for voice data on the basis of the consent you have given in the vehicle (Article 6 (1) (1) (a) GDPR).

To the extent necessary for the provision of the service, the above personal data is sent via our service provider e.Solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt to the speech recognition service provider Cerence B.V., CBS Weg 11, 6412 EX Heerlen, The Netherlands or for destination entries (addresses, points of interest, ... ) to HERE Global B.V., Kennedyplein 222, 5611 ZT Eindhoven, The Netherlands or to Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland or to Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

21. Special Information – Online Speech Recognition with Amazon Alexa

As part of the service, we process the following data or categories of data from your vehicle: the time of access to the service and language data spoken by the user, language settings, the token provided by the provider of the voice assistant to which you have connected.

The above data is processed to provide the service after express activation (Article 6 (1) (1) (b) GDPR).

To the extent necessary for the provision of the service, the above personal data will be transmitted to the provider you have connected via our service provider e.Solutions GmbH, Despag-Strasse 4a, 85055 Ingolstadt. We currently offer you the option of connecting Amazon Alexa.

Within the scope of Audi Connect, AUDI AG only enables the use of the communication or information service (currently: Amazon Alexa) in the vehicle that you have already obtained separately from a voice assistant. This requires that you first register with the provider of the voice assistant. For use in the vehicle, you send us a token provided by the voice assistant. This token will be stored in the vehicle for the use of the personalised information service so that you do not have to log in separately for each individual use process.

For further data processing in the context of the use of the service, the terms of use already agreed between you and the provider of the voice assistant or their associated data protection notices apply.

Up-to-date information on Amazon Alexa (in particular with regard to the imprint, the terms of use that may apply to the services and any data processing by Amazon Alexa) may be provided on the following website of the provider: https://www.amazon.de.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

22. Special Information – Audi Smartphone Interface

In addition to the section "Smartphone Integration, e.g., Android Auto or Apple CarPlay", your vehicle sends data to your mobile device connected via the smartphone interface. This includes the following data: steering angle, lights on/off, speed, GPS signal, ESP sensors. Which data is actually sent depends on the function you use.

In addition, your mobile device transmits data to your vehicle that you have actively enabled on the device when the connection between the vehicle and device is activated. This includes the following data: name and Bluetooth and Wi-Fi address of the connected mobile device, call lists, music titles, playlists, content of the screen of your mobile device. 

The name of your end device is stored locally in the vehicle in order to be able to identify different devices, and you can delete it in the vehicle at any time. The other data is transmitted during an active connection, but not saved.

No data is sent to the IT systems of AUDI AG in this case.

AUDI AG only enables the use of the communication or information service in the vehicle that you use via the mobile device. Accordingly, the vehicle sends the required data to the connected end device. For further data processing, in particular the forwarding of data to a service provider in the context of the use of the service, the terms of use agreed between you and the service provider or their associated privacy notices apply and you should refer to this for further information.

23. Special Information – Wi-Fi Hotspot

You can set up a Wi-Fi hotspot for your vehicle using your mobile device in your vehicle.

As part of the service, we process the following data or categories of data from your vehicle: MAC address and name of the end device used. This data is stored in the vehicle so that you can reconnect your end device more quickly. The Wi-Fi hotspot may use the data packets service. Information on this service can be found in myAudi.

We process the above data to provide the service to enable you to use the Wi-Fi hotspot (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

24. Special Information – User Profiles

The user profile Audi Connect service is a personalised service, i.e., the prerequisite for the use of the services made available by Audi Connect upon the registration and opening of a separate and individual myAudi account. Once a user has been identified in the vehicle using their myAudi account, personalisation enables the automatic adoption of the last personal settings within the framework of convenience and infotainment functions in the vehicle.

As part of the service, we process the following data or categories of data from your myAudi account: pseudonym, profile picture (photo), and infotainment preferences.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner).

With regard to the convenience settings, we process depending on the respective equipment, e.g.,

• Settings of seat and steering wheel positions
• Suspension and climate control settings
• Driver assistance and driver information systems
• Settings in instrument cluster and infotainment system
• Customisations such as interior lighting
  
  

With regard to the data you have entered yourself in infotainment functions, we process depending on the respective equipment, e.g.,

• Multimedia data such as music, movies or photos for playback in an integrated multimedia system,
• Address book data for use in connection with an integrated hands-free device or an integrated navigation system,
• Entered navigation destinations,
• Data on the use of Internet services.
  
  

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). Your personal settings in the area of convenience and infotainment functions are stored in the IT systems of AUDI AG for your personal myAudi account. If you log in to any vehicle with your myAudi login data, your personal settings will be automatically applied depending on the vehicle equipment. Your usage behaviour is not analysed.
If your myAudi account is deleted, the above data is also deleted from the IT systems of AUDI AG.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

III. Special Information – Audi connect Remote Control

1. Special Information – Vehicle Status

The vehicle status report service allows you to view various vehicle data via myAudi or your mobile end device. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner) as well as the current status of the doors (locking status) and status of windows, hatches and, if applicable, convertible/sunroof, spoiler status, fuel and oil level (OK/NOK), mileage, total range or individual range, parking light status, current warning messages, parking brake status, battery charge level for e-tron vehicles as well as AdBlue values for diesel vehicles.

The corresponding data are sent directly to our IT systems via the app upon turning on or turning off the vehicle, locking and unlocking, when opening or closing doors as well as upon reaching the critical state of charge of the 12V battery or on your request by access in myAudi or on your mobile end device, and is subsequently available for retrieval via the app and via myAudi. In addition, your vehicle sends the position of your vehicle when the vehicle is turned off. The vehicle status is visible to every authorised myAudi user who has been activated by the primary user for this vehicle.

We process the above data for the provision of the service in order to provide you and the authorised myAudi users with the information in myAudi for retrieval (Article 6 (1) (1) (b) GDPR).

In addition, receiving of push notifications can be activated. These provide any vehicle status information or recommendations that are available for this vehicle (e.g. temperature-based charging information regarding the drive performance of e-tron vehicles). Only the last record sent by the vehicle is stored so that it can be displayed to you, and this is overwritten when a new record is sent.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

2. Special Information – Driving Data (e-tron) / Remote Trip Statistics

As part of the service, we process the following data or categories of data from your vehicle: route length, consumption (fuel consumption, electrical consumption, secondary consumption, e.g., oil), total mileage at the beginning and end of the trip, average speed, trip time. Depending on your model or the equipment of your vehicle, not all of the data listed may be transmitted from your vehicle.
After completing a trip, the data is transferred for display in myAudi or on a smartphone. The transmitted data can be retrieved at any time via myAudi or using a smartphone.

We process the above data to provide the service in order to show you the information on your recent trips in myAudi or on a smartphone (Article 6 (1) (1) (b) GDPR). The above data are available until deletion by you. You can delete the data in myAudi or using a smartphone.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

3. Special Information – Charging Information

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be identified clearly and allocated to a specific keeper), user ID, characteristics and status of the vehicle and of the charging process (battery state of charge, battery size, battery temperature, status of the charging plug), time stamp of the journey and status of readiness to drive (ignition on/off), outside temperature and position data. Depending on the vehicle model, we may not process all of the data listed above.

We process the above data to provide the service, i.e. to give you personalised recommendations and suggestions for optimised settings for the charging process configuration through the app, based on your battery usage and your charging patterns. This service is available to the user who most recently logged into the vehicle.

You receive the charging information as a push notification in the myAudi app, if you have activated this feature.

We store your data for 30 days or until you unlink the vehicle from your myAudi account.

In addition, the aforementioned personal data may on rare occasions be processed for development and optimisation purposes, in order to protect our legitimate interests (Article 6(1)(1)(f) GDPR).

