BMW MOTORRAD Privacy Policy

Last Updated: October 16, 2023

This privacy policy applies to BMW of North America, LLC, its subsidiaries, affiliates, and service providers (collectively, “BMW NA,” “we,” “our,” and “us”). This privacy policy applies to information collected through our websites, mobile or smart watch apps, vehicles, API applications, virtual assistants, and any of our other products and services that display or link to this privacy policy, information collected through our call center agents and service representativesnformation collected offline, and information obtained from third parties (collectively, “Services”).

This privacy policy describes the information we collect about you, how BMW NA uses this informationhe choices you have regarding how we use your information, and other important information regarding our privacy practices, including steps BMW NA takes to protect this information. Please note that we may provide you with additional data privacy notices that supplement this privacy policy.

Before engaging with us, submitting information to us, or buying or using our Services, please review this privacy policy carefully. By using our Services, you understand and agree to the terms as outlined in this privacy policy.

You may print or download a pdf version of this privacy policy.

1. We may collect your information in various ways.

We may collect information from you in various ways, including the following:

· We collect information you provide us when you use our Services;

· We collect information when you use our Services;

· We collect information from third parties, such as our service providers, data providers, or partners; and

· We collect information automatically.

2. We may collect information you provide us when you use our Services.

When you use our Services, we may collect the information you provide us, for example, when you:

· Use our vehicles or Services;

· Ask a question;

· Email us or modify your account;

· Conduct transactions;

· Keep a BMW app actively running on your mobile device;

· Actively use the features of the Services;

· Use the Services to perform ConnectedDrive functions, such as executing a remote command or viewing your vehicle status;

· Register for an event;

· Begin or complete a form;

· Make a payment;

· Contact customer support;

· Respond to a survey;

· Enter into a sweepstakes;

· Tour a manufacturing facility;

· Purchase a vehicle through a special sales or delivery channel;

· Provide feedback or a complaint; or

· Apply for a job.

3. We may collect information when you use our Services.

We may collect information when you use our Services, including:

· Name, address, and phone number;

· BMW ID credentialsncluding email address, password, and related security questions, as applicable;

· Vehicle profile, vehicle identification number, or other vehicle identifiers;

· User profile, including preferences, language, or ID;

· User feedback, including service ratings, comments, or problem descriptions;

· Position and movement data relating to your vehicle, including time, position, or speed;

· Destination data pertaining to your vehicle, including position, street address, or destination name;

· Travel estimates, such as estimated travel time;

· Calendar events, including event title, location, or start or end times;

· Your contacts, including names, addresses, or phone numbers;

· Notifications, including the recipient of the notification or their contact information;

· BMW retailer or service center information, such as your preferred retailer or service center;

· Vehicle imagesncluding 3-D images around your vehicle;

· Environmental information, including weather conditions;

· Analytics pertaining to your use of the Services, such as click events or app launch events;

· Records of Services requested or purchased; and

· Other information you provide to us.

Some forms on our Services may require that you provide certain information to submit the form. You may choose not to provide information in those cases, but this may prevent you from being able to use certain features of our Services.

4. We may collect your personal information from third parties.

We may collect personal information about you from third parties. In some instances, we may combine the personal information we collect about you from third parties with personal information we collect from you. Depending on your relationship with us, this personal information we collect from third parties may include:

· Name, address, email address, and phone number;

· Information on your buying habits and interests and other publicly observed data (such as from social media);

· Demographic information;

· Information we obtain when you connect to BMW NA through social media; or

· Device identification information about your mobile phone, tablet, vehicle, or other device.

We may also use the personal information that we collect from you and about you to draw inferences, such as information regarding your preferences or habits.

5. We may use your information to provide you with our Services.

We may use your information in a variety of ways, including to:

· Offer you Services;

· Develop new Services;

· Improve our Servicesontent, products, and offerings;

· Notify you about changes to the Services;

· Facilitate efficient transactions;

· Create, maintain, and customize your account;

· Respond to your requests, questions, or comments;

· Communicate with you and others;

· Provide you with customized content, targeted offers, and advertising;

· Provide you with informationewsletters, and promotional materials;

· Promote customer reviews and testimonials in marketing and advertising material;

· For marketing research and other marketing and service related purposes;

· Address problems and review the usage and operations of our Services or business;

· Protect the security and integrity of our Services and our business, including to detect fraud or illegal activities;

· Enforce our legal agreements, terms, and other applicable policies;

· Protect and defend our rights and property or the rights of third parties;

· Analyze usage patterns and performance of our Services;

· Evaluate advertisement interactions relating to our Services;

· For internal business analysis or other business purposes consistent with our mission; and

· Carry out other purposes that are disclosed to you and to which you consent.

We may also use your information as otherwise described to you at the point of collection.

If you provided your information for a job application, we may use that information for human resources, job placement, qualification, or other related purposes.

6. We may retain your personal information for our business purposes.

We may retain and use your personal information in accordance with our records retention schedule, as required or permitted by law, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. We also retain your information as needed to provide Services to you and while you maintain an account with us.

7. We may share your personal information to provide you with our Services.

In addition to sharing your personal information as described at time of collection, we may share your information as follows, among others:

· When we have your consent or at your direction;

· To perform or provide the Services you requested;

· With a parentubsidiary, or affiliate entity within the BMW corporate family, as permitted by law;

· With a third party in the event that a division or product line of BMW NA is bought, sold, or otherwise transferred, or the third party is in the process of a potential transaction as among the transferred business assets;

· With your consent, with our business partners that administer specific programs or provide specific offerings to you;

· With our dealersenters, or others who sell or facilitate the sale of our Services;

· Your destination may be shared with an authorized service center in the event of a roadside assistance incident;

· When necessary and with your permission, we may share your vehicle ID, vehicle maintenance dataehicle status data, or remote vehicle data with an authorized BMW center;

· With our vendors, as needed to perform their functions for us;

· With third parties to provide you with a product or service, as permitted by law;

· With legal entities, if required by law, or a regulatory authority or at the request of governmentalaw enforcement, or regulatory authorities, including to respond to subpoenas or other litigation process;

· With other companies or organizations for fraud protection or similar risk reduction;

· When we believe such sharing is necessary, such as to protect the rights, property, life, securityr safety of BMW NA, visitors to our Services, customers, employees, or others or to address national security situations; and

· In the case of a corporate transaction, such as a merger, acquisition, or divestiture.

We may share your information with providers of third-party products and services in order for you to receive the products or services. When we share your information with these providers, we may receive information related to such products or services, includingithout limitation, whether you have signed up for a product or service. We encourage you to review the privacy policies of these third-party providers for further information. The collection, use, storage, or other processing of your personal information by that third party is governed by their privacy policies and terms.

We may also maintain aggregate data or other deidentified information about you, such as usage statistics, online traffic patterns and user feedback. In addition to using this information for the purposes discussed in this privacy policy, we may disclose this aggregated or other deidentified information to third parties without restriction.

8. We may share personal information for marketing purposes.

We may share your personal information for marketing purposes. This includes the sharing of your information with our BMW NA service providers, affiliates, dealers, or centers. You may opt out of the marketing emails or exercise rights under applicable laws as described below.

9. We may collect information automatically from your use of our Services.

We may collect information automatically using cookies and similar technologies or when you use our Services, send us an email, or interact with our emails or advertisements. The information we may collect automatically using these technologies or methods may include:

· Internet protocol address;

· Device or vehicle identifier;

· Advertising identifier;

· Browser type and language;

· Operating system;

· Date and time stamp;

· Session ID;

· Internet service provider;

· Data regarding network-connected hardware;

· Web pages and advertisements visited;

· Internet protocol address geolocation or other location information;

· Click or touch stream data, movement, scroll, and in some cases, keystroke activity;

· Third-party sites or services you were using before and after interacting with our Servicesncluding the web search that landed you on our Services; and

· Deidentified usage analytics when you access the Services via an integrated device.

