By this document, we as the joint-controllers of personal data
(hereafter jointly referred to as “Škoda“)
provide information on the personal data processing and your rights related to this processing. Based on the agreement concluded between the joint controllers, both companies are responsible for fulfilling the information obligation and exercising the data subjects’ rights (depending on who handles the communication channel you use, e.g. website). We will be happy to provide you with the essence of the agreement upon request (please see contact details below).
This document describes the marketing activities you can consent to. It is up to you to decide for which purposes you give your consent, but the different parts of this document apply to you accordingly. This document informs about the following processes:
Purpose of the processing:
Your personal data is used for sending you information about Škoda, in particular on products and services, events, competitions, surveys and news of Škoda.
The contact channel used thereby depends on which contact information you provide us. For example, if you provide your e-mail address, we may contact you via e-mail and if you provide your phone number, we may contact you via call, messenger or text message.
In order to send you marketing information that best fits your needs, we also use the data categories listed below (see under “Categories of personal data we process”) to determine your preferences.
Furthermore, we store the data categories listed below in order to demonstrate compliance with our legal obligations, in particular to demonstrate the existence of consent, and for the establishment, exercise and defence of legal claims.
Legal basis of the processing:
We are authorised to process your personal data based on the consent granted by you. You can withdraw your consent any time. If you did not give your consent to us, we will not process your personal data for the above-mentioned purpose.
Furthermore, we store your personal data in order to demonstrate compliance with our legal obligations and for the establishment, exercise and defence of legal claims on the basis of our legitimate interest.
Categories of personal data we process:
Identification data such as name, surname and date of birth.
Contact information such as a phone number or email address.
Product and service usage data that includes:
Statistical data from external sources, in particular information we obtain from our service provider that will most likely apply to you because of certain information in your profile or the products you bought from us. For example, we will assign information to you based on external sources such as the likelihood of your interest in a wall-box or whether you are likely to be interested in electronic vehicles.
In other privacy policies of Škoda Auto a.s., statistical data from external sources will be stated as part of so-called business profile data. This has however no effect on the data processing described here.
Processing and archiving period:
We will process your personal data for the above-mentioned purposes for 5 years after granting the consent. This 5-year-period is automatically renewed with each purchase of products or services from Škoda. After this 5-year period, we will archive your data for 5 more years.
Categories of recipients to whom we may provide personal data:
We may engage the following processors that will process your personal data on our behalf and based on our instruction:
Source of the personal data:
We collect personal data either directly from you (identification data, contact information and data about your preferred Škoda dealer or service partner) or it is generated by your use of our products and services, except for data from external sources (see under “Categories of personal data we process”).
Transfers of personal data to third countries or supranational organisations:
Your personal data may be transferred outside of the European Union (“EU”) and European Economic Area (“EEA”), if you grant us your explicit consent to do so or if we ensure adequate safeguards for the data protection of the transferred data.
In connection with the use of third party services your personal data may be transferred to USA-based companies and stored on servers located in the United States of America (“USA”). Such transfers are based on the adequacy decision for the USA which states that USA provides sufficient protection for personal data for companies that are certified under EU-US Data Privacy Framework.
If we transfer your information to other countries outside the EU and EEA, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include:
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Purpose of the processing:
Your personal data is used for informing you about products from Škoda’s financing partners (Volkswagen Bank GmbH, Volkswagen Leasing GmbH, Volkswagen Versicherungsdienst GmbH), in particular on products and services, events, competitions, surveys and news of the financing partners.
The contact channel used thereby depends on which contact information you provide us. For example, if you provide your e-mail address, we may contact you via e-mail and if you provide your phone number, we may contact you via call, messenger or text message.
In order to send you marketing information that best fits your needs, we also use the data categories listed below (see under “Categories of personal data we process”) to determine your preferences.
Furthermore, we store the data categories listed below in order to demonstrate compliance with our legal obligations, in particular to demonstrate the existence of consent, and for the establishment, exercise and defence of legal claims.
Legal basis of the processing:
We are authorised to process your personal data based on the consent granted by you. You can withdraw your consent any time. If you did not give your consent to us, we will not process your personal data for the above-mentioned purpose.
Furthermore, we store your personal data in order to demonstrate compliance with our legal obligations and for the establishment, exercise and defence of legal claims on the basis of our legitimate interest.
Categories of personal data we process:
Identification data such as name, surname and date of birth.
Contact information such as a phone number or email address.
Product and service usage data that includes:
Statistical data from external sources, in particular information we obtain from our service provider that will most likely apply to you because of certain information in your profile or the products you bought from us. For example, we will assign information to you based on external sources such as the likelihood of your interest in a wall-box or whether you are likely to be interested in electronic vehicles.
In other privacy policies of Škoda Auto a.s., statistical data from external sources will be stated as part of so-called business profile data. This has however no effect on the data processing described here.
Processing and archiving period:
We will process your personal data for the above-mentioned purposes for 5 years after granting the consent. This 5-year-period is automatically renewed with each purchase of products or services from Škoda. After this 5-year period, we will archive your data for 5 more years.
