Data Privacy Policy

A. Data controller

We are delighted that you are visiting a website operated by Autostadt GmbH, Stadtbrücke, 38440 Wolfsburg, registered in the Commercial Register of the Local Court of Braunschweig under number HRB 100419 (“Autostadt GmbH”). Below, we provide information on how Autostadt GmbH processes your personal data in connection with your visit to the website.

B. Processing of personal data

a. Provision of and access to the website

When you visit our website, we process log files, which contain the following information:

• IP address
• URLs containing personal data (e.g. session IDs, user IDs)
• User-agent strings
• Timestamps, access patterns
• Error/access status (e.g. 403 when access is blocked)

We store web server log files, some of which contain personal data, for the purposes of IT security, error analysis and improving technical quality.

It is in our legitimate interest to be able to display the website to you correctly. This data is processed in accordance with (Art. 6 para. 1 lit. f GDPR).

The retention period is 30 days. We require this retention period in order to be able to carry out retrospective analyses and investigate security incidents (e.g. misuse of the website, investigation of criminal offences).

b. Subscription to newsletters

You are being offered the opportunity to subscribe to various newsletters. The data provided in this context

• Contact and identification details (email address, optional title, optional first name and surname)

will be used by Autostadt GmbH solely for the purpose of providing this service within the scope of your consent given for this purpose (Art. 6 para. 1 lit. a GDPR).

Autostadt GmbH uses the double opt-in procedure to confirm your enquiry and email address. An email will be sent to the email address you provided, asking you to confirm your consent. In connection with the double opt-in process, we record the IP address, date and time of submission of the web form, as well as the IP address, date and time of confirmation of the double opt-in email.

You may withdraw your consent at any time, free of charge and with future effect, by contacting Autostadt GmbH, for example by clicking the ‘Unsubscribe’ link included in every newsletter.

As soon as you unsubscribe from the newsletter, the personal data you provided for the newsletter will be deleted within 24 hours.

If you have consented to receiving the newsletter, we will also send you emails containing content that enables the following anonymous processing:

• When you open emails from us and click on the links they contain, this is recorded and the information is stored anonymously.
• We use the information gathered in this way to find out which topics are of particular interest to the recipients of our newsletters, so that we can tailor the content of our newsletters more closely to their needs in future.

Newsletters may be sent using a data processor. (Section C. Data transfer)

c. Contact forms

We have provided forms in various places so that you can get in touch with us.

When you contact us via the contact form, your personal data is automatically stored when you fill in the relevant fields on the form and submit the data. It is entirely up to you whether you choose to provide us with any information in this way, and if so, what information. The personal data collected in this context includes, in particular, your contact details, such as your first name, surname and email address.

a. Guest comments

In the ‘Guest Comments’ section, you can share your thoughts on your visit with us. You can send us your praise, criticism, suggestions for improvement and ideas, either personally or anonymously. We store your details for the purpose of processing your enquiry and in case any follow-up questions arise, in order to improve our products and services (legal basis: Article 6 para. 1 lit. f of the GDPR). The following data is processed on a voluntary basis:

• Contact and identification details (optional information: title, first name, surname, email address and telephone number)

b. Countdown Planner

On our website, you can create a personalised itinerary for your visit to Autostadt GmbH.

Personal data is collected, processed and used to the extent necessary for the fulfilment of your order and your use of our services, or where you have provided such information voluntarily (Legal basis: Article 6 para. 1 lit. a of the GDPR). The data processed may include:

• Contact and identification details (surname and telephone number; optional details: commission number, title, first name, email address)

If you book attractions by telephone or in writing, we will pass on your details to the relevant third-party service provider used by Autostadt GmbH to deliver its services, provided that Autostadt GmbH does not provide the services itself.

c. Online check-in

As part of its vehicle handover service, Autostadt GmbH offers its guests an online check-in service to help them prepare for their visit. In order to be able to clearly link the documents submitted to a specific vehicle delivery, the following personal data is collected and processed (legal basis: Article 6 para. 1 lit. a of the GDPR).

