Data protection information on www.bmwandminibwir.com for BMW AG
1Main texts
Who is responsible for data processing operations?
As defined by the basic EU data protection regulations, BMW AG (hereinafter referred to as "BMW" and/or "we" and/or "us"), Petuelring 130, 80788 Munich, is responsible for the processing of your personal data. The headquarters of BMW AG are Munich.
BMW AG is the parent company of the BMW Group and through the organizational entity BMW Sales Germany it coordinates business activity for the sale of BMW automobiles, original BMW parts, accessories and lifestyle products, and associated services in Germany. The BMW dealerships are also part of BMW Sales Germany.
Under the auspices of BMW Sales Germany, other organizational entities of BMW AG are also active in providing support for customers and potential customers in Germany. Essentially, these are the areas of BMW ConnectedDrive, BMW online shops, ChargeNow, BMW World, including BMW Museum, and BMW plant tours. BMW motorcycles are marketed by the BMW AG organizational unit BMW Motorrad Germany.
BMW Sales Germany authorizes BMW contracted dealers, BMW contracted workshops, BMW i agents and BMW i contracted workshops – hereinafter referred to as BMW partners where no differentiation is necessary – to provide support and customer care in technical and non-technical matters for customers, potential customers, contract partners, and other interest groups. It operates the website www.bmw.de, where it offers the possibility of the online account "My BMW" and/or "BMW ConnectedDrive" and promotes the BMW brand in Germany.
Unless otherwise specified, BMW partners are legally and economically autonomous companies and not part of BMW. As licensees, they use the BMW brand - depending on authorization - for the sale of BMW and/or BMW i automobiles, original BMW and/or BMW i parts and accessories, as well as for brand-related maintenance and repairs.
The BMW dealerships are authorized by BMW Sales Germany in the same way as BMW partners.
BMW is responsible for any of your data that are processed via the website www.bmw.de, your online account My BMW, BMW ConnectedDrive services, your contacts with BMW and/or BMW i Customer Care (hereinafter jointly referred to as BMW Customer Care), and within the framework of BMW and/or BMW i direct marketing measures. BMW also processes your data where they are passed on by BMW partners and to the extent that the requirements in compliance with data protection legislation necessary for this are met.
BMW partners are responsible for processing the personal data that you make available to them in the context of your business and customer care in the areas of sales and service. BMW partners also process your data insofar as they are passed on by BMW Sales Germany and to the extent that the requirements in compliance with data protection legislation necessary for this are met.
This data protection information also describes some processing of your data by BMW partners. However, it might be that BMW partners acquire other personal data and have their own data protection information. In this case, you can find out from the data protection information of the respective BMW partner how your data are used there.
The contact data for BMW Customer Care of BMW Sales Germany and the group data protection of BMW AG can be viewed here [cf. Chapter 4 Stage 3 Reference Text Web Link B: Contact data for BMW Customer Care of BMW AG Sales Germany and BMW AG group data protection].
When does BMW acquire and process personal data?
BMW acquires and processes your personal data in the following cases, among others:
When you contact us directly, for example via our website, via BMW Customer Care or the BMW dealerships, and you are interested for example in our products or services or have any other concerns.
When you purchase products from us directly (for example in the BMW Lifestyle Shop on our website, in a BMW dealership).
When you purchase services from us directly (for example BMW ConnectedDrive in the BMW ConnectedDrive store on our website, maintenance and/or repairs for your vehicle in a BMW dealership).
When you request information regarding our products and services (for example mailing of brochures or price lists).
When you respond to our direct marketing activities, for example when you complete a reply card or submit your data online on one of our websites (www.bmw.de or landing page).
When your personal data is sent to us by BMW partners or third parties where and to the extent that the requirements in compliance with data protection legislation necessary for this are met, for example you have granted consent or in full awareness of your right of objection have not objected to the forwarding of your data to BMW for the purpose of customer care (for example recognizing you if you contact BMW Customer Care) and contact in writing (for example sending the BMW welcome package following a vehicle purchase).
When you send us your vehicle data (with the vehicle identification number) within the framework of the service process and maintenance / repair services of our BMW and/or BMW i contracted workshops and BMW dealerships.
When other BMW Group companies as well as our business partners provide data about you in a manner that is permitted.
When third parties (for example certified address vendors) provide personal data about you in a manner that is permitted.
Please help us to keep your details up to date by notifying us regarding changes to your personal data – in particular your contact data.
Which data about you can be collected?The following categories of personal data can be collected via the numerous services and contact channels described in this data protection information:
Contact data ► Name, address, telephone number, e-mail address.
Other personal data ► Information you have provided regarding date of birth, education, size of household or professional situation.
Use of websites and communication ► Information on how you use the website and whether you open or forward messages from us, including data gathered via cookies and other tracking technologies. More information on his can be obtained here [Web link cf. Chapter 5 BMW Cookie policy] in our BMW cookie policy.
