Audi Canada Privacy Policy

At Audi Canada Inc. ("Audi Canada", “we”, “us” or “our”), your privacy is important to us. This privacy policy (the “Policy”) explains Audi Canada’s privacy practices as well as the choices you can make about the way we collect, use and disclose your personal information, so that you can better understand how we handle the personal information we control.

Definitions of “personal information” may vary from one jurisdiction to another but generally, “personal information” means any information about an identifiable individual.

Personal information may, for example, include direct or indirect identifiers such as a person’s name or driver’s license number, as well as information that, when used in combination with other available information, allows a person to be identified. Your rights in relation to your personal information may also vary depending on where you live.

To make this Policy easy to find, we make it available on our website at www.audi.ca.

If you are unsure if or how this Policy applies to you or have questions about this Policy, or our personal information handling practices, please contact our Privacy Officer at:

In Summary

What personal information we collect and how: The personal information we may collect about you and how we obtain it varies depending on the nature of our relationship with you and how you interact with us. For example, we may collect information when you visit our website, attend special events, complete our customer surveys, or when you request and/or receive any products or services from us. We may also obtain personal information about you indirectly through our dealers, our affiliates (e.g. Audi Finance) and others who provide information to us.

Generally, the personal information we may collect falls into the following categories, not all of which may apply to you: (i) contact information such as name, address, telephone number, and e-mail address; (ii) financing and payment information (including billing and authorization information); (iii) information concerning vehicle use; (iv) information relating to the use of the Audi Connect Services (as defined below) ; and (v) information relating to individual preferences of our products and services.

Why we collect personal information and how we use it: Our reasons for collecting your personal information and how we use it will vary depending on the nature of our relationship with you but generally, we only use and share personal information for the purposes for which it was collected, unless we’re legally allowed to use it for another purpose. For example, we may collect and use your personal information to manage our relationship with you, to communicate with you, to obtain your feedback, to improve our products and their safety features on an ongoing basis, to conduct research and marketing activities, and to defend our legal rights and comply with the law.

How we share personal information. We may share your personal information with our dealers, our affiliates, and our other service providers (e.g. satellite radio providers) for the purposes described in this Policy. We may also share personal information to technical support service providers, customer relationship management (CRM) software service providers, and data storage and processing service providers that are assisting us in fulfilling the purposes for which we collected the personal information. We may also disclose your personal information to a third party in the event of a significant business transaction involving Audi Canada, such as a merger or reorganization of our business.

For more details about the personal information we collect, how we collect it, and how we use and share it, please read the sections below.

General Information We Collect

We collect and maintain different types of personal information concerning the individuals with whom we interact. For example, we may collect:

• your contact information, such as your name, mailing address, telephone number, e-mail address, driver's license, and insurance information;
• information used to verify your identity;
• your payment information, including your credit card number, CVV code and expiry date;
• your financial and credit information as disclosed to us by VW Credit Canada, Inc. ("Audi Finance"), when you have provided your consent;
• information which enables us to provide you with the products or services that you seek, including any information you provide to us when you create or maintain an account with us;
• information which enables us to offer you products and services which we believe may be of interest to you, including information about your interests, purchase patterns, incentive eligibility, vehicle purchase intentions, and demographic information (e.g. age, gender, education level, occupation, and marital status);
• information about your use of certain services that we may provide to you, or that may be provided through your vehicle;
• information about your vehicle, including: (i) your vehicle's make, model, and model year; (ii) vehicle identification number (VIN); (iii) license plate number; (iv) whether it was a new or used, lease or purchase, and/or a trade-in; (v) date of purchase or lease; (vi) the term of your lease or financing and other loan-related information; (vii) service information (e.g. service history, recalls, warranty and repair data, mileage, diagnostic data about the performance or status of vehicle modules and systems); and (viii) applicable third party service providers (e.g. cellular provider, satellite radio provider, etc.);
• information gathered by your vehicle and how you interact with it. For example, your vehicle may contain an event data recorder ("EDR"), which can collect and store information about your vehicle and its occupants immediately before and during a collision or near collision event (including how various systems in your vehicle were operating (such as your accelerator and brakes), as well as the speed of your vehicle), diagnostic information, and information about the deployment of the airbags. For additional information about your EDR, please see your owner's manual;
• information about your connected devices (including laptop, cell phone and tablet), including type/model of the connected device, browser types and settings, IP address, network information;
• information that you submit to us (including photographs and videos) through or in connection with contests, sweepstakes, social media, contact forms or chat features on our website or app, written or verbal communications with any of our representatives, or through any other means; and
• spoken data (and any personal data included therein) when using voice command features or when you speak to a customer care representative.

