If you have any questions about our use of your personal data, please contact BMW customer care – either by email at email@example.com or by phone on +49 89 1250-16000 (daily from 8am to 8pm).
As persons affected by the processing of your data, you may claim certain rights under the GDPR and other relevant data protection regulations. The following section contains an explanation of your rights according to the GDPR.
Rights of persons affected
According to the GDPR, you are entitled to the following rights in particular as an affected person:
Right of access (Art. 15 of GDPR): You may request information about the data we hold on you at any time. This information includes, but is not limited to, the categories of data we process and for which purposes we process them, the source of the data if we have not collected it directly from you, and, if applicable, the recipients to whom we have submitted your information. You can obtain a free copy of your data from us. If you are interested in further copies, we reserve the right to charge you for these.
Right to correction (Art. 16 of GDPR): You can ask us to correct your data. We will then take reasonable steps to keep your information up-to-date, and process it in a timely, complete, and accurate manner based on the most up-to-date information available to us.
Right to deletion (Art. 17 of GDPR): You can demand that we delete your data, provided that the legal prerequisites exist. This may be the case under Art. 17 GDPR if:
- The data is no longer required for the purposes for which it was collected or otherwise processed
- You revoke your consent, which is the basis of data processing, and lack any other legal basis for processing
- You object to the processing of your data and there are no legitimate reasons for processing, or you object to the processing of data for direct marketing purposes
- The data was processed unlawfully insofar as processing is not necessary
- To ensure compliance with a legal obligation that requires us to secure your data
- Especially regarding statutory retention periods
- To assert, exercise, or defend legal claims.
Right to restriction of processing (Art. 18 of GDPR): You may ask that we restrict the processing of your data if:
- You deny the accuracy of the data for the period which we need to check to verify the accuracy of the data
- The processing is unlawful, and you refuse the deletion of your data and instead demand the restriction of its use
- We no longer need your information, but you need it to enforce, exercise or defend your rights
- You have objected to the processing, so long as it is not certain that our legitimate reasons outweigh yours
Right to data portability (Art. 20 of GDPR): We will transfer your data upon your request - as far as this is technically possible - to another person in charge. However, you are only entitled to this right if the data processing is based on your consent or is required to carry out a contract. Instead of receiving a copy of your data, you may also ask us to submit the data directly to another person in charge who you specify.
Right to objection (Art. 21 of GDPR): You may object to the processing of your data at any time for reasons that arise from your particular situation if the data processing is based on your consent or on our legitimate interests or those of a third party. In this case, we will no longer process your data. The latter does not apply if we can prove compelling legitimate reasons for the processing that outweigh your interests, or we need your data to assert, exercise, or defend legal claims.
Time limits for the fulfilment of the rights of persons affected
We make every effort to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific right or complexity of your request.
Restriction of information in the fulfilment of the rights of persons affected
In certain situations, we may be unable to provide you with information about all of your data due to legal requirements. If we must decline your request for information in such a case, we will inform you at the same time about the reasons for the refusal.
Complaints to regulators
BMW takes your concerns and rights very seriously. However, if you believe that we have not adequately complied with your complaints or concerns, you have the right to lodge a complaint with a competent data protection authority.