Audi F1 LogoAudi F1 Logo
User ProfileUser Profile
BurgerBurger

Privacy Policy

In this Privacy Policy, we inform you about the processing of your personal data by Audi Motorsport AG, Wildbachstrasse 9, 8340 Hinwil, Switzerland ("us" or "we").

We store and process personal data in accordance with applicable data protection laws, in particular the Swiss Federal Act on Data Protection of 1 September 2023 ("FADP") and the European Union General Data Protection Regulation 2016/679 ("GDPR").

The following explanations are intended to help you better understand how certain terms are used by us:

  • Personal data is all information that relates to an identified or identifiable natural person. An identifiable natural person is anyone who can be identified directly or indirectly, in particular, by means of reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, reading, retrieval, use, disclosure by transmission, dissemination or another form of making the data available, reconciliation or combination, restriction, erasure or destruction.

In our terminology, we follow the GDPR, but also include the terminology of the FADP, unless expressly stated otherwise.

This Privacy Policy outlines how we process your personal data in general. Depending on the specific context (e.g. webshop, HR etc.), our data processing activities may be subject to separate specific Privacy Policies.

1. Who is responsible for the data processing and who can I contact?

The data controller who is responsible for the processing of your personal data is:

Audi Motorsport AG, Wildbachstrasse 9, 8340 Hinwil, Switzerland.

If you have any questions or concerns regarding data protection, you may also reach out to us at: privacy@audif1.com

2. What personal data do we process?

In accordance with the FADP, and, if applicable, the GDPR, we may collect, receive, or store, in particular, the following personal data of you, which may depend on your role/function in which you interact with us (e.g. supplier, customer, website visitor, event guest, business/sponsoring partner, fans, newsletter recipient):

  • Identity and contact data such as name, postal address, phone number, email address, preferred contact/communication channels (e.g. SMS, push notification, email) and related data you share with us via such channels, business contact persons and associated role/function of business contacts, date of birth;
  • Financial data such as bank account data, credit card number, invoicing/billing data, creditor and debtor data, reference numbers, tax data, financial transaction and accounting data;
  • Communication data such as email and chat communication data, data of online calls, meetings and conferences, webinars, conference data, webinar data, audio and visual data during events;
  • Audi-login/ID associated data such as data on your registration, your related contact details, profile settings, your account activities, your interactions and communication, as well as data we may collect and receive from other Audi group companies in the course of our marketing activities (see below) including associated socio-economic data and publicly available information in this respect;
  • Business customers and partners data such as business partners contact details, names and role/function of business partners' representatives/employees, contract data, due diligence information, information necessary for the conduct of required compliance checks, credit card numbers;
  • Marketing / advertising and event data such as
    • Online marketing data such as newsletter data, and data associated with our online-contests;
    • event related data (e.g. races, partnership events), event badges and event pass data and photos, event records (e.g. photos, videos), participation lists, guest lists, event lists, required guest dietary preferences and allergies, communication in this respect;
    • data associated with your Audi-login/ID incl. information on your participation in (online) competitions, contests, campaigns, surveys, challenges and loyalty programs, information about content, livestreams, behind-the-scenes insights, community features, new features, and personalised user journeys, partner offers and activations, co-branding campaigns, loyalty rewards, loyalty programs, e-commerce offers, and other special rewards and benefits in relation to our, AUDI AG's, or our partners' products and services as well as analytical and aggregated data in this respect.
  • Website, online usage and behavioural data such as information on the use of our websites and apps and other online services, your registration and usage regarding the Audi-login/ID, clicking behaviour, campaign responses, vehicle configurations, preferred service partners incl. data analytics;
  • Technical data such as IP-address, connectivity data, browser type, user settings (e.g. language, cookie settings), domain name, session ID data, authentication data, visiting time, IT-support data;
  • Other data such as information we process for support and security reasons (e.g. video surveillance, IT support data), data we use to provide you with the requested customer or IT support, data we process to comply with our legal obligations (e.g. accounting, tax and retention obligations), to defend, exercise or establish legal claims, data from publicly available sources (e.g. socio-economic data), data related to the performance and maintenance of our business operation processes and technical infrastructure, as well as any other data you request from us or data you provide to us. Furthermore, we may also collect and process aggregated and analytical data to improve our services, products and offers to our customers and business partners.