In addition to the foregoing, if you choose to activate our connected-car systems, including but not limited to Audi Connect or any similar services (the "Audi Connect Services") (whether through a plan offered at no additional cost or a paid subscription), we may collect additional personal information in connection with this service, including:

• information that you provide when using the Audi Connect Services, including information you send and information you request;
• vehicle data transmitted from your vehicle or inferred from your use of the vehicle or our services, such as general status data (e.g. warning lights, upcoming service schedule, fuel level, battery level, tire pressure); service history and fault or trouble codes; ambient data (e.g. outside temperature and brightness); vehicle performance data; other data about your vehicle including its identification, condition, equipment status, or collision information; vehicle/technology usage data (e.g. usage of start/stop and remote start technology);
• driver behavior data (e.g. vehicle speed, seat belt use, and information about braking habits), time at which the vehicle is in use, GPS location data, and inferences, such as postal code of residence, that the primary driver is a routine long commuter, or frequency of individual versus multi-person use;
• information about your use of (i) the Audi Connect Services; and (ii) any applicable mobile application and/or website; and
• information about your interactions with us, our affiliates, or our third party service providers, Integrated Content Providers and Optional Third Parties (each as defined below).

If your vehicle is equipped with online “over the air” system update capability, we will also collect software and hardware version and serial numbers of vehicle hardware and use this information to provide online system updates.

From our Dealers: We may also obtain your personal information from our dealers (each an "Audi Dealer") when you buy or lease a vehicle, or obtain any services from them. Please note that Audi Canada and each Audi Dealer are separate legal entities and we each have our own privacy policies. When you visit or interact with a dealer, please be sure to read their privacy Policy in addition to this Audi Canada privacy Policy to fully understand how each entity collects, uses and shares personal information. Because your Audi Dealer is often your first point of contact, your Audi Dealer should be able to answer any questions you may have about its privacy practices. Any questions concerning your Audi Dealer’s privacy policies and procedures (including opting out of marketing communications) should be addressed directly to your Audi Dealer.

From Audi Finance: We may obtain your personal information from Audi Finance so that we may: (i) process your information on their behalf; and (ii) send you marketing information about our vehicles, products or services, events and promotional or loyalty offers (including finance or lease offers).

From other Third Parties: We may also obtain your personal information from third parties who help us operate our business. For example, we may conduct joint marketing activities (such as contests, sweepstakes or social media) through which we may obtain your name and address and other information about you. Audi Canada and each of these third party organizations have their own privacy policies and procedures; and it is recommended that you read and understand both. Audi Canada is not responsible for such third parties' compliance with applicable privacy laws. Any questions concerning their privacy policies and procedures (including opting out of marketing communications) should be addressed directly to such third parties.

