Porsche Taiwan Charging Service Privacy Policy

General Data Protection and Privacy Statement: Porsche Taiwan Charging Service

We, Porsche Taiwan Motors Limited (hereinafter “we” or “PTW”) as well as our affiliates, subsidiaries, dealers and Porsche Centres, (hereinafter collectively as “Porsche Group”), are pleased that you are visiting our website or app and pleased about your interest in our company and our products. Protecting your privacy when processing data is important to us. We take protecting your personal data and handling them confidentially very seriously. The processing of your personal data is only takes place within the scope of legal requirements of data protection law of the European Union and the applicable personal data protection rules in Taiwan, in particular, the General Data Protection Regulation (GDPR) and Taiwan Personal Data Protection Act (hereafter “PDPA”). With this privacy policy, we inform you about the processing of your personal data and your privacy rights in the context of the use of the Porsche Taiwan Charging Service, our Porsche Taiwan Charging Service app and/or our Porsche Taiwan Charging Service subscription (hereinafter, "Porsche Taiwan Charging Service"). For information on other services and offers from other companies of the Porsche Group, please refer to the respective privacy policy of those services or companies.

1. Controller and data protection officer; contact information

The controller within the meaning of data protection and privacy laws is:

Porsche Taiwan Motors Ltd.

37F. No. 68, Sec. 5,. Zhongxiao E. Rd.,

Xinyi Dist., Taipei 11065,.

Taiwan

If you have questions or suggestions regarding data protection and privacy, please feel free to contact us by e-mail at PTW-CustomerFeedback@porsche.tw or contact the data protection officer at the address shown below or the above e-mail address.

Porsche Taiwan Motors Ltd.

Data Protection Officer

37F. No. 68, Sec. 5,. Zhongxiao E. Rd.,

Xinyi Dist., Taipei 11065,.

Taiwan

2. Subject matter of data protection

The subject matter of data protection is personal data. This means any information concerning an identified or identifiable individual (the data subject). This includes, for example, information such as name, postal address, e-mail address or telephone number, and also information that necessarily arises during and via the use of the Porsche Taiwan Charging Service, such as details about the start, end and scope of use of our website, app or Charging Services and your IP address.

3. Type, scope, purpose and legal basis of data processing when using our websites

Even if you use our website, app or Charging Serviceswithout logging in, data will be or may be collected. The text below provides an overview of the different types of collection and processing of data and the respective purposes of processing and legal bases.

3.1 Automated data collection

When you access our website or app, your Internet browser automatically transfers data for technical reasons. The following data are stored separately from other data that you may transmit to us:

• date and time of access

• duration of the visit to our website

• type of Web browser / Web browser version

• operating system used

• the pages you visit on our website

• volume of data transmitted

• nature of event

• system crashes and similar events

• IP address

• domain name

Purpose:

We thereby pursue the interest in enabling the use of our website and its technical functionality. When you visit our website, this data will be processed automatically. Without this provision, you will not be able to use our services. We do not use this data for the purpose of drawing conclusions about you.

We will delete the data immediately after the purpose ceases to exist.

In addition, this data is also processed without being assigned to a specific person for the purposes of analysis and performance improvements. See paragraphs 3.2 and 3.3. for more detail.

When you connect your vehicle to our Porsche Charging Hardware, your vehicle automatically transfers data for technical reasons. The following data are stored separately from other data that you may transmit to us:

• date and time of access

• type of vehicle used

• Vehicle Identification Number

• duration of the charging session

• charging speed / power

• kW transmitted

• system crashes and similar events

• location

Purpose:

We thereby pursue the interest in enabling the use of our Charging Service and its technical functionality. When you use our Porsche Charging Hardware, this data will be processed automatically. Without this provision, you will not be able to use our services. We do not use this data for the purpose of drawing conclusions about you.

We will delete the data immediately after the purpose ceases to exist.

In addition, this data is also processed without being assigned to a specific person for the purposes of analysis and performance improvements. See paragraphs 3.2 and 3.3. for more detail.

3.2 Data processing for improvement of our Porsche Taiwan Charging Service offer

The automated data we collect mentioned in paragraph 3.1 is furthermore used to improve the performance of the Porsche Taiwan Charging Service, to ensure the availability of our platforms, to optimise user experience, to further evaluate your use of the website, app and Porsche Charging Hardware, to compile reports on website, app and Porsche Charging Hardware activities for us, and to provide other services related to website, app and Porsche Charging Hardware usage.