Transaction and interaction data► Information on purchases of products and services, interactions with BMW Customer Care (your requests and complaints), and BMW partners or BMW dealerships as well as participation in market research surveys.
What is the purpose of processing your data?The data acquired in the context of contract conclusion or the provision of services are processed for the purposes stated below. An explanation of the area of application of the available legal basis can be found here [cf. Chapter 4 Stage 3 Reference Text Web Link D: Legal basis for the processing of personal data].
A. Compliance with contractual duties within the framework of the sale, maintenance, and repair of vehicles
(Article 6, Paragraph 1, b) of basic EU data protection regulations)BMW, BMW dealerships, and BMW partners acquire, process, and use personal data within the framework of the sales processes or maintenance and/or repair in the dealership.
Within the framework of the sales processes, personal data are used at BMW contracted dealers, BMW i agents, and BMW dealerships to manage the purchasing agreement, to carry out test drives, and to transfer information related to your vehicle purchase.
Within the framework of these activities, the data categories stated below are processed:
Contact data (last name, first name, address, e-mail address etc.)
BMW, BMW dealerships, and BMW partners use your personal data for contract administration (for example vehicle ordering, workshop / repair order, booking BMW ConnectedDrive services) or to handle any request you have submitted (for example offer, test drive request). Regarding all aspects of contract administration or dealing with a concern, we will contact you without separate consent, for example in writing, by telephone, per messenger service, per e-mail, depending on which contact data you have specified.
BMW can access the above information in order to support BMW and/or BMW i contracted workshops and BMW dealerships with technical or other challenges they face in providing their services.
Over and above this, the persons responsible mentioned above possibly receive to a limited extent data regarding the location of the vehicle where this is required for the purpose of contract fulfilment (for example within the framework of BMW Roadside Assistance). The data are used exclusively in line with the security precautions for location data [cf. Chapter 4 Stage 3 Reference Text Web Link E: Security precautions for location data ].
B. Ensuring product quality, research and development of new products
(Article 6, Paragraph 1 f) of basic EU data protection regulations)BMW uses the data (including location data) acquired as a result of the provision of services by BMW or BMW dealerships or BMW partners in a depersonalized form to ensure the quality of products and services as well as for the purposes of research and development. "Depersonalized" means that the data can no longer be traced directly to you or your vehicle.
This processing is based on the legitimate interest of BMW AG in meeting the high expectations of our customers with regard to high-quality products and services and taking account of the customer wish to have newly developed, innovative solutions. To protect your interests – alongside de-personalization – additional security precautions and controls are implemented as required, for example strict data access restrictions, restrictions in data use, security measures, retention periods, as well as data economy principles such as exclusively gathering relevant data.
C. Compliance of sales, service, and administration processes of BMW AG (including BMW dealerships), the national distribution company and BMW partners
(Article 6, Paragraph 1 f) of basic EU data protection regulations)
In order to continuously optimize the customer experience and cooperation with BMW partners and customer care by BMW dealerships, we create evaluations and reports on the basis of contract information and share these with the BMW partners responsible. The main purpose of these evaluations is to initiate corresponding measures (for example training courses for Sales and Service personnel) to improve application and sales processes. We will create the reports described above in an aggregated and anonymized form , i.e. the recipients of the reports are unable to draw any conclusions regarding you as a person from the data they contain.
Parts of the acquired vehicle-specific data are also processed - where required - for compliance with the service processes (for example repair, warranty, goodwill) of BMW, BMW dealerships as well as BMW and/or BMW i contracted workshops and national BMW Group sales companies (including their branch offices) in the European economic area and other countries named in the BMW quality letter [Web link: BMW quality letter]. This processing is within the legitimate interest of BMW to offer our customers the best possible service process. The processing also occasionally takes place in the context of legal specifications (for example repair and maintenance information based on specifications from the point of view of competition). As a general principle, to protect the private sphere of our customers, the processing of technical data is vehicle-based and without a direct link to the customer.
The following data categories are used for this:
Vehicle master data (type of vehicle, date of manufacture, vehicle equipment)
Vehicle condition data (measured values, for example mileage)
Error memory entries (for example failure of turn indicator)
Load duty spectrums
Software versions and
Service and workshop data (for example service requirements, work performed, fitted spare parts, cases of warranty, workshop reports)
The technical vehicle data are deleted at the end of the lifecycle of the vehicle.
BMW AG is a company of the BMW Group. In some cases, we process your data to ensure that the different companies within the BMW Group are managed as efficiently and successfully as possible. This concerns, for example, joint consolidated accounting in line with International Financial Reporting Standards (IFRS) for companies.
