BMW Motorrad PLT Malaga 2023 Privacy Policy

We look to reach the same high standards in handling your data as you expect of our product features and services. We aim to create and maintain the basis for a trust-based business relationship with our customers and interested parties. We take the confidentiality and integrity of your personal data extremely seriously. Therefore, we will store your data with care, for a specific purpose (and/or in accordance with consent you have provided to us) and will process and use it in accordance with legal provisions regarding data protection.

The following Privacy Policy describes how BMW AG collects, processes and uses personal data belonging to its customers and interested parties for event PLT BMW Motorrad. You can also find further information on how we process your personal data more generally in the BMW Group Privacy Policy.

Bayerische Motoren Werke Aktiengesellschaft – Petuelring 130, 80788 Munich, Germany is the Controller for the processing of your personal data within the meaning of the European Union General Data Protection Regulation 2016/679 (hereinafter “GDPR”)

Which data do we collect ?

We can collect the following categories of personal data using the PLT 2023 Malaga Platform.

  • Your contact details ► Gender, first name, last name, address (street, house number, post code, town/city, state/province, country), phone number, email address.
  • Other personal data ► Information provided by you, i.e. your date of birth, driver’s licence category, how long you have held your driver’s licence, your personal ID, person to contact for safety issue, allergies.

How do we keep your personal data safe ?

We use a variety of security measures including state-of-the-art encryption and authentication tools in order to ensure and maintain the safety, integrity and availability of your data.

It is impossible to guarantee that any transfer of data over the Internet or via a website is completely protected against unauthorised access. However, together with our service providers and commercial partners, we do everything in our power to protect your personal data in accordance with applicable data protection legislation by physical, electronic and procedural means, in line with the current state of technology. The measures we implement include:

  • Strict criteria for authorisation to access your data, allowing access on a ‘need to know’ basis (limiting authorisation to the minimum possible number of individuals) and for the given purpose only.
  • Transfer of collected data in encrypted form only.
  • Storage of confidential data (e.g. credit card data) in encrypted form only.
  • Firewalled IT systems to protect against unauthorised access (e.g. by hackers) and
  • Constant monitoring of access to IT systems to detect and prevent any misuse of personal data.

What is my data used for ?

A. Performance of the contract

Legal basis for the processing under the GDPR: The legal basis for the above processing activities carried out by BMW is “performance of a contract to which the data subject is party” or “steps at the request of the data subject prior to entering into a contract” (Article 6(1)(b) GDPR).

B. Customer support

BMW will also process your personal data on this basis in order to further optimise your BMW Motorrad customer support experience and, for example, in order to clearly identify you when you contact us.

Legal basis for the processing under the GDPR: Depending on the specific circumstances, the legal basis for the above processing activities carried out by BMW is either (i) “performance of a contract to which the data subject is party” or “steps at the request of the data subject prior to entering into a contract” (Article 6(1)(b) GDPR) or (ii) “legitimate interests” pursued by BMW)

C. Compliance with legal obligations to which BMW is subject

Collected data is also processed as part of assuring the operation of IT systems. ‘Assurance’ includes without limitation the following activities:

  • Securing and recovering data processed in IT systems.
  • Logging and monitoring of transactions to ensure the correct functioning of IT systems.
  • Detecting and preventing unauthorised access to personal data.
  • Incident and problem management with a view to rectifying any disruption to IT systems.

BMW is subject to a variety of further legal obligations. In order to fulfil these obligations, we process your data to the extent required and provide it to the responsible authorities where required as part of our legal reporting obligations.

We will also process your data in the event of any legal dispute, should the nature of the dispute require such processing of your data.

Legal basis for the processing under the GDPR: The legal basis for the above processing activities is “compliance with a legal obligation” to which BMW is subject (Article 6(1)(c) GDPR).

D. Transfer of data within the BMW Group

BMW AG is part of the BMW Group. From time to time, and following careful checks, we will transfer your data to other BMW Group companies, which will then process this data themselves as the Controller. Such data transfers may occur under the following circumstances and for the following purposes:

  • If it is necessary to answer your enquiries, or if you have given us your prior express consent to share your data with the BMW Group for advertising or marketing purposes, and specifically to share it with the BMW distributor and certain authorised dealers in your home market or the market in which you are currently resident.

Please note that this does not constitute an exhaustive or definitive list of data transfer processes within the BMW Group, and serves merely to provide examples designed to make data transfer processes more transparent.

E. Transfer of data to selected third parties

Provided and to the extent that the necessary data protection requirements are met, your data will be sent to companies such as:

  • Carefully selected and tested service providers and commercial partners with whom we cooperate, in order to offer you products and services. We will only do this if we have imposed strict contractual obligations for so-called commissioned data processing on the third party recipient or on the basis of your express consent (e.g. forwarding to marketing specialists who then draw up a personalised offer for you).
  • In the event that one or several of BMW AG’s business areas is/are sold to a company to which we transfer our rights, in compliance with all existing agreements with you.
  • Other third parties (e.g. public bodies) to the extent we are legally required to do so.

 Contact

The contact details for BMW AG’s Data Protection Officer are as follows:

BMW AG
Data Protection Officer
Petuelring 130
80788 Munich
Germany
E-Mail: datenschutz@bmw.de

More details here : https://www.global.bmw-motorrad.com/en/legal-disclaimer.html