10. We may use automatically collected information for various purposes, including providing Services, analytics, and advertising.

We use this automatically-collected information to:

· Conduct analyses about our Services;

· Associate the different devices you use;

· Remember your browser or device;

· Remember your preferences and interactions;

· Deliver relevant advertisements or other content;

· Market our Services to you;

· Collect information about our Services; and

· Log activity on our Services.

We may use these technologies for providing our Services, security, authentication, analytics, product or service improvement, advertising, fraud detection, and for other similar purposes.

We may use local storage or similar technologies to store content information or preferences or to display advertising.

11. You can manage cookies and similar technologies.

Most internet browsers allow you to block, manage, or delete cookies or local storage through the privacy features of your browser. Please refer to the help section of your browser or mobile device for additional information. Your browser may also offer add-onslugins, or extensions to manage cookies, local storage objects, scripts, or similar technologies mentioned in our privacy policy. Please note that if you block cookies or similar technologies, you may not be able to use the full functionality of our Services. For further information about cookies and similar technologies, including how to manage and delete cookies on your device, please review our FAQs.

12. We may use analytics services provided by others.

Our Services may use Adobe, Bing, Facebook Connect, Google Analytics, Google Audiences, Meta, LinkedIn, Pinterest, Snapchat, TikTok, Twitter, and others for audience measurement and analytics purposes. These analytics services may use cookies or similar technologies to collect information to help us analyze users and how they use our Services. The information collected by these technologies is used to assess how often you visit our Services, what pages you view when you visit our Services, and what other websites you visited before coming to our Services. Information generated by these services may be transmitted to and stored by these providers and they may use this information for purposes such as evaluating your use of our Services, compiling statistics reports on the website’s activity, and providing other services relating to website activity and other internet usage.

You may review Google’s data privacy practices for Google Analytics and data privacy practices for Google Tag Manager. You may also review Google’s Privacy Policy and Terms of Service for more information. To opt out of being tracked by Google Analytics, you may download and install the Google Analytics Opt-out Browser Add-on.

We may use Google reCAPTCHA on our Services, which checks whether our Services are being used by humans or bots. reCAPTCHA analyzes website visitor behavior based on various characteristicsncluding mouse movements, visit duration, IP address, and other information.

13. We may use advertising services provided by others.

Our Services may use service providers and partners to serve advertisements on our behalf on our Services and across the internet, and to track and report on the performance of those advertisements. These service providers may include Adobe, Google Ads (formerly Google Adwords), Microsoft Advertising (formerly Bing Ads), Facebook, LinkedIn, Pinterest, Snapchat, Tapad, Twitter, and others. These entities may use cookies or similar technologies to identify your device when you use our Services and interact with our electronic communications and ads, as well as when you visit other online services. Data collected and maintained by such third-party ad providers will be subject to the privacy policies and legal terms of those providers. You may learn more about online interest-based advertising by visiting this Federal Trade Commission website.

14. You may correct or update your personal information.

If you notify us of changes to your personal informatione will endeavor to correct or update your personal information. You may update or correct the personal information in your online profile which can be updated on the ’My Profile’ page of the My BMW Motorrad USA website. You may access your online My BMW profile using a unique email address and password (your BMW ID). With this password you can edit, delete, or add to information you have shared while visiting our Services.

15. You may opt out of receiving text messages.

BMW NA and its affiliates may send you text messages with your consent for each event-based interaction you have with BMW NA. Event-based interactions include BMW-sponsored events, test drive experiences, and vehicle service requests. Each event-based interaction with BMW NA provides an opportunity to give text message consent and requires a separate opt-out for each event. At any time, you may discontinue receiving text messages by replying with the message “STOP” in response to the BMW message you received or by following other instructions provided in the last BMW NA message received for that event. Please contact the appropriate dealer or center to opt out of text messages you may receive from a BMW dealer or center.

16. You may opt out of receiving personalized products or Services offers from us.

By creating your BMW ID, you will receive notifications within the Services pertaining to your vehicle and the services BMW NA provides to you. By creating a BMW ID, you agree to receive personalized communications with product or service offers from BMW using an app, website, email, or mail. If you wish to opt out of receiving these offer contact lists, you may call BMW NA Customer relations at (800) 831-1117 or visit the Profile page within the My BMW app or website, as applicable.

17. You may opt out of interest-based advertising.

We work with advertising companies to provide you with advertisements that may interest you. This is often referred to as interest-based advertising. We may use cookies or similar technologies for such advertising. We share this information with our service providers to manage our online advertising.

You may also opt out of receiving interest-based advertisements from third-party advertisers and ad networks who are members of the Network Advertising Initiative (NAI) by visiting the NAI website. You may opt out of receiving interest-based advertisements from other companies that perform interest-based advertising services who are members of the Digital Advertising Alliance (DAA) by visiting the DAA website.

Please note that when using the ad industry opt-out tools described above, you may need to execute opt-outs for each browser or device that you use. Opting out of interest-based advertising does not mean you will no longer see advertising online, but it does mean that the companies from which you opt out will no longer show ads that have been tailored to your interests. If you use industry opt-out tools, your opt out will only apply to companies who are participating in those industry organization tools.

For your mobile device, you can opt out of online interest-based advertising by using “Limit Ad Tracking,” “Opt out of Ads Personalization,” or a similar feature. If your vehicle is capable of displaying online interest-based advertising, you may be able to limit such advertising by reviewing the applicable settings.

You may continue to see generic or non-targeted advertisements after opting out.

18. We do not respond to Do Not Track signals.

Our Services do not currently respond to Do Not Track signals. To learn more about Do Not Track signals, you may visit the Future of Privacy Forum’s website for additional information.

19. We may provide links to other companies.

Our Services, other materials, and products may contain references or links to third-party websites, apps, and services, including references and links to dealers, centers, or third parties that accept and process your payments to us. We are not responsible for any third party’s data collection or privacy practices, and we have no control over what information third parties track or collect. Any access to and use of such linked websitespps, or services is not governed by this privacy policy but instead is governed by the privacy policies of those third-party websites, apps, or services. We encourage you to review the privacy policies posted on those third-party websites, apps, or services for further information.

We may use Stripe’s payment processing services. Stripe may act as a data processor to process your payments. Stripe may act as a data controller for some of your payment processing information. You may read Stripe’s privacy policy and terms for more information. By processing payments from BMW NA systems that use Stripeou consent to Stripe’s privacy policy and terms.

We may use PayPal’s payment processing services. PayPal may act as a data processor to process your payments. PayPal may act as a data controller for some of your payment processing information. You may read PayPal’s privacy policy and terms for more information. By processing payments from BMW NA systems that use PayPalou consent to PayPal’s privacy policy and terms.

We may offer Electrify America’s electric charging or location services. You may read Electrify America’s privacy policy and terms for more information. By charging your vehicle or obtaining charging data through Electrify America, you consent to Electrify America’s privacy policy and terms.

20. We encourage caution in posting information publicly.

Our Services may permit you to post or submit content publicly. If you choose to submit content containing personal information to any public area of our Services, your content will be accessible by anyone, including us. We encourage you to exercise caution when disclosing information publicly.

21. We take measures to protect your personal information.

We maintain some physicallectronic, and procedural safeguards designed to protect personal information. However, we cannot guarantee that your personal information will not be lost, accessed without authorization, disclosed, altered, or destroyed. Any information you provide to us is at your own risk.

22. We encourage you to be on the alert for phishing scams.

There is a type of solicitation commonly known as a 'phishing' scam, with the primary objective being to obtain one's personal information. This information can then be used to steal a person's identity. Examples of these types of scams include requests for you to send passwords, login names, social security numbers, or other personal information through email, mail, fax, mobile ads, or text message. BMW NA does not participate in this type of solicitation. If you receive suspicious messages, please delete them and, if possible, update your filter settings to block such messages. The Federal Trade Commission and the Antiphishing Workgroup are also good sources of information about these types of security threats and how they may be reported to the authorities. You may also review our fraud warnings for more information about fraudulent emails you may have received.