D. Customer care
(Article 6 Paragraph 1 b, g, f) of basic EU data protection regulations)
BMW, BMW dealerships, and BMW partners use your personal data for contract administration (for example vehicle ordering, workshop / repair order, booking BMW ConnectedDrive services) or to handle any request you have submitted (for example offer request, test drive request, queries and complaints to BMW Customer Care). Regarding all aspects of contract administration or dealing with a concern, we will contact you without separate consent, for example in writing, by telephone, per messenger service, per e-mail, depending on which contact data you have specified.
We will also contact you if your vehicle is affected by a so-called technical campaign or recall. As technical campaigns are usually measures of great importance (for example avoiding danger to vehicle occupants, avoiding damage to the vehicle), we contact you directly or indirectly through our BMW partners or our BMW dealerships using the contact data you have specified in order to comply with our legally required duty to inform.
We will also contact you in carefully considered cases with promotional communication (for example mailing the welcome package following a vehicle purchase or a letter indicating the end of the warranty period and offer of a vehicle check) if and to the extent that the requirements in compliance with data protection legislation necessary for this are met and in full awareness of your right of objection you have not objected to the use of your data for the purpose of written communication.
BMW also processes your personal data on this basis to optimize your experience with BMW Customer Care, e.g. to identify you correctly if you make contact with us.
F. Promotional communication as well as market research based on consent
(Article 6, Paragraph 1 a) of basic EU data protection regulations)
Insofar as you have separately given your consent to further use of your personal data, your personal data may be used in accordance with the scope described in the consent, for example for promotional purposes (selected offers of products and services), and with your separate consent, also with a high degree of personalization, on the basis of an individual customer profile and/or market research and, if necessary, forwarded to certain subsidiaries of BMW AG and selected BMW partners. Details are included in the respective declaration of consent, which you can revoke at any time.
If you have given the corresponding consent [Web Link cf. Chapter 4 Stage 3 Reference Text Web Link F1: Data protection declaration of consent before adaptation of the German main line] to promotional communication, BMW gathers and processes the relevant data.
Contact information, for example
Name, address, e-mail, telephone number
Supplementary personal details / preferences, e.g.
Company name, your relationship with this company if you use a company car or are our contact person for this company
A possible point in time at which you need a new vehicle and your interest in BMW and/or BMW i vehicles and services as well as your requests for information and test drives etc.
Preferred and/or current BMW partner or BMW dealership
Identification data, for example
Customer number, contract number
Customer history, for example
Vehicle purchase data, including model, configurations, purchase date, date of 1st registration, license plate number, purchase order date, delivery date, holder, list price
Data acquired at BMW partners and BMW dealerships (such as point in time of contact and contact type, service history)
Campaign history and resonance (customer and potential customer care program and direct marketing measures
Participation in events
Inquiry and complaint history at BMW Customer Care
Vehicle use data, e.g.
Contract data for BMW ConnectedDrive, for example booking online entertainment
App / website / social media data
If you have registered or logged in, your account data, for example at My BMW or BMW ConnectedDrive.
BMW uses the sales and customer care data acquired in this way
To determine which information and offers are most likely to be of interest to you
To make contact with you in the context of this information and these offers
To send promotional communication (e.g. product launches or invitations to events) in line with your data protection declaration of consent.
In the data protection declaration of consent, you also lay down the communication channels (e.g. post, telephone, e-mail) we are permitted to use to contact you.
Furthermore, you decide here regarding your consent to the creation of an individual customer profile to receive personalized offers.
The profile creation can include, if present, the following data specified by you or acquired through your use of products or services of BMW AG, certain subsidiaries as well as contracted dealers and workshops: Contact information (e.g. name, address, e-mail) Supplementary personal details / preferences (e.g. preferred dealer, hobbies) Identification data (e.g. customer number, contract number) Customer history (e.g. receipt of offers, vehicle purchase data, dealer information) Vehicle data (e.g. usage data of the BMW Connected app: mileage, range) App / website / social media data (e.g. usage data from the online accounts My BMW or My MINI). A conclusive list of data of these categories can be viewed here [Web Link cf. Chapter 4 Stage 3 Reference Text Web Link F2: List of data categories for creation of an individual customer profile, as at UC-30 January 30, 2018, with change mode B6-H-3]."
As a rule, data processing for promotional purposes takes place in Germany; under no circumstance are personal data transferred to a country outside the EU.
F. Compliance with legal obligations to which BMW is subject
(Article 6, Paragraph 1 c, f) of basic EU data protection regulations)
BMW will also process personal data if there is a legal obligation to do so. This can be the case, for example, if we contact you if your vehicle is affected by a technical campaign or recall.
Gathered data are also processed within the framework of ensuring the operation of IT systems. Ensuring operation involves the following activities:
Backup and restore of data processed in IT systems
Logging and monitoring of transactions to check the correct function of IT systems
Detection and defense against unauthorized access to personal data
Incident and problem management to remedy malfunctions in IT systems.
