If you have any questions regarding the use of your personal data by us, it is best to use the contact form.
Over and above this, you can contact the data protection officer responsible. A list of data protection officers can be found at the link below.
As the person affected by the processing of your data, the basic EU data protection regulations and other relevant data privacy protection regulations enable you to assert certain rights in relation to us. The following section contains explanations of your rights as defined by the basic EU data protection regulations. Depending on the type and scope of your inquiry, we ask you to put the inquiry in writing.
Rights of persons affected
In line with the basic EU data protection regulations, as the person affected you have the following rights in particular vis-à-vis BMW:
Right to information (Article 15 of basic EU data protection regulations): You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data. You can obtain a copy of your data from us free of charge. If you are interested in other copies, we reserve the right to charge for the additional copies.
Right to correction (Article 16 of basic EU data protection regulations): You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us.
Right to deletion (Article 17 of basic EU data protection regulations): You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 of basic EU data protection regulations, this can be the case if
- The data are no longer required for the purposes they were acquired or otherwise processed
- You revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing
- You object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
- The data have been processed illegally
Where the processing is not necessary
- To ensure adherence to a legal obligation that requires us to process your data
- In particular with regard to legal retention periods
- To assert, exercise or defend against legal claims
Right to restriction of processing (Article 18 of basic EU data protection regulations): You can request that we restrict the processing of your data if
- You dispute the correctness of the data - for the period of time we need to check the correctness of the data
- The processing is illegal but you do not wish to have your data deleted and request a restriction of use instead
- We no longer need your data, but you need them to assert, exercise or defend against legal claims
- You have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours.
Right to data transferability (Article 20 of basic EU data protection regulations): At your request, we will transfer your data – where technically possible – to another responsible entity. However, this right only applies if the data processing is based on your consent or is required to fulfill a contract. Instead of receiving a copy of your data, you can ask us to send the data directly to another responsible entity that you specify.
Right to objection (Article 21 of basic EU data protection regulations): You can object to the processing of your data at any time for reasons that arise from your special situation provided the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we are able to prove there are compelling, defensible reasons for the processing that outweigh your interests or we require your data to assert, exercise or defend against legal claims.
Time limits for compliance with the rights the persons affected
As a general principle, we make every effort to comply with all requests within 30 days. This time limit, however, can be extended for reasons related to the specific rights of persons affected or complexity of your request.
Restriction in the provision of information regarding the rights of persons affected
In certain situations, legal specifications might require us not to provide information regarding all of your data. If we have to refuse your request for information in such a case, we will inform you of the reasons for refusal at the same time.
Complaints to supervisory authorities
BMW AG takes your reservations and rights very seriously. However, if you are of the opinion that we have not dealt with your complaints or reservations adequately, you have the right to submit a complaint to the data privacy protection authorities responsible.