23. Our Services are not intended for minors.

Our Services are not intended for children under the age of 13. We do not knowingly collect or use any personal information from children under the age of 13. We do not knowingly allow children to order our products, communicate with us, or use any of our online services. We do not knowingly sell the personal information of consumers under 16 years of age.

If you become aware that a child has provided us with personal information, please contact us at bmwprivacy@bmwusa.com or write to BMW of North America, Privacy Office, PO Box 1227, Westwood NJ 07675-1227. We will take reasonable measures designed to delete the information as required by applicable law and to not use such information for any purpose, except where necessary to protect the safety of the child or others as required or permitted by law.

24. We provide you with additional disclosures relating to various state privacy laws.

You may have additional privacy rights under applicable state consumer privacy laws that we describe in further detail below.

The personal information that BMW NA collects about you may include the following categories of personal information (followed by examples for each category).

a.  Identifiers. Examples include real name, alias, postal address, online identifier, Internet Protocol address, email address, account name, social security number, driver's license number, passport number, Vehicle Identification Number, or other similar identifiers.

b.  Personal information described in California Civil Code Section 1798.80(e). Examples include signature, physical characteristics or description, telephone number, bank account number, credit card number, or debit card number.

c.  Characteristics of protected classifications under California or federal law. Examples include gender, age, or marital status.

d.  Commercial information. Examples include records of products or services purchased, leased, rented, obtained, or considered, or other purchasing or consuming histories or tendencies.

e.  Biometric information. BMW NA does not collect biometric information about you.

f. Internet or other electronic network activity information., Examples include internet protocol address, browsing history, search history, and information regarding a consumer's interaction with an internet websitepplication, or advertisement, operating system, session ID, information about your device, browser type and language, referring and exit pages, click or touch stream data, movement, scroll, or keystroke activity.

g.  Geolocation data. Examples include information used to identify your physical location, including geolocation data collected in connection with your use of our websites, apps, or vehicles.

h.  Audiolectronic, or visual information. Examples include recording of your calls to our call centers.

i. Professional or employment-related information. Examples include information collected from job applications and resumes.

j. Education information. Examples include information collected from job applications, transcripts, or resumes.

k.  Inferences. Examples include information BMW NA collects to create a profile about a consumer reflecting the consumer's preferences, characteristics, marketingnalytics, and preference data, brand loyalty, behavior, or attitudes.

l. Sensitive personal information. Examples include social security number, driver’s license number, passport number, account log-in, financial account, debit cardr credit card number, or precise geolocation.

The types of personal information we have collected or disclosed in the last twelve (12) months or beyond depend on your relationship with BMW NA. If the nature of your relationship with BMW NA changes, an additional data privacy notice may apply.


 

 

Types of personal information

Do we collect it?

Categories of Sources

Purposes of Collection

Do we disclose it to third parties?

Purposes of Disclosure

Categories of Third Parties PI Disclosed To

Do we sell it to third parties?

Purposes of Selling

Sharing for Behavioral Advertising

Purposes of Sharing for Behavioral Advertising

Retention

Identifiers

Yes

You, data brokers, marketing service providers, publicly available databases, government databases, data aggregators, social media networks, affiliates, subsidiaries, dealers, centers, financial service providers, and other service providers

Respond to questions, requests, social media messages, and emails; track applications, provide customer service, market and provide products and services to you, set up, manage accounts, conduct website or other surveys, verify your identity, and update our records

Yes

Customer service, account set up, management, or servicing, or data verification services

Service providers that provide us with customer service, account set up, management, or servicing, or data verification services

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Personal information described in California Civil Code Section 1798.80(e)

Yes

You, data brokers, marketing service providers, publicly available databases, government databases, data aggregators, social media networks, affiliates, subsidiaries, dealers, centers, financial service providers, and other service providers

Respond to questions, requests, social media messages, and emails; track applications, provide customer service, market and provide products and services to you, set up, manage accounts, conduct website or other surveys, verify your identity, and update our records

Yes

Customer service, account management, or servicing, or data verification services

Service providers that provide us with customer service, account management, or servicing, or data verification services

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Characteristics of protected classifications under California or federal law

Yes

Directly from you or from service providers, such as data brokers

Provide products and services to you

Yes

Provide products and services to you

Entities that provide us with services to provide products and services to you

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Commercial information

Yes

You directly, from your use of our websites or mobile apps, or from data brokers

Service your account, including the marketing of products or services to you; provide your transactions, personalize the service, send you messages about products and services that may be of interest to you, process refund requests, and for fraud and security purposes

 

Yes

Market products or provide services to you

Entities that help us market products or provide services to you

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Biometric information

No

Not available

Not available

No

Not available

Not available

No

We don’t sell

No

Not available

Not available

Internet or other electronic network activity information

Yes

You directly or from your use of our websites, apps, or your vehicle

Personalize your experience, recognize your browser or device for repeat visits, remember your preferences and interactions, conduct website and mobile app analysis, conduct research and analytics, develop our websites, respond to questions, requests, and emails, provide products and services to you, manage and service accounts, recognize visitors’ computers and devices, for information security and confidentiality purposes, collect information about our website usage and email responses, log activity on our website, market products or services to you, manage our online advertising and the effectiveness of our advertisements, to determine what pages or features are popular, and to determine where our products and services could be improved, conduct website and other surveys

Yes

Website or app analysis, conducting research and analytics, developing and logging activity on our websites and mobile apps, collecting information about our website and mobile app usage and email responses, managing our online advertising and the effectiveness of our advertisements, responding to questions, requests, and emails, marketing and providing products and services to you, and managing and servicing accounts

Entities that provide or assist us with website or app analysis, conducting research and analytics, developing and logging activity on our websites and mobile apps, collecting information about our website and mobile app usage and email responses, managing our online advertising and the effectiveness of our advertisements, responding to questions, requests, and emails, marketing and providing products and services to you, and managing and servicing accounts

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Geolocation data

Yes

Your use of our websites, mobile apps, or in connection with the use of your vehicle

Conduct website and mobile app analysis, for development, to provide you with geographically relevant information, and other legal purposes, and for the provision of services

Yes

Conducting website and mobile app analysis, developing our websites and mobile apps, and marketing products or providing services to you

Entities that assist us with conducting website and mobile app analysis, developing our websites and mobile apps, and marketing products or providing services to you

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Audio, electronic, visual, thermal, olfactory, or similar information

Yes

When you call our customer service call center, your vehicle is inspected, or you use available features in your vehicle

Improve our services, quality assurance, analytics, or for security purposes

Yes

Improve customer service, end of lease inspections, and loss prevention; authentication or fraud investigations

Entities that provide us with services to improve customer service; entities that provide us with end of lease inspection services; entities that provide us with loss prevention services; entities that provide authentication or fraud services

No

We don’t sell

No

Not applicable

Generally, 1 year but also subject to data retention schedules

Professional or employment-related information

Yes

Your job applications or resumes or recruiters

Process job applications and offers or denials of employment

Yes

Processing job applications and offers or denials of employment

Entities that help us with processing job applications and offers or denials of employment

No

We don’t sell

No

Not applicable

Generally, 1 year but also subject to data retention schedules

Education information

Yes

Job applications, transcripts or resumes or recruiters

Processing your job application and to verify eligibility for an education discount

Yes

Human resources, job application, or recruitment purposes

Entities that provide us with human resources, job application, or recruitment services

No

We don’t sell

No

Not applicable

Generally, 1 year but also subject to data retention schedules

Inferences

Yes

Your use of our websites or apps, your vehicle, or from information provided by our service providers

Market products or services to you, to improve business decisions, analyze customer trends and satisfaction, and offer personalized services or communications

 

