Parts of the website may not be displayed correctly. This could be because Javascript has been deactivated in your browser or your internet browser is no longer up-to-date or not compatible with our site. Please activate Javascript or try to access the page with another internet browser, e.g. Chrome, Firefox or Safari. Alternatively, please contact the Volkswagen Customer Care - Privacy Team with your request.

A. Controller

We are pleased that you are visiting a website of Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, registered in the Commercial Register of the Amtsgericht Braunschweig (Braunschweig District Court) under No. HRB 100484 ("Volkswagen AG"). This document explains how we collect, process, and use your data.

B. General Information, Protocol Data

You are in general able to visit the websites of Volkswagen AG without telling us who you are. In this case we will only receive the following protocol data:

  1. the operating system and browser that you are using and your screen resolution setting and
  2. the date and time of your visit.

Insofar as the following sections do not contain opposing information, the data processing shall be undertaken exclusively by Volkswagen AG.

C. Collection, Processing, and Use of Your Personal Data

I. Use of the Web Form for Information Requests

On this web page, you have the option to send requests in accordance with GDPR (e.g. access or rectification requests) pertaining to your personal data processed at Volkswagen AG using the web form. The data provided in this context (see Section “II. Processed data”) is then exclusively used by us to process your request and for the identification and legitimisation of your information. Data is processed for a legal obligation that Volkswagen AG is required to fulfil (see Article 6(1)(c) GDPR). Volkswagen AG uses, if necessary, the double opt-in process to confirm your request and email address. We will send an email to the specified email address with request for confirmation. We document the following data in connection with the Double-Opt-In process

  • IP address, date and time of sending the web form
  • IP address, date and time of confirmation of double opt-in email

If, when making your request, the required protection of your data requires the selection of a security question and corresponding answer, you will be asked to enter this as well when filling out the web form. 

You may withdraw your information request vis-à-vis Volkswagen AG, using the e-mail address privacy@volkswagen.de at any time.

When using the web form, an encrypted connection is created between your end device and our server. Our security measures correspond to the state-of-the-art standards and are continuously improved based upon the technological developments.

II. Processed Data

In the following, it is discussed in detail for what purpose the input fields on the web form are required:

Name: Your full name shall be used for the collection of the personal data processed within Volkswagen AG. Moreover, your name shall also be used for the identification of your person and, as required, for the legitimisation of your vehicle ownership(s).

Birthdate: Your birthdate shall be used only for the identification of your person and the collection your personal data processed within Volkswagen AG. Surname, forename and date of birth in combination ensures a correct identification as these information are available on all international identification cards. That is how we make sure that personal data are not forwarded to unauthorised third parties. Thus, we can ensure that no personal data is disclosed to unauthorized third parties.

Address: Your address (with the obligatory data: Street, house number, postal code, city, country) shall be used for the collection of the personal data processed within the Volkswagen AG. Moreover, we shall require your address (with the aforementioned obligatory data) for the identification of your person and, as required, for the legitimisation of your vehicle ownership(s). Additionally your address is needed in order to send you the information report via post.

Company address: your company address (with the mandatory information: street, house number, postcode, city, country) is used to determine the personal data that is processed within Volkswagen AG . Your address (with the mandatory information above) is also used to identify your person and to communicate with you by post regarding your request.

Volkswagen ID / e-mail Address: If you would like to receive information about the personal data stored in the central Volkswagen ID user account including the linked digital services, we shall require the e-mail address which you provided as an Volkswagen ID. If you should have no central Volkswagen ID user account, you may provide your e-mail address. Your Volkswagen ID and/or e-mail address shall be used for the collection of the data processed within the Volkswagen AG and for the double opt-in procedure and for communication with you, e.g. for queries regarding your request. If you want to provide multiple Volkswagen ID / e-mail addresses, please submit an additional information request.

Personnel number: Your personnel number shall only be used in order to identify you in person and to determine your personnel data processed as part of your employment relationship. The combination of your first name, surname and personnel number enables us to correctly identify you. Thus we can ensure that no personnel data is disclosed to unauthorized third parties.

Group company: if you are or were an employee of a Group company, we will need you to provide details of the relevant Group company where you are or were employed for a quicker and clear identification of your person.

Username: Your username shall optionally be used in order to identify you in person and to determine your personnel data processed. The combination of your first name, surname and username enables us to correctly identify you. Thus we can ensure that no personnel data is disclosed to unauthorized third parties.

Customer number / ID: if you, as a data subject, have entered into a fleet customer contract with Volkswagen AG or you are an employee of a fleet customer, we need your customer number / ID for the identification and to determine your processed personal data in our systems.