4. Special Information – Plug & Charge

The Plug & Charge service allows you to link your digital Plug & Charge card to your vehicle. The Audi connect Plug & Charge service is a personalised service, i.e. to use the service, you have to register and open a separate, individual myAudi account, link it to the key user of your vehicle and have a Plug & Charge compatible charging agreement with one of our cooperation partners. An overview of the current cooperation partners can be found in the myAudi portal and in the myAudi app.

As part of this service, we process the following data or categories of data from your vehicle: the vehicle identification number (which clearly identifies your vehicle and links it to a specific owner), the availability and function status (activated/deactivated/error), the hardware and software version of your vehicle as well as information from the charging agreement (supplier information, your agreement number, validity period).

To display the right data while you are using the service, we use your personal Audi ID for identification.

The data from your vehicle are transferred to the IT systems of CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany with a time stamp at each vehicle start and in the event of changes to the function status.

When the information from your charging agreement is changed, the information is received by the card issuer on the IT systems of CARIAD SE, Berliner Ring 2, 38440 Wolfsburg, Germany and forwarded to your vehicle.

We process the above data for the purpose of providing the service, in order to allow you to link your digital charging card to your vehicle and to then automatically enable charging stations with the digital charging card.

We store the settings for your function status and agreement status until you change them yourself or remove the link between your vehicle and your myAudi account. The information from your vehicle is deleted each time a new data record is sent, so that we only ever store the current data record. The last 10 actions in each case are saved for the purpose of fulfilling our contractual obligations and to protect our legitimate interests in safeguarding system security (Article 6 (1)(f) GDPR).

5. Special Information – Remote Control Auxiliary Heater

The remote auxiliary heater Audi Connect service is a personalised service, i.e., the prerequisite for the use of the service is the registration and opening of a separate and individual myAudi account. In your myAudi account, you can configure the service, a schedule for your auxiliary heater, and transmit certain data and content for the features of your Audi Connect services (via your mobile phone connection) to your vehicle and allow certain vehicle data to be transferred to us from the vehicle (as described below).

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the planned departure timer you have entered, the heating effect (defrost or interior heating), availability of auxiliary heating functionality (status tank empty, battery empty, system error), current status of the climate control system (heating, ventilation, not active) and the remaining runtime with air-conditioning running. This data is sent by your vehicle to the AUDI AG IT systems with the time stamp when you modify a timer, the climate control status (start, end of a climate control process), the remaining runtime and/or the availability of the auxiliary heating functionality.

We process the above data to provide the service to enable you to remotely control your auxiliary heater via the app (Article 6 (1) (1) (b) GDPR).

We save the settings of your timers until you change them yourself or unlink the assignment of the vehicle to your myAudi account. The climate control information from your vehicle is deleted each time a new record is sent, so that we only store the current record. The last 10 actions are stored there to fulfil our contractual obligations (Article 6 (1) (1) (b) GDPR) and for the purposes of the legitimate interests pursued by us in ensuring system security (Article 6 (1) (1) (f) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

6. Special Information – Remote Control Climate Control (e-tron)

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), current climate control status in the vehicle, availability of the auxiliary climate control functionality (status tank empty, battery empty, system error). We also process the climate control timers scheduled by you in myAudi, selection of the heating source as well as special configurations of the auxiliary climate control (e.g., heating of the glass surfaces) and seat climate control. If the air-conditioning is running, the remaining runtime is also processed. This data is sent by your vehicle to the AUDI AG IT systems with the time stamp when you modify a timer, the climate control status (start, end of a climate control process), the remaining runtime and/or the availability of the auxiliary climate control functionality.

We process the above data to provide the service in order to communicate with your vehicle and to enable you to configure and control the climate control process via smartphone or via myAudi and to display the climate control status (Article 6 (1) (1) (b) GDPR). The climate control timers and settings you have configured are saved until you change them. The climate control information from your vehicle is overwritten when sending a new record, so that we only store the current status. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

7. Special Information – Remote Control Locking and Unlocking

This service allows you to lock and unlock your vehicle via your mobile end device. As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), executed action (lock/unlock), condition of the vehicle doors and hatches and time stamp and ID of the mobile end device used.

The corresponding data is sent directly to AUDI AG upon execution of the service and will then be available for retrieval using your smartphone via the myAudi app and via myAudi. The service can be deactivated by the primary user in the myAudi portal.

We process the above data to provide the service to enable you to remotely lock and unlock your vehicle via the app (Article 6 (1) (1) (b) GDPR). We log the use of the service and store the actions for the purposes of system security and theft prevention and tracking for the performance of the contract (Article 6 (1) (1) (b) GDPR) and for the purposes pursued by our legitimate interests in securing the service for up to 5 years (Article 6 (1) (1) (f) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

8. Special Information – Remote Horn and Flasher

This service enables you to trigger the vehicle's horn and signals via your mobile end device. As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), executed action and time stamp and ID of the mobile end device used, current position of your vehicle (location data) and position of your mobile end device.

We process the above data to provide the service to enable you to remotely control your vehicle's horn and flashing within a certain radius of your vehicle via the app (Article 6 (1) (1) (b) GDPR). For the perimeter detection, the position of the vehicle and the end device are required.

The position data of your mobile end device will be deleted after the action has been performed. We store the above personal data of the last 10 actions (action and time) for the performance of the contract (Article 6 (1) (1) (b) GDPR) and for the purposes of the legitimate interests pursued by us in the security of our systems (Article 6 (1) (1) (f) GDPR) until you unlink the assignment of the vehicle to your myAudi account. The oldest above data are deleted each time a new record is sent. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

9. Special Information – Push Notification Anti-Theft Alarm System

If your vehicle's anti-theft alarm system is triggered, you can be informed via a push message within the myAudi app. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), detected event (triggering event) and time stamp. In addition, we transmit the current status of the anti-theft alarm system (so-called activation status) to the IT systems of AUDI AG whenever the status changes, in order to be able to validate alarm events.

The last alarm event is displayed to you in your myAudi app and an alarm history is saved to your myAudi account.

We process the above data for the provision of the service to provide you with alerts about a triggering of the theft warning system of your vehicle as a primary or authorised user via push message within the myAudi app (Article 6 (1) (1) (b) GDPR). You can view and delete the last alarm event via your myAudi account. We save the data in connection with your myAudi account until you delete it or unlink the assignment of the vehicle to your myAudi account. In any case, an alarm event is deleted after 30 days have elapsed since the event was detected. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

IV. Special Information – Audi connect Emergency Call & Service

1. Special Information – Statutory Emergency Call

In the event of a manual or automatic triggering of the legally required emergency call system (eCall), your vehicle sends a legally specified minimum data record and sets up a voice call to an emergency call centre. The data record contains the following data: vehicle identification number (with which your vehicle can be uniquely identified and assigned to a specific owner), vehicle type (car or light commercial vehicle), type of vehicle drive (petrol/diesel/CNG/LPG/electric/hydrogen), the current position of the vehicle (location data place and time) as well as the last 3 locations of the vehicle and direction of travel, number of vehicle occupants, time stamp, trigger type (manual, automatic).

This data is generated when triggered and stored locally for the duration of the emergency call and up to 1 hour after the emergency call.

When the emergency call is triggered, your vehicle sends the above data directly to the relevant public safety answering points, which are designated by the relevant authorities of the country in which you are located to be the first to receive and process eCalls to the single European emergency number 112.

The above personal data is processed on the basis of a legal obligation to provide the emergency call functionality (Article 6 (1) (1) (c) GDPR).

The service is automatically activated by default and cannot be deactivated. This ensures that your vehicle cannot be traced during normal operation on the basis of this service, i.e., no electronic tracking can take place.