Purpose:

We process your data based on our legitimate interest in the performance and availability of our products, as well as in the analysis of the use behaviour of our website, app and Porsche Charging Hardware visitors. The data will be stored for 13 months and not assigned to any particular person.

We also process information about our users via cookies to fulfill the contract with our users and for our legitimate interest in the user-friendly and secure provision of our websites and apps.

In addition, we store cookies as part of the processing described here. See paragraphs 3.3 for more detail.

3.3 Cookies

When you visit our website, so-called ”cookies”, i.e. small files, can be stored on your device in order to offer you a comprehensive range of functions to make your use more convenient and to optimise our offers. If you do not wish to use cookies, you can prevent their storage on your device by means of the corresponding settings on your Internet browser or use separate options for objecting to their processing. Please note that the functionality and functionality of our offer may be limited. For detailed information on the nature, extent, purposes, legal bases and possibilities of contradicting the processing of cookies, please refer to our Cookie Policy.

4. Registering for your Porsche ID user account

When you register for and use the Porsche Taiwan Charging Service, personal data are collected, processed, and used, and may be transmitted to third parties as described below, in order to provide you with all services with regard to the Porsche Taiwan Charging Service and to fulfil our contractual obligations that exist in this context. We perform all of the data processing described in this section either - to the extent indicated - based on your consent or to fulfill our contract with you.

4.1 Registration process

To use the Porsche Taiwan Charging Service, registration on the Porsche infrastructure is required. Registration can take place in two ways, and you are free to choose the method of registration:

4.1.1 Invitation to register from authorized dealer

If you wish, your authorized dealer will enter the data you have communicated to the dealer for you via the dealer’s access to our systems. In this case, you will then receive, for example, a link sent by e-mail via which you are required to confirm your registration. Please note that the authorized dealers are independent companies, and we have no influence over them. A second feature will be used for additional verification. One example is a code sent via text message that you then enter in the Porsche Taiwan Charging Service.

4.1.2 Self-registration

In the event that registration has not taken place via an authorized dealer, you can register yourself and enter your data on your own. In selected countries, you can also add a vehicle and use additional digital services that require vehicle ownership. To do this, you will also have to upload a copy of an identification document and proof of ownership and – if you are not the owner of the vehicle – a power of attorney from the vehicle owner after entering your vehicle identification number. These documents will be reviewed based on our verification criteria. As proof of successful verification, we will also store the names, dates of birth, places of birth, addresses, and validity information of the documents shown in the respective identification documents and the vehicle identification numbers, owner names, and addresses shown in the ownership documentation. After the verification process is complete, the copies of the documents will be deleted. Following successful verification, you will receive, for example, a link sent by e-mail via which you are required to confirm your registration. A second feature will be used for additional verification. One example is a code sent via text message that you then enter in the Porsche Taiwan Charging Service.

(a) Required information during registration

When you register on the Porsche Taiwan Charging Service, you will be required – in case of self-registration – to enter your e-mail address and/or Porsche ID, a password, your name and any titles and suffixes, contact and address information, mobile phone number, and, where applicable, the language in which you wish to communicate with us or – in case of registration through an authorized dealer – to confirm this information in the Porsche Taiwan Charging Service. This information is necessary in order to set up and manage a user account for you so that you can use the full range of services and functions offered by the Porsche Taiwan Charging Service. In selected countries, you can also use our offerings as a potential customer. In this case, you are only required to state your name, e-mail address, and a password. We need this information – and, where applicable, further information – not least in order to be able to respond to requests, questions, and criticism.

We also store the time of your last login.

During registration, we will perform a plausibility check of your name and address information.

(b) Voluntary information during registration

Within the scope of your registration, you will also have the opportunity to enter additional voluntary information, such as additional name information (e.g. academic titles, etc.), company contact information, date of birth, additional phone numbers, credit card information (this information is stored exclusively by the payment service provider), and your vehicle license plate number and a personal vehicle name. You can also provide information on your interests and preferences and your desired contact channels. Please note that this information is not required in order to register, and that it is entirely up to you to decide whether you wish to communicate this information to us.