Yes

Market products or services to you

Entities that provide us with services to market products or services to you

No

We don’t sell

Yes

Promotion of our goods and services and related commercial purposes

Generally, 1 year but also subject to data retention schedules

Sensitive personal information

Yes

You, your use of our websites or mobile apps, affiliates, subsidiaries, dealers, centers, or financial or other service providers, or in connection with the use of your vehicle

Maintain or service accounts, provide customer service, process and provide products and services, process payments, verify customer information, verify the quality or safety of a service or product, provide information security, improve, upgrade, develop, or enhance our Services, conduct website and mobile app analysis, provide analytic services, provide storage, collect geolocation information for provision of Services, or other similar services

Yes

Customer service, account management, financial services, quality and safety services, analytics, storage, information verification services, vehicle collection or repossession services, assistance in developing, improving, and providing products and services, conducting website and mobile app analysis, developing our websites and mobile apps, and marketing our products or services to you

Entities that provide or assist us with customer service, account management, financial services, quality and safety services, analytics, storage, information verification services, vehicle collection or repossession services, assistance in developing, improving, and providing products and services, conducting website and mobile app analysis, developing our websites and mobile apps, and marketing our products or services to you

No

We don’t sell

No

Not applicable

Generally, 1 year but also subject to data retention schedules

For all categories of personal information, we may collect data directly from you, from third partiesncluding your authorized BMW dealer or center and those to whom you have previously provided data, and from our service providers.

We collect and use personal information for business or commercial purposes. For all categories of personal information, these purposes may include auditing; detecting security incidents; protecting against and prosecuting illegal activity (such as fraud); ensuring the physical safety of individuals; debugging; short-term transient use of personal information; performing services on behalf of BMW NA, such as maintaining or servicing accounts, providing customer service, processing or fulfilling orders and transactions, verifying customer information, processing payments, providing analytic services, providing storage, or providing similar services on behalf of BMW NA; providing advertising and marketing services; undertaking internal technological research; verifying or maintaining the quality or safety of a service or device; improving a service or device; monitoring and improving our website functionality; and personalizing your website experience.

We also collect and use personal information to comply with our legal obligations, resolve disputes, enforce our agreements, and for everyday Service provision purposes.

We may combine the data that we collect in order to provide these functions.

We will not collect additional categories of personal information nor use the personal information collected for additional purposes without providing you notice.

For all categories of personal information, we may disclose your personal information to third parties in the event BMW NA is involved in a merger, acquisition, or sale or transfer of all or part of its assets. We may also disclose all categories of personal information to our affiliates and subsidiaries. BMW NA may be required to disclose your personal information to law enforcement, regulatory agencies, or litigants based on enforceable requests for this information. We may also need to disclose information based on fraud protection, or other legal purposes.

Please note that for all categories of personal information, we may also disclose your personal information to our service providers, partners, or collaborators we work with in the course of our business, authorized dealers or centers, any entity you instruct us to disclose your personal information to and others.

BMW NA will obtain your consent before collecting sensitive personal information where required to do so under applicable laws.

BMW NA retains personal information in accordance with our legal obligations, to defend against claims, or in compliance with our data retention policies and procedures. Also, we may retain your personal information in our backup or archived systems until the retention period of those systems expires.

25. You may have additional rights under various state privacy laws.

You may have the following rights with respect to your personal information depending on the applicable state consumer privacy laws.

a.   Notice. The right to a notice about our collection, use, disclosure, sale, or sharing of information about you. This statement is intended to satisfy this right.

b.   Access. The right to request access to the personal information, including the specific pieces of information, that BMW NA has about you and information about any automated-decision making about you made by BMW NA.

c.   Correction. The right to request that BMW NA correct your personal information.

d.   Deletion. The right to request that we delete the personal information we have about you. We may not be required to delete information under particular circumstances.

e.   Opt Out of Sale or Sharing of Personal Information. The right to opt out of the sale or sharing of your personal information. There is no need for you to opt out of the sale of your personal information to third parties as BMW NA does not sell your personal information. However, BMW NA may use personal information for behavioral advertising, which may be considered to be a sale of personal information under some state privacy laws. You may have the right to opt out of cross-context behavioral advertisements.

f.   Limit Use of Sensitive Personal Information. The right to ask us to limit our use of your sensitive personal information. BMW NA does not use your sensitive personal information in a manner that requires you to limit its use. Therefore, there is no need for you to limit the use of your sensitive personal information.

g.   Portability. The right to obtain a copy of your personal information in an easily understandable and portable format that you may also request be transmitted to another entity.

h.   Opt out of Automated Decision-Making and Profiling. The right to opt out with respect to BMW NA’s use of automated decision-making technology or profiling. BMW NA does not use your personal information using automated decision-making or profiling as described under applicable laws. Thereforehere is no need for you to opt out such profiling or automated decision-making.

i.    Appeal. The right to appeal BMW NA’s denial of your request to exercise a right described under this privacy policy.

j.    Non-Discrimination. The right to be free from discrimination for opting out or exercising your other rights.

You can exercise your rights by clicking the links below. You can also call (855) 811-2305 for assistance. In most cases, BMW must be able to verify your account or your identity in order for you to be able to exercise your rights.

·    Access My Personal Information

·    Correct My Personal Information

·    Delete My Personal Information

·    Do Not Sell or Share My Personal Information

·    View a Previous Request

·  Appeal a Denial of My Request

You may have the right to designate an authorized agent to make a request on your behalf in compliance with applicable state consumer privacy laws. Your designated authorized agent may use the links above to make a request on your behalf. The FAQs below provide you with additional information about this process.  

26. We are based in the United States.

If you are visiting our Services from outside the United States, please be aware that we are based in the United States and the information we collect will be transferred to, processed, and stored on our servers in the United States in accordance with this privacy policy and applicable laws.

27. We may change this privacy policy.

We may change this privacy policy from time to time in accordance with applicable law. If we make material changes to this privacy policy, we will post the changes on our Services (or our Services that replace them) and provide you notice prior to the changes becoming effective either through the relevant Services or by some other means, such as email or through your account. Your continued use of our Services after such notice constitutes your consent to the changes. We encourage you to periodically review our privacy policy for the latest information on our privacy practices.

28. You may send us your feedback.

We provide means (email or otherwise) throughout the Services to allow you to contact us directly with any questions or comments you may have. Information in the message is used to respond to your comments or questions. We may also use your comments to improve the Services, or review and discard the information. Your personal information is processed in accordance with this privacy policy.

29. We provide communication options.

We provide an 'unsubscribe' link in our emails to you. If you do not wish to receive correspondence from BMW NA, you may manage your preferences on the ‘My Profile’ page of the My BMW Motorrad website, or by calling BMW Customer Relations at (800) 831-1117. To prevent notifications in BMW apps, you may update the settings on your mobile device. If you would like to be removed from emails or mailings from an authorized BMW Motorrad dealer or center, you must contact them directly. BMW NA is not responsible for and cannot remove your information from a BMW Motorrad dealer's or center’s communication list. Please note that even if you opt out of receiving promotional emails from us, we may continue to send you transactional emails.

30. You may contact us.

If you have any questions about this privacy policy or our other information practices, please contact us at bmwprivacy@bmwusa.com or write: BMW of North America, Privacy Office, PO Box 1227, Westwood NJ 07675-1227. You may also call BMW Customer Relations at (800) 831-1117. Prompt 'Customer Relations.' Customer telephone calls may be recorded to protect you and our staff. In all written communications, please indicate that you are writing concerning BMWMotorcycles.com or My BMW Motorrad.

31. FAQs

Frequently Asked Questions for BMW NA and California Consumer Privacy Act, California Privacy Rights Actirginia Consumer Data Protection Act, Colorado Privacy Act, Utah Consumer Privacy Act, and Connecticut Data Privacy Act:

1. What is BMW NA’s Privacy Policy?

You may read more about BMW NA’s Privacy Policy above.