If you share personal data of third parties with us, for example personal details of other employees of your company, of customers or any other persons, you are obliged to obtain the consent of the persons concerned in advance and to inform them about the processing of their personal data subject to this Privacy Policy.

You are not obliged to share and/or provide any personal data to us; in case you are not willing to do so, we may not be able to perform a contract with you or to provide you with certain services (e.g. online services, user settings etc.).

3.  For what purposes do we process your personal data and on what legal basis?

We will only use your personal data if and to the extent that applicable law allows. We process your personal data for various purposes in accordance with the provisions of the FADP and the GDPR, each as applicable.

For some purposes, we may use and rely on artificial intelligence technologies (e.g. regarding the creation of your customer profile) so that we can assess your interest as accurately as possible and create personalized advertising for you, and also to improve and optimize our business processes.

3.1 How do we process your personal data under the FADP?

Within the scope of the FADP, we process your personal data in compliance with the general principles of data processing (lawfulness, good faith, purpose limitation, transparency, proportionality, accuracy) or based on a justification (legal basis, your consent, an overriding public interest or our overriding private interest).

3.2 How we process your personal data under the GDPR?

Within the scope of the GDPR, the processing of your personal data is based on one of the following legal bases:

  • You have given your consent (Art. 6 para. 1. (a) GDPR);
  • The processing is necessary in order to fulfil a contract with you or to fulfil pre-contractual measures taking place at your request (Art. 6 para. 1. (b) GDPR);
  • The processing is necessary to fulfil a legal obligation under EU law or the law of an EU Member State to which we are subject (Art. 6 para. 1. (c) GDPR);
  • The processing is necessary to protect your vital interests or those of another person (Art. 6 para. 1. (d) GDPR);
  • The processing is necessary in order to perform a task assigned to us that is carried out in the public interest or in the exercise of official authority (Art. 6 para. 1. (e) GDPR);
  • The processing is necessary in order to safeguard the legitimate interests of Audi Motorsport AG or a third party (incl. other group companies), except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data, in particular when pertaining to a child (Art. 6 para. 1. (f) GDPR).

If, in exceptional cases, we process special categories of personal data (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, as well as genetic data, biometric data to uniquely identify a person, health data or data concerning sexual life or sexual orientation) about you, one of the following legal bases must also apply:

  • You have given your express consent (Art. 9 para. 2. (a) GDPR);
  • The processing is necessary in order to protect your vital interests or those of another person, and the data subject is unable to give his or her consent for physical or legal reasons (Art. 9 para. 2. (c) GDPR);
  • The processing refers to personal data that you have manifestly made public (Art. 9 para. 2. (e) GDPR);
  • The processing is necessary to assert, exercise, or defend legal claims (Art. 9 para. 2. (f) GDPR);
  • The processing is necessary for reasons of substantial public interest on the basis of Union or Member State law which shall be proportionate to the aim pursued, respect the essence of the right to data protection and provide for suitable and specific measures to safeguard the fundamental rights and the interests of the data subject (Art. 9 para. 2. (g) GDPR).

Building on the above remarks, we process your personal data on the basis of the following legal bases for the following purposes:

Purpose: Order and purchase management
Legal Basis: Contract*
Legitimate interests: n/a

Purpose: Cost management, control and analysis
Legal Basis: Contract, legitimate interests
Legitimate interests: We have a legitimate interest in ensuring invoicing/billing procedures as integrated in our internal business and technical processes.

Purpose: Providing and offering our offline and online products and services
Legal Basis: Contract, legitimate interests
Legitimate interests: We have a legitimate interest in providing our customers and business partners with our products/services and continuously improving and optimizing our offers in this respect.

Purpose: General marketing measures (e.g. marketing communications, cookie-based advertisement, third party social-plug ins, measures for identifying, analysing measuring, and evaluating the performance and effectiveness of our marketing measures, events, webinars, etc.)
Legal Basis: Legitimate interests, consent where required
Legitimate interests: We have a legitimate interest in promoting our brand and services by aggregated and direct marketing as well as personalized advertisements, and continuously analysing, evaluating, optimizing and tailoring our marketing/advertising strategies and activities to our existing and potential target groups and partnerships.