4.1.3 Porsche Taiwan Charging Service: data processing after registration

If you have registered for a user account, we will exchange basic information about your user account and your vehicles with responsible Porsche dealers in order to be able to serve you via our dealer organisation. In addition to the vehicle identification number, we transfer your E-mail address and/or Porsche ID, the technical or sales availability of services and product offers for your user account or vehicle, as well as relevant events as part of the creation, modification or deletion of your user account, the linking of vehicles, the selection of traders, or the activation or deactivation of services.

4.1.4 Deletion of your user account

If you delete your user account, your Porsche Taiwan Charging Service profile will also be deleted. As far as data must be stored for legal reasons, these are blocked (so-called processing limitation). The functionality of the services may be limited or eliminated. The Porsche Taiwan Charging Service will then no longer be available to you. If, on the basis of your consent, data has been exchanged with a dealer of your choice, we inform the dealer about the deletion of your user account.

5. Recipients of personal data

Internal recipients: Within the Porsche Group, only those persons who need this for the purposes mentioned in paragraph 3 above have access.

External recipients:

We only pass on your personal data to external recipients outside of Porsche Taiwan Motors Limited if this is necessary for the provision of the Porsche Taiwan Charging Service, if another legal license exists, or if we have your consent.

External recipients may include:

a) Processors:

Porsche AG group companies or external service providers we use for the provision of services, for example in the areas of technical infrastructure and maintenance for the Porsche Taiwan Charging Serviceoffer. These processors are carefully selected by us, and regularly checked, to ensure that your privacy is maintained. The service providers may only use data for the purposes specified by us and in accordance with our instructions and your written consent.

b) Public bodies

Authorities and state institutions, such as public prosecutors, courts or financial authorities, to whom we must transfer personal data for legal reasons. Transfer takes place on the basis of PDPA and article 6 subparagraph 1. point (c) of the GDPR.

c) Private bodies

Dealers, cooperation partners or support personnel to whom data is transferred on the basis of your consent, for the execution of a contract with you, or for the protection of legitimate interests, such as Porsche Centres, financing banks, other service providers or transport service providers. Transfer takes place on the basis PDPA and of article 6 subparagraph 1. points (a), (b) and/or (f) of the GDPR.

6. Further services for Porsche Taiwan Charging Service

6.1 Handling payment information

We may use an external payment service provider to process payments for fee-based offers as part of the Porsche Taiwan Charging Service. The administration of your credit card information and the processing of payments are carried out exclusively via the systems of the Payment Service Provider. If you enter your credit card information, this is done directly via an input field of the Payment Service Provider, which automatically encrypts this information on your terminal device. The encrypted information is then transferred by Porsche/us to the Payment Service Provider, where it is stored and used for your payment. We do not collect or store any credit card information from you. Please contact your Payment Service Provider for information on the type, scope and purpose of the collection and use of your credit card information.

Exclusively for the purpose of debtor management (including compliance checks, where legally required) and to carry out credit checks, the payment service provider processes your customer and contact information (name, address, e-mail address, Porsche Taiwan Charging Service customer number, and if applicable, company and affiliates) on our behalf, and your vehicle identification number. The legal basis for the processing of your data for the above purposes is the fulfilment of a legal obligation that we are subject to, or our legitimate interest in complying with legal requirements.

6.2 Care through the Contact Centre

You have the opportunity to be supported by our contact centre when using the Porsche Taiwan Charging Service. For example, you can have changes made to your personal customer data, as well as online service bookings, and other services through our telephone contact centre. To do this, you must provide your E-mail address and/or Porsche ID to the contact centre. After identifying yourself by naming your E-mail address and/or Porsche ID or other security features, the contact centre accesses your user account directly and makes the desired changes/activities on your behalf. The contact centre staff only perform the tasks that you explicitly want. In addition, if you have consented to be contacted through the appropriate channels, the contact centre may actively contact you by phone/SMS/E-mail/instant messaging as required, to assist with registration, service activation and use.

The legal basis for processing your data via the Contact Centre is fulfilment of the contract.

6.3 Provision of service and warranty information

In order to provide you with information about your subscription to the Porsche Taiwan Charging Service, we process equipment and vehicle master data, such as the vehicle identification number, the model year and purchase date. The processing of your personal data takes place for fulfilment of our contract with you. The aforementioned data is provided to us for this purpose for the duration of the existence of your vehicle relationship.

