Audi Foundation – Privacy Policy
1. About this Privacy Policy
This Privacy Policy explains how Audi Foundation Limited ACN 609 471 329 collects, holds, uses and discloses personal information, and how individuals may access or correct their information or make a privacy complaint.
We handle personal information in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs), and other applicable Australian laws. “Personal information” means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether or not the information is true or recorded in a material form.
2. Who we are
In this Privacy Policy, Audi Foundation, “AF”, “we”, “our” or “us” means Audi Foundation Limited ACN 609 471 329. Volkswagen Group Australia Pty Ltd ABN 14 093 117 876 trading as “Audi Australia” (“Audi Australia”) may assist the Audi Foundation with privacy administration, systems, supporter communications and complaints handling, but the Audi Foundation remains responsible for handling personal information collected for Audi Foundation activities unless otherwise stated in a specific collection notice. The Audi Foundation is a corporate philanthropic foundation that supports charitable and community initiatives across Australia.
3. Personal information we collect and hold
The types of personal information we collect depend on how you interact with us and the services or activities you choose to participate in. We may collect the following categories of personal information:
Identity and Contact Information
This may include:
Full name
Postal or residential address
Email address
Date of birth
Telephone or mobile number
Donation and Payment Information
Where you donate or support our fundraising activities, we may collect:
Donation details and history
Tax receipt information
Payment confirmation details
Note: Payment card information is generally processed by our third-party payment providers and may not be retained by us.
Prize Draw and Promotion Information
Where you enter a prize draw, competition or similar fundraising activity, we may collect:
Ticket purchase and entry details
Eligibility verification information
Information required to administer the promotion
Information required to notify winners and distribute prizes
Communications and Enquiries
When you contact us, we may collect information contained in your communications, including:
Enquiries or requests
Feedback and survey responses
Complaints and correspondence
Any other information you voluntarily provide
Marketing and Subscription Information
If you subscribe to receive updates from us, we may collect:
Subscription preferences
Communication preferences
Records of marketing communications sent to you and your engagement with those communications
Website Usage Information
When you visit our website, we may automatically collect certain technical information, including:
IP address
Device and browser information
Website usage and interaction data
Cookie and analytics information
This information helps us maintain, improve and secure our website and better understand how visitors interact with our online services.
Other Information
We may also collect other personal information where reasonably necessary to carry out our charitable, fundraising and administrative activities or where required by law.
Sensitive information
Sensitive information includes information such as health information, racial or ethnic origin, religious beliefs, biometric information used for automated biometric verification and criminal-record information. We only collect sensitive information with consent unless collection is otherwise authorised or required by law, and only where it is reasonably necessary for our functions or activities. We generally seek to avoid collecting sensitive information unless it is specifically required for a particular program, event, grant, complaint, safety matter or legal obligation.
Anonymity and pseudonymity
Where lawful and practicable, you may interact with us anonymously or using a pseudonym, for example when making a general enquiry. We may need to identify you where required or authorised by law, or where identification is necessary to provide assistance, administer a donation, prize draw, grant, complaint or event, verify eligibility, manage legal or regulatory obligations, or complete the relevant transaction.
Information about another person
If you provide personal information about another person, you must be authorised to do so. Please make this policy and any relevant collection notice available to that person. We will take reasonable steps to notify the person of relevant matters where required by law.
4. How we collect personal information
We generally collect personal information directly from you, including when you:
Make a donation to the Foundation
Purchase tickets for, enter, or participate in fundraising activities, competitions, raffles, prize draws or similar campaigns
Subscribe to newsletters, updates or marketing communications
Submit an enquiry or request information
Contact us by phone, email, post, social media or through our website
Participate in surveys, feedback activities or promotions
Attend, register for, or participate in Foundation events or fundraising activities
Apply for grants, sponsorships or support programs
Volunteer with the Foundation
Visit or interact with our website, including through cookies and similar technologies
We may also collect personal information from:
Payment processing providers
Service providers who assist us in operating our website, events and fundraising activities
Charity, community or corporate partners
Professional advisers
Publicly available sources where permitted by law
Regulatory authorities and government agencies where permitted or required by law.
If we receive unsolicited personal information, we will determine whether we could have collected it under the APPs. If not, and if it is lawful and reasonable to do so, we will destroy or de-identify it.
5. Why We collect, hold, use and disclose personal information
We collect, hold, use and disclose personal information where reasonably necessary to carry out our charitable, fundraising, administrative and operational activities, comply with legal obligations, and engage with our supporters and stakeholders.
If you do not provide personal information requested by us, we may not be able to process your donation, issue a receipt, administer a promotion or prize draw, assess eligibility, respond to your enquiry, provide requested assistance, manage a complaint, or allow you to participate in the relevant activity. Where collection is required or authorised by law, we will take reasonable steps to explain this at or before the time of collection.