D.U.N.S. Number / B2B Profile ID or Group User ID: if you are registered as a partner on the ONE.Group Business Platform (www.vwgroupsupply.com), and you are or were a supplier or service provider at Volkswagen AG, we need your B2B Profile ID or Group User ID for the identification and to determine the personal data processed within Volkswagen AG.

Vehicle Identification Number: If you would like to likewise receive information regarding your personal data associated with a Vehicle Identification Number (VIN), we shall require that you provide the corresponding vehicle identification numbers and in addition, the timeframe (beginning and end of ownership) for which you are entitled to receive information. In order to verify whether you are entitled to receive information, we shall require that you provide vehicle ownership documentation and/or a consent/permission from the respective vehicle owner (legitimisation). On the corresponding documents which provide proof of the vehicle ownership, any data which are not required should be redacted by you, see Information Sheet on the Redaction of Unrequired Data on Verification Documents.

III. Legitimation in Case of Vehicle Usage by Third Parties

In order to grant you personal data concerning the provided vehicle, which you are not the owner of, the consent/permission of the respective vehicle owner for the time of granting is required.

Therefore, we use the declaration of consent (Article 6 paragraph 1 letter a GDPR, Article 6 paragraph 1 letter c GDPR), which is deposited from the vehicle owner at privacy.volkswagen.com to clearly associate the personal data from the vehicle to their corresponding person. In the context of obtaining the consent, the following data from the vehicle owner are collected for the purpose of legitimation or contact establishment due to the processing of your request: name, forename, address of the vehicle owner, vehicle identification number (VIN) as well as a telephone number or an e-mail address optionally.

In order to associate the vehicle to the associated owner the following data are collected from the requesting person: name, birthday and the usage duration of the vehicle.

IV. Retention Timeframe for Your Issue

Protocols of the communication with you will be retained by Volkswagen AG for five years including the personal data you transmitted to Volkswagen AG. The documented communication also contains, among other things, the information report which you receive from Volkswagen AG. The processing is based on a balance of interests in accordance with Article 6 paragraph 1 letter f GDPR. Volkswagen AG represents the following interests: During the retention period, the documentation of your issue will enable the Volkswagen AG to review queries and complaints which you submit and will also enable the Volkswagen AG to process your issue quicker. If you already passed the identification and legitimisation process the results can thus be re-used for exercising additional rights, avoiding you to have to repeat your identification and legitimisation.

V. Digital Data Delivery

You have the option to use the download portal provided on this web page so we can provide you with the information report or the copy of the data electronically. You will receive access by entering your request ID in combination with a one-time password, which we will send to you by postal service. If you want to log in for a second time, you have to request a new one-time password for security reasons. Alternatively, you have the option to log in with the log-in data of your Volkswagen ID.

If, when making your request, the required protection of your data required the selection of a security question and corresponding answer, you will be asked to enter this as well during the registration in the download portal. 

The data will be available for download for 30 days and then deleted automatically.

VI. Using your Volkswagen ID

For a number of functions on the website, you have the option of using a Volkswagen ID user account provided by Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, entered in the register of companies of the Braunschweig district court under the number HRB 100484 (“Volkswagen AG”). You can use the Volkswagen ID to log into numerous services (e.g. websites or applications) of Volkswagen AG or third parties. The Volkswagen ID acts as a central user account where you can centrally manage your data. The data processing activities required for this will be carried out within the context of fulfilling the contract (see Article 6 paragraph 1 letter b GDPR). Your email address and a password chosen by you personally are required for registration. Please take note of the comprehensive Privacy Policy that applies to the Volkswagen ID. This can be found under https://vwid.vwgroup.io/data-privacy.

If information from your Volkswagen ID user account is required for the use of an individual function on the website, we will advise you as to which information in your Volkswagen ID you must approve for the relevant function or service the first time you log into the website. This authorisation will be cancelled automatically after three years.

