Privacy Policy for the Digital Manual

This privacy policy provides more information about the processing of your personal data in connection with the availability of the digital manual. You can view the vehicle owner's manual in digital form in your vehicle or on the Internet via the digital manual.

A. Person responsible for data processing

The controller with responsibility for the processing of your personal data is Volkswagen AG.

You can reach Volkswagen AG at the following address:

Volkswagen AG
Berliner Ring 2
38440 Wolfsburg
car-net.eu.incidents@volkswagen.de
Commercial register number HRB 100484 (Braunschweig district court)

B. Data protection officer

Our data protection officer is your point of contact for all matters relating to data protection and if you wish to exercise your rights.

Please direct your enquiries to:

Data Protection Officer at Volkswagen AG
Berliner Ring 2
38440 Wolfsburg
datenschutz@volkswagen.de

C. Purposes and legal basis of data processing, storage period

I. Determining the appropriate vehicle owner's manual

To determine the correct vehicle owner's manual, the vehicle identification number (VIN) of your vehicle is sent to our data server. The VIN represents a personal data, as it is assigned to the registered keeper as a unique identification number. This also applies if and even though we do not make this allocation ourselves. The VIN is used to determine and display the owner's manual assigned to the vehicle according to model, model year, market and language. For the in-car app, the owner's manual is transmitted to the vehicle and is thus available in the vehicle at all times, even if the vehicle is not connected to the data server. The legal basis for data processing is our legitimate interest in providing vehicle users with the vehicle owner's manual in digital form in the vehicle (Art. 6 para. 1 lit. f GDPR). The VIN is not permanently stored on our data server and is automatically deleted.

II. Updating the vehicle owner's manual

The In-Car App checks at regular intervals whether there is an update of the vehicle owner's manual for your vehicle. For this purpose, the VIN of your vehicle is transmitted to our data server. If there are updates for your vehicle, they will be transmitted to the vehicle. The legal basis for data processing is our legitimate interest in always providing users of the vehicle with the current vehicle owner's manual in the vehicle (Art. 6 para. 1 lit. f GDPR). The VIN is not permanently stored on our data server and is automatically deleted.

III. Software update

The digital manual in the vehicle is an in-car app. In order to comply with the current state of the art, it may be necessary to update the in-car app. As soon as you or another vehicle user triggers the software update, the following data is processed to carry out the update process: IT usage data, software version, VIN, web app identification number. The legal basis for data processing is our legitimate interest in ensuring that the digital manual always functions smoothly from a technical point of view (Art. 6 para. 1 lit. f GDPR). This data is stored for up to 12 months to ensure operational stability and supportability.

IV. Error analysis and correction

The log analysis system SPLUNK is used to identify and rectify problems in the provision of the digital manual at an early stage. When the vehicle owner's manual is requested by confirming the VIN entry on the website or in the course of updating the vehicle owner's manual in the In-Car App, log data is stored locally in SPLUNK. The following information is processed for the error analysis: VIN, time of the request, the IDs of the on-board literature belonging to the VIN, touchpoint of the request. The legal basis for data processing is our legitimate interest in providing users of the vehicle with the vehicle owner's manual in digital form both in the in-car app and on the website (Art. 6 para. 1 lit. f GDPR). The log data is stored for up to 3 months to ensure supportability and then automatically deleted.

D. Use of cookies

A. General information

The Digital Manual website uses various cookies. Cookies are small files containing configuration information that are saved on your terminal device. Cookies can essentially be divided into three categories. There are cookies that are essential for the functionality of the website (functional cookies), cookies that make it easier to use a website and, for example by saving your language settings (convenience cookies), and cookies on the basis of which a pseudonymised user profile is created (tracking cookies). Only functional cookies are used for the Digital Manual website.

Processing of the function cookies is necessary to enable you to visit the website (see Article 6 (1) (b) GDPR).

E. Recipients of your personal data

Our data servers are provided by the following service providers who process your personal data on our behalf and only according to our instructions:

Audi AG
Auto-Union-Straße 1
85057 Ingolstadt
Germany

ŠKODA AUTO a.s.
tř. Václava Klementa 869
293 01, Mladá Boleslav II
Czech republic

F. Measures to protect your data

The protection of your personal data is important to us. We therefore take both technical and organisational measures in accordance with Art. 32 GDPR to prevent misuse or loss of your data. For example, we will only transmit your data in encrypted form.

We will also only transfer your data to third parties via pseudonyms, insofar as this is possible without jeopardising the purpose of the processing. Recipients who process data exclusively on our behalf and according to our instructions are contractually obliged by us to comply with the data protection rules and our instructions. For this purpose, we conclude so-called order processing agreements in accordance with Art. 28 GDPR with our service providers, so that your data is also subject to our high level of protection in the area of the order processors.

G. Prevent data processing (privacy)

In the In-Car app, you can set your personal privacy settings (available depending on the model) and prevent data processing.

To prevent data processing, you have the option of selecting the "Maximum privacy" mode in the settings. This puts your vehicle into offline mode. In offline mode, the installed vehicle owner's manual can still be used. However, it is no longer possible to check whether the vehicle owner's manual has been updated. Likewise, further languages of the owner's manual can no longer be loaded unless these languages are already pre-installed.

H. Your rights

We do not identify you on the basis of the personal data processed. In particular, identification is not necessary for the provision of the digital manual. The following rights are only available to you to a limited extent in accordance with Art. 11 GDPR. This means that we are only obliged to fulfil your subsequent claims if you provide us with the VIN of your vehicle when asserting your rights. This date will be deleted by us immediately after your claims have been fulfilled, unless further storage is required by law or is mandatory for evidence purposes.

We will only identify you on the Digital Manual website once you have logged in to the myVolkswagen section with your Volkswagen ID and also entered your VIN. In this case, you have the following rights. You can assert them against Volkswagen AG at any time free of charge. In order to facilitate a quick processing of your request, we kindly ask you to contact our data protection officer (cf. B).

More information on asserting your rights can be found at:.

I. Right to information

You have the right to obtain information from us about the processing of your personal data.

II. Right to rectification

You have the right to have incorrect or incomplete personal data concerning you rectified by us.

III. Right to erasure

You have the right to demand erasure of your data if the requirements stated in Article 17 GDPR are met. According to this, you can demand, for example, that your data is erased if it is no longer necessary for the purposes for which it was collected.

IV. Right to restriction of processing

You have the right to demand restriction of processing of your data if the requirements stated in Article 18 GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can demand restriction of processing for the period during which the data is being checked.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

V. Right to object

You have the right to object to the processing of your data unless we can demonstrate that compelling legitimate grounds exist which override your interests, rights and freedoms against processing, Art. 21 GDPR. If you object to the processing of your data, please notify us of the reasons for your objection.

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

VI. Right to data portability

If data processing is based on consent or contract performance and processing takes place using automated means, you have the right to obtain your data in a structured, commonly used and machine-readable format and to transmit this data to another controller. In addition, you have the right to have the personal data transmitted directly by us to another controller.

I. Right of appeal to a supervisory authority

You also have the right to file a complaint about our processing of your data with a supervisory authority (e.g. the Data Protection Officer for the State of Lower Saxony).

Version dated: May 2021