Privacy Policy – Audi Waterford

Audi Waterford, audiwaterford.ie is committed to ensuring that when we collect and use information about people who visit our website or contact us in other ways (as described below), we do so in accordance with applicable data privacy laws. This Privacy Policy explains how we may use information that we obtain about you and how you can exercise your rights with respect to your personal information. Changes to the content or services found on our website may be changed without notice, and consequently our Privacy Policy may change at any time in the future. You should visit this page regularly to check for changes.

Under ROI data protection laws, personal information may only be used where one of the following applies:

You have consented to the use

We use it to achieve a legitimate interest, and our reasons for using it outweigh any prejudice to your data protection rights

It is necessary to enter into or perform a contract with you

We need to use it to comply with our legal obligations

The use is necessary for us to protect your vital interests (or another person’s)

We need to use it to perform a task in the public interest

Generally, we will process data on one of the first two grounds listed above. If we are processing on the basis of consent, you will be presented with an opportunity to consent at the point where we collect your data. You may withdraw your consent at any time through the data preference centre (see further details below). If we are processing on the basis of our need to achieve a legitimate interest, the nature of that interest is set out below.

Our website is powered by G-Forces Web Management Limited (“GForces”), our third party web services provider. GForces is committed to ensuring that data is processed in accordance with applicable data privacy laws, and is kept secure. GForces is certified to the standard of ISO27001 (an international standard for information security). GForces uses Amazon Web Services, Inc. as its cloud platform provider. All data processed by GForces is stored on Amazon’s web servers in the EEA

What information do we collect?

If you visit our website

When someone visits www.audiwaterford.ie we use a third party service, Google Analytics, to collect standard internet log information (your IP address, browser, and type of device) and details of visitor behaviour patterns (where you joined our site from, the path you take through our site and where you leave). We do this for the legitimate business purpose of monitoring the number of visitors to the various parts of the site and engagement levels,

which in turn enables us to make improvements. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

www.audiwaterford.ie also uses cookies on its website. You can read more about how we use cookies in our Cookie Policy. This Privacy Policy does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.

When someone visits our website, GForces collects standard internet log information (your IP address, browser, and type of device) and details of visitor behaviour patterns (where you joined our site from, the path you take through our site and where you leave). These are stored against unique ids (which are strings of numbers). GForces collects this information for the legitimate business purpose of monitoring the number of visitors to the various parts of the site, the general geographic location of visitors and engagement levels, which in turn enables it to make improvements to its websites and services, and provide business intelligence. This information is only processed in a way which does not identify anyone. It is kept indefinitely.

GForces also uses Google Analytics to collect standard internet log information and details of visitor behaviour patterns, which are stored against unique ids (i.e. strings of numbers). We collect this information for the legitimate business purpose of monitoring website traffic and engagement levels, which in turn enables us to make improvements to our website and the way we sell our cars and services. This information is only processed in a way which does not identify anyone. It is kept indefinitely.

If you email us

Any email sent to us, including any attachments, may be monitored by us for cybersecurity reasons. Email blocking software may also be used. www.audiwaterford.ie has a legitimate business interest in using your email address, and any personal data included in your message, to resolve and respond to any issues raised. Your email will be handled in line with our policies, depending on the nature of your enquiry.

Emails sent to named individuals within www.audiwaterford.ie will be stored on our systems indefinitely for the legitimate business purpose of resolving your enquiry and then checking how enquiries have been dealt with, but will not be processed for any other purposes. Please be aware that you have a responsibility to ensure that any email you send to us is within the bounds of the law.

If you use our enquiry form

When you submit information using an online form, GForces processes the data collected and stores it for 31 days for the legitimate business purpose of enabling us to access the information and deal with your request (it is then kept for a further 14 days in GForces’ routine back-ups for business continuity purposes). We collect the following information:

Note to customer: insert all the personal data that you collect across your formsets, e.g., name, email address and telephone number for enquiry forms, and explain why you collect it and how long you store it for in your own systems (separate from GForces).

If you make a complaint to us

When we receive a complaint from a person we make up a digital file containing the details of the complaint and store it on our system. The file normally contains the identity of the complainant (together with any contact details provided) and any other individuals involved in the complaint.

We will only use the personal information we collect for legitimate business purposes, i.e. processing the complaint and checking on the level of service we provide.

We usually have to disclose the complainant’s identity to whoever the complaint is about. This is inevitable where, for example, the accuracy of a person’s record is in dispute. If a complainant doesn’t want information identifying him or her to be disclosed, we will try to respect that. However, it may not be possible to handle a complaint on an anonymous basis.

We will keep personal information contained in complaint files in line with our retention policy. This means that information relating to a complaint will be retained for three years from closure. It will be retained in a secure environment and access to it will be restricted according to the ‘need to know’ principle.

Under data privacy laws, you have the rights to:

- request access to your personal data;

- request deletion or correction of your personal data; and

- request that your personal data be transferred to another person.

Our online data preference centre helps you to exercise the rights that data privacy laws give you and control your personal information. It contains five separate forms, as set out below.

• See your data

You can ask to see any personal information that we hold (known as a “subject access request”) by submitting the form on the “See your data” tab.

If you agree, we will try to deal with your request informally, for example by providing you with the specific information you need over the telephone.

• Transfer your data

By completing the form on the “transfer your data” tab, you can ask us to provide your data to a third party.

• Delete your data

You can ask us to delete the information we hold about you by completing the form on the “delete your data” tab.

• Change your data

If we do hold information about you, you can also ask us to correct any mistakes by completing the form on the “Change your data” tab.