Purpose: Newsletters
Legal Basis: Consent
Legitimate interests: We have a legitimate interest in promoting our brand, events and services by newsletter mailings.

Purpose: Online-contests associated with our (race) events
Legal Basis: Contract, legitimate interests, consent where required
Legitimate interests: We have a legitimate interest in promotional activities around our events and our brand.

Purpose: Fan and customer loyalty by operating our website incl. managing fan and customer profiles (i.e. Audi-login/ID, CRM), and providing them with tailored promotional communication, personalized advertising communications, content and offers, status or loyalty badges and benefits in loyalty programs, special offers, rewards, raffles, campaigns, partnership branding campaign, evaluate/improve the success of advertising and campaigns, products and services
Legal Basis: Contract, legitimate interest, consent where required
Legitimate interests: We have a legitimate interest in maintaining our fan and customer community, offering them user accounts and including them in our CRM-system, and providing them with marketing and personalized advertisements, providing them with communications and promotional offers, and continuously analysing, evaluating, optimizing and tailoring our marketing/advertising strategies and activities to our existing and potential target group(s).

Purpose: Event organisations in connection with our partnerships incl. guest relationship management
Legal Basis: Contract, legitimate interests
Legitimate interests: We have a legitimate interest in conducting our partners events and providing them with related communication in this respect.

Purpose: Operating and offering a guest management app
Legal Basis: Contract, legitimate interests
Legitimate interests: We have a legitimate interest in promoting our events by special offers like guest apps etc.

Purpose: Public Relations
Legal Basis: Consent, legitimate interests
Legitimate interests: We have a legitimate interest in representing and promoting our brand vis-à-vis the public via selected press and media channels.

Purpose: Conclusion and executing partnership agreements and maintaining partner relationships
Legal Basis: Contract, legitimate interests
Legitimate interests: We have a legitimate interest in collaborating with selected partners and maintaining these relationships

Purpose: Operation of our website incl. troubleshooting, data analysis, testing, research, statistics, surveys, cookie management; online representation via our website incl. analysis of user behaviour to improve the website and the services offered
Legal Basis: Legitimate interests
Legitimate interests: We have a legitimate interest in operating our website and ensuring continuous functionality and availability, and in our online representation and analysing and optimizing our website and online-related services.

Purpose: Compliance with applicable retention requirements
Legal Basis: Legal obligation
Legitimate interests: n/a

Purpose: Safeguarding our legal rights and executing our claims
Legal Basis: Legitimate interests
Legitimate interests: We have a legitimate interest in asserting, defending, executing and enforcing our legal rights and claims.

Purpose: (IT) Security, support services (incl. communication infrastructure such as email, telephony, video conferencing, webinars etc.)
Legal Basis: Legitimate interests, consent where required
Legitimate interests: We have a legitimate interest in maintaining and ensuring an appropriate security infrastructure within our operational and technical (incl. IT) environment.

Purpose: Business operation incl. business development, administrative and operational process management, business monitoring and analysis
Legal Basis: Legitimate interests
Legitimate interests: We have a legitimate interest in ensuring functioning business operations processes.

* incl. pre-contractual measures upon a data subject's request.

4. What add-ons, tools and technologies do we use on our website?

We have integrated the following add-ons, tools and technologies on our website:

  • Social plugins: Instagram, TikTok and YouTube. You can recognize the social plugins by the respective icon that is placed on our website. When you interact with this social plugin, e.g. when you click on the symbol on our website, the information collected by the social plugin is forwarded and your visit by Instagram, TikTok and YouTube is recognised. Further information on how our social media partners process the personal data they collect about you can be found in the respective social media providers' data privacy notices.
  • Third-party links: We may, at our discretion, occasionally include links on our website to third party products, services or websites. We are not responsible for the privacy practices of any third-party websites and we do not review their content nor accept any responsibility or liability for their content. Third-party privacy statements may differ significantly from our privacy policy. Therefore, we encourage you to read the privacy policy of each and every third party collecting personal identifiable information.
  • Cookies: We use cookies on our website to achieve the above-mentioned purposes. For more information about the type of cookies we use, the purposes for which they are used and the rights you have in relation to these cookies, please refer to our Cookie Policy available here

5.   Who will receive your personal data?

Within Audi Motorsport AG, personal data is shared with those departments and entities that require access in order to meet contractual or legal obligations or to pursue legitimate interests (for example, IT or sales).