2. What are my rights under BMW NA’s Privacy Policy?

Depending on your relationship with us and applicable laws, you may have various rights.

The use of our websites is governed by our privacy policy and website legal terms. Your rights under this privacy policy include the right to not provide us with personal information, the ability to opt out of targeted advertisements, and the right to opt out of cookies.

3. What is the California Consumer Privacy Act?

California Consumer Privacy Act (CCPA) is an act passed by the California legislature in 2018. It took effect on January 1, 2020. The rights under CCPA apply to all California residents.

4. What are my rights under the California Consumer Privacy Act?

You may have the rights of access, deletion, notice, opt out, and non-discrimination. You may find additional information about these rights in our Privacy Policy referenced above.

Your right of access includes the right to request we disclose the categories and specific pieces of your personal information collected, the sources from which your personal information is collected, the business or commercial purpose we collect it, and with whom we share your personal information. Your right of access also includes the right to request we disclose for the preceding 12 months (or longer where you have requested it) the categories of your personal information we have collected or sold, the categories of third parties to whom we have sold it, and the categories of personal information that we have disclosed about you for a business purpose.

5. What is the California Privacy Rights Act?

On November 3, 2020, California voters approved the California Privacy Rights Act (CPRA), a consumer privacy ballot initiative that amends and expands the CCPA. The CPRA's substantive provisions become effective on January 1, 2023. Until then, the CCPA will remain in force. The CPRA provides consumers with expanded privacy rights, including the right to request that the business correct inaccuracies in their personal information and, in certain circumstances, to direct a business to limit its use of sensitive personal information. Additionally, a consumer’s opt out rights may extend to third-party behavioral advertising. 

Under CPRA, a consumer’s right of access may, in some cases, extend beyond the 12 month period specified in CCPA. You may ask that we disclose information beyond the 12 month period. However, in some cases, we may not be able to accommodate the longer look back period, such as when the time extension proves impossible or would require disproportionate effort.

6. What is the Virginia Consumer Data Protection Act?

The Virginia Consumer Data Protection Act (CDPA) was signed into law on March 2, 2021 and is set to take effect on January 1, 2023. The CDPA provides consumers with the right to access, correctnd delete their personal information, as well as the right of data portability. Consumers also have the right to opt out of cross-context behavioral advertising, the sale of personal data, and certain profiling. Additionally, the CDPA requires that businesses obtain opt-in consumer consent to process sensitive data.

7. What is the Colorado Privacy Act?

The Colorado Privacy Act (CPA) was signed into law on July 8, 2021 and is scheduled to take effect on July 1, 2023. The CPA provides consumers with the right to access, correct, and delete their personal data, obtain a portable copy of their personal data, and opt out of cross-context behavioral advertising, the sale of personal data, or certain profiling. The CPA requires that businesses obtain opt-in consumer consent to process sensitive data.

8. What is the Utah Consumer Privacy Act?

Governor Spencer Cox signed the Utah Consumer Privacy Act (UCPA) into law on March 24, 2022. The law goes into effect on December 31, 2023. Under the UCPA, consumers have the right to access their personal data, delete the personal data they provided to the controller, data portability, opt out of the sale of their personal data, and opt out of the processing of their personal data for purposes of targeted advertising. The UCPA does not give consumers the right to correct their personal data, nor do they have the right to opt out of profiling.

9. What is the Connecticut Data Privacy Act?

Governor Ned Lamont signed “An Act Concerning Personal Data Privacy and Online Monitoring,” also known as the Connecticut Data Privacy Act (CTDPA), into law on May 10, 2022. The law goes into effect on July 1, 2023. Under the CTDPA, consumers have the right to access, deletend correct their personal data, to obtain a copy of their personal data in a portable format, and to opt out of the sale of their personal data and the processing of their personal data for purposes of targeted advertising or certain profiling. The CTDPA requires that businesses obtain opt-in consumer consent to process sensitive data.

10.  How do you use my sensitive personal information?

BMW NA may use your sensitive personal information to maintain or service accounts, provide customer service, process and provide products and services, verify customer information, verify the quality or safety of a service or product, provide information security, improve, upgrade, develop, or enhance our Services, conduct website and mobile app analysis, provide analytic services, provide storage, provide Services, process payments, develop our websites and mobile apps, market products and services, or other similar services.

11.  Where can I exercise my rights under the California Consumer Privacy Act, California Privacy Rights Act, Virginia Consumer Data Protection Actolorado Privacy Act, Utah Consumer Privacy Act or the Connecticut Data Privacy Act?

You may exercise your rights under applicable state laws by visiting Section 25 of this privacy policy or by calling (855) 811-2305 Monday through Thursdayam-9pm ET and Friday, 9am-6pm ET.

12.  Does BMW NA sell my personal information?

BMW NA does not sell your personal information. HoweverMW NA may use personal information for behavioral advertising, which may be considered to be sale of personal information under some state privacy laws. You may have the right to opt out of cross-context behavioral advertisements.

13.  How about my BMW Financial Services account?

You may wish to review BMW Financial Services’ privacy policy. BMW Financial Services is a financial institution with separate privacy policies than BMW NA. You may exercise your rights under applicable laws by visiting their privacy portal.

14.  How about BMW Motorrad Centers?

BMW NA’s privacy policy does not apply to BMW Motorrad Centers. BMW Centers are separate and independent businesses and have their own privacy policies. We recommend that you review the privacy policies that apply to the BMW Motorrad Center that you work with.

15.  How do I opt out of BMW NA selling or sharing my personal information?

You need not opt out of the selling of your personal information because BMW NA does not sell your personal information. However, BMW NA may use personal information for behavioral advertising, which may be considered to be a sale of personal information under some state privacy laws. You may have the right to opt out of cross-context behavioral advertisements. You may adjust your settings relating to online behavioral advertising on our website by clicking the Do Not Sell My Personal Information link, adjusting your cookies, or using the NAI or DAA websites.

16.  What about my rights regarding cross-context behavioral advertising or targeted advertising?

If you are a consumer, you may have the right to opt out of the sharing of your information for purposes of cross-context behavioral advertising. Some state privacy laws, like Virginia, Colorado, and Utah may call this “targeted advertising.” You may opt out of this type of sharing by visiting our website and clicking AdChoices in the footer.

Please note that the term “targeted advertising” can mean different things depending on how it is defined in a privacy statute or other law. At times, it is essentially interchangeable with the term “cross-context behavioral advertising.” For example, under the CPRA, “cross-context behavioral advertising” is defined as the “targeting of advertising to a consumer based on the consumer’s personal information obtained from the consumer’s activity across businesses, distinctly-branded websites, applications, or servicesther than the business, distinctly-branded website, application, or service with which the consumer intentionally interacts.” The broad definition covers a business’s collection of a consumer’s personal information across third-party digital properties for the purposes of targeted advertising.

Both the CDPA and CPA use the word “targeted advertising” to mean something similar. Under CDPA § 59.1-571, "targeted advertising" means displaying advertisements to a consumer where the advertisement is selected based on personal data obtained from that consumer's activities over time and across nonaffiliated websites or online applications to predict such consumer's preferences or interests. Similarly, CPA § 6-1-1303(25) defines "targeted advertising" as “displaying to a consumer an advertisement that is selected based on personal data obtained or inferred over time from the consumer's activities across nonaffiliated websites, applications, or online services to predict consumer preferences or interests.”