7. Rights of data subjects

As the subject of data processing, you have numerous rights. Specifically:

Right to information: You have the right to obtain, review, or make a duplicate copy of information regarding the data we store regarding you personally.

Right of rectification and cancellation: You may demand the supplement or the correction of incomplete or incorrect data, and insofar as the legal requirements are met, the deletion of your data.

Data portability: If you have provided us with data based on a contract or consent, you may, subject to legal requirements, require that you receive the data you provide in a structured, common and machine-readable format, or that we transfer it to another person in charge.

Objection to data processing: You have the right, for reasons arising from your particular situation, to object at any time to the processing of data by us, including demanding suspension on collection, processing or using of your personal data. If you make use of your right of objection, we will stop processing your data, unless we can prove, in accordance with the legal requirements, compelling legitimate reasons for further processing that outweigh your rights.

Opposition to cookies: You may also object to the use of cookies at any time. Details can be found in our cookie policy.

Revocation of consent: To the extent that you have issued a statement of consent to the processing of your data to us, you can revoke it at any time, with effect for the future. The legality of the processing of your data up until the time of revocation will be unaffected by this.

Your contact with us: In addition, you can contact us free of charge if you have any questions regarding the collection and/or processing of your personal data, your rights as a data subject, and/or any consent that may have been granted. To exercise any of the rights mentioned above, please contact PTW-CustomerFeedback@porsche.tw or use the mailing address specified in Sec. 1 above. When contacting us, please make sure we are able to clearly identify you personally.

8. Data security

We provide for all necessary technical and organizational measures, in accordance with the state of the art, in order to ensure a level of protection appropriate to the risk in compliance with the applicable statutory requirements.

9. Links to offers from third parties

Websites of other providers that are linked to or from this website or app were and are designed and provided by third parties. We have no influence over the design, content, or functionality of these linked websites. We expressly distance ourselves from all content of all linked websites. Please note that the third-party websites linked to from this website may install cookies of their own on your end device and/or collect personal data. We have no influence over this. Please contact the providers of these linked websites directly as appropriate for information in this regard.

Last updated: 07.04.2023

Specific Data Protection and Privacy Statement: Porsche Taiwan Charging Service

On the Porsche Taiwan Charging Service website, in the Porsche Taiwan Charging Service app, you can request Porsche Taiwan Charging Service services and activate Porsche Taiwan Charging Service subscriptions. To do this, you must be registered with the Porsche Taiwan Charging Service and have a user account. Depending on the service, you can use and manage Porsche Taiwan Charging Service services via the Porsche Taiwan Charging Service app.

1. Requesting and activating services

You can request individual or multiple the Porsche Taiwan Charging Service services and activate Porsche Taiwan Charging Service subscriptions. To perform and fulfill a request and the contractual relationship with you that is associated with it, we process and use not only the relevant request information, but also your personal data that were collected upon registration. You can change your billing address before the request process is complete. In this case, we will use this address information that you have provided for billing and invoice processing purposes.

To process payments for paid services within the scope of the Porsche Taiwan Charging Service, we use 3rd party payment service providers (see Sec. 5 of the General Data Protection and Privacy Statement for the Porsche Taiwan Charging Service). The management of your credit card information and processing of payments are performed exclusively via systems of the payment service provider. When paid services are requested, we transmit to the payment service provider the amount invoiced and a one-time transaction key that can be used to allocate your payment for purposes of processing the payment. To the extent that you enter your credit card information within the scope of requesting services, this takes place directly via an entry field of the payment service provider, which stores this information independently and uses it for your payments. We do not collect or store any of your credit card information whatsoever. Therefore, please consult the payment service provider for information on the nature, scope, and purpose of the collection and use of your credit card information. For further information regarding the handling of credit card information and processing of payments, please see the General Data Protection and Privacy Statement for the Porsche Taiwan Charging Service.

After the request process is complete, you can activate the services. When you do this, the authorization for use will be stored by the system, and the list of available services will be updated accordingly.