Furthermore, if you have given us your consent to process and link your data from your use of your Audi-ID account with other available data of you in order to receive personally relevant offers, we may exchange such data with Audi AG, Auto-Union-Strasse 1, 85057 Ingolstadt, Germany ("AUDI AG") and its affiliates and forward such data to other selected partners (listed here). Those recipients may process your data for their own purposes in their own responsibility, in accordance with their own privacy policies. 

In addition, we may share your personal data with the following recipients (in compliance with the applicable legal requirements):

  • Our other affiliates;
  • Agents, vendors and suppliers;
  • Service providers (e.g. tracking service providers, web agencies, hosting providers and IT service providers, newsletter agencies and service provider, content delivery network providers);
  • External consultants of Audi Motorsport AG (e.g., law firms, tax consulting firms, auditing firms);
  • Insurance providers;
  • Government and authorities within the scope of their jurisdiction (e.g. tax authorities, police, public prosecutor's office, courts, supervisory authorities);
  • Other third parties, insofar as you instruct us or give your consent to pass on data.

6. Will your personal data be transferred abroad?

We will only transfer your personal data abroad insofar as this is permissible under Articles 16 - 18 FADP and Articles 44 - 49 GDPR.

We may transfer your personal data to the following countries that offer adequate protection pursuant to the FADP and GDPR: EEA countries, the United Kingdom, Israel and USA (if the data recipient is certified under the EU-US and Swiss-US Data Privacy Frameworks ("DPF")).

We may also transfer your personal data to the following countries which do not offer adequate protection pursuant to the FADP and/or GDPR: USA (if the recipient is not certified under the DPF). Such transfer is secured by appropriate safeguards (such as EU Standard Contractual Clauses including amendments necessary under Swiss law) or based on a statutory exemption (e.g., if you have given your consent to the transfer, if the transfer is directly connected with the conclusion or performance of a contract with you or if the transfer is necessary for the establishment, exercise or enforcement of legal claims before a foreign court or authority).

Within the scope of the GDPR, you may ask us for a copy of the relevant safeguards by contacting us as indicated at the beginning of this Privacy Policy.

7. How long will your personal data be stored for?

We generally retain your personal data for as long as necessary to achieve the related purpose. The personal data will be deleted thereafter unless (i) you have given us your consent to retain it for longer, (ii) we are legally obliged to retain the personal data (e.g., for accounting or document retention purposes, statutory retention periods), or (iii) we have an overriding or legitimate interest to retain the personal data for documentation, quality assurance or similar business purposes or for the assessment or exercise of, or defence against, legal claims.

8. What rights do you have?

Your data protection rights are subject to the applicable data protection law under which you execute such right in a certain context. You generally have the following rights as a data subject:

Right to access: You have the right to request information about the data stored about you by us and the scope of the data processing and transfer carried out by us and to receive a copy of the personal data stored about you.

Right to rectification: You have the right to demand the rectification of incorrect personal data concerning you as well as the completion of incomplete personal data stored by us about you.

Right to erasure: You have the right to request the erasure of personal data stored about you by us if the legal requirements are met.

Within the meaning of the GDPR this may apply, if:

  • Your personal data is no longer needed for the purposes for which it was collected;
  • The legal basis for the processing was exclusively your consent, and you have revoked it;
  • You have objected to processing on the legal basis of balancing of interests for personal reasons and we cannot demonstrate that there are overriding legitimate grounds for processing;
  • Your personal data has been processed unlawfully; or
  • Your personal data must be erased in order to comply with legal requirements.

If we have passed your personal data on to third parties, we will inform them of its erasure, insofar as this is legally required.

Your right to erasure may be subject to restrictions. For example, we may not have to, or are not allowed to, erase any personal data we have to retain for longer due to legal retention periods. Personal data we need in order to assert, exercise or defend legal claims is also excluded from your right to erasure.

