Here, you can find information about Volkswagen AG as a responsible provider of the content and offers specifically listed on this website.
Site notice
Customer Interaction Center (CIC)
The Customer Interaction Center (CIC) is responsible for the “Help for apps and digital services” area. You can contact the CIC if you have any questions regarding our digital services or apps.
If your vehicle supports Car2X technology, following activation, it is capable of exchanging important traffic information, e.g. regarding accidents or traffic jams, with other road users or infrastructure, as long as they also support Car2X technology.
Data collection for the development of automated driving
The research, development and safeguarding of automated driving functions require a significant data base from the widest possible variety of traffic scenarios based on real journeys. If your vehicle supports the function, the data upload can be directly activated or deactivated using the “Automated driving development” slider in the privacy settings.
With the We Charge Feature Website App, you can use free of charge web-based functions and services related to charging of electric vehicles. In particular, this includes searching for and finding public charging points and a route planning tool for selected vehicles that takes public charging points along the route into account.
Privacy Policy for use of the Customer Interaction Center (CIC)
A. Data controller
Thank you for using the Customer Interaction Center (CIC). The responsible office for the CIC and data controller for the processing of data described herein is Volkswagen AG, Berliner Ring 2, 38440 Wolfsburg, Germany, vw@volkswagen.de, entered in the Commercial Register of the District Court of Braunschweig under No. HRB 100484 (‘Volkswagen AG’). Please find information on how your data is collected, processed and used in conjunction with use of the CIC service.
B. Processing of personal data of private customers when using CIC
I. Processing in Case of Usage of the “Help for Apps and digital services” Website
When you use our website, we process the following log files from you, which do not allow us to identify you: A cookie ID that does not allow any inference to your IP address, the operating system you use, the web browser you use and the screen resolution you set, the date and time of your visit, the pages you have visited on our website and the website from which you visit us, as well as the IP address of the device which you used to access the website. This data is processed based on Article 6, paragraph 1, letter f) GDPR due to our legitimate interest in being able to properly display the website to you. The data will be deleted after 30 days.
For hosting the website, we are supported by Amazon Web Services, Inc. ("AWS") 410 Terry Ave. North, Seattle, WA 98109, USA as a processor. At AWS, the data is encrypted according to agreements made with us and exclusively processed on data servers in the European Union. As AWS is based in the United States, (read) access to data from the United States cannot be ruled out. A corresponding EU standard data protection agreement was concluded accordingly to ensure sufficient protection of your personal data. You can download the EU standard contractual clauses from the URL https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.
Volkswagen AG also uses various cookies on the website. Cookies are small files with configuration information that are stored on your end device. Cookies can basically be divided into three categories. There are cookies that are essential for the functionality of the website (so-called function cookies), cookies that increase the comfort of a website visit and, for example, save your language settings (so-called comfort cookies) and cookies that are used to create a pseudonymized user profile (so-called tracking cookies). Volkswagen AG only uses function cookies on the pages of the CIC. The processing of the function cookies is necessary to enable you to use the website (see Article 6, paragraph 1, letter b) GDPR).
II. Processing of Requests and Customer Care, Self-Service
1. Data Processing with regard to the Processing of Requests and Customer Care
You may contact the CIC with requests regarding our digital services and apps or our products and services (e.g. by post, email, contact form or telephone). In this context, we process the personal data required to deal with your request and for the purpose of Customer Care (name, email address, address, telephone number, country and language). We may also process additional data to deal with individual requests, such as contract data (your contract and customer numbers, consent granted), transaction data (order and invoice data), vehicle data (vehicle identification number, initial registration, equipment information), vehicle usage data (mileage, logbook, fluid fill levels), service data (e.g. date of vehicle handover/pick-up, courtesy car), hardware data (device type, device manufacturer, device serial number), software data (e.g. firmware, operating system, app version), IT usage data (registration for services, use of functions) or payment data (bank details). If you contact us repeatedly, we also process existing information about your previous concerns. If you have a Volkswagen ID, we process personal data stored in your Volkswagen ID user account and connected services for the purpose of customer care if necessary, such as account information (e.g. preferred partner), transaction data (e.g. charging processes), contractual data (e.g. confirmed terms and conditions), IT usage data (e.g. last login to the services, usage of functions) (see Article 6 paragraph 1, letter b) GDPR). You can find more information on this in the privacy policy of the respective service. You can get an overview of the services you registered for with your Volkswagen ID in your Volkswagen ID Portal.