Audi Canada collects personal information (as well as Vehicle Data) to enable us to develop, manage and maintain our operations and business, including for example:

• to establish, maintain and manage our relationship with you so that we may provide you with the products, information or services that have been requested (including, for example, to respond to your questions or requests for products, information or services);
• regarding the myAudi app, we may collect, use and disclose your personal information:
to enable you to create an account with Audi which will enable you to register, subscribe and/or use various services provided by Audi or third parties;
to enable the provision of such services to you; and
for the purposes described in this Privacy Policy.
• to be able to review the products and services that we provide to you so that we may:
understand your requirements for our products and services;
understand your preferences and needs; and
work to improve our products and services;
• to administer or assist our dealers or Audi Finance with the administration of your vehicle warranty, purchase, lease or financing;
• to provide you with information about your vehicle (including product campaigns and recalls);
• to send you marketing materials about our vehicles, products or services, events and promotional or loyalty offers;
• to conduct market research;
• to build and maintain a customer profile of you to be used for any of the above purposes;
• to protect Audi Canada against error, fraud, theft, and damage to our goods and property;
• to enable us to comply with applicable laws or regulatory process;
• for any other purposes described in this Policy; and
• any other reasonable purpose to which you consent at or before the time we collect your applicable personal information.

For the purposes outlined in this Policy, we may share your personal information with:

• Audi Finance;
• Audi Dealers;

• our affiliates, including Volkswagen Group Canada Inc. ("VGCA"), Volkswagen Group of America, Inc. ("Volkswagen America"), Audi Aktiengesellschaft ("Audi AG") and Volkswagen Aktiengesellschaft ("Volkswagen AG");
• third party service providers, including our suppliers, contractors, professional advisors, and affiliates that perform services for us (e.g. (i) third parties such as SiriusXM, network and other information technology services, (ii) customer service, (iii) marketing services, (iv) payment processing, and (v) legal, accounting and other professional services); and
• appropriate authorities to protect our rights, your safety or the safety of others, to investigate fraud, or to respond to a law enforcement request.

We may also share your personal information as required or permitted by law (for example, in connection with an investigation or subpoena).

When you log into the Audi Canada website (https://www.audi.ca/ca/web/en.html) with your Audi ID/ myAudi Account and use the services provided by Audi Canada within the logged in state of the website (e.g. providing your VIN to connect your vehicle to your Audi ID/ myAudi Account), a data exchange between AUDI AG and Audi Canada for the purpose of providing such services takes place. Such data may encompass personal (identification) data (e.g. technical tokens, name, nickname, preferred dealer, etc.) or vehicle data (VIN, basic vehicle details (model, year, etc.)) depending on the services you use. We exchange this data for performing a contract (Art. 6(1)(b) GDPR) between you, AUDI AG and Audi Canada respectively. In jurisdictions where this legal ground is not recognized, this exchange is based on your implied or express consent.

When you purchase or lease an Audi vehicle from a Audi dealer (or otherwise) that is equipped with a trial subscription to SiriusXM satellite radio, we and/or our Audi dealers may share your personal information with Sirius XM Canada Inc. and/or its affiliates (collectively, the "Sirius XM Entities"), including for example: (i) your name, address, phone number, and email address; and (ii) the model, model year, and VIN of your vehicle, the "electronic serial number" or "RadioID" of your vehicle's SiriusXM receiver, and the date when the vehicle was leased/sold to you. This information is shared in order to: (x) complete the activation of your free SiriusXM trial subscription; (y) allow the Sirius XM Entities to contact you regarding the free SiriusXM trial subscription and to provide you with any additional products, services, or offers that you may be interested in (to the extent applicable); and (z) enable any of the Sirius XM Entities to send you marketing materials (e.g. offers for additional subscriptions to SiriusXM satellite radio) by email or otherwise. For further details about Sirius XM Canada Inc.'s privacy practices, please review its privacy policy. To allow the SiriusXM Entities to better understand your needs and to improve their respective products and services, they may collect, use and share data relating to the performance and/or usage of SiriusXM in your vehicle. Audi Canada does not control SiriusXM’s practices with respect to that data. Please review their privacy policy for more information. Where applicable, you can withdraw your consent from receiving marketing communications from SiriusXM at any time by contacting SiriusXM directly in the manner indicated in their privacy policy. If you have any questions about the foregoing, please contact Audi Canada at privacy@audi.ca and we will try to assist you.

