Last update: November 20, 2019
The purpose of the website is to inform press representatives about current events, decisions and developments within BMW AG.
BMW AG respects statutory data protection laws and places great importance on the protection of privacy. We believe data privacy to be a fundamental right. The application is designed such that only as much data as necessary is collected.
The following contains important information about how your personal data is handled. When the terms „BMW“, „we“, „us“ or „our“ are used, they refer to BMW AG, which is responsible for your data in accordance with this privacy statement.
Security of your personal data.
In operating the website, BMW AG has taken all technical and organizational measures to protect your personal data, particularly against accidental or intentional tampering, loss, destruction or access by unauthorized persons. These security measures are adapted continuously corresponding to technological developments. Whenever personal data are transmitted between your computer and our server, the transmission is encrypted (Secure Socket Layer, or SSL for short). In addition, BMW AG takes all necessary technical and organizational security measures to store your personal data in such a manner that it is protected from unauthorized access and misuse.
What data is stored and for what purpose.
BMW AG collects, stores or processes data for the sole purpose of implementing the business purposes of the website. The website is available to all Internet users without the need to collect personal data. Thus you do not have to register to use the services.
If you use the contact form or if you contact us via e-mail, personal data (e-mail address, name, optionally information) are collected only for the use of this services.
This data is only used to enable you to access these services and to render services for this purpose. Your personal data is requested, processed and used exclusively in the scope required for our service.
Type of data storage.
We secure your data in accordance with the state of technology. For example, the following safety measures are applied to protect your personal data from misuse or other unauthorized processing:
- The availability of access to personal data is restricted to just a limited number of authorized persons for the specified purposes.
- Collected data is transferred only in encrypted form.
- Sensitive data is also saved only in encrypted form.
- The IT systems for processing the data are compartmentalized from other systems, e.g. to prevent hacking.
- In addition, access to these IT systems is monitored continuously in order to ward off and detect misuse early.
Period of data storage.
BMW AG adheres to the principles of data avoidance and data minimization. Personal data is only saved for as long as it is required for providing services or as is required by legally mandated retention periods. After respective purpose is finished or the retention period has expired, the corresponding data is routinely locked, deleted or stored in such a way that cannot be traced back to you in accordance with the legal regulations as soon as its last specified purposed has been fulfilled.
Viewing, changing or deleting personal data.
If you are registered with the website, you can view personal data via a secure access channel and change the data. Of course, our Support Team would be happy to provide you with further information about all of your personal data stored by the website or to delete this data upon request. In case of questions, please contact Support: firstname.lastname@example.org
Data usage for customer service & support.
We use your personal data to contact you or to handle the concerns that you have noted in a question form. For all issues regarding the Website use or for processing a concern, we may contact you via e-mail or telephone, depending on the contact data you have shared with us for this purpose, without special permission.
Fulfillment of legal obligations of BMW.
BMW AG will also process personal data if there is a legal obligation to do so. Collected data is also processed as part of safeguarding the operation of IT systems. Safeguarding in this context includes, but is not limited to, the following actions:
- Backup and restoration of data processed in IT systems.
- Logging and monitoring to check the specific functionality of IT systems.
- Detecting and defending against unauthorized access to personal data.
- Incident and problem management for resolving problems in IT systems.
BMW AG is subject to a number of additional legal obligations. In order to comply with these obligations, we process your data to the extent needed and pass on this data to the responsible authorities if necessary as part of legal reporting requirements.
Transfer of data to other parties.
BMW AG is a global company. Stored data is processed by BMW employees and by service providers we have commissioned, preferably within the EU. In doing so, access to personal data is always strictly limited and only given to employees and service providers that require such access to render services.
If data must be processed in countries outside the EU, BMW AG uses EU standard agreements, including suitable technical and organizational measures, to ensure that your personal data is processed in accordance with the European level of data privacy. If you want to access the actual protections for data transfer to other countries, please contact us using the communications channels specified below.
The EU has already established a comparable data privacy level for some countries outside the EU, such as the United States, Canada and Switzerland (EU-US and Swiss-US Privacy Shield). Because of this, data transfer to these countries does not require any special approval or agreement. Through this certification, our partners in these countries guarantee compliance with EU data protection regulations when processing data. To learn more about the "Privacy Shield program," please visit https://www.privacyshield.gov
Automatic collection of information.
When you access our websites, information of a general nature is collected automatically. This information is necessary for the proper operation of the website, it makes it possible for us to fulfill our legal obligations, and it serves our legitimate interest in providing and improving the functions of the website. This information includes usage data, log data, the type of web browser, the operating system used, the domain names of your Internet service provider, and similar information.
The website utilizes what are called "cookies" and similar technical processes which transmit an identifier to your computer. Cookies are always browser-specific and are used within the application for technical authentication (JSESSIONID), for "automatic login" (rememberMeCookie) and for website analysis ("Google Analytics”, _ga, _gid, _gat).
Use of "sharing" and external links.
In compliance with copyright law (link
), you can share articles and media from the website on the Internet. For this purpose, you can find a „share function“ at various locations on the website which links to external social media channels (e.g. Facebook, Twitter, Pinterest, Instagram). Furthermore, external websites with relevant content are also linked within the website. Our website does not actively transmit personal data when „linking“, however the utilization of the „http referrer“ offers any linked website the option to collect certain usage information. BMW AG has no influence on this. Information about what data is collected and how it is used can always be found in the data protection notices of the linked websites.
Playback of videos.
The website uses the JWPlayer video player plugin by LongTail Ad Solutions, Inc. (d/b/a JW Player, 2 Park Avenue, 10th Floor, New York NY 10016, USA).
