California Privacy

Porsche Sales and Marketplace, Inc.

Provider entity

Porsche Sales and Marketplace, Inc. One Porsche Drive Atlanta, GA 30354

This Privacy Notice applies to consumers who reside in the State of California.

Personal Information We Collect about California Consumers

We describe the Personal Information we have collected about consumers in the twelve (12) months preceding the effective date of this Privacy Notice in the part of our Privacy Notice titled, “Information We Collect” and in the Notice for Users of Porsche Connect Services in the Vehicle at the end of this Notice. The information we collect includes the following:

Identifiers such as name, address, e-mail address, phone number, driver’s license number, Internet Protocol address, MAC address, logical IDs and device IDs, and Porsche IDs and PCID (Provisioning Certificate Identification)

- The following categories of Personal Information described in California Civil Code § 1798.80(e): (1) the Personal Information listed in the preceding bullet point as “identifiers,” (2) vehicle identification numbers (VINs) (when linked to identified persons), vehicle information such as model and year, vehicle registration information, and license plate numbers, (3) vehicle usage and operating data, including vehicle status data, vehicle analysis data, location based environmental and traffic data, location data and movement data, (technical) vehicle data, and vehicle interior and vehicle environment information, (4) payment information such as payment card number or portion thereof, bank information, and payment amounts, (5) information you provide or that we record in connection with customer support calls or complaints, (6) demographic information such as birthdate, gender, language preference, and occupation, and (7) the other information that identifies, relates to, describes, or is capable of being associated with, a particular individual that we describe in “Information We Collect” and the Notice for Users of Porsche Connect Services in the Vehicle and Notice for Users of Charging Services via the Porsche Connect App at the end of this Notice.

- Characteristics of protected classifications under California or federal law, such as language preference.

- Commercial information, including information about your orders, purchases, or usage of the Services.

- Internet or other electronic network activity information, including, but not limited to, browsing history, search history, usage of, and information regarding your interaction with the Services including the Porsche Connect Web site, the App, our in-vehicle technologies, the Marketplace or advertisements that we display on our websites, mobile apps or on third party sites and apps, or on any third-party social media platforms. In addition, some Porsche Connect Services are delivered via a wireless connection, and information about your use of the Porsche Connect Services may be communicated to Porsche through the wireless network. Please note that when signals are transmitted via public telecommunication networks outside your vehicle, third parties, especially network operators, may have access to certain information and potentially determine your location. In addition to the respective network operator, virtual network operators may also have access to this information.

- Geolocation data. When you use our Porsche Connect Services, it may access, collect, monitor, and/or remotely store real-time “location data,” which may include GPS coordinates, to provide certain location-related features of the Porsche Connect Services. We also may collect geolocation data relating to your computer or device when you interact with any of the Services.

- Audio information collected to enable voice control and voice inputs in certain Porsche Connect Services. Voice data is transmitted as recordings from the vehicle to us for the purpose of conversion into text. The text, which is created by a service provider, will be transferred back to the vehicle.

- Inferences drawn from (1) the information we collect when you use the Services, and (2) information about the Services user preferences and behavior, which we use for product and service enhancement and optimization purposes.

We collect this Personal Information from a variety of sources, including Personal Information you provide directly to us, Personal Information from publicly available sources, and Information we collect about you when you access and use the Services. We also collect your Personal Information from independent Porsche dealers. For more information, please see “Information We Collect” and “Information Collected Automatically”.

For information regarding the purposes for which we collect and use the Personal Information we collect, please see “How We Use Your Information.”

Disclosures of Personal Information for Monetary or Other Valuable Consideration or for Business Purposes

We have disclosed the following categories of Personal Information to other businesses or third parties for monetary or other valuable consideration within the meaning of the CCPA, within the twelve (12) months preceding the effective date of this Privacy Notice:

- Identifiers and Inferences. Pseudonymous identifiers for individuals who visit our Web sites and mobile apps and the devices such individuals use to visit our Web sites and mobile apps, data relating to usage of our Web sites and apps and inferences drawn from such usage data, and data acquired from third party marketing and digital advertising providers. We share this information with third party vendors that provide consumer behavioral analytics and digital advertising service to Porsche, and where applicable these vendors may use the information for use for their own purposes.