When you request or purchase certain products and services from a third party service provider through us (e.g. Wi-Fi hotspot services), we may share your personal information with that service provider in order for that service provider to: (i) create and manage its relationship with you; and (ii) provide you with the products and/or services that you seek.
We may also share your personal information with Electrify Canada and our other affiliates, partnerships and joint ventures for the purposes of administering our respective businesses, including for example, confirming the purchase or lease of any products or services that you may have made from us or one of our authorized Audi Dealers.
Finally, your personal information may be disclosed or transferred to another party during the course of (i) the grant of a security interest in Audi Canada's assets, or (ii) completion of the sale of all or a part of Audi Canada through (for example, an asset or share sale, or some other form of business combination, merger or joint venture); provided, however, that such party is bound by appropriate agreements or obligations and required to use or disclose your personal information in accordance with this Privacy Policy.

We may transfer your personal information to a jurisdiction other than the one in which it was collected in order to fulfil the purpose outlined in this Privacy Policy or for other processing and storage purposes permitted by law. When your personal information is outside of its jurisdiction of origin, it is subject to the laws of the country or province in which it is located, which may have different data protection laws than those in force in its originating jurisdiction. Those laws may make it possible for your information to be accessed by law enforcement and national security authorities in that other jurisdiction. For example, we could be obliged to respond to a subpoena or other mechanism that would give law enforcement officials in that other jurisdiction access to your personal information. That said, for any personal information originating from the province of Québec, we will conduct a privacy impact assessment (PIA) prior to the transfer of such information outside of Québec and the information will not be transferred unless the results of the PIA demonstrate that the information would benefit from an adequate level of protection in light of generally recognized principles for the protection of personal information.

We do not seek to obtain, nor do we wish to receive, personal information directly from minors; however, we cannot always determine the age of individuals with whom we interact (e.g. individuals who access and use our websites). If a minor (as defined by applicable law) provides us with his or her personal information without parental or guardian consent, we encourage the parent or guardian to contact us.

To the extent that we are allowed to do so under applicable laws, we may de-identify or anonymize your personal information, and use and disclose such de-identified or anonymized information for any purpose (including to develop, manage, and maintain our business) without further notice to you.

Audi Canada will only send you commercial electronic messages if we have your implied consent or express consent to do so. For example, we may send email, text or other electronic messages to you: (i) if you have an existing vehicle warranty, purchase a service directly from us, or have some other form of existing business relationship with us; or (ii) if you have asked for or otherwise expressly agreed to receive such electronic messages from us, such as by signing up for our newsletter or by agreeing to receive marketing communications from Audi Canada in the context of one of your interactions with a dealer. You can withdraw your consent or request to stop receiving such messages at any time either by using the unsubscribe mechanism within the body of any such message or by contacting our Privacy Officer at privacy@audi.ca.

A cookie is a small data file that is placed on your computer or mobile device by your web browser or mobile app. It is a tool that stores information about your website visits, recognizes you and your preferences each time you visit one of our websites or apps. Like most websites and apps, we and our affiliates, partners and third-party service providers use cookies and similar technologies including web beacons, embedded scripts and e-tags (together referred to as “cookies”) for a variety of reasons, including: to provide users with a better and more efficient user experience, to provide marketing and other content that is more relevant to the user’s interests and presumed needs, to provide users with our services, our websites and our apps, to analyze how users use our websites, apps and services, and to enhance our website, app and services performance.

The following categories explain the types of cookies we may use and what we may use them for. The information these cookies collect may be anonymized. Please see the “How To Control Your Cookie Preferences” section below to find out how to control your cookie preferences.

• Essential Cookies: These cookies are essential to enable you to move around the website and app and use their features. Without these cookies, the website or app may not behave as expected or some of their parts or features may be unusable or inaccessible.

• Performance Cookies: These cookies collect information about how users use our website or app (e.g., pages most often visited, features most often interacted with and if users get error messages from web pages). We analyze such information to help us improve the functioning and performance of our website and app.