In order to use certain Porsche Taiwan Charging Service offers, a personalised card (Porsche Taiwan Charging Service Card) containing RFID chips is provided to you as part of your Porsche Taiwan Charging Service-eligible vehicle purchase. After handover, the card can be used for authentication with the supported infrastructure (e.g. Porsche DC charging stations). An identification number is stored on the card, which can be used to assign you to your user account. No personal data, in particular your name or address, is stored digitally on the card itself, beyond the identification number. If lost, the card can be blocked via the Contact Centre. Unless stated otherwise, we carry out the processing described in this section for fulfilment of our contract with you on the basis of PDPA and article 6 subparagraph 1. point (b) of the GDPR.

2. Use of the Porsche Taiwan Charging Service

You can access the Porsche Taiwan Charging Service via your Porsche Taiwan Charging Service app or via the Porsche Taiwan Charging Service website or by connecting a Porsche Taiwan Charging Service-eligible vehicle to Porsche Charging Hardware together with your Porsche Taiwan Charging Service RFID Card. You can use the Porsche Taiwan Charging Service, i.e. activate Porsche Charging Hardware, by connecting a Porsche Taiwan Charging Service-eligible vehicle to Porsche Charging Hardware and authenticating via the Porsche Taiwan Charging Service app or via your Porsche Taiwan Charging Service RFID Card. To this end, your vehicle or the respective end device will connect to the Porsche Taiwan Charging Service and transmit data.

Purpose:

If you access or use the online services offered on the Porsche Taiwan Charging Service website and/or in the Porsche Taiwan Charging Service app or if you connect a Porsche Taiwan Charging Service-eligible vehicle to Porsche Charging Hardware and authenticate via the Porsche Taiwan Charging Service app or via your Porsche Taiwan Charging Service RFID Card, we will process personal data of yours for purposes of enabling the use of the Porsche Taiwan Charging Service, for support purposes, and for further specifically defined purposes. Unless otherwise noted, we collect, process, and use your personal data only within the scope necessary to enable the use of the respective Porsche Taiwan Charging Service offer.

Personal Data Processed:

During use of the Porsche Taiwan Charging Service, the following categories of personal data are processed, depending on how the specific service works, in order to provide you with the services in this context and to implement and fulfill the associated contractual relationship with you. The legal basis in each case is contract fulfillment.

a) Identification information, such as the vehicle information number, your user name, E-mail address and/or Porsche ID, and device and system IDs of your end devices and mobile radio modules that are needed in order to identify you personally or to identify your end device or vehicle to establish connections, for the use of services, or for access to content.

b) Authorization information that includes the fact that the vehicle or the relevant end device has been activated for the respective Porsche Taiwan Charging Service offer and that can be associated with your membership data from the Porsche Taiwan Charging Service.

c) Login information that is needed when you wish to use services of other providers that require a login in your vehicle or on further end devices.

d) Communication information that is necessary in order to establish a connection between your vehicle and/or other end devices and our servers or with the servers of third-party providers of content for the Porsche Taiwan Charging Service.

e) Location and movement information that is necessary in order to display location-related content in the vehicle.

f) Contact information that is used in communication services, for example to send an e-mail or text message.

g) Billing data such as an itemised bill from charging operations: If necessary, we will combine this information with your address and payment information for individual billing purposes.

h) Further content that must be exchanged with us or with service providers in order to be able to perform a service for you.

3. Use of the Porsche Taiwan Charging Service by unregistered drivers

If other people use your vehicle, the data mentioned in Sec. 2 a) through h) hereof may be collected, processed, and used. To the extent that the other person does not have a Porsche Taiwan Charging Service user account of his/her own, this information will be collected and stored under your Porsche Taiwan Charging Service user account. In this case, it is not possible for us to identify this other driver, as we lack identification information.

4. Rights of data subjects

As the subject of data processing, you have numerous rights. Please see Sec. 7 of the General Data Protection and Privacy Statement for Porsche Taiwan Charging Service for information on this.

5. Amendments to this data protection and privacy statement

We reserve the right to amend this data protection and privacy statement. The current version of the data protection and privacy statement can always be accessed at https://www.porsche.com/taiwan/en/aboutporsche/e-performance/privacypolicy/

6. Inconsistency

Should there be any inconsistency between Specific Data Protection and Privacy Statement: Porsche Taiwan Charging Service and General Data Protection and Privacy Statement: Porsche Taiwan Charging Service, the General Data Protection and Privacy Statement, : Porsche Taiwan Charging Service shall prevail.

Last updated: 07.04.2023