Porsche Informatik Gesellschaft m.b.H.
Louise-Piëch-Straße 9, 5020 Salzburg | +43 662 4670-0 |
Based in Salzburg | Commercial register no 72830 d | Jurisdiction: Salzburg | UID ATU 36773309

Privacy Policy Online Orders

Last update: July 2026

Thank you for your interest in our company. The protection of your privacy when using our online order form is particularly important to us. Therefore, we provide you with comprehensive information about the processing of your personal data below.

Porsche Informatik GmbH is generally responsible for the data processing described below.

This Privacy Policy applies to orders placed in connection with our online order form as well as the associated processing.

1. Data security

In each case, the controller has taken appropriate technical and organizational measures to protect your data against loss, manipulation or unauthorized access. The measures taken are subject to regular review and are continuously adapted to the state of the art. If there is a breach of the protection of your personal data that is likely to result in a high risk to your rights and freedoms, you will be notified by us immediately.

2. Use by minors

It is specified that all processing of personal data may only be used by persons who have reached the age of 14. Should such data processing nevertheless occur, we will stop processing this data as soon as we become aware of it.

3. Transmission of data

If the provision of individual products or services is carried out by external IT service providers, we transmit the personal data required for the processing of the order from the order form to the relevant IT service provider.

The transmission shall include only the information necessary for the performance of the requested service. This may include, but is not limited to, name, contact details, address and order information.

The data will only be passed on for the purpose of processing the order. The receiving IT service providers act as independent controllers within the meaning of the General Data Protection Regulation with regard to the personal data transmitted to them.

The legal basis for the data transfer is Art. 6 (1) (b) GDPR. For the further processing of the data by the respective service provider, its own data protection information applies.

If these IT service providers are located outside the European Union or the European Economic Area (so-called third countries), we ensure that an adequate level of data protection is guaranteed by appropriate guarantees. This is done, for example, by concluding standard contractual clauses from the European Commission or it is based on an adequacy decision by the EU Commission.

4. Data processing in business operations

Processing as part of the ordering process

  • Description: As part of the online order, we process the personal data you provide in the web form. This includes, in particular, information on the person placing the order and the respective establishment. The data is processed for the processing and documentation of the order, for contract and order processing as well as for necessary queries.
  • Data categories: Professional contact and (work) organisation data, contract data, IT usage data
  • Purpose: The processing is carried out for the purpose of receiving and processing the order, assigning the order to the respective company, communication in connection with the order, fulfilling contractual obligations as well as the traceability and documentation of orders.
  • Legal basis:
    * Performance of Contract / Pre-Contractual Measures – Art. 6 (1) (b) GDPR: For the implementation of registration and the initiation and processing of supplier contracts
    * Legitimate interest – Art. 6 para. 1 lit. f GDPR: If personal data of another contact person in the company is provided, the processing is carried out based on the legitimate interest in accordance with Art. 6 (1) (f) GDPR in the efficient handling of the business relationship and communication with the respective company.
  • Recipients of the data: IT service providers
  • Storage period: The personal data will only be stored for as long as this is necessary for the maintenance of the business relationship and for the fulfilment of statutory retention and documentation obligations. After these purposes have ceased to exist, the data will be deleted, provided that there are no legal retention obligations or legitimate interests to the contrary.
  • Note on the designation of a contact person: The customer must ensure that he is entitled to pass on the contact details provided and that the data subject has been informed about the data transfer.

5. Your rights

You have the following rights:
Right to information: You can request confirmation as to whether and to what extent data about you is being processed.

Right to rectification: If we process incomplete or incorrect data about you, you can request their correction or completion at any time.

Right to erasure: You can request the deletion of your data if the purpose for which it was collected has ceased to exist, unlawful processing has occurred, the processing disproportionately interferes with your legitimate interests in protection, or if the data processing is based on your consent and you have withdrawn it. It should be noted that there may be other reasons that may prevent the immediate deletion of your data, e.g. legally regulated retention obligations, pending proceedings, assertion, exercise or defence of legal claims, etc.

Right to restriction of processing: You have the right to request restriction of processing of your data if:

  • you contest the accuracy of your data, for a period of time that allows us to verify the accuracy of the data;
  • the processing of your data is unlawful, but you oppose erasure and request restriction of data use instead;
  • we no longer need the data for the intended purpose, but you still need this data to assert, exercise or defend legal claims; or
  • You have objected to the processing of the data as long as it has not yet been determined whether our legitimate reasons outweigh yours.

Right to data portability: You can ask us to provide you with the data you have provided to us in a structured, commonly used and machine-readable format or to transmit this data to another controller without hindrance from us, provided that we process the data on the basis of your consent or for the performance of a contract between us and the processing is carried out by automated means.

Right to object: If we process your data for the performance of tasks that are in the public interest, for the exercise of official authority, or if we invoke the necessity of safeguarding our legitimate interest in the processing, you can object to this data processing if there is an overriding interest in protecting your data.

Right to Withdraw: You may revoke any consent you have given to us at any time without giving any reason, and you may revoke any individual consent form independently of any other consent you have given to us. We expressly point out that a revocation has no direct or indirect negative consequences for your employment with us. A revocation only has the consequence that we will no longer process your data from this point on for the purposes specified in the respective declaration of consent, and any rights and/or benefits (if any) related to the processing of the specific data can no longer be claimed.

Right to lodge a complaint: If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, please contact us. Of course, you can also lodge a complaint with the Austrian Data Protection Authority (for further information: www.dsb.gv.at).

6. Contact details

You can assert all rights directly with Porsche Informatik GmbH. Please send your concerns by email to sales@porscheinformatik.com or directly to datenschutz@porsche.co.at in the case of data subject inquiries.