Specific programs, competitions, raffles, grants, events, surveys or online forms may include additional collection notices or terms that explain the particular personal information collected, the purpose of collection, any required disclosures and any consequences if information is not provided. Depending on your interaction with the Audi Foundation, we may use your personal information to:
process donations and issue donation receipts;
administer prize draws, competitions, fundraising campaigns and other promotional activities;
communicate with donors, supporters, participants and other stakeholders;
respond to enquiries, requests, feedback and complaints;
operate, maintain and improve our website, services and user experience;
manage our relationship with supporters, partners and service providers;
maintain records and undertake internal administration and reporting activities; and
comply with applicable laws, regulations and regulatory requirements.
Direct Marketing and Communications
Where permitted by law, or with your consent where required, we may use your personal information to provide you with information about:
Audi Foundation programs, initiatives and activities;
fundraising campaigns and donation opportunities;
charity partnerships and community impact activities;
prize draws, competitions and special promotions; and
news, events and other updates that may be of interest to you.
You may opt out of receiving marketing or promotional communications from us at any time by using the unsubscribe facility included in the communication or by contacting us using the details provided in this Privacy Policy. We will comply with applicable direct marketing laws, including the Spam Act 2003 (Cth), the Do Not Call Register Act 2006 (Cth) and the direct marketing requirements in the Privacy Act, to the extent they apply.
6. Websites, apps, cookies and targeted advertising
When you use our websites, apps and other online platforms, we and authorised service providers may automatically collect usage information through cookies, pixels, software development kits, log files and similar technologies. This may include IP address, device and cookie identifiers, browser or app version, operating system, date and time, referring page, pages or screens viewed and interactions with features.
Cookie categories
Strictly necessary cookies and technologies support security and essential platform functions.
Analytics and performance cookies help us understand and improve platform use and performance.
Functionality cookies remember settings and preferences.
Advertising and targeting technologies support campaign measurement, audience selection, personalisation and relevant advertising across our platforms and third-party services.
Where online identifiers or usage data identify, or can reasonably identify, an individual, we handle them as personal information. Our websites and apps may provide a cookie banner, consent-management tool or separate cookie notice with more specific information about the technologies used and available choices.
Managing choices
You can use the consent or cookie settings made available on the relevant platform to revisit your choices. You may also restrict or delete cookies through browser or device settings. Disabling a technology may affect platform functionality or reduce personalisation. Choices made in one browser or device may not automatically apply to another.
Targeted advertising
We may work with authorised advertising and social-media partners to measure campaigns and deliver advertising based on interactions with our platforms. Those partners may handle information under their own privacy policies. Where required, we will seek consent or provide an effective way to opt out. We do not rely on this policy alone as consent for optional tracking where separate consent is required.
7. Automated decision-making and profiling
We may use algorithms, data analytics, segmentation tools, artificial intelligence and other automated technologies to support website security, fraud prevention, marketing, research, campaign measurement and operational administration. These technologies may analyse identity and contact data, donation or transaction data, service data, technical and usage data, marketing preferences and interaction data, depending on the relevant process.
We do not intend to make decisions solely by automated means that produce legal or similarly significant effects for individuals. If a computer program makes, or substantially and directly assists in making, a decision that could reasonably be expected to significantly affect an individual’s rights or interests, we will describe the kinds of decisions and the kinds of personal information used in this policy or a relevant collection notice as required by applicable law. We will maintain appropriate governance and human oversight having regard to the nature and impact of the process.
Marketing profiling, where used, is generally limited to grouping audiences, inferring likely interests, tailoring content or offers and measuring campaign performance. You can manage marketing and optional tracking choices as described in section 6.
8. When we disclose personal information
We may disclose personal information to:
Payment processing providers to facilitate donations, raffle ticket purchases, fundraising activities and payments
Website hosting, cloud storage and technology service providers
IT support and service providers
Marketing, communications and digital platform providers
Event management, fundraising and prize draw administration providers
Charity, community and corporate partners where necessary to deliver Foundation programs or initiatives
Professional advisers, including lawyers, accountants and consultants
Auditors and assurance providers
Financial institutions and payment networks where required to process transactions
Government agencies, regulators, law enforcement bodies, courts or tribunals where required or authorised by law
Third parties where you have consented to the disclosure or where otherwise permitted by law
We do not disclose, transfer, exchange or otherwise provide personal information to any third party in return for monetary consideration or other commercial benefit. Personal information collected by the Audi Foundation is used solely for the purposes described in this Privacy Policy and is not treated as a commercial asset for sale or trade.