For further information on data processing within the framework of the statutory emergency call, please refer to your vehicle manual. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

2. Special Information – Audi connect Emergency Call

The private emergency call service is an emergency call that can be triggered either automatically by activating in-vehicle sensors or manually (by pressing a button) by the vehicle occupants.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be uniquely identified and assigned to a specific owner), control (information on whether the emergency call was made manually or automatically, the current position of the vehicle (location data place and time), the vehicle type, vehicle energy storage type (e.g., petrol, diesel, natural gas, etc.), time of the emergency event, number of passengers in the vehicle, language setting, crash intensity (at the measuring points, front, left, right and rear or, if applicable, in the event of a rollover), passenger seat occupancy and door status. The vehicle positions before and after the emergency event are also stored in the vehicle. The last vehicle position before the vehicle was last switched off is continuously stored in the vehicle, even without an emergency call event, so that even if no current location can be calculated and transmitted to the call centre in the event of an accident, at least the last recorded location is known.

When the emergency call is triggered, the vehicle sends the above data to our call centre, Bosch Service Solutions GmbH, Lahnstrasse 34-40, 60326 Frankfurt am Main. This establishes an audio connection between the vehicle occupants and the nearest rescue control centre (police, control centre, traffic inspection) and forwards the data required for the rescue accordingly.

The above data is not transmitted to us for processing the respective emergency call, but directly to the call centre. In some vehicle models, the individual emergency calls are logged in a ring memory (limited to data documenting that an emergency call has taken place – not the content of the emergency call) and continuously overwritten. The call centre records the emergency call (voice call) and saves the recording of the caller (to enable possible queries/callbacks to the vehicle) for 24 hours. The other data of the emergency call are stored for a period of 10 years. The above personal data is processed to provide the service (Article 6 (1) (1) (b) GDPR).

The service is automatically activated by default and cannot be deactivated. This ensures that your vehicle cannot be traced during normal operation on the basis of this service, i.e., no electronic tracking can take place.

For information on data processing within the framework of the statutory emergency call, please refer to the information on this service. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

3. Special Information – Audi incident assistance and online roadside assistance

The Audi connect services “Audi incident assistance” and “Online roadside assistance” offer you an easy way of being put through to your importer´s call centre (in the case of market Germany, this is Audi) in case of an accident or breakdown. Your importer is the importer of the country in which the myAudi key user is registered.

In case there is no key user you will be put through to the importer of the vehicle´s destination country. Both services have to be confirmed and triggered proactively in the car. Alternatively, the service can also be used without Audi connect via the telephone hotline. An Audi call centre employee collects your personal data and data relating to the case.

The call centre employee may access your myAudi profile data so that rapid and targeted steps can be taken to log the case and provide you with assistance. We will forward this information to the importer. In the case of market Germany, no data will be forwarded. Your name and date of birth will be used for identification purposes (as well as the telephone number of the SIM card integrated into the vehicle where applicable or the vehicle identification number). The data will be forwarded for further processing to the dealer that you have selected in myAudi as your preferred dealer (or a different dealer if you indicate a different preference to the call centre employee).

You can use the service either by confirming a call that is automatically initiated by the vehicle or by calling the Audi call centre yourself. No vehicle data will be transferred to the Audi call centre unless you actively confirm the call or make a call yourself.

The following data or categories of data in connection with this service will be processed and forwarded to the importer for service delivery (In the case of market Germany, no data will be forwarded): Customer data (title, salutation, name, date of birth, address, country, telephone number, email address, number plate), vehicle data (VIN, brand, mileage, remaining range, model name, model year, colour, transmission, drive type, year of construction, vehicle type, equipment features), insurance data (insurance company name of the reporter, insurance identification number of the reporter, kind of accident, name of the opposing insurance company), damage data (area of impact, severity of impact, date of the accident, time of the accident, cause, warning lights, DTC, GPS data, accuracy of GPS data, direction of travel, type of damage, date on which the case was logged, precalculation of damage, next inspection, last inspection).

We process the above data to provide the service so we can provide rapid assistance in the event of an accident. In order to provide instant service delivery the importer, or in case of market Germany Audi, will forward your data to your service partner. Outside of Germany, please read the importer’s privacy policy terms & conditions for further information related to data processing by the importer.

Your importer (in the case of market Germany  Audi) will pass on data to contracting-parties in order to meet contractual obligations or to explicitly chosen third-parties (e.g. insurance) for whom you have given explicit consent (insurance). You then will be granted access to Audi connect services.

In connection with Audi incident assistance and online roadside assistance, we use processors as operation, hosting and support service providers.

Audi incident assistance and online roadside assistance data processing might require data access from the US during technical support.

Your data will be stored for as long as is necessary to provide the Audi connect service to you or for as long as there is a legitimate interest in continuing to store it.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

4. Special Information – Automatic Service Reminder

The Audi Connect Automatic Service Reminder is a personalised service, i.e., the prerequisite for the use of the service is the registration and opening of a separate and individual myAudi account. In your myAudi account, you can configure the service and transmit certain data and content for the features of your Audi Connect services (via your mobile phone connection) to your vehicle and allow certain vehicle data to be transferred to us from the vehicle (as described below).
As part of the service, we process the following data or categories of data that you enter in myAudi: selected Audi service partner, contact details (name, telephone number, email, preferred communication channel).

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the time stamp of the data collection, vehicle condition and diagnostic data, in particular mileage, oil fill level, clean diesel data (number of engine starts and remaining distance), remaining distance and time until the next service, currently active warning lights/notifications in the instrument cluster, the number of a fault event (including time stamp and mileage for fault entry), fuel level, history memory for warning lights/notifications and battery charge level.

We process the above data to provide the service in order to proactively initiate the appointment from the vehicle when a service interval is due. After the user’s activation of the functionality and a service interval is due, the vehicle transmits the vehicle status and diagnostic data as well as the contact data provided by the user in their myAudi account to the Audi service partner they have saved in their myAudi account. The latter then contacts the user by telephone or email for further scheduling. The above data transmitted is used for planning security, i.e., the service partner can already estimate the work for the maintenance or repair appointment, order spare parts in good time, schedule a replacement vehicle, etc. Your selected service partner processes the data to prepare the appointment, make contact and carry out the individual service.

The data relevant to the automatic service reminder service is stored for 3 months so that an appointment can be made within this period.

The service is only activated after entering the user's profile data in myAudi and agreeing to use the service, and can be deactivated in the myAudi account at any time during the term.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

5. Special Information – Predictive maintenance reminder

The Audi connect service for predictive maintenance reminders monitors wear parts in the vehicle. Monitoring only runs if the service for predictive maintenance reminders has been activated by the key user.

The selected service partner and the contact information (name, phone number, email address, preferred communication method) from your myAudi profile are used to deliver the service. This information is requested on activation of the service as necessary and can be changed in your myAudi profile at any time.

For predictive maintenance reminders, the following vehicle data is sent to our IT systems and stored for up to 4 years:

Vehicle identification number (which is used to uniquely identify your vehicle and link it to a specific keeper), time stamp of data recording, vehicle status data and diagnostic data (e.g. mileage, outside temperature, tyre pressure, information about the condition of the 12V battery and the tyre pressure monitoring battery, currently active warning lights/messages on brake fluid level), service-related information (e.g. remaining mileage and time until the next oil change, date and mileage at last inspection, maintenance interval data, vehicle master data, event memory entries, warning messages, history of warning lights/messages, error code of the event (including time stamp and mileage of when the error was entered))

The specific data for data processing are primarily based on the applicable vehicle and vehicle equipment.

We process the aforementioned data in order to provide the service (Article 6(1)(1)(b) GDPR). In addition, the above personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(1)(f) GDPR).

