Our tool for managing your permission to our use of cookies is temporarily offline. Therefore some functionality is missing.
Privacy Policy
1. Legal information on data protection
The high standards you expect from our products and services are our guideline for handling your data. Our aim is to create and maintain the basis for a trusting business relationship with our customers and prospects. The confidentiality and integrity of your personal data is top priority for us.
2. WHO IS RESPONSIBLE FOR DATA PROCESSING?
Bayerische Motoren Werke Aktiengesellschaft, Petuelring 130, 80788 Munich, Germany; registered office and registered court: Munich HRB 42243 (hereinafter "BMW") provides a website for BMW Protection Vehicles and Special Sales and is responsible for data processing in this context.
3. WHAT DATA DO WE PROCESS AND FOR WHAT PURPOSE?
The data collected in connection with the usage of this website is processed for the following purposes:
A) Fulfilment of the contractual obligation in the context of the sale, maintenance and repair of vehicles Purpose of the processing (Article 6 (1) b) GDPR)
The purpose of data processing on this website is to provide a registration website for all Participants of the Event and, if necessary, to handle applications and inquiries, with the opportunity for users to get in touch with contacts within the company specifically.
B) Customer Service Purpose of the processing (Article 6 (1) b) GDPR / Article 6 (1) f) GDPR)
If you agreed to receive information about the upcoming BMW Special Sales events, we are going to inform you via email about those events. For this purpose, we will process your email address, first name and last name. You can withdraw your consent at any time viacustomercare.icds@bmw.com
D) Cookies
E) Storage of and access to information on your devices (§ 25 TTDSG)
In certain situations, we write or read information in or out of your device. This happens, for example, in the form of cookies when using websites or as part of a software update for your vehicle. This storage or access is based on your consent in accordance with § 25 (1) TTDSG, or, insofar as this is absolutely necessary in accordance with § 25 (2) TTDSG, to provide you with a service you have expressly requested, without your consent. Subsequent processing is carried out based on the GDPR in accordance with the purposes described above.
4. HOW LONG DO WE STORE YOUR DATA FOR?
We store your personal data only for as long as the relevant purpose requires it. If data is processed for multiple purposes, the data will be automatically deleted or stored in a form that cannot directly be traced back to you as soon as the last specified purpose has been fulfilled.
5. HOW IS YOUR DATA STORED?
We store your data based on the state of the art. For example, the following safeguards are used to protect your personal information from misuse or any other unauthorized processing:
- Access to personal data is restricted to a limited number of authorized persons for the stated purposes only.
- The data collected will only be transmitted in encrypted form.
- Sensitive data is stored only in encrypted form.
- The IT systems for processing the data are technically isolated from other systems to prevent unauthorized access, e.g. through hacking.
- In addition, access to these IT systems is continuously monitored to detect and ward off misuse at an early stage.
6. WHO DO WE SHARE INFORMATION WITH AND HOW DO WE PROTECT IT?
BMW is a company with an international presence. Personal data is preferably processed within the EU by BMW employees, national sales companies, authorized dealers, and service providers commissioned by us.
The EU has already determined that some countries outside the EU, such as Canada and Switzerland, offer an adequate level of data protection. Given this adequate level of data protection, data transfers to these countries do not require specific approvals or agreements.
Where our service providers such as hotels we book for you during the Event is based in a country outside the EU/EEA and the EU has not yet found that such country provides for adequate level of data protection (Article 45(3) and 45(9) GDPR), BMW may transfer your personal data to such service providers provided that such transfer is “necessary for the performance of a contract” between you and BMW and also “necessary for the implementation of pre-contractual measures” taken at your request (Article 49 (1) (b) GDPR).
Where personal data is otherwise transferred to countries outside the EU/EEA which have not been found to provide for an adequate level of data protection, BMW AG uses EU standard contracts which have been pre-approved by the European Commission (so-called standard contractual clauses), including appropriate technical and organizational measures, to ensure that your personal data is processed in accordance with European data protection standards.
If you would like to view the specific safeguards for data transfers to other countries, please contact us via the contact details provided below.
7. CONTACT DETAILS, DATA SUBJECT RIGHTS, AND YOUR RIGHT TO COMPLAIN TO A SUPERVISORY AUTHORITY.
If you have any questions about the way we process your personal data, please contact the responsible data protection officer:
Data Protection Officer
BMW AG
Petuelring 130
80788 Munich, Germany
datenschutz@bmw.de
As an individual whose data is subject to processing, you may assert certain rights against us in accordance with the GDPR and other relevant data protection regulations.
The following section contains explanations of your rights under the GDPR.
Rights of the Data Subject
In accordance with the GDPR, you, as an affected person, are entitled to the following rights in particular:
Right of withdrawal (Article 7 GDPR)
Consent that you have previously given can be withdrawn with effect for the future in accordance with Article 7 GDPR.
Right of access by the data subject (Art. 15 GDPR):
You may request information about the data we hold about you at any time. This information includes, but is not limited to, the categories of data we have processed, the purposes for which we have processed this data, the origin of the data if we did not collect it from you directly, and, if applicable, the recipients to whom we have transferred your data. You can request a copy of your data free of charge. If you are interested in obtaining additional copies, we reserve the right to charge you accordingly.
Right to rectification (Art. 16 GDPR):
You can ask us to rectify your data. We will take reasonable measures to keep the information we hold and process about you accurate, complete, and up to date, based on the most current information available to us.
Right to erasure (Art. 17 GDPR):
You can request the deletion of your data, provided there are legal requirements in place to support this. This may be the case under Art. 17 GDPR if:
- The data is no longer required for the purposes for which it was collected or otherwise processed;
- Your consent, which is the basis of data processing, is revoked and there is no other legal basis for the processing;
- You object to the processing of your data and there are no overriding legitimate grounds for processing, or you object to the processing of data for direct marketing purposes;
- The data was processed unlawfully, unless processing is necessary
- to ensure compliance with a legal obligation that requires us to process your data;
- particularly with regard to legal retention periods;
- to enforce, exercise, or defend legal claims.
Right to restriction of processing (Art. 18 GDPR):
You may require us to restrict the processing of your data if
- You dispute the accuracy of the data for the period of time that we need to verify the accuracy of the data;
- The processing is unlawful but you refuse the deletion of your data and instead demand a restriction of use;
- We no longer need your information but you need it to enforce, exercise, or defend legal claims;
- You have lodged an objection against processing as long as it is not clear whether our justified reasons outweigh yours.
Right to data portability (Art. 20 GDPR):
At your request, we can transfer your data to another person in charge as far as technically possible. However, you are entitled to this right only if the data processing is based on your consent or is necessary to execute a contract. Rather than receive a copy of your data, you may also ask us to transfer the data directly to another person in charge specified by you.
Right to object (Art. 21 GDPR):
You may object to the processing of your data at any time for reasons that arise from your particular situation if the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can provide compelling legitimate reasons for the processing that outweigh your interests or we need your data to enforce, exercise, or defend legal claims.
Time limits for the fulfilment of subject rights
We make every effort to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific subject right or complexity of your request.
Restriction of information in the fulfilment of subject rights
In certain situations, we may be unable to provide you with information about all your data owing to legal requirements. If we must refuse your request for information in such cases, we will inform you at the time of the reasons for the refusal.
Complaints to supervisory authorities
BMW takes your rights and concerns very seriously. However, if you believe that we have not adequately addressed your complaints or concerns, you are entitled to file a complaint with a competent data protection authority.