### General Information Dr. Ing. h.c. F. Porsche AG ("Porsche AG" or "we") ensures compliance with applicable laws and regulations through appropriate compliance organization, legally compliant processes, and other measures to prevent and react to possible violations of law. These measures include the implementation and operation of a Whistleblower System by Porsche AG. Employees and external parties can use the Whistleblower System to inform (via "tip") Porsche AG about possible violations of legal requirements or internal regulations ("violations") and thus contribute to their detection and prosecution. We inform you in accordance with Art. 13, 14 EU General Data Protection Regulation (GDPR) about the processing of your personal data ("data") in the course of the Whistleblower System. Porsche AG will process personal data within the scope of the Whistleblower System only in accordance with applicable data protection regulations, particularly GDPR and the German Federal Data Protection Act (BDSG). This Privacy Notice contains further information on data processing activities for "investigatory measures" and supplements our general Privacy Notice for the employment relationship. ### 1. Who is responsible for processing your data? The data controller in accordance with Art. 4 No. 7 GDPR is: Dr. Ing. h.c. F. Porsche AG Porscheplatz 1 70435 Stuttgart Deutschland Email: `datenschutz.personal@porsche.de` You can contact our data protection officer at the address above or at `datenschutz@porsche.de`. ### 2. Background Information Porsche AG must ensure compliance with applicable laws within the scope of its business operations. This applies, for example, to provisions of criminal law, the law on administrative offences, tax law, data protection law, stock corporation law, labor law, antitrust law, and other binding legal provisions. If Porsche AG does not sufficiently comply with these legal requirements, disadvantages such as monetary penalty or imprisonment, administrative fines, claims for damages, or damage to its reputation may result. To comply with its legal obligations, Porsche AG takes appropriate measures to ensure compliance with legal requirements or internal regulations within the group. These measures include the implementation and operation of the Whistleblower System. Employees are obliged to inform Porsche AG about possible violations according to the Porsche Group Directive No. "P50 Whistleblower System". Employees and external persons who report a possible violation can use the Whistleblower System and external channels to report possible violations.