6. Special Information – Theft Tracking System

The Audi connect theft tracking system is a personalised service, i.e., the prerequisite for the use of the service is the registration and opening of a separate and individual myAudi account. In your myAudi account, the primary user can configure the service and activate or deactivate it.

To activate the service, we process the following data, which you provide when activating the service in your myAudi account: registration: name and contact details (address, up to 3 mobile numbers) and information about the vehicle (colour, body shape, number plate), vehicle Identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner). This data is transmitted to our service provider Vodafone Automotive Telematics SA, Via S. Franscini 10, 6850 Mendrisio, Switzerland or to a local service provider commissioned by the service provider to create the registration and activation.
If the vehicle detects manipulation, the vehicle sends the following data or categories of data to us and the service provider: manipulation event, current vehicle position (location data place and time), vehicle status data (mileage, battery voltage, speed, tank fill level, time from the vehicle, ignition status, engine status).

The vehicle then periodically sends the current vehicle position.
These data are transmitted to our service provider. The service provider then contacts the contact information stored by the primary user in order to forward the alarm.

With the consent of the primary user and upon confirmation of a theft or notification of a theft by the primary user, the service provider transmits the last known vehicle position to the national security or investigation authorities.
If the primary user reports a theft, the above data can also be actively queried from the vehicle via the service provider.

We process the above data to provide the service to detect tampering events and to enable the localisation of your vehicle in case of theft (Article 6 (1) (1) (b) GDPR). This service can only be activated or deactivated by the primary user. It will not turn off when privacy settings are activated. In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

7. Special Information – Online-Car-Care

The Audi Connect Online-Car-Care service is a personalised service, i.e., the prerequisite for the use of the service is the registration and opening of a separate and individual myAudi account. The Online-Car-Care service is activated as part of the primary user registration. As the primary user, you can activate or deactivate the service in your myAudi account.

The specific data and purposes of the data processing are primarily based on the respective vehicle and vehicle equipment. Please note that not all listed functions of Online-Car-Care may be available in your vehicle or country.

The service includes the following features:

• Anomaly assistant (swarm feature): A 4-stage function that uses online vehicle data from the fleet to monitor the vehicle's state of health. Functionality:

1. Event monitoring: The condition of the vehicle is monitored online in order to detect unusual accumulations of anomalies within certain parts of the vehicle fleet.
2. Analysis: In the next step, the causes of the anomalies in the affected vehicles are analysed.
   
3. Customer information: If the analysis reveals acute defects in a vehicle that require a visit to the workshop, the customer is informed in the vehicle and in myAudi and can conveniently contact the service partner via the Audi online service “Service request/booking”.
4. Prediction: Some anomalies can already be detected predictively, i.e., based on vehicle data it becomes apparent that the corresponding anomaly will occur in the future. The customer is informed of this in the vehicle and in myAudi and can conveniently contact the service partner via the Audi online service “Service request/booking”.

• Notification assistant: mirroring of the vehicle's current warning light status in myAudi.
• Display: additional display of relevant driver information and indicator lights from the instrument cluster via the myAudi app and portal.
• Reminder feature: If a critical warning light is present in the vehicle for a longer period of time or over a longer distance, the customer is reminded of this by email.
• Field measure assistant: A feature that controls field measures individually for each vehicle and displays them on all customer front ends:
• Needs-based control of field measures: By collecting vehicle online data, it is possible for certain field measures to check in advance whether the customer's vehicle is affected by a field measure. The customer is thus only informed about the field measure that the vehicle requires. This avoids unnecessary visits to the workshop for the customer.
• Customer information: If a vehicle is affected by a field measure, the customer is informed in the vehicle and in myAudi and can conveniently contact the service partner via the Audi online service “Service request/booking”.

To provide the service, we process the following data or categories of data from your vehicle and make the information available in myAudi and in the vehicle:

The vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the time stamp of the data collection and the mileage, as well as certain other operating data in the vehicle.

• This includes operating data that provide indications of an upcoming repair: vehicle status information, environmental conditions, operating statuses of system components, deviations from system statuses that lead to an event memory entry in the internal vehicle systems, reactions of the systems in special driving situations, charge level of the high-voltage battery (in electric vehicles), estimated range. This data is sent in accordance with the principle of data minimisation, i.e., AUDI AG evaluates all collected data to calculate forecasts (predictions) of repairs. Your vehicle sends this data at regular intervals (in some cases each time the vehicle is used) or when certain conditions are met (e.g., event memory entry, changes in the environmental or operating conditions, etc.).
• This also includes the operating states of system components that provide information about the display of indicator lamps and driver information in the vehicle's instrument cluster. Your vehicle sends this data to AUDI AG after the start and end of a journey during which an indicator lamp or driver information is active or its status changes.
• Operating states of system components that provide information about the software variant of the installed control units. This data is required to translate the raw data sent by your vehicle of detected deviations from system states into a readable format.
• Operating states of system components required for product monitoring of important components, e.g. battery voltages of the high-voltage battery.
• Operating states of system components required to analyse specific deviations from system states, e.g. engine speed.
• Internal logs for error analysis and error correction.

Your vehicle may send the above data when there is a change in an operating status that leads to an event memory entry in the vehicle, or they can be sent out cyclically, e.g., every 500 – 1,000 km or when the vehicle is started or during a charging process.

In the IT systems of AUDI AG, this data is linked using the VIN with technical data from production and previous workshop visits in order to be able to draw conclusions about vehicle equipment such as transmission, engine identification, etc. as well as the production period, software and hardware versions. If the VIN is not absolutely necessary for further analysis, it is replaced by a pseudonym, so that we process the data without reference to a specific driver or user, but with reference to a specific vehicle (via the pseudonym). A personal reference is only restored in justified exceptional cases, e.g., in order to enable recall campaigns or if safety-related anomalies are detected.


If the “Automatic Service Reminder” service is used, the information regarding which malfunction indicator light(s) or predictive model(s) are active will be transmitted to the dealer in addition to the information listed in the “Special information – Automatic Service Reminder” section.

The “Online-Car-Care” service can only be activated or deactivated by the key user.

You have the option at any time to temporarily switch off the transmission of certain data from your vehicle as part of the privacy settings, although this may limit the usability of the Connect services.

We do not use these data to create profiles.

In addition to the data from your vehicle, we process your name and email address from myAudi exclusively to inform you if your vehicle needs repairs (so-called "predictive information" and field measures) and to inform you of important indicator lights and driver information.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

8. Special information – Remote vehicle diagnostics

The Audi connect remote vehicle diagnostics service enables us to collect data on the current state of the vehicle and, in the event of a complaint, to carry out remote vehicle diagnostics on request. The result of the diagnostics is saved in the myAudi app and at the customer support contact points, and contains a recommendation of what to do next based on the specific diagnostics result.

The Audi connect remote vehicle diagnostics service is a personalised service, meaning that you need to register and open a separate and individual myAudi account to make use of it. The remote vehicle diagnostics service is activated as part of key user registration.

To provide this service, we process the following data and data categories regarding your vehicle and make this information available in myAudi and at the customer support contact points:

The vehicle identification number (a unique number with which the vehicle can be identified and assigned to a specific owner), the time stamp for the data collection and the odometer reading, as well as certain other operational data on the vehicle.

This includes operating data that provides indications for current errors: vehicle status information, environmental conditions, operating statuses of system components and deviating system statuses that lead to an event memory entry being made in the vehicle’s internal systems.

The data transmission follows the principle of data minimisation, i.e. AUDI AG evaluates all the data collected to determine the current state of the vehicle.

Your vehicle sends the aforementioned data when a change of operating condition leads to an entry being made in the vehicle’s event memory, when certain conditions are met (e.g. change of environmental or operating conditions) and at regularly recurring intervals, e.g. when the vehicle starts or when it is charging.