Gathered data are also processed within the framework of internal compliance management in which we, for example, check whether you have been advised to an adequate extent within the framework of concluding a contract and that the BMW partner has complied with all legal obligations.
BMW is subject to a large number of other legal obligations. In order to fulfill these obligations, we process your data to the required extent and, if necessary, pass them on to the authorities responsible within the framework of legal obligations of notification.
We also process your data in the event of legal conflicts if the legal conflict makes processing the data necessary.
G. Data transfer within the BMW Group
BMW AG is a company of the BMW Group. In some cases, after a careful check, we send your data to other companies of the BMW Group, who are then responsible for further processing. Such a data transfer can occur under the following circumstance and for the following purposes:
Please bear in mind that this is not a complete or conclusive list of the data transfer operations within the BMW Group, rather only examples intended to make the data transfers more transparent.
If you have given us your express consent beforehand to share your data with other companies of the BMW Group for promotional or marketing purposes. This concerns:
BMW M GmbH, Company for Individual Automobiles and BMW Driving Experience, Garching-Hochbrück
The contact data as well as information about any data protection officers can be viewed here [cf. Chapter 4 Stage 3 Reference Text Web Link A: Contact data for BMW Group companies and data protection officers].
For compliance with the sales, service, and administration processes of BMW AG, cf. point G.
In the course of group reporting, we might transfer data, for example we transfer invoice-relevant information for the respective vehicle identification numbers in the case of leased vehicles for assessment of the residual values.
H. Data transfer to selected third parties
Data are forwarded to the following companies, among others, if and to the extent that the requirements in compliance with data protection legislation necessary for this are met:
To BMW partners (for example in order to be able to comply with your request for a test drive or a service and submit specific offers). Your requests are forwarded with priority to your preferred BMW partner, the BMW partner where you purchased products or services, the partner with whom you are in contact. If you have not yet had any contact with a BMW partner that we are aware of, we forward your inquiry to a BMW partner in your region.
To BMW partners for data updates, for example of your contact data. The data for a data update are forwarded to all BMW partners that keep you in their address list.
To carefully selected and checked service providers and business partners with whom we cooperate to be able to offer you products and services. We do this for BMW AG only within the framework of the strict conditions of data processing on your behalf or on the basis of your express consent (for example transfer to the insurance provider of BMW accident and breakdown cover, if you so wish).
In the event of the sale of a business unit or several business units of BMW AG to a company to which we assign our rights in compliance with all agreements that exist between us.
To other third parties (for example public authorities) to the extent that we are legally obliged to do so.
Via our BMW CarData platform, you also have the possibility to instruct us when personal data we have gathered within the framework of providing ConnectedDrive services is to be forwarded to authorized third parties you have selected (for example your motor vehicle insurance company). This occurs exclusively based on your consent, which you can revoke at any time. More information can be found here [Web link to www.bmw.de CarData].
How do we protect your personal data?
We deploy various security measures such as encryption and authentication tools in line with the current state of the art to protect and maintain the security, integrity, and availability of your data.
100% protection against unauthorized access in the case of data transfers across the internet or a website cannot be guaranteed, but we and our service providers and business partners do our utmost to protect your personal data in line with the prevailing data protection regulations by means of physical, electronic, and process-oriented security precautions in line with the current state of the art. Among other things, we use the following measures:
Strict criteria for authorization to access your data according to the "need-to-know principle" (restriction to as few people as possible) and exclusively for the specified purpose
Transfer of acquired data exclusively in encrypted form
Storage of confidential data, for example credit card data, exclusively in encrypted form
Firewall safeguarding of IT systems to provide protection against unauthorized access, for example by hackers
Permanent monitoring of accesses to IT systems to detect and prevent the misuse of personal data
If you have received a password from us or have assigned one yourself to gain access to certain areas of our website or other portals, apps, or services that we operate, you are responsible for keeping this password confidential and for compliance with all other security procedures of which we make you aware. We ask you in particular not to tell anyone your password.
Security precautions for location data
Certain services can only be offered if you reveal your location or the location of your vehicle. We take the confidentiality of these location data very seriously.
Your location data (including data accessed within the framework of vehicle maintenance) are therefore protected with the following security precautions:
They are only stored in a form that can be traced to you or your vehicle as required to fulfill the intended purpose to which you have agreed.
Data are only gathered and accessed in this form when they are required to provide the requested service.
Data are also gathered and accessed in this form to the extent that we are legally obliged to store or pass on the data.
Data for localization of the vehicle and data for localization of a / of your mobile user device are only linked if this is necessary to provide the requested service.
Any other use of location data for the purpose of analysis takes place using data records that have been anonymized beforehand.