VII. Identification via POSTIDENT process

Insofar as we cannot clearly identify you in the Volkswagen AG’s systems, additional identification measures shall be required in order to ensure that no personal data are disclosed to unauthorised third parties. For this, Volkswagen AG shall use the POSTIDENT procedure of the Deutsche Post AG, which enables you to make identification via video-chat or at a post office branch within 4 weeks after our notification. After completing the procedure, the Deutsche Post AG will send us your identification data, which we shall use exclusively for verifying your identity. After successful identification has been made, we shall erase your personal data that have been processed during the POSTIDENT procedure. Information on how our identity provider, Deutsche Post AG, processes personal data is accessible on: https://www.deutschepost.de/en/p/postident/postident-datenschutzhinweise.html

VIII. Use of Data Processing Companies

We are using processors to meet our statutory obligations and to exercise our own legitimate interests. We have corresponding data processing agreements with them. Data provided by you is hereby always processed within the European Economic Area (EEA). In case of technology-based system errors that cannot be resolved in the normal support process, access to the personal data outside of the EEA cannot be excluded. Volkswagen AG agrees to EU standard contractual clauses with recipients in unsafe third countries to ensure that personal data is adequately protected. You can access the EU standard contractual clauses that have been used by visiting the European Commission website at https://eur-lex.europa.eu/legal-content/de/TXT/?uri=CELEX%3A32021D0914.

The following data processing companies are engaged to work on your request:

  • Volkswagen Group Services GmbH
  • Salesforce.com Germany GmbH
  • Microsoft Ireland Operations Limited
  • Volkswagen Software Asset Management GmbH

The following data processor is used for identification service:

  • Deutsche Post AG

For the support of our IT system the following data processors are used:

  • Reply Deutschland SE
  • NTT DATA Deutschland GmbH

The following processors are used for data hosting:

  • Salesforce.com Germany GmbH
  • Microsoft Ireland Operations Limited
  • Volkswagen Software Asset Management GmbH

 

D. Use of the data breach hotline 

You have the option to provide information on possible data protection breaches by Volkswagen AG using the data breach hotline. We process data provided by you during your contact initiation and reporting of possible data protection infringements by telephone or electronically. This particularly includes the following data: 

  • your name, 

  • if applicable, your address (business and/or personal) and further contact details, particularly telephone number, email address and/or data pertaining to your orderer and/or employer as well as customer or supplier number and other identifying features 

  • further data concerning you provided to us in relation to the data protection infringement. 

As part of your report, we also process certain additional data that is required to meet our obligations related to the reporting of data protection infrigements or that you provide to us in this context. This data particularly includes: 

  • data from written communications (by post and electronically) between you and us, 

  • data from other electronic (e.g. electronic form fields) or telephone communication, 

  • personal data that we have already stored for you and/or your customer from data that already exists at Volkswagen AG. 

We will process this data exclusively as is required to meet our legal obligations or to the extent of our legitimate interest. 

We only process personal data from public sources (e.g. authorities, Internet) if this is legally permissible, such as if this is necessary for us to meet our obligations. 

I. Purpose 

We use data provided to us in this context exclusively for the purpose of processing your notification and for the identification and legitimisation of your information (Section 6(1)(1)(c) GDPR). As the controller within the meaning of GDPR, we are subject to comprehensive testing, reporting and notification obligations in accordance with Article 33 and Article 34 GDPR. If the data you provided belongs to special categories of personal data, data processing will be based on Art. 9(2)(g) GDPR in conjunction with Art. 6(1)(1)(c) GDPR in conjunction with Art. 33(1, 2, 5), Art. 34 GDPR. The immediate examination of data protection breaches including the initiation of risk mitigating measures for the protection of the rights and freedoms of data subjects affected and the timely submission of notifications to the data protection supervisory authority, as required, is not only a legal duty but also a significant public interest.  

II. Forwarding of data 

We do not disclose your personal data to third parties, unless we are obliged or have the right to transfer data as a result of legal requirements and/or official or judicial orders. In this respect, we draw your attention to the following data transfers: 

1. Transfer of data to affiliated companies in order to investigate and prevent data protection infringements 

Particularly in order to deal with data protection violations across the Group, we transmit personal data to companies [in Germany and the European Economic Area] that are associated with Volkswagen AG within the meaning of Section 15 of the German Stock Corporation Act (AktG). 

2. Transfer of data to suppliers and customers 

In individual cases we may also transfer your data to suppliers, customers or partners if this is necessary to eliminate or mitigate the risk of data protection violations. 

3. Transfer of data to authorities 

If we are required to transfer your data to relevant authorities to meet our obligations in accordance with Article 33 and Article 34 GDPR or if this is required by the relevant authorities, we will transfer your data accordingly. 

4. Data transfer to third countries 

Data can be exchanged between companies, joint ventures or other business partners inside and outside the Volkswagen Group in countries outside the scope of the GDPR.  

We would like to point out that the level of data protection in other countries outside the scope of the GDPR often does not correspond to the same level of data protection. This means that the relevant data may be passed on to other bodies and there are no comparable state control mechanisms operated by data protection authorities. In addition, not all countries have the right to legal protection in compliance with European law.  