This service can only be activated or deactivated by the key user.

You can temporarily switch off the sending of certain data from your vehicle at any time by adjusting your privacy settings, although this restricts the usefulness of the connect services.

We do not use this data to create profiles.

We process the aforementioned data in order to provide the service (Article 6, para. 1, sub-para. 1, point b) GDPR). In addition, the aforementioned personal data may on rare occasions be processed for development and optimisation purposes, in order to protect our legitimate interests (Article 6, para. 1, sub-para. 1, point f) GDPR).

V. Special Information – Other connect Services

1. Special Information – Online Logbook

The online logbook service enables the semi-automatic keeping of electronic logbooks. In addition, the primary user can view various vehicle data via myAudi or their mobile end device. The prerequisite for using the service is the creation of a myAudi account, registration as the primary user and nomination as the primary user in the vehicle. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the user ID associated with the myAudi account and:

• At the start of the journey: date, time, mileage, GPS position, street name, house number, city, postal code, country
• At the end of the journey: date, time, mileage, GPS position, street name, house number, city, postal code, country, name of the primary user
  
  

The feature takes over these data from the navigation system and uses them to generate a logbook entry. We also process the category of the logbook entry indicated on the vehicle display (business trip, commute, private trip, uncategorised) and, if applicable, the business purpose and business partner. If a mobile end device is connected to the vehicle, the primary user can automatically transfer the business purpose and business partner from the smartphone's system calendar to the logbook via the myAudi app and transmit it to our IT systems. To do this, the myAudi app accesses the calendar of the primary user. The subject of the appointment is taken from the calendar for the business purpose data field and the organiser of the appointment is taken from the calendar for the business partner data field. The corresponding data is then available for the primary user to retrieve via myAudi. All logbook entries are available to the primary user in myAudi for recategorisation 7 days after the start of the journey. Logbook entries that are not fully categorised are automatically categorised as private trips after 7 days. We store this data until the primary user deletes it via myAudi. Logbook entries are no longer sent from the vehicle to our IT systems if the primary user has deleted their myAudi account or a primary user is no longer nominated in the vehicle. The primary user can create a PDF export of the logbook in myAudi. To do this, we process the data entered by the primary user in myAudi. These include name, place of residence and the registration number of the vehicle.

The above data will not be transmitted to us if you activate privacy mode before the end of the journey.

We process the above data to provide the service and to provide the primary user with the information in the vehicle and in myAudi for retrieval (Article 6 (1) (1) (b) GDPR). The service is provided by the service provider Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

2. Special Information – Log System Online (Owner's Manual)

The online log system service enables the on-board literature to be displayed digitally in your MMI. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner). Your vehicle identification number is transmitted to the IT systems of AUDI AG when the feature is started and used to provide the on-board literature for your vehicle model.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

3. Special Information – Audi Connect Key

The Audi Connect key service is a personalised and safety-relevant service. It enables the user to unlock, lock and start the vehicle using a mobile end device. Prerequisite for the use of the service is the previous registration in the myAudi portal and the verification as the primary user. Furthermore, the use of the Audi Connect key requires the download of the myAudi app.

For the proper assignment of the Audi Connect key to a user's mobile end device, this end device transmits the following data to the IT systems of AUDI AG for the purpose of authentication and authorisation: Card Production Life Cycle Data (CPLC), type of secure element, device type, app version and OS version and Google Cloud Messaging/Fire-based Cloud Messaging Token. This data is stored in the IT systems of AUDI AG together with the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner) and the assigned Audi Connect key for the purpose of authentication and verification of authorisation until the assignment of the end device is unlinked. This is required for the device to be recognised as an authorised key. AUDI AG uses processors as hosting and support service providers to provide the service.

With the assignment of an Audi Connect key to a user, the respective vehicle is also linked to the user and the user can see the vehicle and the vehicle equipment in the myAudi Portal or myAudi app. The primary user can see which users (email address) with which key name (which the primary user himself or herself has assigned) are assigned to the vehicle.

When using the Audi Connect key, i.e., when unlocking, starting and locking the vehicle using the mobile end device, data is transmitted from the mobile end device to the vehicle by means of Near Field Communication (NFC). This data is not transmitted to AUDI AG.

When using the Audi Connect key, the following data is transmitted to the IT systems of AUDI AG and logged and stored for the purposes of monitoring and ensuring service security for the performance of the contract: ID of the Audi Connect key (if applicable), ID of the conventional radio key (if applicable), ID of the Audi Connect key card (if applicable), vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), key type, status of the key card, status of the feature, type of change (e.g. changing the vehicle key when starting the vehicle, key card activated/deactivated, feature activated/deactivated), time of change and mileage.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

4. Special Information – Data Packets

This offer enables each user to purchase data packages for the use of the Wi-Fi hotspot from a partner mobile service provider of AUDI AG and to use them in the linked vehicle. Prerequisite is the registration of a SIM owner with the mobile service provider. AUDI AG will not transfer any personal data to the mobile service provider unless you have consented to such use or transfer. We have no control over the amount of data that the wireless service provider collects in connection with the purchase of the data package and your use of the offering. The collection, processing, transmission and use of personal data as well as the intended purpose are determined exclusively by the mobile service provider. For more information, the privacy policies of the mobile service provider and your rights and settings options for the protection of your privacy, please refer to the privacy policies of the mobile service provider http://www.cubictelecom.com/.

5. Special Information – Functions on Demand

The "Functions on Demand" feature enables the user to permanently or temporarily unlock additional vehicle features.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the vehicle status, activation information and, if applicable, the term of the purchased license. We process this data solely for the purpose of enabling the feature.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

6. Special Information – Audi as a Matchmaker

We process the following data when themes are activated through the vehicle: vehicle identification number (VIN), country of the vehicle, theme. Themes can still be viewed by other users even after the vehicle has been reset to factory settings. Please contact Audi Customer Support at kundenbetreuung@audi.de to have the themes deleted permanently.

We process the above data to provide the service (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

7. Special Information – Audi Application Store

The Audi Application Store comprises:

• Audi Functions Store for Group products of the VW brands
  - The Audi Functions Store is the basic store for every Audi customer. The first tab allows you to find out about and purchase Functions on Demand, Audi connect services and other functions offered by Audi. Visibility and price depend on the vehicle model, equipment version, market and region.
• Store for 3rd party apps
  - This gives customers access to a range of 3rd party apps, which can be installed directly in the MMI without a smartphone. The app portfolio is adapted specifically for each market and brand.

While using the Audi Application Store, we process the following data or categories of data from your vehicle:

IT usage data include Audi User ID, information about purchased licence packages and services, status of apps currently in the vehicle (completed installations, deinstallations, downloads and updates per user or vehicle), saved user settings (e.g. selected shopping region and activation of automatic updates), installations queued by the customer or administrators, user access with corresponding timestamps, and IP address as part of the web application.

Vehicle identification number (VIN) (which uniquely identifies your vehicle and assigns it to a specific owner).

Vehicle usage data includes the configured language settings.

In addition, vehicle master data including vehicle country of registration, brand, model, year of manufacture, installed infotainment control unit, infotainment system software version, Android API level and CPU architecture.

This data is saved in the cloud by Harman Becker Automotive Systems GmbH, Becker-Göhring-Strasse 1, 76307 Karlsbad, Germany, on an Amazon Web Services instance in Ireland.

IT usage data is stored until the myAudi account is deleted. The IP address and user access data (in the form of log files) are stored for 30 days, excluding audit log files. Audit log files are stored for 12 months.

The vehicle usage data and the VIN are only processed and are not stored; they are only used to assign the language setting. All other data is stored until the myAudi account is deleted.