We, your BMW dealership, and your BMW partner might have access to the data for localization of the vehicle and BMW AG might have access to the data for localization of the / of your mobile user device via the services provided (for example BMW ConnectedDrive).
On purchasing the vehicle or activating or configuring the BMW ConnectedDrive services or the BMW Connected App, you receive a detailed description of the location data that are transferred to provide location-specific services.
Via the BMW ConnectedDrive portal, the BMW Connected app or directly in the vehicle – where technically possible – you can set whether we are permitted to continue gathering and processing these data, thus preventing future data acquisition. Please bear in mind that we might no longer be able to provide certain aspects of our services if you have restricted the gathering of location data.
How long do we keep your data?
In line with article 17 of the basic EU data protection regulations, we will keep your data only as long as necessary for the respective purposes for which we process your data. If we process data for a number of purposes, they are automatically deleted or stored in a format that does not permit conclusions to be drawn directly as regards your person as soon as the last specific task has been performed. To ensure that all of your data are deleted in line with the principle of data minimization and article 17 of the basic EU data protection regulations, BMW has created an internal deletion concept. The fundamental principles by which this deletion concept envisages the deletion of your personal data are described below.
Use for compliance with a contract
To comply with contractual obligations, data acquired from you can be kept for as long as the contract is in force and - depending on the nature and scope of the contract - for 6 or 10 years beyond this point in order to comply with legal requirements for preservation and to ensure clarification of any queries or claims after the end of the contract.Over and above this, there are contracts for the delivery of products and services that necessitate longer retention periods, see also "Use for the assessment of claims" below.
Use for the assessment of claims
Data that in our opinion will be necessary to assess and avert claims against us or to initiate criminal proceedings or assert claims against you, us or third parties can be kept by us for as long as corresponding proceedings could be initiated.Use for customer care and marketing purposes
For customer care and marketing purposes, the data acquired from you can be kept for 3 to 10 years, unless you wish to have these data deleted and there are no contractual or legal requirements for preservation that prevent this request for deletion.
Whom do we grant international access to your data and how do we ensure protection?
BMW is a company that operates globally. Personal data are processed by BMW employees, national sales companies, BMW partners, and by service providers we have commissioned, preferably within the EU.
If data are processed in countries outside of the EU, BMW uses EU standard contracts, including suitable technical and organizational measures, to ensure that your personal data are processed at the same level as European data protection.
In some countries outside the EU, for example Canada and Switzerland, the EU has already determined a level of data protection comparable with that in Europe. The comparable level of data protection means that data transfer into these countries does not require any special permission or agreement.
Contact us here [cf. Chapter 4 Stage 3 Reference Text Web Link B: Contact data for BMW Customer Care of BMW AG Sales Germany and BMW AG group data protection] if you wish to see the specific security precautions for the transfer of your data to other countries.
To support the provision of the services and intended purposes listed above, BMW uses a number of service providers that are commissioned by BMW AG within the framework of the strict conditions of data processing in compliance with data protection legislation.
How can you see and change your online data privacy protection settings?
You can change the settings for the use of your data in BMW online accounts in the corresponding options in your online account "My BMW", in your BMW ConnectedDrive account or in the BMW Connected app at any time.
You can access the following data and, if possible, also change them:
Consent to promotional communication – here you can choose the communication channels you wish to have (communication by mail, e-mail etc.)and agree to the use of statistical methods to create an individual customer profile in order to receive personalized offers of products and services that are tailored to you.
The settings for the use of your data by BMW partners, however, cannot be changed in your online account, in the area of the data protection portal of BMW AG. To make such a change or if you have any questions regarding the use of your data, you therefore have to contact the respective BMW partner directly.
Contact with us, your data privacy protection rights, and your right to file complaints with data privacy protection authorities
If you have any questions regarding the use of your personal data by us, it is best to contact BMW Customer Care first – either per e-mail at kundenbetreuung@bmw.de or by telephone at the number +49 89 1250-16000 (daily 08:00 – 20:00 hrs).
Over and above this, you can contact the data protection officer responsible. A list of data protection officers can be found here [cf. Chapter 4 Stage 3 Reference Text Web Link B: Contact data for BMW Customer Care of BMW AG Sales Germany and BMW AG and web link A: Contact data for BMW Group companies and data protection officers].
As the person affected by the processing of your data, the basic EU data protection regulations and other relevant data privacy protection regulations enable you to assert certain rights in relation to us. The following section contains explanations of your rights as defined by the basic EU data protection regulations. Depending on the type and scope of your inquiry, we ask you to put the inquiry in writing.
Rights of persons affected
In line with the basic EU data protection regulations, as the person affected you have the following rights in particular vis-à-vis BMW:
Right to information (Article 15 of basic EU data protection regulations): You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data. You can obtain a copy of your data from us free of charge. If you are interested in other copies, we reserve the right to charge for the additional copies.