9. Overseas disclosures
The Audi Foundation may engage third-party service providers to support its operations, including providers of information technology services, website hosting, payment processing, cloud storage, marketing, analytics and communication platforms. As a result, personal information may be stored, processed or accessed by service providers located outside Australia.
Depending on the service and provider, recipients may be located in Germany, Luxembourg, India, Singapore, New Zealand, Spain, the Czech Republic, the United Kingdom, the Philippines and the United States of America. Countries may change as systems and service arrangements change.
Before disclosing personal information overseas, we will take reasonable steps required by APP 8 to ensure the recipient does not breach the APPs in relation to that information, unless an exception applies. Depending on the arrangement, steps may include due diligence, contractual privacy and security obligations, access controls, monitoring and incident-management requirements. Overseas recipients may be subject to different privacy laws, and in some circumstances, we may remain accountable under the Privacy Act for their handling of the information.
10. How we protect and retain personal information
We may hold personal information in electronic systems and databases, third-party hosted or cloud systems, paper records and recorded communications. We take reasonable steps to protect personal information from misuse, interference and loss and from unauthorised access, modification or disclosure. Measures may include access controls, authentication, encryption where appropriate, logging and monitoring, secure configuration, physical security, staff training, supplier controls and incident-response processes.
No method of storage or transmission is completely secure. Individuals should protect account credentials, use available security features and notify us if they suspect unauthorised access.
Retention and deletion
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected or a related permitted purpose, and as required for legal, regulatory, tax, accounting, audit, fundraising, donation, grant, event, complaint, dispute, fraud-prevention and record-keeping obligations. Retention periods vary according to the category and sensitivity of information, the relevant activity or relationship and applicable limitation or statutory periods.
When personal information is no longer required, we take reasonable steps to destroy it or ensure it is de-identified, unless retention is required by law or a court or tribunal order.
11. Data breaches
We maintain procedures to identify, contain, investigate and remediate suspected or actual data breaches. We assess whether a breach is likely to result in serious harm and whether notification is required under the Notifiable Data Breaches scheme.
Where notification is required, we will notify affected individuals and the Office of the Australian Information Commissioner as soon as practicable and provide the information required by law, including recommended steps individuals should take. We may use the contact details we hold and other appropriate channels having regard to the circumstances.
12. Children and young people
Our general services are not directed to children. However, we may collect limited personal information about children or young people in connection with competitions, events, family or emergency contacts, grant or support programs, or other specific activities.
We will take reasonable steps appropriate to the circumstances to provide clear information, assess capacity to consent, seek parent or guardian involvement where appropriate, minimise collection and apply suitable safeguards. A specific activity may have additional age requirements or a separate notice. Parents or guardians may contact us about information relating to a child or young person.
13. Access, correction and data quality
We take reasonable steps to ensure personal information we collect is accurate, up to date and complete, and that information we use or disclose is accurate, up to date, complete and relevant, having regard to the purpose.
You may request access to, or correction of, personal information we hold about you by contacting the Privacy Officer. We may need to verify your identity and authority. We will respond within a reasonable period and will not charge you for making a request or correcting information. We may charge reasonable costs for administrative costs after advising you of the proposed amount.
Access or correction may be refused where permitted by law. If we refuse, we will generally provide written reasons and explain available complaint mechanisms. If correction is refused, you may ask us to associate a statement with the information. Where required and requested, we will take reasonable steps to notify relevant third parties of a correction.
14. Privacy complaints
If you believe we have not handled personal information in accordance with this policy or applicable privacy law, please contact the Privacy Officer using the details below and provide sufficient information for us to understand and investigate the matter.
We will acknowledge a written complaint within 7 business days and aim to provide a written outcome within 20 business days once we have sufficient information to assess it.
If we need more time, we will explain the reason and provide an updated timeframe. If you are not satisfied with our response, you may complain to the Office of the Australian Information Commissioner (OAIC). Current OAIC contact details are available at www.oaic.gov.au. The OAIC may ask you to first give us an opportunity to respond.
15. How to contact us
Contact the Audi Foundation Privacy Officer to ask a question, exercise privacy rights, update information, opt out of marketing or make a complaint. Audi Australia currently assists the Audi Foundation with privacy administration and may receive or coordinate responses to privacy enquiries on behalf of the Audi Foundation:
Telephone - 1800 060 936 8:30 am to 5:00 pm AEST, Monday to Friday, excluding NSW public holidays
Email - privacy@volkswagen.com.au
Mail - Privacy Officer Volkswagen Group Australia Pty Ltd t/as Audi Australia, 895 South Dowling St, Zetland NSW 2017
16. Changes to this Privacy Policy
We may update this Privacy Policy to reflect changes to law, technology, products, services or our handling practices. The current version and update date will be published on the relevant website. Where appropriate, we will provide additional notice of material changes. Last updated: 14 September 2026