We process the personal data that you provide as part of the registration process and the above data when using the Audi Application Store on the following legal basis: Performance of a contract or steps prior to entering into a contract, insofar as necessary (Article 6(1)(b) GDPR). The data is processed for the purpose of providing an offer and a service.

The above personal data may also be processed occasionally for the purposes of development, optimisation and IT security (e.g. prevention and tracking of attacks) in order to safeguard our legitimate interests (Article 6(1)(f) GDPR). With regard to data processing as part of the ordering and payment process, please refer to the privacy policy of the Audi Function Store.

8. Special Information – In-Car Office

The In-Car Office service allows the user to access and display their inbox and calendar on the central display in the vehicle, as well as automatically dial in to conferences.

As part of this service, we process the following data or categories of data from the vehicle: Login data for the myAudi user account, the access tokens for Microsoft and Google, as well as emails and calendar data accessed by the customer.

The user must log in to their myAudi User account and enter the login details for Microsoft or Google to be able to access the relevant API (interface). This allows the user to access emails and the calendar or create new content. New content is processed in the vehicle and sent back to the Microsoft or Google API.

Audi only acts as an interface and directs the emails or calendar entries from the vehicle to the In-Car Office backend, which then synchronises with the Microsoft or Google interface. There is no further processing by AUDI AG.

AUDI AG stores the myAudi user ID and the access tokens for customers’ email accounts. These tokens are stored until the customer deletes them or the customer deactivates or deletes the myAudi account.

The accessed calendar and email content is stored for 30 days in the vehicle and is automatically deleted after that period. The user can also manually delete the cache at any time via the settings of the In-Car Office app.

The above personal data is processed to provide the requested services (Article 6(1)(1)(b) GDPR).

In addition, the above personal data may in specific cases be processed for development and optimisation purposes to safeguard our legitimate interests (Article 6(1)(1)(f) GDPR).

VI. Special Information – Product Safety, Optimisation and Development

1. Vehicle and Product Safety

For reasons of (commercially necessary and legally required) product monitoring, we process the following data or categories of data from your vehicle to improve vehicle and product safety:

• (1) The vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the time stamp of the data collection and/or the mileage
• (2) Deviations from system states that lead to an event memory entry in the internal vehicle systems
• (3) Operating states of system components that provide information about the display of indicator lights and driver information in the vehicle's instrument cluster
• (4) Operating states of system components that provide information about the software variant of the installed control units. This data is required to translate the raw data of detected deviations in system states sent by your vehicle into a readable format.
• (5) Operating states of system components that are required for product monitoring of important components, e.g., battery voltages of the high-voltage battery.
• (6) Operating states of system components that are necessary for the analysis of certain deviations from system states, e.g., the engine speed.
• (7)    GPS data that are collected event-based only if this is required to ensure the purposes listed above; these will be deleted or anonymized immediately when the data are no longer required for the purpose.

Your vehicle sends the data cyclically upon starting/shutting off of the vehicle and/or during charging, e.g. in the event of a change to an operating state that results in an event memory entry in the vehicle.

The analysis of certain deviations of system states may require recording and forwarding data up to 60 seconds before and after the deviation of interest. If the deviation to be examined occurs, data (1) and (6) are transmitted to AUDI AG. There is no permanent transmission of data from the vehicle.

Only the data required for product monitoring are collected.

The specific data and purposes of data processing are primarily based on the respective vehicle, the vehicle equipment and your country.

In the IT systems of AUDI AG, this data is linked using the VIN with technical data from production and previous workshop visits in order to be able to draw conclusions about vehicle equipment such as transmission, engine identification, etc. as well as the production period, software and hardware versions. If the VIN is not absolutely necessary for further analysis, it is replaced by a pseudonym, so that we process the data without reference to a specific driver or user, but with reference to a specific vehicle (via the pseudonym). A personal reference is only restored in justified exceptional cases, e.g., in order to enable recall campaigns or if errors relevant to safety or product liability are identified.

We process the above data for the purpose of product monitoring to maintain and further develop product safety and product conformity (necessary for the purposes of the legitimate interests pursued by AUDI AG or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data, in particular where the data subject is a child (Article 6 (1) (1) (f) GDPR)).

If you have activated the Online-Car-Care service, the data collected via this service will also be processed for the aforementioned purposes.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

We do not use these data to create profiles. You have the option at any time to temporarily switch off the transmission of certain data from your vehicle as part of the privacy settings, although this may limit the usability of the Connect services. If you want to stop the sending of data from your vehicle for the aforementioned product monitoring purposes more than just temporarily, please contact our customer service (see section A.II. "Whom can I contact?").

2. Optimisation and Development of Vehicle Features and Vehicle-Related Online Services

For the purpose of optimising our range of vehicle features and adapting them to customer expectations, in particular the evolution and new development of innovative features, your vehicle sends various technical function data from the assistance systems, convenience systems, operating elements or control units together with environmental data (e.g., outside temperature, brightness) as part of temporary campaigns and, if applicable, the associated position data and information on the length of the route, vehicle speed, vehicle status data (e.g., tank fill level or charge level, mileage), time of data collection and usage data to systems of AUDI AG. If there are error messages in your vehicle, these are sent to the systems of Audi AG for the purpose of error diagnosis.

Depending on the type of campaign, the data is transmitted using a randomly generated and time-limited session ID or another pseudonym, so that this data can no longer be assigned to you as the driver or user without additional information. For an analysis, we only collect the data that is required for the respective evaluation. Categories of data other than those specified above are not processed.
To the extent possible, we anonymise the data in our IT systems before evaluation. If this is not possible, we largely analyse the data from your vehicle in such a way that no conclusions can be drawn about you or your vehicle. AUDI AG has established measures to ensure that a personal reference can only be established in justified exceptional cases, e.g. if errors relevant to safety or product liability are identified. We do not use this data to create profiles or evaluations based on individual vehicles. In addition, no data attributes are used that allow profiling or conclusions about your behaviour or behaviour patterns.

We process the above data as part of time-limited campaigns for the purpose of optimising the range of vehicle features and adapting them to the expectations of our customers (necessary for the purposes of the legitimate interests pursued by AUDI AG or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data, in particular where the data subject is a child (Article 6 (1) (1) (f) GDPR)).

You have the option at any time to deactivate the transmission of data for the purpose of optimising and developing vehicle features from your vehicle as part of the privacy settings, although this may limit the usability of the Connect services. If you would like to prevent the sending of data from your vehicle in general, please contact our customer service (see section A.II. "Whom can I contact?").

3. Special Information – Connection Test/Check License Status

You can check the status of the licenses for the online services and the connection status of your vehicle in your vehicle. If, for example, a service cannot be used, you can check here whether the licenses have expired or whether your vehicle is offline. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner) and the current connection status (online/offline) or license status of the vehicle.

The corresponding data is sent directly to our IT systems when turning off the vehicle and will then be available for retrieval using your smartphone via the app and via myAudi. The vehicle status is visible to every authorised myAudi user who has been activated by the primary user for this vehicle.

We process the above data to provide the service in order to show you information about the connection status of your vehicle with the app and our IT systems (Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

4. Special Information – Online System Update

Via online system update, we provide you with updates for your vehicle system for download and installation. As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), software and hardware version and serial numbers of the hardware in order to check whether an update for your vehicle system is available and to provide the correct update version.