We also process personal data from requests provided by third parties – particularly by the national sales company responsible for your country (importer), your Volkswagen dealership and subsidiaries of Volkswagen AG (e.g. Volkswagen Group Charging GmbH) – if you address requests directly to such third parties or your request is in relation to our products and services and this request can only be processed by us (information on data protection in relation to such third parties may be found in the relevant third party’s Privacy Policy).
To improve our Customer Care and business processes, the customer function to request an appointment at your authorised workshop, to optimise the customer benefit and to remedy product defects, we are processing the data of your service appointment request to your authorised workshop (e.g. vehicle identification number, service requirement category, send date of the appointment request, the authorised workshop you selected and information on the scheduled service appointment). In addition, the respective authorised workshop transmits the following data to us: vehicle identification number, time of service appointment request (acceptance of the appointment request), time of contact initiation and time of lead closing. We will analyse your previously indicated data for the purpose of product improvement and quality assurance of the service scheduling request to your authorised workshop and to prevent interruptions or delays in the process sequence of processing requests. For example, we check for faults in the transmission of data to your authorised workshop (such as incomplete data or delays within the data transmission) for early detection and elimination. This allows us to respond to the customer request for an appointment in the best possible way and improve customer satisfaction with the digital services.
Furthermore, the indicated data is forwarded to the responsible importer for their country for process management and improvement, such as by way of quality audits. This data is processed on the basis of our previously stated interest in increasing customer satisfaction with our services and offering our customers an appointment in the near future via our authorised workshops. (Article 6, paragraph 1, letter f) GDPR). The provided data will be erased after five years. We are commissioning CARIAD SE and Amazon Web Services GmbH as processors.
Should we receive a request from you which is not within the remit of the Customer Care but is within the remit of a third party, or that we cannot process without input from such a third party, we shall forward your request to the relevant third party mentioned above in encrypted form, if this is necessary for the purposes of processing your request and providing Customer Care and where this leads to faster and more customer-friendly processing in your legitimate interest and in ours (see Article 6, paragraph 1, letter f) GDPR). If such a third party is based outside the European Economic Area and/or (read) access to data from third countries cannot be ruled out, a corresponding EU standard data protection agreement shall be concluded accordingly to ensure sufficient protection of your personal data. You can download the EU standard contractual clauses from the URL https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.
When you use the CIC, we only process your personal data insofar as this is necessary to process your request and for the purposes of Customer Care (see Article 6, paragraph 1, letter b) GDPR) and unless otherwise specified for individual functions or services in this Privacy Policy. In this context, we store your data only for as long as necessary for the respective stated purposes for which we process your data. The retention period amounts to three years in the case of straightforward queries or complaints, for example,10 years in the case of claims for damages relating to manufacturer certificates, for example, and 15 years in the case of claims relating to a legal dispute, for example. If your data is required and processed for multiple purposes, as soon as the last specific purpose has been fulfilled your data is automatically deleted or stored in anonymised form, which prevents the data from being associated directly with you.
2. Data Processing with regard to the Self Service
If you do not wish to contact us directly, you may also use our Self Service instead. Our Self Service answers your frequently asked questions (FAQs) directly by suggesting a relevant answer to the question you enter in the input field. You do not have to enter any personal data in our Self Service input field and may ask your question anonymously. If you do enter personal data in our Self Service input field, we delete personal data as far as possible – with the exception of your name as well as name of town and street, which we are unable to do for technical reasons – before we answer your question. To do this, we scan your entries automatically and systematically disguise sequences of numbers such as postcodes, house numbers and vehicle identification numbers so that we can only distinguish a town or city, a street or a vehicle series plus model and model year. We are then no longer able to trace the details back to you as a person. For Self Service quality assurance purposes, we do store a generic session ID for every request by every user. However, we cannot trace this back to you as a person. This data processing is based on our legitimate interest (see Article 6, paragraph 1, letter f) GDPR) of providing you with the best possible service and answering frequently asked questions (FAQs) as needed. We delete all entries from our Self Service input field after 100 days or in accordance with legal requirements, for instance, once the purpose for which it was collected becomes invalid and if deletion is not contrary to any other retention obligations.