• Functionality Cookies: These cookies allow our website and app to remember what choices you make (e.g., your username, your preferred language settings or the region you are in). This helps us provide you with an enhanced, more personalized experience when you access and use our website or app.

• Advertising and Marketing Cookies: We may use these cookies to: send you advertising and marketing-related material tailored to you and your interests, limit the number of times you see an advertisement, and help measure advertising campaigns’ effectiveness. These cookies are usually placed by advertising networks with the website operator’s permission. These cookies remember that you have visited a website and this information is shared with other organizations like advertisers. The “interest-based” or “personalized” advertising powered in part by these cookies is usually more relevant to you, but it also generally involves the collection and use of more information about you and your browsing history. More information about interest-based or personalized advertising can be found through various sources available on the Internet, such as www.allaboutcookies.org or https://optout.networkadvertising.org.

In addition, webpages, emails and mobile apps may contain a small transparent image file or line of code to record how you interact with them. Known as web beacons/pixels, they are often used in conjunction with web browser cookies (or the unique identifier of your mobile device) and they are used to help us to better analyze and improve our services. For example, these technologies may track which webpages you visit or which elements of a page you viewed, when and for how long, whether you viewed and/or clicked on an advertisement on a site or whether you opened or clicked on marketing emails sent to you. When corresponding with you via HTML capable email, we may use "format sensing" technology, which allows pixel tags to let us know whether you received and opened our e-mail.

There are a variety of ways in which you can control the information collected by cookies and similar technologies when you use our websites or apps. For example, you can control the cookies used by modifying the settings in your browser or on your device that allow you to change the setting of all or some cookies. Through those settings, you should also be able to delete cookies that have already been placed on your devices. For information and instructions on how to change your cookie settings on different browsers and mobile devices.

*Please note that if you use your browser or device settings to block all cookies, you may not be able to access all or parts of our websites, apps, or services.

We may use technology to serve advertisements on our own websites and within its content as that content is served across the Internet. In addition, we may use third party ad networks, publishers and other entities to serve advertisements (including via Facebook) and third party analytics vendors to evaluate and provide us with information about the use of our websites and the viewing of our content on our and other platforms.

Ad network providers, data providers, publishers and other media-related companies, and/or analytics service providers may set and access their own cookies, pixel tags and similar technologies on your device's web browser and they may otherwise collect or have access to information about you. We and they may target advertisements for products and services in which you might be interested based on your visits to both the Audi Canada websites and other websites. We and they may use a variety of companies to serve advertisements.

You can control the information we collect about you for these purposes through cookies and similar technologies. Please see the “How To Control Your Cookie Preferences” section above for more information on how to change your cookie settings.

We maintain appropriate physical, organizational, contractual and technological measures and follow generally accepted industry standards to preserve and safeguard the confidentiality and integrity of your personal information against accidental or unauthorized access, use, disclosure, alteration, destruction or accidental loss.

Despite these measures, we can’t guarantee that our safeguards will always be effective. For example, hardware or software failure, and other events such as a ransomware attack may compromise the security of your personal information. In such cases, we will act promptly to mitigate the risks and to inform you where there is a real risk of significant harm, or as otherwise required by law.

If you have reason to believe that your interaction with us is no longer secure or if you feel that the security of any information that you provided to us or that is under our control has been compromised, please advise our Privacy Officer using the contact information set out below.

When it is required, it is important to us that we have your consent to collect, use or disclose your personal information. Depending on the sensitivity of the personal information, your consent may be implied, deemed (using an opt-out mechanism) or express.

Express consent can be given orally, electronically or in writing. Implied consent is consent that can reasonably be inferred from your action or inaction. For example, when you enter into an agreement with us, we will assume your consent to the collection, use and disclosure of your personal information for purposes related to the performance of that agreement and for any other purposes identified to you at the relevant time, unless express consent is required.

Typically, we will seek your consent at the time that we collect your personal information. If we plan to use or disclose your personal information for a purpose not previously identified (either in this Privacy Policy or separately), we will advise you of that purpose before such use or disclosure, unless we are permitted by law to proceed without obtaining your consent. Privacy laws in Canada provide for certain exceptions where personal information can be used or shared without consent.

Please be advised that we may collect, use or disclose your personal information without your knowledge or consent where we are permitted or required to do so by applicable law or regulatory requirements. These circumstances include, for example, personal information which is subject to solicitor-client privilege, where collection or use is clearly in the interests of the individual and consent cannot be obtained in a timely way, to investigate a breach of an agreement or a contravention of a law, to act in response to an emergency that threatens the life, health or security of an individual, for debt collection, or to comply with a subpoena, warrant or court order.

We will retain your personal information for as long as necessary to fulfil each of the purposes for which it was collected, or as otherwise permitted or required by law. When this retention period expires, your personal information will either be anonymized or destroyed. If you would like more information on how long we retain your personal information, please contact our Privacy Officer using the contact information set out below.

Your rights relative to your personal information may vary depending on where you live. When contacting us to change or withdraw your consent or when requesting access to or correction of your personal information, please note that we may request specific information from you to enable us to confirm your identity and right to access, as well as to search for and provide you with the personal information that we hold about you. We may charge you a reasonable fee to access your personal information; however, we will advise you of any fee in advance. If you require assistance in preparing your request, please contact our Privacy Officer.

You can exercise all of the rights listed below by submitting a request in writing to our Privacy Officer using the contact information set out below.

Withdrawing Your Consent: You have the right to change or withdraw your consent to the further communication or use of your personal information at any time, subject to reasonable notice and to certain limitations such as legal or contractual obligations. Please note that in some cases, the withdrawal of consent may render us unable to continue to provide you with products or services where the collection, use or disclosure of your personal information is necessary to provide the product or service.

Accessing Your Personal Information: You have the right to request to view and/or obtain a copy of your personal information. Please note that your right to access the personal information that we hold about you is not absolute. There are instances where applicable law or regulatory requirements allow or require us to refuse to provide some or all of the personal information that we hold about you. In addition, your personal information may have been destroyed, erased or made anonymous.

Correcting Your Personal Information: You have the right to request that any incomplete or inaccurate personal information we hold about you be corrected, subject to certain limitations. That said, it is important that the information contained in our records is both accurate and current so if your personal information happens to change during the course of our relationship, please keep us informed of such changes.

We have appointed a Privacy Officer to oversee compliance with this Privacy Policy. All complaints or requests for information should be made to our Privacy Officer at:

Audi Canada Inc.
777 Bayly Street West Ajax, ON, L1S 7G7
Attention: Privacy Officer
E-mail: privacy@audi.ca.

If you have any questions about this Privacy Policy or concerns about how we manage your personal information, please contact our Privacy Officer using the contact information set out above. We will endeavor to answer your questions and advise you of any steps taken to address the issues raised by you. If you are dissatisfied with our response, you may also contact the Office of the Privacy Commissioner of Canada or the applicable provincial privacy commissioner. For more information, please go to https://www.priv.gc.ca/en/.

Any interpretation associated with this Policy will be made by our Privacy Officer. This Policy includes examples but is not intended to be restricted in its application to such examples; therefore where the word "including" is used, it shall mean "including without limitation".

This Policy does not create or confer upon any individual any rights, or impose upon Audi Canada any rights or obligations outside of, or in addition to, any rights or obligations imposed by Canada's federal and provincial privacy laws, as applicable. Should there be, in a specific case, any inconsistency between this Policy and Canada's federal and provincial privacy laws, as applicable, this Policy shall be interpreted, in respect of that case, to give effect to, and comply with, such privacy laws.

We may make changes to this Policy from time to time. Accordingly, we encourage you to refer back to it on a regular basis. The most current version of the Policy will always be posted on www.audi.ca.

This Privacy Policy is effective as of December 1, 2023.