If a transfer of your personal data to less secure third countries is not based on other valid exceptions in accordance with Art. 49(1) GDPR, we have incorporated EU standard contractual clauses as a suitable guarantee.  

Additionally, data transfers to the USA can be based on the EU-US Data Privacy Framework. 

III. Retention period of your request 

Volkswagen AG will store the communication with you including your personal data for alerts of a possible data protection breach for eleven calendar years plus one day. The processing is based on a balancing of interests in accordance with Art. 6(1)(f) GDPR in conjunction with Art. 33(5) GDPR. The interests of Volkswagen AG are hereby the assertion and defence of legal claims. If the data you provided belongs to special categories of personal data (Art. 9 GDPR), data processing will be based on Art. 9(2)(f) GDPR in conjunction with Art. 33(5) GDPR.  

IV. Use of a processor 

We use processors to meet our legal obligations and to observe our own legitimate interests. Your request is processed by Volkswagen Group Services GmbH. Other processors we use include Volkswagen Group IT Solutions GmbH, OneTrust Technology Ltd. and Deloitte GmbH Wirtschaftsprüfungsgesellschaft. 

 
E. Use of Cookies

Volkswagen AG uses various cookies on its websites. Cookies are small files containing configuration information that are stored on your end device. There are basically three categories of cookies.

  1. So-called Functional Cookies are essential for the functionality of the website. The processing of the Functional Cookies is necessary to enable your visit to the website (cf. Article 6 paragraph 1 letter b GDPR).

  2. The comfort of a website visit is increased by so-called Comfort Cookies, which save your language settings, for example. The legal basis for Comfort Cookies is a legitimate interest (Article 6 paragraph 1 letter f GDPR). The legitimate interest is providing comfort when visiting the website. You can object to data processing at any time with effect for the future. Further information can be found in section F. Your Rights

  3. So-called Tracking Cookies are used to create a pseudonymised user profile. Tracking Cookies are only set if the website visitor has given their consent (Article 6 paragraph 1 letter a GDPR). Consent is given via the so-called cookie banner, which must be actively clicked on. Further information on the tracking tools used and how you can revoke your consent can be found in section F. Your Rights.

For more information about our cookies, please see the Cookie Policy.


F. Your Rights

You may assert your rights below against Volkswagen AG at any time upon a free-of-charge basis. For further information concerning the exercise of your rights, please see section G.

Right of Access by the Data Subject: You shall have the right to receive information from us regarding the processing of your personal data.

Right to Rectification: You shall have the right to demand that we correct your personal data, which are incorrect and/or incomplete.

Right to Erasure: You shall have the right, in the event that the requirements specified in Article 17 GDPR have been met, to demand the erasure of your data. Thus, in accordance with this Article 17, for example, you may demand the erasure of your data insofar as these data are no longer required for the purposes for which they were collected. Furthermore, you may demand the deletion of these data if we process your data based upon the consent, which you have granted, and you then withdraw this consent.

Right to Restriction of Processing: You shall have the right to demand the restriction of the processing of your data if the requirements specified in Article 18 GDPR have been fulfilled. This is, for example, the case if you dispute the correctness of your data. For the duration of the verification of the correctness of the data, you may demand the restriction of the processing.

Right to Object: Insofar as the processing is undertaken based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data. An objection shall be permissible (sic!) if the processing either is carried out in the public interest or in the exercising of official authority or owing to a justified interest of Volkswagen AG or of a third party. In the event that you object, we request that you state your reasons to us regarding why you are objecting to the data processing. In addition, you shall have the right to object to the data processing for the purposes of direct advertising. This shall also be valid for profiling insofar as this is undertaken in conjunction with the direct advertising.

Right to Data Portability: Insofar as the data processing is undertaken based upon a consent or a fulfilment of a contractual agreement and this is also undertaken while using an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider.

Right to Revocation: Insofar as the data processing is undertaken based upon a consent, you shall have the right to withdraw your consent for the data processing, with effectiveness for the future, at any time and upon a free-of-charge basis.

Right to Lodge a Complaint: You shall also have the right to lodge a complaint to a government supervisory authority (e.g. to the State Data Protection Officer for Lower Saxony, Germany) regarding our processing of your data.

G. Your Contact Persons

Contact Person for Exercise of Your Rights

For further information concerning the exercise of your rights, please see privacy.volkswagen.com.


Data Protection Officer

Our Data Protection Officer shall support you as your contact person on all data protection-related matters:

Datenschutzbeauftragter der Volkswagen AG
Berliner Ring 2
38440 Wolfsburg
GERMANY
dataprivacy@volkswagen.de 

 

Status: November 2025