17.  What types of cookies and tracking technologies may our Services use?

Our Services may use the following cookies and tracking technologiesmong others:

i. 'Session' cookies: Session cookies are temporary bits of information that are erased once you exit your web browser window or log out of a mobile app. Session cookies are used, for example, to improve navigation on our Serviceslock visitors from providing information where inappropriate (e.g., the website may remember previous entries of age that are outside the permitted parameters and block subsequent changes) and to collect aggregated statistical information.

ii. 'Persistent' cookies: Persistent cookies are more permanent bits of information that are placed on the hard drive of your computer or mobile device and stay there unless you delete the cookie. Persistent cookies store information on your computer or mobile device for a number of purposes, such as retrieving certain information you have previously provided (e.g., BMW ID)elping to determine what areas of the website visitors find most valuable, and customizing the website based on your preferences on an ongoing basis.

iii. 'Web beacons' (also known as internet tags, single-pixel GIFslear GIFs, and invisible GIFs): A web beacon is a tiny graphic on a web page or in an email message that is used to track pages viewed or messages opened. Web beacons tell the Services server information such as the IP address and browser type related to the visitor's computer. Web beacons may be placed on online advertisements that bring people to our Services and on different pages of our Services. Web beacons provide us with information on how many times a page is opened and which information is consulted.

18.  Why might we allow third-party partners to place cookies on your computer or mobile device?

Like most advertiserse may place advertisements where we think they will be most relevant to customers. One way we might do so is by allowing network advertising companies with whom we work to place their own cookies or similar markers when an individual visits our Services. This enables the network advertising companies to recognize individuals who have previously visited our Services. When the individual visits a third-party website on which that network advertising company has purchased ad space, the advertising company can then recognize the individual's interest in BMW products and services and deliver one of our advertisements.

19.  What choices do I have regarding cookies, including third-party cookies and the delivery of targeted advertisements on third-party sites?

Most internet browsers allow you to change your browser settings to notify you when you receive a cookie, which lets you choose whether or not to accept it, or to automatically refuse all cookies. Please be aware that some functionality of our Services that relies on the use of cookies may not be available should you choose to refuse all cookies. In addition, because BMW NA does not control these management tools, we cannot guarantee their effectiveness. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, please review our FAQs.

For more information, you may review the discussion of cookies in our Privacy Policy.

20.  Who can I contact regarding other questions for California Consumer Privacy Act, California Privacy Rights Act, Virginia Consumer Data Protection Act, Colorado Privacy Act, Utah Consumer Privacy Act, Connecticut Data Privacy Act and BMW NA?

You may read more about your rights under CCPA, CPRA, CDPA, CPA, UCPA or CTDPA by reading our States Privacy Rights Statement above. You may read more about the CCPA and CPRA by visiting the California Attorney General’s website. You may read more about the CPRA, CDPA, CPA, UCPA or CTDPA. You may also contact BMW NA with any remaining privacy questions by calling (855) 811-2305.

21.  What must I do to access my personal information under CCPA, CPRA DPA, CPA, UCPA, or CTDPA?

You must either use the functions within Section 25 of this privacy policy or call us at (855) 811-2305 Monday through Thursday, 9am-9pm ET or Friday, 9am-6pm ET. You must provide us with your personal information so we may verify your request and locate your information in our systems. If we are unable to verify your identity as described in this privacy statement, we will be unable to process your request. If we are able to verify your identity and you are a current BMW NA customer, we may deliver your personal information access report through our data subject rights portal or certified mail.

22.  When I access my information, why is my personal information displayed in the manner in which it is displayed?

In allowing you to access your information, we consolidate information from various applications to provide data about the products and services you have with us in a single report. Some of this information may include variations of your personal information and may be limited to data collected or generated in the 12 months prior to the date of your request (or longer if you have requested it).

23.  How do I correct my information?

You may correct your information as set forth in Section 14 of this privacy policy, by visiting Section 25 of this privacy policy, or by calling us at (855) 811-2305 Monday through Thursday, 9am-9pm ET or Friday, 9am-6pm ET.

24.   What if I am a job applicant?

BMW NA Privacy Policy is intended to provide you with your right to know, under state privacy laws such as the CCPA, CPRA, CDPA, CPA, UCPA, and CTDPA, the categories of personal information, including sensitive personal information, we collect, the purposes for which such personal information is to be used, whether such information is sold or shared, and the time we intend to retain each such category of personal information. We may also provide you with additional privacy notices relating to the processing of your personal information. However, please note that job applicants do not currently have rights to access or delete personal information under the CDPA, CPA, UCPA or CTDPA. Furthermore, please note that BMW NA does not sell your personal information in the context of your job application. Therefore, you don’t have to opt out of the sale of your personal information.

25.  Are there any authorized agent designation requirements?

Some states, like Virginia and Utah, do not provide for an authorized agent to exercise a right on behalf of a consumer. Other states, like California, Colorado, and Connecticut, do permit the use of authorized agents.

We may require that your designated authorized agent provide us with a written declaration signed by you that the authorized agent is permitted to make a request on your behalf. When an authorized agent makes a request on your behalf, we will deliver to you, not the authorized agent, the responsive documents.

As you must with a direct consumer request, you or your designated authorized agent must provide us with adequate information to verify your identity. We may verify your identity by matching the information you provide with our records. If we cannot verify your identity, we will let you know and may deny the request. We may also require that your authorized agent comply with the requirements of applicable law, such as being registered with the appropriate Secretary of State.

26.  Does BMW NA charge a fee to respond to requests?

Generally, no. However, under CCPA, CPRA, CDPA, UCPA, and CTDPA, we may charge a reasonable fee for or refuse to act on requests that are manifestly unfounded or excessive, including repetitive requests. If we refuse to act on a request, we will notify you of the reason.

Under the CPA, your first request is free. However, we may charge a fee if you make more than one request in a 12-month period.

27.  How long will it take to process my request?

We attempt to verify and complete requests within 45 days. In some cases, it may be necessary to extend the time frame. You will be notified if a request cannot be fulfilled and an extension is needed.

28.  Why didn’t I get any information?

It may be that we were unable to find you in our systems with the information you provided to us. If you make a subsequent request and provide additional information about yourself, we may be able to find out more information about you in our systems. It is also possible that any information you may have provided us has since been deleted as a part of our record retention policies. It is also possible that the information you requested is covered under one of the permitted exemptions under the CCPA, CPRA, CDPA, CPACPA, CTDPA or other applicable privacy law.

29.  Does my personal information access report include everything you have about me?

Not necessarily. Some types of information are exempt from the CCPAPRA, CDPA, CPA, UCPA or CTDPA. Generally, CCPA, CPRA, CDPA, CPA, UCPA, and CTDPA do not apply to credit reports under the Fair Credit Reporting Act (FCRA), financial records under GLBA, or medical records under the Health Insurance Portability and Accountability Act of 1996 and the Health Information Technology for Economic and Clinical Health Act.

In addition, please note that the applicable regulations do not require us to search for personal information if we:

• Do not maintain the personal information in a searchable or reasonably accessible format;

• Maintain the personal information solely for legal or compliance purposes;

• Do not sell the personal information and do not use it for any commercial purpose; and

• Describe to the consumer the categories of records that may contain personal information that we did not search because we met the three conditions stated above

The types of records we did not search include records relating to litigation, unstructured paper records, and other categories.

As a result, these types of personal information or records are not included in your personal information access report.

30.  What happens when I request that you delete my data?

We delete your data subject to our legal obligations and related data retention policies and schedules.

Please note that, under the CPRA, we are not required to comply with your request to delete your personal information if it is reasonably necessary for BMW NA to maintain your personal information in order to complete the transaction, fulfill the terms of a written warranty or product recall, provide a good or service you requested, perform the contract between us, help ensure security and integrity, debug to identify and repair errors, ensure free speech or other rights provided by law, comply with the California Electronic Communications Privacy Act, engage in certain scientific, historical, or statistical research, enable internal uses that are expected and context compatible, and comply with a legal obligation.

As permitted under the applicable regulations, we may retain your personal information in our backup or archival systems until the retention period of those systems expires.

31.  Can I delete my data in a BMW app?

Yes, you can delete your data in a BMW app. There are several ways to accomplish this:

·  For some data types, you can delete the individual data elements, such as a single destination.