• Contact and identification details (first name, surname, email address, optional mobile number)
• Contact and identification details of the authorised representative (optional details: first name, surname, address)
• Vehicle details (consignment number, chassis number, registration number)
• Vehicle Registration Certificate Part I (Vehicle Registration Document)
• Contract details (collection note including the address of the person who ordered the vehicle)

d. Retail partners

Autostadt GmbH offers its retail partners a range of products for their customers. You can request a quote without obligation. The following data is processed for the purpose of specific allocation (legal basis: Article 6 para. 1 lit. b of the GDPR):

• Professional contact and organisational details (first name, surname, address, telephone number, email address, car dealership, dealer number, title (optional))

We will delete your data as soon as we have processed your enquiry, provided that no other retention periods (e.g. tax retention periods) prevent us from doing so.

e. Contact form – offers for school classes, nursery groups or leisure groups

Autostadt GmbH enables school classes, nursery groups and leisure groups (adults) to submit non-binding enquiries regarding the preliminary planning of programmes via an online contact form. The personal data required for this purpose will be processed in order to prepare a personalised quote and to contact you directly (legal basis: Article 6 para. 1 lit. b of the GDPR).

• Contact and identification details (title, first name, surname, street, house number, postcode, town/city, telephone number, email address)
• Professional contact and organisational details (first name, surname, address, telephone number, email address, car dealership, dealer number, title (optional))

We will delete your data as soon as we have processed your enquiry, provided that no other retention periods (e.g. tax retention periods) prevent us from doing so.

C. Guidance on the creation and use of photographs, audio recordings and video footage

During the event, photographs, audio recordings and/or video recordings will be made either by Autostadt GmbH itself or by service providers commissioned by Autostadt GmbH. We draw visitors’ attention to this on site via appropriate signage and, where applicable, in the admission and event information.

In doing so, participants may be captured in the background or as part of wide-angle shots and atmospheric footage documenting the event.

The service providers we engage are photographers and/or film crews who generally act on our behalf as data processors. Where service providers act as independent data controllers in specific cases, we will provide separate information on this. In the event of data processing on behalf of a client, a data processing agreement has been concluded with the service providers.

The photographs are taken, selected, edited and published by Autostadt GmbH for the specific purpose of documenting and reporting on the event, as well as for internal and external corporate communications (e.g. press material, event review). Any images that are unsuitable or unnecessary will be deleted promptly.

The publication will be made available via the following channels in particular:

• Autostadt GmbH’s corporate websites
• Autostadt’s social media channels (e.g. Facebook, X/Twitter, Instagram, YouTube and LinkedIn)
• internal communication channels of Autostadt GmbH and Volkswagen AG (e.g. the intranet)

In addition, selected photographs may be sent or made available to third parties (e.g. media representatives or agencies) for the purpose of reporting on the event. Use by third parties is permitted solely in connection with reporting on the event.

Your personal data is processed on the basis of a legitimate interest in accordance with Article 6 para. 1 sentence 1 lit. f of the GDPR. Autostadt GmbH’s legitimate interest lies in vividly documenting and reporting on its events through photographs, audio recordings and/or video footage. This applies exclusively to general photographs that illustrate what is happening at the event. You may object to this processing at any time on grounds relating to your particular situation (Art. 21 of the GDPR).

If portrait photographs and/or interviews are to be taken of you, GmbH will ask for your voluntary consent in advance in accordance with Article 6 para. 1 sentence 1 lit. a of the GDPR. You may withdraw your consent at any time with effect for the future.

D. Data transmission

As a general rule, we only pass on your data to third parties who work with us to provide our services. We will not sell personal data to third parties or market it in any other way. We do not transfer your data to recipients outside the EU or to international organisations.

In order to provide you with the services described, we incorporate the following third parties. These third parties operate strictly in accordance with instructions. We have entered into these contracts to carry out work solely on behalf of the client.

An email newsletter (newsletter about the new Autostadt annual pass) We send these via a third-party service provider (currently: lnxmail GmbH, Wentzingerstr. 17, 79106 Freiburg), to whom we provide your title, first name, surname, IP address and email address for this purpose.

A service provider responsible for processing the completed forms (currently: Sattler Direct Mail GmbH & Co. KG, Daimlerring 2, 31135 Hildesheim). This company will have access to all the information provided on the form.

E. Data security on the internet

We take every necessary technical and organisational security measure to ensure that your personal data is stored in such a way that it cannot be accessed by third parties or by the public. If you wish to contact us by email, please note that this method of communication cannot fully guarantee the confidentiality of the information sent. We therefore recommend that you send us confidential information by post only.