Right to correction (Article 16 of basic EU data protection regulations): You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us.
Right to deletion (Article 17 of basic EU data protection regulations): You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 of basic EU data protection regulations, this can be the case if
The data are no longer required for the purposes they were acquired or otherwise processed
You revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing
You object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
The data have been processed illegally
Where the processing is not necessary
To ensure adherence to a legal obligation that requires us to process your data
In particular with regard to legal retention periods
To assert, exercise or defend against legal claims
Right to restriction of processing (Article 18 of basic EU data protection regulations): You can request that we restrict the processing of your data if
You dispute the correctness of the data - for the period of time we need to check the correctness of the data
The processing is illegal but you do not wish to have your data deleted and request a restriction of use instead
We no longer need your data, but you need them to assert, exercise or defend against legal claims
You have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours.
Right to data transferability (Article 20 of basic EU data protection regulations): At your request, we will transfer your data – where technically possible – to another responsible entity. However, this right only applies if the data processing is based on your consent or is required to fulfill a contract. Instead of receiving a copy of your data, you can ask us to send the data directly to another responsible entity that you specify.
Right to objection (Article 21 of basic EU data protection regulations): You can object to the processing of your data at any time for reasons that arise from your special situation provided the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we are able to prove there are compelling, defensible reasons for the processing that outweigh your interests or we require your data to assert, exercise or defend against legal claims.
Time limits for compliance with the rights the persons affected
As a general principle, we make every effort to comply with all requests within 30 days. This time limit, however, can be extended for reasons related to the specific rights of persons affected or complexity of your request.
Restriction in the provision of information regarding the rights of persons affected
In certain situations, legal specifications might require us not to provide information regarding all of your data. If we have to refuse your request for information in such a case, we will inform you of the reasons for refusal at the same time.
Complaints to supervisory authorities
BMW AG takes your reservations and rights very seriously. However, if you are of the opinion that we have not dealt with your complaints or reservations adequately, you have the right to submit a complaint to the data privacy protection authorities responsible.
2Reference texts
Legal basis for the processing of personal data
We only process your data if this is permitted by an applicable legal regulation. We will process your data in particular on the basis of Article 6 and Article 9 of the basic EU data protection regulations as well as on the basis of consent in line with Article 7 of the basic EU data protection regulations. Here, we will base the processing of your data on, among others, the following legal principles. Please bear in mind that this is not a complete or conclusive list of the legal principles, rather only examples intended to make the legal principles more transparent.
Consent (Article 6 Paragraph 1 Page 1 a), Article 7 of the basic EU data protection regulation, or Article 9 Paragraph 2 a), Article 7 of the basic EU data protection regulations): We will process certain data only on the basis of the consent you have given expressly and voluntarily. You have the right to revoke your consent at any time with effect for the future.
Fulfillment of a contract / pre-contractual measures (Article 6 Paragraph. 1 Page 1 b) of the basic EU data protection regulations): For initiation and/or execution of your contract with BMW, BMW dealerships, and BMW partners, we require access to certain data.
Fulfillment of a legal obligation (Article 6 Paragraph 1 Page 1 c) of the basic EU data protection regulations): BMW is subject to a number of legal specifications. We must process certain data to comply with these specifications.
Protection of legitimate interests (Article 6 Paragraph 1 Page 1 f) of the basic EU data protection regulations): BMW will process certain data in order to protect their legitimate interests or the interests of third parties. However, this only applies if your interests do not outweigh ours in individual cases.
3Cookies
BMW cookie policy
What is a cookie?
A cookie is a small file that stores internet settings. Almost every website uses cookie technology. It is downloaded by your internet browser on the first visit to a website. The next time this website is opened with the same user device, the cookie and the information stored in it is either sent back to the website that created it (first-party cookie) or sent to another website it belongs to (third-party cookie). This enables the website to detect that you have opened it previously with this browser and in some cases to vary the displayed content.
Some cookies are extremely useful, as they can improve the user experience on opening a website that you have already visited a number of times. Provided you use the same user device and the same browser as before, cookies remember for example your preferences, how you use a site, and adapt the displayed offerings to be more relevant to your personal interest and needs.
Depending on their function and intended purpose, cookies can be divided into four categories*: Essential cookies, performance cookies, functional cookies, cookies for marketing purposes.
Your cookie settings on this website
Cookies not requiring consent on this website
Essential cookies, also referred to as "strictly necessary" cookies, ensure functions without which you would not be able to use this website as intended. These cookies are used exclusively by BMW and are therefore so-called first-party cookies. They are only stored on your user device during the current browser session. Essential cookies ensure, for example, that when you open the vehicle configurator you are shown a version where the bandwidth-related data volume corresponds to that of the internet connection you are using. When switching sites, for example, such cookies also ensure the functionality of a change from http to https and thus compliance with increased security requirements for data transfer. Last but not least, a cookie such as this also saves your decision with regard to the use of cookies on our website. Your consent is not required for the use of essential cookies.