3. Information about Processors
We use service providers to provide the CIC and individual functions. If service providers process personal data on our behalf, we have concluded a data processing agreement and agreed appropriate guarantees on safeguarding the protection of personal data with these service providers. We select our service providers with care. They process personal data exclusively for the purposes of fulfilling their responsibilities and are contractually bound by our instructions, have suitable technical and organisational measures for the protection of personal data at their disposal and are regularly monitored by us.
To assist us in processing your queries, delivering customer care and undertaking advertising activities, Teleperformance Group Europe, Middle-East and Africa SAS (France), Concentrix Holding Germany GmbH (Germany) and Salesforce.com EMEA Limited (United Kingdom) act as processors providing us with support through a cloud operated within the European Union. As Salesforce is based in the United States, (read) access to data from the United States cannot be ruled out. A corresponding EU standard data protection agreement was concluded accordingly to ensure sufficient protection of your personal data. You can download the EU standard contractual clauses from the URL https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087. The data hosted in Europe is also protected through the conclusion of Binding Corporate Rules (appropriate guarantee on data processing in non-European countries).
In addition, Volkswagen AG uses Cariad SE, Adastra GmbH and Deloitte Consulting GmbH, all based in Germany, as data processors to ensure operation and further development.
When processing your requests and for the purposes of Customer Care and analysing your data for the purposes of quality assurance and improving Customer Care and our products and services, we are assisted by Amazon Web Services EMEA SARL (Ireland) as a contract processor with a cloud operated within the European Union. Recordings for the purposes of improving Customer Care are transcribed using the transcription software ‘Amazon Transcribe’. As AWS is based in the United States, (read) access to data from the United States cannot be ruled out. A corresponding EU standard data protection agreement was concluded accordingly to ensure sufficient protection of your personal data. You can download the EU standard contractual clauses from the URL https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32010D0087.
Inbenta Holdings INC. helps us provide our Self Service. Sucursal en España, C/ Arago 222, 08011 Barcelona (Spain).
III. Use with/without a Volkswagen user account and preparing account registration
If you contact us with requests regarding our digital services or apps, we also check whether you already have a Volkswagen ID user account; therefore, we will ask you for your email address and check whether you already have a Volkswagen ID (using the Volkswagen ID, you can log into numerous onlineservices (e.g. websites or applications) from Volkswagen AG and third parties. It acts as a central user account that you can use to manage your data centrally. The data processing required for the Volkswagen ID is performed for the purposes of contract fulfilment (see Article 6, paragraph 1, letter b) GDPR). Registration requires your email address and a password personally chosen by you. Please refer to the comprehensive Privacy Policy for Volkswagen ID. This policy can be viewed at https://vwid.vwgroup.io/data-privacy).
If you contact us and do not yet have a Volkswagen ID user account, you can ask our agents to prepare your registration for the Volkswagen ID during the conversation. With your consent (see Sec. VI) we will record your order over the phone and process your name, email address, address, telephone number, country and language to prepare registration and send you an email with an invite to register a Volkswagen ID. In order to ensure that only you can access your customer data and to prepare your registration, you must select a four-digit invite code of your choice and communicate it to the agent. You must enter the code to complete the registration process of your Volkswagen ID within 30 days; only when you have correctly input your invite code, your pre-recorded customer data will be assigned to your Volkswagen ID; this eliminates the possibility of unauthorised third parties accessing your customer data, even if the invite goes to the wrong address. We process your customer data to prepare your registration for Volkswagen ID (see Article 6, paragraph 1, letter b) GDPR) and delete the recording of your telephone order after 60 days and your pre-recorded customer data after 30 days.