·  You can delete all app data by clicking the “clear all application data” in the privacy menu in the app. This deletes all the data generated and collected by the app except your BMW ID, vehicle data, and other non-application data.

·  To unlink your vehicle from the Servicesog into the My BMW Motorrad website.

 

32.  Are there exceptions to compliance with these laws and my requests?

Yes, CPRA, CDPA, CPA, UCPA or CTDPA may create exceptions to compliance for the following reasons, among others: Complying with federaltate, or local laws or regulations or with a court order or subpoena; complying with a civil, criminal, or regulatory inquiry, investigationubpoena, or summons; cooperating with law enforcement agencies concerning matters that may violate the law; cooperating with a government agency access request when a person is at risk of injury or death or otherwise protecting the vital interests or physical safety of an individual; exercising or defending legal claims; providing a product or service requested by the consumer; performing a contract to which the consumer is a party; fulfilling the terms of a written warranty; performing internal operations that are reasonably aligned with the expectations of the consumer; preventing and protecting against security incidents, identity theft, and other illegal activity; preserving the integrity or security of systems; ensuring the exercise of free speech; and when compliance by the business would violate an evidentiary privilege.

33.  What about deidentified information?

BMW NA may deidentify or aggregate your personal information in compliance with the CCPA and CPRA. In those situations, we are not obligated to provide access to or delete this information in response to a request.

34.  For what purposes do you use the information provided in my requests?

We use the information you provide us to verify your identity and process your request.

35.  How long do you retain the information about my request?

We retain the information relating to your request in accordance with our legal obligations and records retention policies and schedules. We will maintain, for a minimum of 24 months, a record of your request as required under CCPA. Communications provided to you through our data subject rights portal are available for 90 days.

36.  How long do you retain my information?

We retain your information in accordance with our legal obligations and records retention policies and schedules. We may delete your data once the legal obligation expires or after the period of time specified in our retention policies.

37.  Why was my request denied?

The security of your information is of utmost importance to us. We need to ensure that you are who you claim to be. We may deny your request if we are unable to verify your identity based on the information you provide with your request. Among other reasons, your request may also be denied if you have made more than two requests in the past 12-month period. We may provide you with the reason for the denial.

38.  How many requests may I make in one year?

You may make two requests to access your personal information in a 12-month period under the CCPA, CPRA, and CDPA. You may make more than two requests; however, we are not required under the CCPA, CPRA, or CPDA to respond to them. Under the CPA, UCPA, and CTDPA, you may make one request in a 12-month period free of charge. While you may make subsequent requests during that period, we may charge a fee for such requests.


 

Welcome to BMW Motorrad Connected Ride App

BMW Canada Inc. and our related divisions, including BMW Financial Services Canada (“BMW Group Canada”, "we” or “us”) under the designation BMW Motorrad Connected Ride App” understands that use of your information requires your trust. BMW is committed to the highest standards of data privacy and will only use your information for clearly described purposes and in accordance with your data protection rights. Some of the Services are provided with the assistance of service providers acting on our behalf, as further detailed in this Privacy Policy (in particular, please refer to the “Sharing of Personal Information” section.

 

Last updated: 10.15.2023

 

Who is responsible for data processing?

 

This Privacy Policy governs the provision of certain vehicle-based information and assistance services and support for the BMW Motorrad Connected Ride App service (together the “Services”). The Services is a family of applications and services including BMW Motorrad Connected Ride App for iOSMW Motorrad Connected Ride App for Android (the “Apps”). BMW Connected Ride Applications running in the vehicle and is made available to you in Canada.  All data processing related to the Services provided through or within the App may be conducted in the United States, and may be processed in the European Union.

 

The Privacy Policy explains how we collect, use, disclose, transfer and store BMW Motorrad Connected subscriber (“you”, “your”) personal information pursuant to the BMW Motorrad Connected Subscriber Agreement and the BMW Connected Motorrad Terms and Conditions of Use (together, the “Motorrad Connected Agreement”). It also details the rights you have in relation to your personal information. Further information about how we use cookie and interest-based advertising is available in our Cookies Notice available at BMW Motorrad Canada Cookies Policy

 

What information may be collected about you and how is it used?

The Services are designed to be a highly personalized mobility companion. In order to provide the personalized features of the Services, BMW collects, stores and processes your personal data in compliance with applicable law.

 

In this Privacy Policy, personal information generally means any information that can be used, either alone or in combination with other information, to identify an individual. It may also include other types of more technical information, but only when this information can identify you as an individual. Information that is anonymized and cannot be associated with an identifiable individual is not considered to be personal information, if it ist all times, reasonably foreseeable in the circumstances that this information irreversibly no longer allows the individual to be identified directly or indirectly.

Given the nature of the Services, there may be times when someone other than you is using the Services we provide to you. You are solely responsible for informing such person about this Privacy Policy and the privacy choices you have made. We do not knowingly collect personal information from anyone under 16 years of age. If we become aware that we have unknowingly collected personal information from a child under the age of 16, we will delete this information from our records.

 

We describe below the categories of personal information we may collect in relation to the BMW Services and the purposes for which we may use it.

 

A. Contracting to use the Services, concluding the agreement and creating your BMW Group Login.

In order to use the Services, we collect the following categories of personal information to conclude the BMW Motorrad Connected Agreement:

Account login (BMW Group Login) Contact information (last name, first name, email address, etc.)

 

Login with BMW Group ID To use the Servicesou must register in the App. When you register, you will receive an online customer account that gives you access to other BMW Group portals and offers. In order to provide you the BMW Group login Services, your data is passed on to the BMW Group company that acts as a provider of the applications in use by you. Storage of the data from your customer account is handled by BMW Group and is separate from any other (even potentially identical) data about your person that may be available to the BMW Group.

 

Delete

Your account login used to access your BMW Motorrad Connected Ride App Services is also your login for your other BMW services. You can delete your account at any time. For details, please go to the section of “Your data privacy rights”.

 

B. Personal information we collect when the Services are activated.

The Services may collect and process the following data which is potentially personal informationwhen associated with you in compliance with applicable laws.

 

Service data

User profile (name, surname etc.)

Position and motion data (time, position, speed, etc.)

Destination (position, street address, name of destination, etc.)

Travel time estimates (estimated travel time)

Contacts (name, address, telephone number)

Vehicle profile (vehicle identification number, VIN, etc.)

BMW branch or customer service (preferences, etc.)

Environmental information (temperature, rain, etc.)

Anonymized application statistics

 

Vehicle data

vehicle ID (links your specific vehicle to the service)

vehicle maintenance data (next service, oil level, break wear, etc.)

vehicle status data (mileage, battery voltage, fuel levels, etc.)

vehicle data (remote event, date/time, etc.)

 

 

Service descriptions

Use of your location

You can authorise the app to record your location as long as you are actively using the app, or the app is open in the background. In order to use the app, you do not have to agree to the recording of your location, but certain functions of the app depend on whether the location information of your mobile device and vehicle are permitted to be used. If you authorise the app to use your location, navigation via the app is possible (destination guidanceOI search, position display on the navigation maps). If you allow your location to be used and recorded, your journeys are additionally recorded in the "Activities". The "Activities" function must be activated manually once in order for the routes to be recorded. All route data can be viewed and deleted by the app user at any time. Deleting the vehicle profile also results in the removal of all associated "Activities". In this context, please note that the continued activation of GPS running in the background can significantly reduce the battery life of your mobile device.

Provided that you have consented to the recording of your location information, the app will store your location data indefinitely. If you choose not to permit location sharing to the app or the "Activities" function is not turned on, the app will no longer capture it.

Digital map

The digital map in the app is provided by TOMTOM International BV. For the purpose of displaying the digital map, the location is transmitted from your mobile device directly to TOMTOM International BV. All data processing by TOMTOM International BV is based solely on this location information, without any other data about you or your mobile device, and in accordance with TOMTOM International BV's Privacy Policy. You can find these at https://www.tomtom.com/privacy/.