F. Use of cookies and tracking tools

a. General information

Autostadt GmbH uses various cookies on its websites. Cookies are small files containing configuration information that are stored on your end device. Cookies can generally be divided into three categories. There are cookies that are essential for the website to function (known as functional cookies), cookies that enhance the user experience and, for example, save your language settings (known as convenience cookies), and cookies that are used to create a pseudonymised user profile (known as tracking cookies). This website uses functional, convenience and tracking cookies.

Further information on the use of cookies can be found in the Cookie Policy of Autostadt.

The processing of functional cookies is necessary to enable you to visit the website (see Article 6 para. 1 lit. b of the GDPR).

Tracking cookies are only set if the website visitor has given their consent (Art. 6 para. 1 lit. a GDPR). Consent is given via the so-called cookie banner, which must be actively clicked.

You can withdraw your consent at any time to the data processing described above, which involves the use of the cookies and tracking tools listed, with future effect by clicking on the link below and changing your current preferences in our Cookie Consent Manager:

Change my cookie preferences

The link to the Cookie Consent Manager can also be found in the footer of the website. For further information about our cookies, please refer to our Cookie Policy at and the information below.

b. Use of web analysis services

The Autostadt GmbH websites use Matomo, which is a web analysis service. The information collected in this way helps us to continuously improve the user-friendliness and quality of our website and to optimise your user experience.

If you have consented to web analytics, your IP address will only be transmitted in truncated form and will therefore be anonymised, meaning that you, as a user, remain anonymous to us. Information about your use of this website will not be disclosed to third parties. Your personal data will only be processed within Autostadt GmbH by the departments responsible for dealing with your enquiry.

No data is transferred to third countries (countries outside the EU or the EEA).

For further information about the cookies used, please refer to the Cookie Policy.

Data processing is carried out on the basis of the consent you have given (Art. 6 para. 1 lit. a GDPR).

What data do we collect as part of our web analysis?

1. Visitor data:

• IP address (anonymised)
• Location (based on IP address)
• Device type, operating system, browser type and version
• Browser language settings

2. User behaviour:

• Pages visited and time spent on site
• Click paths and navigation
• Downloads and clicks on external links
• Interactions with forms
• Source of visitors (e.g. search engines, direct traffic, social media)
• Campaign tracking (e.g. UTM parameters)

3. Technical specifications:

• Loading times
• Error pages (e.g. 404)

If you consented to web analytics when you first visited the site, you can withdraw your consent at any time.

Manage my cookie preferences

G. Your rights

You may exercise the following rights with regard to Autostadt GmbH at any time and free of charge:

Right of access

You have the right to request information from us regarding the processing of your personal data.

Right to rectification

You have the right to request that we correct any inaccurate or incomplete personal data concerning you.

Right to erasure

You have the right to request the erasure of your data, provided that the conditions set out in Article 17 of the GDPR are met. You may then, for example, request that your data be erased if it is no longer necessary for the purposes for which it was collected. You may also request that your data be erased if we are processing it on the basis of your consent and you withdraw that consent. Please note that even if you withdraw your consent, we may still process your data on a legal basis, in which case we may not be able to erase it.

Right to restriction of processing

You have the right to request that the processing of your data be restricted if the conditions set out in Article 18 of the GDPR are met. This is the case, for example, if you dispute the accuracy of your data. While the accuracy of the data is being verified, you may request that the processing of your data be restricted.

Right to data portability

If data processing is based on consent or the performance of a contract, and if such processing is carried out using automated means, you have the right to receive your data in a structured, commonly used and machine-readable format and to transmit it to another data controller.

Right of withdrawal

If data processing is based on consent, you have the right to withdraw your consent at any time, free of charge, with effect for the future.

Right to complain

You also have the right to lodge a complaint with a supervisory authority (e.g. the State Data Protection Commissioner for Lower Saxony) regarding our processing of your data. However, we recommend that you always address any complaints to our Data Protection Officer in the first instance.

H. Your contacts

Contact person for exercising your rights

The contact person for exercising your rights and obtaining further information is

Autostadt GmbH
Stadtbrücke, 38440 Wolfsburg
datenschutz@autostadt.de

Data Protection Officer

Our Data Protection Officer is available to assist you with any data protection-related enquiries:

Volkswagen AG
Berliner Ring 2, 38440 Wolfsburg
konzerndatenschutz@volkswagen.de

Last updated: May 2026