IV. Preparing to obtain consent to receive advertising, advertising approaches, satisfaction surveys
If you have a Volkswagen ID, our agent will check as part of Customer Care whether you have previously given us your consent to receive advertising by using the e-mail address you have stored in the Volkswagen ID. If you have not yet given us your consent to receive advertising, you may prepare this during the course of a conversation. With your consent (see Sec. VI), we record your desire to consent by telephone and send you an email with an invitation to consent to receive direct advertising. You can give your consent to receive advertising personally tailored to you by clicking the link in the email invite within 30 days (see Article 6, paragraph 1, letter a) GDPR). We will delete the recording of your desire to consent after receiving your consent by email. If you do not give us your consent we will delete your desire to consent after 60 days the latest.
If you have already given us your consent to receive direct advertising (see Article 6, paragraph 1, letter a) GDPR), our agent may approach and advise you on our products and services. In order to improve our agents’ approach and advice, we process data from your Volkswagen ID user account and associated services as well as results from segmentations. If you are interested on any products or services, your interest is recorded and processed in order to subsequently send you advertising personally tailored to you. More information on data protection in this context of consenting to receiving advertising and advertising approaches can be found in the Volkswagen ID Privacy Policy at https://vwid.vwgroup.io/data-privacy.
V. Recording and analysing of requests by telephone and satisfaction surveys
If you contact us by phone with concerns about our digital services or apps and/or participate in satisfaction surveys, before the start of the discussion you will be given the option to consent to the discussion being recorded for the purposes of quality assurance, improving customer care and improving our digital services. To do this, you must follow the prompts given while you are in the queue and press the relevant button on your phone (see Article 6, paragraph 1, letter a) GDPR). You can withdraw your consent at any time by communicating this to the agent during your discussion or sending an email to info-datenschutz@volkswagen.de at a later point.
If you have granted us consent to record one or more discussions, we will record and transcribe your discussion(s).
To maintain quality in our customer care and our digital services, we will immediately analyse the recordings in text form (by using language detection, syntactic analysis or semantic analysis tools, for example) and categorise and classify them (by allocating them to a certain subject or on the basis of sentiment, for example). This kind of analysis allows us to draw conclusions about the duration and content of the discussion, the activity that took place during it and your satisfaction with the customer care provided. As a result, we can identify and use customer concerns for debriefing and training our agents (in order to ensure that guidelines are complied with and to communicate guidelines on the basis of practical examples, for instance). We will erase your data from the recordings analysis or anonymise it after 14 days.
C. Processing of personal data of commercial customers when using the CIC
The data processing for commercial customers when using the CIC website/feature app is basically identical to the data processing described in B. (insofar as the functions and services are also offered to commercial customers when using the CIC). When processing your requests as a commercial customer, we process your commercial personal data (e.g. professional e-mail address, organisation address) in addition to or instead of the private personal data mentioned in B.II.1. We do not currently offer self-service (B.II.2.) to commercial customers using the CIC. The explanations of the Volkswagen ID (B.III.) apply accordingly to commercial customers for the ONE Business ID. Please note the detailed privacy policy applicable to the ONE Business ID. You can access this at https://onebusinessid.com/legal#dataprivacy. We do not currently offer commercial customers preparation for registration for a ONE Business ID user account when using the CIC; the same applies to preparation for obtaining consent to receive advertising (marketing consent), addressing in advertising, satisfaction surveys (B.IV.) and satisfaction surveys (except for concerns raised by telephone) (B.V.). The explanations on the analysis of concerns (except concerns raised by telephone) (B.V.) and the recording and analysis of concerns raised by telephone and/or satisfaction surveys (B.VI.) apply accordingly to commercial customers.