Categories of recipients to whom we may provide personal data:
We may engage the following processors that will process your personal data on our behalf and based on our instruction:
Source of the personal data:
We collect personal data either directly from you (identification data, contact information and data about your preferred Škoda dealer or service partner) or it is generated by your use of our products and services, except for data from external sources (see under “Categories of personal data we process”).
Transfers of personal data to third countries or supranational organisations:
Your personal data may be transferred outside of the European Union (“EU”) and European Economic Area (“EEA”), if you grant us your explicit consent to do so or if we ensure adequate safeguards for the data protection of the transferred data.
In connection with the use of third party services your personal data may be transferred to USA-based companies and stored on servers located in the United States of America (“USA”). Such transfers are based on the adequacy decision for the USA which states that USA provides sufficient protection for personal data for companies that are certified under EU-US Data Privacy Framework.
If we transfer your information to other countries outside the EU and EEA, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include:
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Purpose of the processing:
Your personal data is shared by Škoda with the preferred Škoda dealer or service partner selected in MyŠkoda application. Furthermore, that preferred Škoda dealer or service partner may contact you directly with information about its product and service offers, including information about events, competitions, surveys and news.
Furthermore, we store the data categories listed below in order to demonstrate compliance with our legal obligations, in particular to demonstrate the existence of consent, and for the establishment, exercise and defence of legal claims.
Legal basis of the processing:
We are authorised to share your personal data with third parties that may contact you directly based on the consent granted by you. You can withdraw your consent any time. If you did not give your consent to us, we will not process your personal data for the above purpose and the preferred Škoda dealer or service partner will not contact you with product and service offers based on this consent.
Furthermore, we store your personal data in order to demonstrate compliance with our legal obligations and for the establishment, exercise and defence of legal claims on the basis of our legitimate interest.
Categories of personal data we process:
Identification data such as name, surname and date of birth.
Contact information such as a phone number or email address.
Product and service usage data that includes:
Processing and archiving period:
The consent is valid for 5 years after granting the consent. This 5-year-period is automatically renewed with each purchase of products or services from Škoda. After this 5-year period, we will archive your data for 5 more years.
Categories of recipients to whom we may provide personal data:
Your preferred Škoda dealer or service partner selected in MyŠkoda application may process personal data under its separate responsibility.
We may also engage the following processors that will process your personal data on our behalf and based on our instruction:
Source of the personal data:
We collect personal data either directly from you (identification data, contact information and data about your preferred Škoda dealer or service partner) or it is generated by your use of our products and services.
Transfers of personal data to third countries or supranational organisations:
Your personal data may be transferred outside of the European Union (“EU”) and European Economic Area (“EEA”), if you grant us your explicit consent to do so or if we ensure adequate safeguards for the data protection of the transferred data.
In connection with the use of third party services your personal data may be transferred to USA-based companies and stored on servers located in the United States of America (“USA”). Such transfers are based on the adequacy decision for the USA which states that USA provides sufficient protection for personal data for companies that are certified under EU-US Data Privacy Framework.
If we transfer your information to other countries outside the EU and EEA, we will take steps to ensure that appropriate security measures are taken with the aim of ensuring that your privacy rights continue to be protected as outlined in this policy. These steps include:
Automated decision-making based on the personal data:
During this personal data processing, automated decision-making based on the personal data does not occur.
Sending of marketing communication by the preferred Škoda dealer or service partner:
Whilst we, Škoda, are responsible for the data transfer to the preferred dealer selected by you, the preferred dealer is responsible for the processing of your data when sending you marketing communication. For more information on the processing of your data by your preferred Škoda dealer or service partner, see the privacy policy of your preferred Škoda dealer or service partner. In particular, you can withdraw your consent to this end via the withdrawal function contained in each marketing communication sent by the preferred service partner or via the contact information of the preferred dealer provided to you in the privacy policy of the preferred dealer. However, you may also withdraw your consent via Škoda as described below.
You have the following rights under data protection laws:
To access to processed personal data
To withdraw your consent for processing (where we rely on it)
To correct and update your information
To erase your personal data (if we do not have a lawful reason to continue to use it)
To restrict further processing of your information
To transfer your personal data in a machine-readable format to you or another controller
If you have any enquiries relating to this policy, our handing of your personal information generally or in relation your data protection rights, you can contact Škoda Auto Deutschland GmbH as first point of contact for Škoda, using the following information.
Škoda Auto Deutschland GmbH,
Max-Planck-Straße 3-5, D-64331 Weiterstadt,
Germany
Škoda Auto a.s. Data Protection Office,
tř. Václava Klementa 869,
Mladá Boleslav II, CZ, 293 01 Mladá Boleslav
Czech Republic
If you disagree with the way Škoda processes or handles your personal information you have the right to lodge a complaint with Škoda, the Data Protection Officer (DPO) of Škoda, or a supervisory authority, such as to:
Personal Data Protection Office,
Pplk. Sochora 27,
CZ 170 00 Prague 7,
Czech Republic
Der Hessische Beauftragte für Datenschutz und Informationsfreiheit,
Postfach 3163,
65021 Wiesbaden,
Germany