Essential cookies cannot be disabled using the function of this site. In general, you can disable cookies in your browser at any time.
Examples of cookies not requiring consent / list of cookies not requiring consent
First-party cookies |
Purpose |
Expiration date |
Category* |
|---|---|---|---|
mobile |
This cookie detects the software version of your mobile user device in order to forward you to the appropriate app download page. |
2 days |
Essential cookies |
SMSESSION |
This session cookie assigns the user an anonymized ID while they are surfing on the website so that the web server can react to user actions (for example by providing personalized information). |
Session |
Essential cookies |
LOGGEDIN |
This session cookie is used during login at MyBMW to ensure that the anonymized user also remains logged while they access various pages of the website. |
Session |
Essential cookies |
JSESSIONID |
This session cookie indicates that an anonymous user is actively using the website at the moment. Furthermore, it is used to count how many anonymous users visit the website at any one time. This cookie is deleted as soon as you close your browser. |
Session |
Essential cookies |
CookieDisclaimer |
This cookie is used to record whether a user has agreed to the use of the different categories of cookies on the website. This is a permanent cookie; it is deleted when the user changes their cookie settings. |
Permanent |
Essential cookies |
Cookies requiring consent on this website
Cookies that are not essential to be able to use the website in line with the above definition perform important tasks. Without these cookies, functions that enable convenient surfing on our website, for example pre-completed forms, are no longer available. The settings you have made cannot be stored and must therefore be queried anew on each page. Furthermore, we have no possibility to adjust to you with individually adapted offers.
BMW also integrates content from third parties in this website. Examples of this are the integration of Facebook services or YouTube videos. These third-party providers can theoretically set cookies while you are visiting the BMW website, obtaining the information that you have opened a BMW website, for example. Please visit the websites of third-party providers to obtain more information regarding their use of cookies. If you have decided as a general principle not to give your consent to the use of cookies that require consent or to revoke consent that has been given, you are only provided with the functionalities of our website where we can guarantee use without these cookies. Areas of our website that potentially offer the technical possibility to integrate third-party content and therefore to set third-party cookies are not available to you in this case. You are informed of this by a corresponding prompt. If you nonetheless wish to use the content of the website in such a case, this is only possible if you agree to use cookies requiring consent. Activate the consent function available at the respective position on our website.
List of cookies requiring consent
Cookies |
Purpose |
Expiration date |
Category* |
|---|---|---|---|
bw |
This cookie delivers multimedia content of the website in line with the technical requirements of the user. |
Session |
Functional cookies |
visitorID |
This cookie delivers anonymized tracking data and also supports anonymized personalization of site content. |
4 years |
Performance cookies and cookies for marketing purposes |
FScomponent |
This cookie is used for the registration form for MyBMW and the different contact requests (for example requests for information and test drives). The completion of forms is made easier by caching data that a user has already entered in a similar form on the website. |
Session |
Session |
usy46gabsosd |
These cookies collect anonymous data regarding user behavior. The information is used to enable improvements in the website by evaluating the results. All data are collected anonymously and contain parameters such as page impressions or pages visited (user tracking system). |
Session |
Performance cookies |
bmwcsaDBID bmwcsauvt |
These cookies collect anonymous data regarding user behavior. The information is used to enable improvements in the website by evaluating the results. All data are collected anonymously and contain parameters such as page impressions or pages visited (user tracking system). |
5 years |
Performance cookies |
s_fid |
This cookie is required for storage of the individual visitor ID and the time and date if, for technical reasons, the s_vi cookie is not present. |
2 years |
Cookies for |
bmwdtm_hq_bouncer |
This cookie delivers anonymized tracking data. It is set on the first page of a website visit. After 30 seconds have elapsed, it is recorded that the anonymous user is still on the page. This enables statistical statements as to how many users remain on the website for at least 30 seconds. |
30 minutes |
Performance cookies |
bmwdtm_hq_perf |
This cookie delivers information regarding the URLs you have visited and is used to transmit the response times of your network, server, and browser every time the website is reloaded. The information is used to measure the performance capability of the website. |
Session |
Performance cookies |
st_input |
This cookie delivers multimedia content of the website in line with the technical requirements of the user. |
Session |
Performance cookies |
Google+ plug-in |
This cookie detects the software version of your mobile user device in order to forward you to the appropriate app download page. |
Session |
Cookies for marketing purposes |
Plug-in |
Transfer of data for the "Facebook Like" plug-in. |
Session |
Cookies for marketing purposes |
AMCV_### |
This cookie is used to assign an individual visitor ID to an individual visitor and to recognize them again, whereby ### stands for a random character string, for example AMCV_1FD6776A524453CC0A490D44% 40AdobeOrg. |
2 years |
Cookies for marketing purposes |
s_cc |
This cookie is used to save whether cookies are permitted by the browser. |
Session |
Cookies for marketing purposes |
s_sq |
This cookie is used to save whether the ClickMap functionality is enabled for the current website. |
Session |
Cookies for marketing purposes |
s_vi |
This cookie saves the time and date for the individual visitor ID. |
2 years |
Cookies for marketing purposes |
bmwdtm_sid |
The cookie bmwdtm_sid is required to ensure the serialization of events that is necessary for tracking. |
Session |
Cookies for marketing purposes |
bmwde.page |
This cookie delivers anonymized website usage data and also supports anonymized personalization of online campaigns. |
30 days |
Cookies for marketing purposes |
*Categories
Depending on their function and intended purpose, cookies can be divided into four categories*: Essential cookies, performance cookies, functional cookies, cookies for marketing purposes.