We store this data together with the information on the provided update for vehicle safety purposes to provide our contractual services (contract performance, Article 6 (1) (1) (b) GDPR). In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

VII. Special Information – Advertising

1. Promotional communication and market research based on consent (Article 6(1)(a) GDPR)

Further product information and market research: If you would like to receive information about our products and services, you can request this advertising. For this purpose, we process the following data within the framework of the consent given by you (Article 6(1)(1)(a) GDPR) for the purpose of sending you the marketing information: Surname, first name, email address and/or telephone number. If you consent to being contacted by email, we use what is known as the double opt-in procedure, i.e. we send you an email to the specified email address with a request to confirm your consent. You can find out how to revoke your consent in the section "What rights do I have?".

If you have separately given your corresponding consent to further use of your personal data, we will process your personal data in accordance with the scope described in the consent and, with your separate consent, also with a high degree of personalisation on the basis of an individual customer profile and/or market research, and may pass this on to certain other sales partners. For details, please refer to the respective declaration of consent.

If you have given your separate consent to personalised advertising and, if applicable, on the basis of an individual customer profile, we process the following supplementary information:

Supplementary personal information/preferences, e.g. company name, your relationship with this company, if you use a company vehicle or are our contact person for this company potential time period in which you may need a new vehicle and your interest in Audi vehicles and services as well as your requests for information and test drives, etc. preferred or current Audi partner(s)
vehicle identification number and other attributes linked to it (vehicle master data such as model, year of manufacture, equipment) interests and hobbies status of your data protection declaration of consent and selected or preferred communication channel Identification data, e.g. customer number, Audi ID, contract number Customer history, e.g.

vehicle purchase data incl. model, configurations, date of purchase, date of registration, registration number, date of order, date of delivery, owner, list price
campaign history and response (customer and prospect management programmes and direct marketing activities)

Vehicle usage data, e.g. contract data, geo and sensor data related to the customer's USE. This includes information about connect services (pseudonymous), infotainment data, mileage, licences (e.g. booking FoD).

App / website / social media data

if you have registered or logged in, your Audi ID, your account data Audi uses the sales and customer care information collected in this way to:

determine which information and offers are most likely to be of interest to you and to

contact you in connection with this information and offers, and for

promotional communications about products and services in accordance with your data protection declaration of consent. This includes, in particular, information about vehicles, original parts and accessories, lifestyle products, driver equipment, accessories and myAudi services as well as information about data recipients selected in the consent, e.g. VW Financial Services (leasing), Volkswagen Group Charging GmbH (charging service & tariff)

In the data protection declaration of consent, you also specify the communication channels (e.g. post, telephone, email, push notification) through which we may contact you.

You can also decide here on your consent to the creation of an individual customer profile in order to receive personalised offers.

The profile may include, if available, the following information provided by you or through your use of products or services: Contact information (such as name, address, email); supplementary personal information/preferences (such as preferred dealer, hobbies); identification data (such as customer number, contract number); customer history (such as receipt of offers, vehicle purchase data, dealer information); vehicle data (such as usage data of the myAudi app: mileage, range); contract data (e.g. type and term of financial service contracts such as leasing or financing); app/ website/social media data

Data processing for advertising purposes is generally carried out in Germany. Under no circumstances will personal data be transferred to a country outside the EU.

I. Personal POI

Using an SD card, the user can load their own points of interest into their vehicle. This data is displayed on the map and can be used for navigation. This data is stored locally in the vehicle. A transfer to us only takes place when used as part of another service.

II. Driver Availability Detection

This vehicle is equipped with a technical function for driver availability detection. Driver availability detection is active at all times while the vehicle is being driven and cannot be deactivated by the vehicle occupants.

This function is used, for example, for microsleep detection to ensure that the driver is ready to take over the wheel again if necessary even if traffic jam pilot is activated. This is because even in automated driving mode, the driver must always be able to take over the task of driving based on the traffic situation.

If the driver is not ready to take over the wheel despite repeated requests, the vehicle is stopped, the hazard warning lights activated and an emergency call (eCall) is made. 

Driver availability is detected using a camera with infrared lighting, which is permanently installed in the vehicle in the upper area of the instrument panel. The cone of vision of this camera captures the driver's head. It cannot be aimed at other areas of the vehicle (e.g., front passenger seat).

The camera images are not recorded or saved, but are immediately transmitted to the relevant control unit in the vehicle for processing. The control unit analyses the current camera image using image evaluation software. This image evaluation software determines technical measurements of human facial features (e.g., the general position of the nose, ears or eyes) and uses these measurements to determine information about the driver's readiness to drive (e.g., based on the position of the head or the direction of the eyes). The image evaluation software may be able to detect whether the driver is unconscious or asleep, for example, and use this information to assess whether the driver is able to take the wheel again. The technical parameters generated by the image evaluation software are collected anonymously and are not assigned to a person by name and do not allow the driver's face to be reconstructed (i.e., only abstract technical parameters are recorded).

In order to be able to reactivate the driver availability detection as quickly as possible after a break in driving, the above technical parameters are stored in a small number of memory locations in the responsible control unit. As soon as the storage capacity in the responsible control unit is reached, the older technical measured variables are overwritten by the most recent ones. In any event, the technical parameters will be deleted as soon as the ignition is turned off, the seatbelt is unfastened or the driver’s door is opened.

III. Environment Monitoring

The functionality of the traffic jam and parking pilots require the vehicle's route to be recognised and evaluated. For this purpose, cameras permanently installed in the area of the vehicle's exterior detect objects in the vehicle's driving range (e.g., lane boundaries, crash barriers). The live images from the cameras are transmitted to the responsible control unit.

The camera images are not recorded or saved, but are immediately transmitted to the relevant control unit in the vehicle for processing. The control unit analyses the current camera image using image evaluation software. This image evaluation software determines anonymous technical parameters, such as distances to stationary objects (e.g., crash barriers) or moving objects (e.g., vehicles driving ahead). The control unit evaluates these technical parameters and enables the traffic jam or parking pilot to control the vehicle.

The anonymous technical parameters are stored in the control unit for a few seconds in a volatile memory. In principle, they do not allow any conclusions to be drawn about the identity of persons or vehicles (e.g., faces, license plates).

Via extended vehicle, the primary user can give third parties access to the vehicle's telematics data. Telematics data are data (e.g., mileage) generated by the vehicle as part of the Audi Connect services and stored in an Audi backend. The prerequisite for access is that the corresponding Audi Connect services are active and the primary user of the vehicle concerned has given explicit approval for the respective third party in the myAudi portal.

The third parties can be, e.g., insurance companies, workshops, gas stations or charging station operators who need this data in order to be able to offer individual services (e.g., telematics tariffs) to the primary user. The following data can currently be passed on to third parties for the use cases listed below:

a.    Regular transmission of mileage and time stamps to insurance companies for the offering of a tailor-made tariff. ("Pay as you drive")

b.    Regular transmission of the status and position of individual vehicle components (e.g., door, bonnet, power windows, parking brake, light status, etc.) or tyre pressure to selected service companies so that they can inform the primary user of irregularities in the vehicle. ("General Vehicle Status" and "Detailed Vehicle Status")

c.    In the event of an accident, transmission of accident severity and impact location (e.g., front, side, rear, etc.) on the vehicle to service companies so that they can support the primary user. ("First Notification of Loss")

The respective use cases and associated data that the third party specifically wants to obtain from the vehicle are displayed to the primary user in the release text of the respective request in the myAudi portal. The primary user can grant or revoke the release simply by clicking. Vehicle users who are not the primary user can request information about Extended Vehicle (in particular whether data release to third parties is active or which data is passed on) from the primary user.

Every user of the vehicle has the option of deactivating data collection in the vehicle via the privacy settings in the vehicle.

The above data is passed on to the respective third party by Audi on the legal basis of performance of a contract or implementation of pre-contractual measures, insofar as these are necessary (Article 6 (1) (1) (b) GDPR) for the primary user. With regard to secondary and guest users, the transfer of the above personal data is necessary for the purposes of the legitimate interests pursued by AUDI AG or by a third party, except where such interests are overridden by interests or fundamental rights and freedoms which require the protection of personal data, in particular where the data subject is a child (Article 6 (1) (1) (f) GDPR). The purpose is to give third parties the opportunity to offer the primary user individual and personalised services based on the data.