• Marketing Preferences

On the “marketing preferences” tab, you can tell us how you would like us to send you marketing information, or ask us to stop marketing to you entirely.

Any data collected through the data preference centre is stored.

Do we share your personal information?

Other than as outlined above (for example where we use third party service providers), we will not usually disclose personal data. However we may disclose your information to third parties in the following circumstances:

If we are under a legal or regulatory obligation to do so

If we believe your use of our websites has or may violate any law, regulation or our Terms of Use

If we believe you are or may be a threat to safety, security, property, our rights or the rights of others

In a merger, acquisition, change of control, joint venture or other business combination involving www.audiwaterford.ie.

How can you make a complaint about our use of data?

www.audiwaterford.ie tries to meet the highest standards when collecting and using personal information. For this reason, we take any complaints we receive about this very seriously. We encourage people to bring it to our attention if they think that our collection or use of information is unfair, misleading or inappropriate. We would also welcome any suggestions for improving our procedures.

Any complaints should be addressed to the Data Protection Officer using the contact details below. If we fail to resolve your complaint to your satisfaction, you have the right to contact the Irish Information Commissioner. For further information on how to do that, please go to the following webpage: https://www.dataprotection.ie/

How can you contact us?

This privacy notice was drafted with brevity and clarity in mind. It does not provide exhaustive detail of all aspects of www.audiwaterford.ie collection and use of personal information. However, we are happy to provide any additional information or explanation needed. Any requests for this should be sent to the address below.

The www.audiwaterford.ie Data Protection Officer is Rachel Kehoe. If you want to request information about our privacy policy, make requests concerning your data or make a complaint, you can email gcronin@autoboland.com or write to:

FAO Data Protection Officer

www.audiwaterford.ie Data Protection Officer, Butlerstown Roundabout, Waterford County Waterford Ireland



On-board fuel consumption monitoring data (OBFCM data) Data Protection Information Notice - Ireland Visit of AUDI service with new vehicle registered after 1.1.2021

Dear customer,

As part of your visit, your AUDI dealership carries out all the processes necessary to provide the stipulated service and to satisfy your requirements. This typically leads to a series of processes in which information about you as a customer and your vehicle is processed and in which AUDI AG is involved as the manufacturer of your vehicle. In particular, this involves handling service processes and new car or used car purchases, or conducting customer surveys. We will inform you of the relevant data processing by AUDI AG in the following sections.

A. Controller

This privacy policy provides information on the collection, processing and use of your personal data by AUDI AG, Ettinger Straße 70, 85057 Ingolstadt, Germany.

B. Collecting, processing and use of your personal data

Reading out on-board fuel consumption monitoring data (OBFCM data)

For compliance with legal requirements (Commission Implementing Regulation (EU) No. 2021/392), vehicle data recording fuel consumption and kilometres driven (known as onboard fuel consumption monitoring data) is read out when vehicles are taken in for service or repairs and sent to the European Commission together with the vehicle identification number.

Data processing, transfer and storage is regulated by the provisions of this legal requirement; customers may expressly refuse to such activities prior to the data being read out in the authorised workshop. Your data is deleted after 15 years at the latest or in accordance with the legal requirements, e.g. as soon as the purpose for which the data was collected no longer applies and provided that there are no other retention obligations.

C. Your rights

You may exercise the following rights vis-à-vis AUDI AG at any time, free of charge.
You can obtain further information about exercising your rights on the following website: https://betroffenenrechte.audi.de/?lang=en-gb.

Right to access: You have the right of access to your personal data stored by us, be provided with information about to what extent your personal data will be processed or shared and to receive a copy of your stored personal data.

Right to rectification: You have the right to obtain from us the rectification of any inaccurate or incomplete personal data concerning yourself.

Right to erasure: You have the right to have your data erased if the conditions set out in Article 17 of the GDPR are met. According to this, you can demand, for example, that your data is erased if it is no longer necessary for the purposes for which it was collected. In addition, you can demand erasure if we process your data on the basis of your consent and you withdraw this consent.

Version date: October 2021 Page 1/2

Right to restriction of processing: You have the right to ask for a restriction of the processing of your data if the conditions set out in Article 18 of the GDPR are met. This is the case, for example, if you dispute the accuracy of your data. You can demand restriction of processing for the period during which the data is being checked.

Right to reject: You have the right to reject to the processing of your data if processing is based on an overriding interest or your data is used for the purposes of direct advertising. A rejection is permitted if processing is conducted in either the public interest or for the exercise of official authority, or if it is conducted for a legitimate interest of AUDI AG or of a third party. If you reject to the processing of your data, please notify us of the reasons for your rejection. Furthermore, you have the right to reject to data processing for the purposes of direct marketing. This also applies to profiling where this is connected to direct marketing.

Right to data portability: If data processing is based on consent or performance of a contract and the processing is performed by automated means, you have the right to receive your data in a structured, commonly used and machine-readable format and to transmit this data to another data processor.

Right to withdraw consent: Where data processing is based on consent, you have the right to withdraw your consent to data processing, with future effect, at any time free of charge.

Right of complaint: You also have the right to lodge a complaint about our processing of your data with a supervisory authority - Bayerisches Landesamt für Datenschutzaufsicht - (https://www.lda.bayern.de/de/index.html).

D. Your contacts

Contacts for exercising your rights

The contact persons for exercising your rights, along with further information, can be found on the following website: https://betroffenenrechte.audi.de/?lang=en-gb.

Data protection officer

Our data protection officer is your contact person for matters relating to data protection:

Data protection officer of AUDI AG, DSGVO-Betroffenenrechte, 85045 Ingolstadt, Germany

datenschutz@audi.de