Essential cookies
Essential cookies are required so that you can navigate on a website and use its features. Without these cookies, functionalities cannot be ensured, for example that actions performed during a visit (e.g. text input or vehicle configuration) are preserved, also when navigating between individual pages of the website.
Functional cookies
Functional cookies enable a website to save details that have already been provided (e.g. user name, your location) and to offer the user improved, more personal functions. Functional cookies are used, for example, to enable requested functions such as the playback of videos. These cookies collect anonymized information; they cannot track your movement on other websites.
Performance cookies
Performance cookies collect information on how a website is used – for example which pages a visitor opens most frequently and whether they receive error messages from a page. These cookies do not save any information that permits identification of the user. The collected information is aggregated and anonymous. These cookies are used exclusively to improve the performance of a website and thus the user experience.
Cookies for marketing purposes
Cookies for marketing purposes are used to extract advertisements that are relevant to specific users and adapted to their interests. They are also used to limit the frequency of appearance of an advertisement and to measure the effectiveness of advertising campaigns. They register whether you have visited a website or not. This information can be shared with third parties, for example advertisers. Cookies to improve target group contact and advertising are often linked with page functionalities of third parties.
Use of cookies on www.bmw.de
In the same way as most websites you visit, www.bmw.de also uses cookies to improve the user experience for both one-off and repeated visits to the website. This enables you to switch quickly and easily between pages, to save your favorites, to communicate via social networks such as Facebook or Google+, and to use GoogleMaps services.
Cookies are set either by our website (first-party cookies) or by other websites from which content appears on our website (third-party cookies). For example, our "Parts" website integrates buttons that enable users to share content with their friends on social networks such as Facebook and Twitter. These third-party providers can set cookies when you are logged in to their sites and visit our website. BMW AG has no influence on the cookie settings of these websites. Please visit the websites of third-party providers to obtain more information regarding their use of cookies.
Managing and deleting cookies
The top button provides you with the possibility to refuse or accept cookies requiring consent. You can also block and delete cookies by changing your browser settings. To manage cookies, most browsers allow you to refuse or accept all cookies or only to accept certain types of cookie. The process for the management and deletion of cookies can be found in the help function integrated in the browser. If you wish to limit the use of cookies, you will not be able to use all the interactive functions of our website.
Performance cookies: User tracking
Our website uses Adobe technology to collect information as to how users interact with the website and its content. BMW AG uses this information to ensure that the website creates added value for its visitors, for example with content adapted to your personal needs.
Within the framework of the application of Adobe, the data are collected by means of Adobe Analytics and Adobe Dynamic Tag Management and are anonymized, processed, and stored in Adobe data centers in Europe. If you wish to object to the complete data acquisition by Adobe, you can do so by running the opt-out process on the Adobe website and thus declare your objection: http://www.adobe.com/de/privacy/opt-out.html
If you wish to have a complete Adobe opt-out as performance cookies, you can do so via the link provided above.
If you delete all of your cookies, you have to run the opt-out process once again especially for Adobe performance cookies, as in this case the opt-out function you have selected is no longer documented. This also applies if you visit this website from other user devices. If your security settings are too high and the cookie is blocked, we cannot act on your opt-out request. In this case, this is pointed out to you and you should repeat the opt-out process with lower security settings.
User tracking on websites outside of BMW
NERO Tracking collects and processes your user behavior anonymously on websites operated by BMW and also on websites outside of BMW. You profit from this as a user in that you receive advertising that is more likely to match your areas of interest and in that less randomly distributed advertising is displayed on the whole.
All collected usage data are stored using a pseudonym, which means that personal identification is ruled out. The IP address of your computer that is transferred for technical reasons is not stored and not used for the controlled display of advertising.
This tracking service is currently active. If you no longer wish to use this service, simply click here