Within the scope of Extended Vehicle, we use the following processors: Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg for the operation and hosting of Extended Vehicle.

If the primary user changes, the release is automatically revoked and data is no longer passed on to the third party. To ensure this, Audi compares the technical user ID of the primary user for the purpose of validating the primary user status. This ID is an individual identification number that is assigned to a customer during Audi ID registration. When the primary user contract is concluded, the user ID is assigned to a vehicle together with the "primary user" status. The third party is independently responsible for processing the data. Please inquire about the Terms of Use and Data Protection Notices of the third party directly from the third party, e.g., on their website.

In addition, the above personal data may be used in individual cases for development and optimisation purposes of the legitimate interests pursued by us (Article 6 (1) (1) (f) GDPR).

This Data Protection Notice will be updated and modified periodically. You can view these updates and modifications at any time at: https://www.audi.de/de/brand/de/tools/navigation/layer/rechtliches/audi-connect-datenschutz.html

Under Australian law, you have the right to

• access;
• rectification;
• lodge a complaint with both AUDI and the Office of the Australian Information Commissioner (“OAIC”) or any other dispute recognition scheme recognised by the OAIC which can be found on the OAIC website www.oaic.gov.au.
• If you are concerned with the way we have handled your personal data, you may lodge a privacy complaint with the Office of the Australian Information Commissioner (“OAIC”). However, it is a requirement of the OAIC that prior to lodging a complaint, you have raised your complaint with us. If you are not satisfied with our response or we fail to provide a response within 30 days of receipt, you can lodge a complaint with the OAIC. The contact details for the OAIC are set out below:
  

Phone: 1300 363 992
Fax: (02) 9284 9666
Website: https://www.oaic.gov.au/
Post: GPO Box 5288, Sydney NSW 2001

Please note

• Personal data may be processed or stored outside of Canada for purposes consistent with this Data Protection Notice. You acknowledge and agree that, as a result, the personal data that is processed or stored or accessed in other jurisdictions may be subject to the laws of those jurisdictions and may be disclosed in response to valid demands or requests from government authorities, courts, or law enforcement in such other countries.
• Under Canadian law, you have the right to
  
  - opt out of information handling practices that are not reasonably necessary to provide the services you’ve requested. You can exercise this right by contacting using the contact details set out in Sec. B. II.
  
  - be informed of the use by us of technology allowing us to profile, locate or identify you and of the means available to you to activate the functions that allow us to identify, locate or profile you.
• While Audi AG takes the security of personal data seriously and uses industry standard security risks associated with transferring and processing personal data contemplated herein. However, no security or processes are fool proof. If personal data is accessed by third parties, it may lead to phishing attempts to get more information from you and/or identify theft.
• For some of the services described in this Data Protection Notice, we use technology allowing us to locate your position. Please refer to the descriptions of the individual services in section D. “Specific Information about Online Services” for information on whether and to what extent we process location data for the provision of the respective service. To benefit from such technology and to use such services, you might have to first activate the required settings. Please find detailed information on how to activate/deactivate individual services in Sec. C.II. “Privacy Settings” and in your vehicle’s MMI.
  

In addition to your rights set out in Sec. B. IV. 8, under the laws of Hong Kong, you may withdraw your consent to the use of your personal data.

In addition to your rights set out in Sec. B. IV. 10 (b), under the laws of Hong Kong, you will be informed at the time of the first communication with you in direct marketing without charge to you.

Please note regarding data transfers to third countries (Sec. B. VI 13 of this Data Protection Notice):

For transfer of data out of Japan please note that to the extent, recipients are located in EU member states and/or the UK, the Japanese government has recognized the adequacy of the EU’s and the UK’s personal data protection standards.

To the extent, recipients are located in the U.S., please note the following additional information:

i.    Information on the personal data protection system in the U.S. or other non-EU/UK countries, are published by the Personal Information Protection Commission JAPAN (https://www.ppc.go.jp/enforcement/infoprovision/laws/offshore_report_america/)

ii.    Information on measures by the recipients to protect personal data: We execute proper contracts to adequately safeguard the protection of personal data at least the same level as required under the EU GDPR.

Please note that you have, under Japanese law, the right to

• request information on purpose of use;
• request information on security control measures;
• request access;
• request correction, addition or deletion;
• request discontinuance of use or erasure; and
• request explanations on data processing.
  

Under the laws of Malaysia, you have the right to

• request access to your personal data;
• request correction of your personal data;
• prevent processing likely to cause damage or distress; and
• prevent processing for purposes of direct marketing.

Upon exercising your rights stated above in written form addressed to the contact details listed in section B. II., if you are dissatisfied with our response or we fail to provide a response within 21 days of receipt, you have the right to submit an application to the Personal Data Commissioner to require us to comply with your request. The application to the Per-sonal Data Commissioner can be made to the following address:

Commissioner of Personal Data Protection, 6 th Floor, KKMM Complex Lot 4G9, Persiaran Perdana, Presint 4 Federal Government Administrative Centre 62100 Putrajaya.

In the event of any inconsistencies between the English version and the Bahasa Malaysia version of this Data Protection Notice, the English version shall prevail.

You have the right to:

• access;
• rectify;
• cancel;
• oppose;
• file data protection measures with the Federal Institute for Access to Information and Data Protection;
• request a reconsideration of a decision made via automated decision making in case you are of the opinion that the data processed in this context is (partly) incomplete or incorrect.
  

Under the laws of New Zealand, you have the right to

• know what personal data is held;
  
• request for personal data held and access the personal data;
• rectification;
• a response to your request within 20 working days, if you make a request for access to or rectification of your personal information. In limited circumstances, AUDI may extend this 20 working day time limit, but we must tell you the period of the extension and the reasons for the extension.
• lodge a complaint with both AUDI and the Privacy Commissioner. However, it is a requirement that before you can complain to the Privacy Commissioner you must first raise your complaint with AUDI. If you are not satisfied with AUDI’s response or you do not receive a response, you can lodge a complaint to the Privacy Commissioner. In general, you should wait at least 30 working days for a response before contacting the Privacy Commissioner to lodge a complaint. Further details on how to make a complaint to the Privacy Commissioner are available on the Privacy Commissioner website at www.privacy.org.nz.
  

You have statutory rights as provided under Singapore's Personal Data Protection Act 2012, including the rights to

• request access to your personal data;
• request correction of your personal data; and
• withdraw consent to the collection, use or disclosure of your personal data (where applicable), subject to any grounds for the collection, use or disclosure of your personal data without your consent that are required, permitted or authorised or any exceptions that may apply to the obligations above under the Personal Data Protection Act 2012 or any other written laws of Singapore.
  

Personal information means information relating to an identifiable, living, natural person and where it is applicable, an identifiable, existing juristic person.
Under South African law, you have the right to

• not have your personal data processed for the purposes of direct marketing by unsolicited electronic communication;
• initiate civil proceedings;
• be informed if your personal information has been compromised;
  
• be informed, free of charge and before the information is included in a directory, should you be a subscriber to a printed or electronic directory;
  
• lodge a complaint to the Information Regulator of South Africa by completing the complaint and sending it to POPIAComplaints@inforegulator.org.za. The complaint form is available at https://inforegulator.org.za/wp-content/uploads/2020/07/InfoRegSA-PAIA-Form05-Reg10-1.pdf.
  

For further information about your South African data privacy rights, please visit the website of the Information Regulator at https://inforegulator.org.za/.