When calling up a page with video clips or TV footage videos, a connection is established between the browser and one of the company's servers. Through this connection, the company is informed that the browser has called up the respective website. The information is transmitted directly from the browser to a server, where it is stored.
Playback of live and on-demand streams.
The website provides streaming content though the following partners: G&L Geißendörfer & Leschinsky GmbH (Maarweg 149-161, 50825 Cologne, Germany), Akamai Technologies GmbH (Parkring 20 - 22, D-85748 Garching, Germany) and THEO Technologies NV (1B Kolonel Begaultlaan, 3rd floor, Leuven 3012, Belgium).
When calling up a page with live and on-demand streams, a connection is established between the browser and a server of Akamai Technologies GmbH and THEO Technologies NV. Through this connection, the company obtains the information that the browser has called up the respective website. The information is directly transmitted from the browser to a server, on which it is stored.
The described data processing takes place in accordance with GDPR 6(1)(f) based on the legitimate interest of the companies in licensing queries and the requirements-based provision of the streaming service. For the purpose and scope of the data collection and its further processing and use of the data by the companies, please refer to the following data privacy policies: https://www.akamai.com/de/de/privacy-policies/
(Chapter "Data collected or processed through interactions with an Akamai customer") and https://www.theoplayer.com/terms
Playback of YouTube videos.
For integrating videos, the website uses the provider YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
We have integrated YouTube videos with YouTube's expanded data privacy mode. This means that YouTube does not store information about visitors unless they watch the video. If you click the video, your browser will transmit data to YouTube and the company will know that you have watched the video. If you are logged in to YouTube, this information will also be assigned to your user account. You can prevent this by logging out of YouTube. The connection between the browser and YouTube servers is required to display the respective video. In the course of this, YouTube will record and process the IP address, date and time, as well as the web page visited, among other data.
You can obtain further information on the collection and use of data as well as on your rights and protection options with regard to this here: https://policies.google.com/privacy
. We have no knowledge of the collection of data by YouTube, and we have no influence on it. You can obtain further information at: https://www.google.de/intl/de/policies/privacy/
As part of the online content, the website uses "Google Analytics" and "Google Tag Manager". Both tools are web analytics services from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Google Analytics uses "cookies" (see above
) that enable the analysis of your use of our online content. The information generated by the cookies about your use of our online content (including your IP address) is sent to a Google server in Europe or in a member state of the agreement on the European Economic Area to anonymize your IP address so as to exclude the possibility of any direct reference to you. This shortened IP address is only transmitted to a server in the United States after the anonymization of the IP address. In exceptional cases, the full IP address is transmitted to a Google server in the United States and shortened there. Google uses the information generated by the cookies on our behalf to evaluate your use of the online content, compile reports about the use of the online content and render addition services connected with the use of the online content and general Internet usage. The (shortened) IP address is not collected with other data from Google.
In addition to the above mentioned browser settings, you can prevent processing of your data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de
As the party affected by the processing of your data, you can assert certain rights vis-à-vis us. You can assert all of the rights described in this section by sending an e-mail to the contacts listed further below. Please be aware that we will likely ask you to confirm your identity before taking further measures.
Right of access by the data subject.
You can request information about the data we have about you at any time. This information includes the data categories processed by us, the purposes for which we process it, the source of the data if we did not collect it from you directly and, where applicable, the recipients to which we have transferred your data. You can obtain a free copy of your data from us. If you are interested in additional copies, we reserve the right to charge you for any additional copies.
Right of rectification.
You can request that we rectify your data. We will take appropriate measures to maintain, based on the latest information available to us, the correctness, completeness and timeliness of the data we have and continue to process about you.
Right of deletion.
You can request that we erase your data if the legal requirements exist for doing so. This could be the case if:
- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed
- You withdraw your consent on which the processing is based and where there is no other legal ground for the processing
- You object to the processing of your data and there are no overriding legitimate grounds for the processing
- The data has been unlawfully processed, provided that this processing is not necessary to ensure compliance with a legal obligation that required the processing of your data, particularly with regard to legal retention periods
- For the establishment, exercise or defense of legal claims
Right to the restriction of processing.
You can request the restriction of processing of your data by us if:
- You contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data
- The processing is unlawful and you oppose the erasure of the personal data and request the restriction of its use instead
- We no longer need your data but you require it for the establishment, exercise or defense of legal claims
- You have objected to processing pending the verification whether our legitimate grounds override yours
Right of data portability.
Your data shall, where technically feasible, be transmitted to another responsible party at your request. This right shall be available to you only insofar as data processing is based on your consent or is necessary in performance of a service.
Right of appeal.
You can object, on grounds relating to your particular situation, at any time to processing of your personal data if data processing relates to your consent or to our legitimate interests or to those of a third party. We will cease the processing of your data in such a case. The latter shall not apply if we can demonstrate compelling legitimate grounds for the processing which override your interests or if we require your data for the establishment, exercise or defense of legal claims.
Periods for fulfillment of rights as a data subject.
We always make an effort to comply with all requests within 30 days. This period, however, may be prolonged for any reason relating to the specific right of a data subject or the complexity of your request.
Information restriction for fulfillment of rights as a data subject.
In certain situations, we may be unable to provide you with information about all of your data due to legal requirements. If we are required to decline a request for information in such a case, we will promptly notify you of the reasons for the refusal.
Complaints to supervisory authorities.
BMW AG takes your rights and concerns very seriously. If you feel that we have not duly addressed your complaint or concern, you have the right to lodge a complaint with a responsible data protection authority.
In case of questions about the use of your personal data,
Monday - Friday, 9:00 a.m. - 5:00 p.m. CET
Phone: +49 89 382 26975
In addition, you can also contact the responsible
data protection officer:
80788 Munich, Germany