Right to restriction of processing: You have the right, under certain conditions, to request the restriction of processing (i.e. the marking of stored personal data with the aim of restricting its future processing). Within the meaning of the GDPR, the preconditions for this are as follows:

  • You dispute the accuracy of the personal data, and we must check the accuracy of the personal data;
  • The processing is unlawful, yet you do not wish to have the personal data erased and instead demand the restriction of its use;
  • We no longer need your personal data for the processing purposes, but you need the data to assert, exercise or defend legal claims;
  • You have objected to the processing and it is not yet clear whether our legitimate interests outweigh yours.

In the event of a restriction of processing, the data is marked accordingly and, apart from its storage, is processed only with your consent or to assert, exercise or defend legal claims, or to protect the rights of another natural or legal person or for reasons of an important public interest of Switzerland, the EU/EEA or an EU/EEA Member State.

Right to data portability: Insofar as we process personal data about you that you have provided to us automatically on the basis of your consent or a contract with you, you have the right to receive the personal data in a structured, common and machine-readable format and to transmit the personal data to another controller without hindrance by us. You also have the right to have the personal data transmitted to another controller directly by us, insofar as this is technically feasible and provided that the rights and freedoms of other persons are not affected by this.

Right to object: If we process your personal data for legitimate interests or in the public interest, you have the right to object to the processing of your personal data for personal reasons. A prerequisite for this is that the data processing must be in the public interest or have taken place following a balancing of interests of the parties involved. This also applies to profiling.

Insofar as we base the processing of your personal data on a balancing of interests, we generally assume that we can prove compelling reasons worthy of protection, but will examine each individual case.

In the event of an objection, we will no longer process your personal data, unless:

  • we can prove compelling grounds for the processing of your personal data that are worthy of protection and which outweigh your interests, rights and freedoms;
    or
  • your personal data serves to assert, exercise or defend legal claims.

Furthermore, you have a right to object if we process your data for our direct marketing.

Objections can be lodged in a non-formal manner and should, if possible, be sent to the contact details listed at the beginning of the Privacy Policy.

Right to revoke consent: If you have given your consent to the processing of your personal data, you can revoke it at any time. Such revocation will only be effective for the future. Processing that took place before the revocation will not be affected by it.

Right to lodge a complaint: In addition, you have the right to lodge a complaint with a supervisory authority for data protection if you believe that your personal data is not processed lawfully. This right to lodge a complaint exists without prejudice to any other administrative or judicial legal remedy.

Based on your residence, you may have the possibility to lodge a complaint with the competent data protection authority of your place of residence.

The contact of the competent data protection supervisory authority within the scope of the FADP is:

Federal Data Protection and Information Commissioner (FDPIC)
Feldeggweg 1
CH-3003 Berne
Switzerland
https://www.edoeb.admin.ch


9. Is your personal data subject to automated decision-making and profiling?

We do not perform and/or rely on automated decision-making.

In connection with your Audi-login/ID, we may create associated profiles. For this purpose, your data may be linked by us and AUDI AG with socio-economic data and publicly available information (e.g. weather data) in order to provide you with relevant content and personalized offers, to assign you status or loyalty badges and benefits within loyalty programmes, and to evaluate and improve the success of our advertising, campaigns, products, and services. In this respect, we and AUDI AG may also use artificial intelligence.

We also use audience management technologies to ensure that marketing messages and information reach you at the right time through the appropriate channels. This may, with your consent, include sending you communications about offers and products or showing you advertisements via digital media on our platforms. The degree of personalisation depends on the permissions and choices you have provided.

In addition, we analyse how you interact with our website in order to better understand your interests and preferences. This includes assessing how you browse and use our services, which products and features you find most relevant, how you respond to marketing and advertising campaigns, and how we can improve our customer service, product design, website experience, and overall user experience.

For these purposes, we may also use artificial intelligence technologies to support these activities and to deliver a more personalised experiences.

10. How may this Privacy Policy be changed by us?

This Privacy Policy does not form part of any contract with you, and we may amend it at any time. The version published on our website is the version that currently applies.

Last updated: March 2026