D. Cyber security
You have the option of contacting the Customer Interaction Center (CIC) if you suspect cyber security attacks when using our digital services. In this context, Volkswagen AG processes personal data required in each case, such as your personal data (e.g. name, e-mail address, address, telephone number, country and language), contract data (e.g. your contract and customer numbers, consents), transaction data (e.g. order and invoice data), vehicle data (e.g. vehicle identification number, first registration, information on equipment), vehicle usage data (e.g. mileage, logbook, fluid levels, serviced vehicles). (e.g. mileage, logbook, fluid levels), service data (e.g. date of vehicle drop-off/pick-up, replacement vehicle), hardware data (e.g. type of terminal, manufacturer of terminal, serial number of terminal), software data (e.g. firmware, operating system, app version), IT usage data (e.g. logins to services, use of functions) or payment data (e.g. bank details).
The legal basis for contacting us in the event of cyber security attacks is an overriding legitimate interest pursuant to Art. 6 (1) lit. f GDPR. The legitimate interest of Volkswagen AG is to ensure the highest possible security for our digital services.
Cariad SE and Salesforce.com, Inc. support us as data processors with the processing. Access to the information by Salesforce.com, Inc. based in the USA cannot be ruled out, so a corresponding EU standard contract (adequate guarantee for data processing in non-European countries) has been concluded. You can access the EU standard contractual clauses used via the URL https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32010D0087. We only retain your data for as long as is necessary for the respective purposes for which we process your data and provided that there are no other retention obligations that prevent deletion.
E. Your rights
You may assert the following rights vis-à-vis Volkswagen AG at any time free of charge. Additional information on exercising your rights can be found in section D.
Right of access: You have the right to receive information from us (Article 15 GDPR) regarding the processing of your personal data.
Right to rectification: You have the right to request that we rectify (Article 16 GDPR) any of your personal data that is incorrect or incomplete.
Right to erasure: You have the right, in the event that the requirements specified in Article 17 GDPR have been met, to request the erasure of your data. Accordingly, you may request the erasure of your data, for instance, if it is no longer necessary for the purposes for which it was collected. Furthermore, you can also request erasure if we process your data on the basis of your consent and you withdraw this consent.
Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if the requirements specified under Article 18 GDPR have been met. This is the case, for example, if you dispute the accuracy of your data. You may then request that processing is restricted for as long as it takes to examine the accuracy of your data.
Right to object: If processing is based on an overriding legitimate interest you have the right to object to the processing of your data. An objection is permissible if processing is either in the public interest or on account of a justified interest of Volkswagen AG or a third party. In the event of objection, you are kindly requested to notify us of your reasons for objecting to data processing.
Besides this, you also have the right to object to data processing for the purpose of direct marketing. The same applies to profiling, if this is related to direct marketing.
Right to data portability: Provided that the data processing is based on consent or on the fulfilment of a contract and that it is also carried out using automated processing, you have the right to receive your data in a structured, common and machine-readable format and to forward it to another data controller.
Right of withdrawal: Insofar as the data processing is undertaken based upon consent, you have the right to withdraw your consent, with future effect at any time, free of charge.
Right to lodge a complaint: You also have the right to lodge a complaint with a supervisory authority (e.g. with the data protection officer for Lower Saxony) regarding our processing of your data.
F. Your points of contact
Points of contact for exercising your rights
You can exercise the above rights and/or manage your information by contacting us using the details below:
Post: Volkswagen Customer Services, PO Box 9004, LEEDS, LS1 9WA
Phone: 0800 333 666 If you have any specific data protection concerns or a complaint, you can address it to our Data Protection Team at dataprotection@vwg.co.uk .
Volkswagen Group United Kingdom Limited
Yeomans Drive, Blakelands, Milton Keynes, MK14 5AN, United Kingdom
If you are unhappy, you have the right to lodge a complaint with a data protection regulator in Europe, in particular in a country you work or live or where your legal rights have been infringed. The contact details for the Information Commissioner’s Office, the data protection regulator in the UK, are below:
Post: Information Commissioner's Office Wycliffe House Water Lane Wilmslow Cheshire SK9 5AF
For information on the person to contact to exercise your rights and for further information, please visit the following link https://datenschutz.volkswagen.de.
Data Protection Officer
Our Data Protection Officer is your point of contact for issues related to data protection: