Last updated: 15.06.2026
We, METZLER : VATER travel GmbH (hereinafter referred to as "we", "us", or "MVT"), are pleased that you are interested in the Porsche Deutschland Events and Travel Programs (hereinafter referred to as the "Events") offered on this website by Porsche Deutschland GmbH (hereinafter "Porsche").
MVT is the exclusive tour operator for Porsche Deutschland Events.
When you visit this website and participate in the Events, we take the protection of your personal data very seriously. Your personal data is processed exclusively in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
This Privacy Notice informs you about the processing of your personal data and your rights as a data subject in connection with your visit to this website, as well as the booking and execution of the Events.
The Porsche Deutschland Events bookable via this website are organized and operated by METZLER : VATER travel GmbH as the responsible tour operator.
For the purposes of applicable data protection legislation, the controller responsible for processing personal data in connection with travel bookings and the organization of travel services is:
METZLER : VATER travel GmbH
Balanstraße 69b
81541 München.
Please do not hesitate to contact us if you have questions or suggestions relating to data protection. You can contact our data protection officers at the following address:
Data Protection Officer
datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Kontakt: office@datenschutz-sued.de
The purpose of data protection is to safeguard personal data.
Personal data means any information relating to an identified or identifiable natural person ("data subject"). This includes, for example, your name, postal address, e-mail address, telephone number, as well as any other information collected in connection with booking and participating in travel services or while using this website, including information relating to the beginning, duration and scope of your use of the website and the transmission of your IP address.
Below you will find an overview of the purposes and legal bases for the processing of your personal data in connection with the use of this website and the booking and execution of the Events offered here.
We process personal data in accordance with the applicable legal provisions, even where, in individual cases, a legal basis other than those listed below may apply.
The provision of personal data by you may be required by law, contract, or may be necessary for the conclusion of a contract. Where you are obliged to provide personal data, we will inform you separately of this obligation and of the possible consequences should you fail to provide such data (for example, the inability to provide the requested services).
Furthermore, processing may be permitted where it is necessary for the purposes of the legitimate interests pursued by MVT or a third party. In certain cases, processing may also be based on your voluntary consent.
Participation in certain Events is reserved exclusively for verified Porsche customers. Therefore, registration for these Events requires the upload of a vehicle registration certificate for a Porsche vehicle owned by you.
3.1. Fulfilment of contractual and pre-contractual obligations
We process your personal data where this is necessary for the performance of a contract to which you are a party or in order to take pre-contractual steps at your request.
The legal basis for this processing is Article 6(1)(b) GDPR.
The purpose of the processing is to enable you to use our products and services in connection with the Events offered through this website.
These include, in particular, the following functions.
Travel bookings
This function enables you to register for a Porsche Deutschland Event.
The collection and processing of the personal data listed below are necessary for the conclusion and performance of the travel contract with MVT.
Your personal data will be deleted upon completion of the Event or trip and after the expiry of the applicable retention period of two years.
The following mandatory personal data (marked with an asterisk (*) during the booking process) must be provided:
If an accompanying person participates in the trip, the following mandatory personal data relating to that accompanying person must also be provided:
Without this mandatory information, registration for an Event or booking of travel for the accompanying person is not possible.
You may also voluntarily provide additional information, including, for example:
Please note that this information is not required for the booking itself. However, where you choose to provide such voluntary information in order to receive additional services, we process this data to provide the requested services, perform the associated contractual relationship, and facilitate your travel or Event registration.
Verification of Porsche customers
Certain Events offered through this website are exclusive to Porsche customers.
For these Events, verification of your Porsche customer status is mandatory.
Verification is carried out by submitting a copy of your Porsche vehicle registration certificate showing the following information:
The copy is uploaded during the booking process and/or submitted to MVT by e-mail.
Visa Support
This function enables you to receive assistance in obtaining any visa required for your trip by providing the necessary information.
This is an optional service offered for your convenience. You are under no obligation to use this service. If you choose not to do so, you are responsible for obtaining any required visa independently. If you select "Yes", you will be asked to provide the information required to prepare and send an invitation letter for yourself and, where applicable, your accompanying person. Visa support then becomes part of the travel services provided.
The following information is required:
Please note that this information is processed solely for the purpose of preparing and issuing the invitation letter required for your visa application.
Data for Additional Activity Programmes
Many Events include activity programmes such as driving experiences or sporting activities (e.g. golf events).
Accordingly, we ask which activities you and your accompanying person wish to participate in.
Depending on the specific programme, the following information may be requested:
Please note that this information is processed solely for the purpose of organising and conducting the respective Event or travel programme and will only be shared with third parties where this is necessary for the organisation of the Event.
Travel Information
This function enables us to provide you with organisational support before and during your participation in a booked Event.
The following information may be collected:
Payment for the events
The possibility of paying for the event for which you have registered by credit card through the external service Secupay. Secupay is operated by secupay AG, Goethestraße 6, 01896 Pulsnitz, Germany. We do not receive any information about the personal data (payment data) provided by you on the Secupay payment page. We only receive the information that the payment has been made. The privacy notice of Secu pay applies in this case: https://secupay.com/en/imprint
3.2. Fulfilment of legal obligations
We process your personal data where this is necessary to comply with legal obligations to which we are subject. The legal basis for this processing is Article 6(1)(c) GDPR.
Such obligations may arise, for example, under commercial, tax, anti-money laundering, financial or criminal law. The purpose of the processing depends on the respective statutory obligation and generally serves to fulfil legal reporting, documentation and disclosure requirements imposed by public authorities.
3.3. Safeguarding of legitimate interests
We also process your personal data where this is necessary for the purposes of our legitimate interests or those of a third party, provided that your interests or fundamental rights and freedoms requiring the protection of your personal data do not override those interests.
The legal basis for this processing is Article 6(1)(f) GDPR.
Processing is carried out for the following purposes and legitimate interests:
On-site support
During the events, you will be supported on site by experienced event coordinators. Depending on the trip and the event, the on-site coordinators may, for example, organize arrivals, check-in, distribution of giveaways, check-out, shuttle coordination, arrival and departure planning, support for daytime and evening events, as well as the implementation and coordination of activities and the overall event program. These coordinators are generally employees of MVT and Porsche Deutschland.
To ensure the best possible on-site support, we therefore share the following travel-related data with Porsche Deutschland GmbH, provided that Porsche Deutschland is responsible for supporting participants on site and is involved in delivering the travel services. (The list of data categories applies to all travel participants.)
The transfer of this data is based on the legitimate interests of MVT and Porsche Deutschland in ensuring optimal customer support and the efficient organization of events on site.
3.4. Consent
In addition, we process your personal data on the basis of your consent where required. The legal basis for this processing is Article 6(1)(a) GDPR.
Where you give your consent, it is always granted for a specific purpose. The respective purpose of processing is determined by the content of your declaration of consent. You may withdraw your consent at any time with future effect. Such withdrawal does not affect the lawfulness of any processing carried out prior to the withdrawal. Consent is always obtained separately and specifically for the respective processing activity. We process your personal data on the basis of your consent for the following purposes:
Creating an account
The following mandatory information, marked with “*”, is requested when registering and creating your account:
A personal account is not required to book the Porsche Golf Circle trips. The creation of an account enables you to view your future and past trips or to book new trips.
After entering the above details, you will receive an email with a link to confirm your registration. Please click on this link to complete your registration and create your user profile. We process the data collected in order to add your profile and to identify you each time you log in. Depending on the service and function for which you are registering, further data may be collected and subsequently linked to your profile data.
Creation, duplication and publication of photographs and video recordings
Photographs and video recordings are generally taken during our Events and travel programmes. For this purpose, your consent pursuant to Article 6(1)(a) GDPR is generally required.
As the main booking participant, you will be asked during the booking process via this website whether you consent to the creation, reproduction and publication of photographs and video recordings. At the same time, you will be informed of the purposes for which MVT and/or Porsche Deutschland intend to use this material.
The consent of any accompanying person will be obtained separately in writing during the respective Event or trip.
Transmission of personal data to PD for the purposes of the Porsche Golf Circle Community
Certain Events offered through this website are organised as Porsche Community Events.
Where this is the case and you provide your consent, we will transfer your personal data to Porsche Deutschland on the basis of that consent.
Porsche Deutschland will use your data exclusively for Porsche Community purposes, including:
You will find more details in the declaration of consent.
3.5. Change of purpose
Where we process your personal data for a purpose other than that for which it was originally collected, without relying on your consent or another mandatory legal basis, we assess the compatibility of the original purpose with the new purpose in accordance with Article 6(4) GDPR.
In doing so, we consider, among other things, the relationship between the original and the intended purpose, the nature of the personal data concerned, the possible consequences for you, and the safeguards implemented to protect your personal data.
3.6. Profiling
We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR. Any creation of user profiles is limited to what is necessary for the protection of our legitimate interests as described above.
Certain functions of our online services require your permission to access features of your device (e.g. access to location data). Granting these permissions is voluntary. However, if you wish to use the respective functions, the corresponding permissions are required; otherwise, these functions cannot be provided. The permissions remain active until you deactivate them through your device settings.
Where we integrate services provided by third parties in order to offer specific content or functionalities and personal data is processed in this context, such processing is carried out on the basis of Article 6(1)(b) and Article 6(1)(f) GDPR. Processing is necessary either to provide the functionality you have requested or to safeguard our legitimate interest in ensuring the optimal functionality of our online services. Please also refer to the privacy policies of the respective third-party providers.
Third-party services that we integrate or refer to are provided by the respective third parties. These generally also include services offered by other companies within the Porsche Deutschland Group, Porsche AG and Porsche Centres.
As a rule, we have no influence over the content or functionality of these third-party services and are therefore not responsible for the processing of personal data carried out by their providers, unless such services have been developed entirely on our behalf and integrated under our own responsibility. Where the integration of a third-party service results in joint processing with the respective provider, we enter into an agreement on joint controllership pursuant to Article 26 GDPR, defining the respective responsibilities and obligations of each party with regard to data protection. Where cookies are placed based on your consent, additional information regarding responsibility for these cookies and the associated third-party services is provided within our consent management platform. Unless otherwise stated, social media profiles are merely linked from our website.
After clicking the respective text or image link, you will be redirected to the relevant social media platform. Following redirection, personal data may be collected directly by the third-party provider. If you are logged into your social media account at the time, the provider may associate your visit with your personal account. If you interact using a "Share" button provided by the respective platform, this information may be stored within your user account and may also be published. If you wish to prevent this direct association with your user account, you should log out of the respective social media platform before clicking on the corresponding link.
Our booking platform uses cookies. Cookies are small text files that are stored on your device when you visit the website and that retain certain settings and information.
We use only technically necessary cookies that are essential for the proper operation of the booking platform. No cookies are used for analytics, marketing or tracking purposes.
Cookies Used
|
Cookie |
Purpose |
Storage Duration |
|
auth.strategy |
Stores the selected authentication method to maintain your logged-in session. |
Persistent |
|
i18n_redirected |
Stores your language preference so that the platform is displayed in your selected language. |
Persistent |
|
XSRF-TOKEN |
Security token protecting against Cross-Site Request Forgery (CSRF) attacks and ensuring the integrity of your requests. |
Persistent |
|
pdbooking_production_session |
Manages your booking session and assigns your requests to the active server session. |
Persistent |
Legal Basis
As these cookies are strictly necessary for the technical operation of the booking platform, your consent is not required.
The legal basis is:
Since no cookies are used for analytics, marketing or tracking purposes, no consent pursuant to Section 25 (1) TDDDG is required. You may disable cookies or delete previously stored cookies at any time via your browser settings.
Please note that doing so may limit the functionality of the booking platform.
For the technical processing of your booking, the personal data entered by you together with technical connection data (in particular your IP address, session identifier and booking requests) are transmitted to our booking API hosted under the subdomain:
api.pd-bookings.metzler-vater-travel.com
This subdomain is not operated by an independent third party but forms part of our own technical infrastructure and is entirely subject to our responsibility under data protection law. Your data will not be disclosed to third parties unless such disclosure is necessary for the performance of the contract or required by law. No transfer of personal data to countries outside the European Union takes place.
Legal Basis
Within our company, only those persons who require access to your personal data for the purposes described above will have access to it.
We disclose personal data to external recipients only where legally permitted or where you have given your consent.
Recipients may include:
As explained above, Porsche Deutschland also receives personal data relating to Event participants in connection with the organisation and implementation of Porsche Events.
This includes, among other things, participant support during the Event as well as other activities connected with the planning, organisation and follow-up of the respective travel programme.
For any additional purposes, personal data will only be transferred to Porsche Deutschland or other Porsche companies where you have provided your explicit consent.
Payment processing is carried out by:
secupay AG
Goethestraße 6
01896 Pulsnitz
Germany
which receives only those payment details required for processing the transaction.
Where personal data is transferred to recipients located outside the European Union, the European Economic Area or a country for which the European Commission has issued an adequacy decision, we ensure before any transfer takes place that:
Where transfers are based on Articles 46, 47 or Article 49(1), second subparagraph GDPR, you may request a copy of the safeguards implemented or information regarding where these safeguards can be accessed. Please use the contact details provided in Section 1.
We retain your personal data only for as long as permitted by law and necessary for the purposes for which it was collected, or until you withdraw your consent.
If you object to processing, we will delete your personal data unless further processing is permitted or required by law.
Likewise, we will delete your personal data where we are legally obliged to do so.
As a general rule, personal data is deleted:
In such cases, deletion will take place once the respective retention period has expired.
You have the following rights under the GDPR:
Right of Access
You have the right to obtain information about the personal data we process concerning you.
Right to Rectification and Erasure
You may request the correction of inaccurate personal data and, where the legal requirements are met, the deletion of your personal data.
Right to Restriction of Processing
You may request that we restrict the processing of your personal data where the legal requirements are fulfilled.
Right to Data Portability
Where processing is based on a contract or your consent, you may request that your personal data be provided to you in a structured, commonly used and machine-readable format or transferred to another controller, where technically feasible.
Right to Object
You have the right to object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests.
If you exercise this right, we will cease processing your personal data unless we can demonstrate compelling legitimate grounds for continuing the processing which override your interests, rights and freedoms.
Right to Object to Direct Marketing
Where we process your personal data for direct marketing purposes, you may object to such processing at any time.
Upon receipt of your objection, we will cease processing your personal data for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to Lodge a Complaint
You also have the right to lodge a complaint with the competent supervisory authority if you believe that the processing of your personal data violates applicable data protection law.
You may contact either the supervisory authority responsible for your place of residence or the supervisory authority responsible for MVT.
Your contact with us and exercising your rights: You can also contact us free of charge if you have any questions regarding the processing of your personal data and your rights as a data subject. Please contact datenschutz süd GmbH, office@datenschutz-sued.de or contact us by post at the address specified above in Section 1. Please ensure that it is possible for us to identify you uniquely. When revoking consent, you may alternatively choose the contact method you used when giving consent.
We reserve the right to amend this Privacy Notice from time to time in order to reflect changes to our website, our services or applicable legal requirements.
The current version of this Privacy Notice is always available on this website and may be downloaded or printed at any time.
Whenever changes are made, the "Last Updated" date at the beginning of this Privacy Notice will be amended accordingly.