We have disclosed Personal Information in all or substantially all of the categories identified in this Additional Notice for California Consumers for various business purposes. For more information about the categories of Personal Information we have disclosed, the categories of entities with which we have disclosed this information and the purposes for which we have disclosed the information, please see “How We Share Your Information.”

We do not disclose Personal Information of individuals we know to be under the age of 16 to other businesses or third parties for consideration.

Your California Privacy Rights

If you are a California consumer, you have the following rights. We will honor requests received to the extent required by applicable law and within the time provided by law.

(a) Right to Access and Right to Know Information regarding Personal Information. You have the right to request that we disclose to you the categories and specific pieces of Personal Information we have collected about you. Specifically, you have the right to request that we disclose the following to you, in each case in the twelve-month period preceding your request:

• the categories of Personal Information we have collected about you; • the categories of sources from which the Personal Information is collected; • our business or commercial purpose for collecting or selling Personal Information; • the categories of third parties with whom we share Personal Information; • the specific pieces of information we have collected about you; • the categories of Personal Information about you, if any, that we have disclosed or sold for monetary or other valuable consideration within the meaning of the CCPA and the categories of third parties to which we have disclosed the information, by category or categories of Personal Information for each third party to which we disclosed the Personal Information; and • the categories of Personal Information about you that we disclosed for a business purpose.

We will deliver Personal Information that we are required by law to disclose to you in the manner required by law within 45 days after receipt of a verifiable request, unless we notify you that we require additional time to respond, in which case we will respond within such additional period of time required by law. We may deliver the Personal Information to you through your account, if you maintain an account with Porsche, or, if not, electronically or by mail at your option. If electronically, then we will deliver the information in a portable and, to the extent technically feasible, in a readily useable format that allows you to transmit the information from one entity to another without hindrance.

(b) Right to Deletion of Personal Information. You have the right to request that we delete Personal Information about you that we have collected from you.

(c) Right to Opt Out. You have the right to opt out of the disclosure of Personal Information about you to third parties for monetary or other valuable consideration. To opt-out, please visit: Do Not Sell My Personal Information or call 1-800-PORSCHE.

(d) Right to Non-Discrimination. We may not discriminate against you because of your exercise of any of the foregoing rights, or any other rights under the California Consumer Privacy Act, including by:

• Denying you goods or services; • Charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; • Providing you a different level or quality of goods or services; or • Suggesting that you will receive a different price or rate for goods or services or a different level or quality of goods or services.

We may, however, charge different prices or rates, or provide a different level or quality of goods or services, if that difference is reasonably related to the value provided to Porsche by your Personal Information.

Requests to Exercise Your Rights

You may request to exercise the foregoing rights by:

• Submitting a request through https://www.porsche.com/usa/privacypolicy/contact/, or • Calling us toll-free at 1-800-Porsche

Agent Authorization

Under California law, you may designate an authorized agent to make a request on your behalf. You may make such a designation by providing the agent with written permission to act on your behalf. Even if you use an agent, as permitted by law. Please note that we may require verification of the agent’s authorization to act on your behalf, require you to confirm you have authorized the agent to act on your behalf, and/or require you to verify your own identity.

Verification

We may require you to provide certain information, including contact information, to verify your identity before acting on your request to exercise your rights or granting you access to your information. We will only use this information to confirm your identity. In some cases we may need to collect additional information from you, and depending on the type of request we may use a third-party identity verification service to verify your identity. If we use a third-party identity verification service, our third-party identification verification service may ask you certain identity verification questions to match the information you provide with information that it has in its database.

Data Sharing for Direct Marketing Purposes

Residents of the State of California may request a list of all third parties to which we have disclosed certain personal information (as defined by California law) during the preceding year for those third parties’ direct marketing purposes. If you are a California resident and want such a list, please contact us via the Contact Us information provided below. For all requests, you must put the statement “Your California Privacy Rights” in the body of your request, as well as your name, street address, city, state, and zip code. Please note that we will not accept requests via the telephone, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information. Please allow 30 days for a response.

Do Not Track Notice

At this time, there is no worldwide uniform or consistent industry standard or definition for responding to, processing, or communicating Do Not Track signals. Thus, like many other websites and online services, the Services are currently unable to respond to Do Not Track Signals. To find out more about "Do Not Track", you may wish to visit http://www.allaboutdnt.com.

Accessibility

If you use assistive technology and the format of this Privacy Notice interferes with your ability to access information, please contact us at privacy@porsche.us.