Localization via last mile function

The app shows you the location of your parked vehicle on the map. The app requires location sharing of the mobile device for this function.

Vehicle status

The vehicle status displayed in the app (e.g., maintenance intervalheck control messages) is saved/displayed in the app and deleted as soon as the vehicle profile is removed.

Locating a petrol station

The app uses the "Petrol station search" function on the start page to find the nearest petrol station for you. In order to do so, the app sends your current location to the servers of TOMTOM International BV. The server then determines the nearest petrol station and transmits this information to the app.

 

 

Search function

The app includes a search function that allows you to search for an address or a point of interest in the app as well as in the vehicle. For this purpose, the app transmits the search term and your current location to an external service provider in order to display a list of places or addresses corresponding to the search criteria. The determined destination is transferred to the navigation and can be called up again via "Last destinations" or via "Favorites". The list can be deleted at any time via the corresponding menu item at the bottom of the page.

Weather function

The app provides you with weather information at your current location. This information is provided through our partner VAISALA (Vaisala GmbH). In order to do this, the app sends your current location to VAISALA's servers. The servers determine the weather information and then transmit it to the app.

Usage analysis

The app also collects information on the use of the app. The information which is delivered in a way that cannot be traced back to you personally is transferred to our commissioned service provider MIXPANEL (Mixpanel, Inc.ttn: DPO, 405 Howard St., 2nd Floor, San Francisco, CA 94105) in the USA. Furthermore, this information is transmitted together with the app ID which is created when using the app for the first time. The app ID is created in a way that does not allow the user behind the app ID to be identified. We analyze this information, which is not traceable to you, in pursuit of our legitimate interest in understanding how each feature is used and which features are most popular. This allows us to assess how the app can be further improved and implement appropriate measures.

If you wish to object to this usage analysis, you can separate the unique app ID from the transmitted usage information. In order to do so, please deselect the "Allow use of data analytics" item in the app settings. There, you will be given the opportunity to use the app without any further collection of anonymous usage data. For more information on data processing by MIXPANEL, please visit: https://mixpanel.com/legal/privacy-overview/

In the unlikely event of a serious malfunction and a resulting app crash, we offer you the opportunity to submit technical details to us. In this way, we can ensure that the stability and quality of the software is continuously increased. Based on your consent, this data is transmitted to our contracted service provider APPCENTER (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399) in the USA and processed there accordingly before it is viewed by our support staff. The information cannot be traced back to you personally. For more information on data processing by APPCENTER, please visit: https://docs.microsoft.com/en-us/appcenter/gdpr/.

 

 

 

Feedback function

You have the option of sending us any suggestions for improvement or enquiries via e-mail. In order to be able to support you appropriately, data necessary for technical support is already transferred automatically to the e-mail template. You can remove these from the email at any time if required. In order to process your request comprehensively, we reserve the right to contact you subsequently via e-mail.

Synchronization of your data (with login)

The Service offers to store your app data on BMW's servers. This data includes, among other things, recorded and planned routes. If you change your terminal device or if your terminal device is no longer usable, you can continue to use your data on a new terminal device.

 

How we use your personal information?

 

We may use personal information detailed above for the following purposes:

To provide the Services.

To facilitate the provision of software updates.

To enforce an agreement, when BMW reasonably believes that you are in breach of the BMW Motorrad Connected Agreement, or are in breach of the vehicle lease/finance agreement with BMW Financial Services Canada, or any other agreement with BMW in which BMW is a beneficiary thereof relating to the vehicle;

As permitted or required by law or court order. Delete

You can delete your data at any time in the App. There are several ways to delete your data:

For some data types, you can delete the individual data elements; such as a single destination.

You can delete all data that has been processed as part of the synchronisation and stored on BMW servers, please select the function "Delete my data from ConnectedRide services" in the app.

Please contact your local customer support center for any additional questions related to deletion rights.

 

Consent

When you launch the App for the first time, you will be prompted for your consent for a few specific data types. You will be prompted for your consent before the Services begins collecting the data. If you decline, the features which require that data will be disabled.

 

Specific consent is requested for:

Location (geolocation)Contacts

Notifications

Access to your camera and/or photos

Bluetooth

 

You consent to allow the Services to collect and process all other described data types when you accept this privacy notice.

Opt-out of data collection.

You have the right to opt out at any time.

 

If you wish to continue using the app but opt-out of data collection for specific data types

You can turn off location, calendar access, camera access, photos access and notification in the settings menu in the app.

 

To opt-out of any other data collection the app will no longer function.

Delete your application data using the “Delete all application data” button in the privacy menu and

delete the app from your device.

 

. C. Compliance with legal obligations to which BMW is subject.

BMW may collect, use and share personal information if there is a legalegulatory or contract obligation to do so. This may be the case if we need to contact you because your vehicle is affected by a recall or technical action.


We may also use personal information to protect our business, which can include the following:

To safeguard the operation of IT systems, which include backup and recovery of data processed in IT systems,

logging and monitoring of transactions to verify proper functioning of IT systems.

detection and prevention of unauthorized access to personal data, and

Incident and problem management for troubleshooting IT systems.

For internal compliance management, in which we check, whether you have been sufficiently advised in the context of a contract and that the dealer has complied with all legal obligations.


BMW is subject to a variety of other legal obligations. In order to comply with these obligations, we process your data to the extent required and, if necessary, pass these on to the responsible authorities within the framework of statutory reporting obligations.

 

D. Sharing of Personal Information

The Services includes features that utilize selected third parties in order to provide the function of the features. In most cases, the data is provided in anonymized form such as the request to the map provider to retrieve the map image for your location. In other cases, the feature may require the transfer of your personal information to the third party such as when you schedule a service appointment for your vehicle. Features that send your personal data to a third party will inform you of the transmission or prompt for your consent before sending the data.

 

We may share your personal information with our affiliated companies, third-party service providers, BMW retailer networks and certain business partners in order to provide the BMW Services, conduct our business activities and protect our rights.: If personal data must be transferred to third parties in order to carry out features, you will be informed accordingly or must give your consent before the data is transferred. Data may also be transferred to other third parties (e.g., public authorities) if we are lawfully requested to hand over data.

BMW authorized retailers and partners acting on our behalf operate as separate and distinct legal entities from BMW Group Canada. Each such entity has its own privacy practices and policies. When communicating with a BMW authorized retailer or partner, we encourage you to review their privacy policy and practices to understand how they collect, use and disclose your personal information.

 

 

How do we collect your personal data?

 

BMW collects your personal data in the following conditions:

The App is actively running, either in the foreground or background on your mobile devicewhen you actively use the features of the App.

If you access the Services via an integrated device the Services will collect anonymized usage analytics

 

How do we keep your information safe?

 

We secure your data using state-of-the-art technology. By way of example, the following security measures are used to protect your personal data against misuse or any other form of unauthorized processing:Access to personal data is restricted to only a limited number of authorized persons for specified purposes.

Data is transferred only in encrypted form;

Data is stored in encrypted form.

The IT systems used for the processing of the data are technically isolated from other systems to prevent unauthorized access, e.g. by hacking.

Access to the systems is monitored permanently in order to detect and avert misuse at an early stage.

 

How long do we store your data?

We only store your personal data for as long as is necessary for the respective purposes.  If the data are processed for different purposeshey are then automatically deleted immediately or stored in a form that cannot be traced back to you as soon as these purposes have been fulfilled.

Depending on the data type, the Service stores the data for different periods of time.  The storage period results from the following categories:

 

Who will we share your data with and how will we protect it?

BMW is a company operating on a global scale.  In the EU, your personal data is preferably processed by BMW employees, national sales companies, authorized dealers and service providers commissioned by us.

If data is processed outside the EU, BMW will ensure that your personal data is processed in accordance with the European data protection directives using standard contracts in accordance with EU requirements and in accordance with appropriate technical and organizational measures.How you see and change your privacy preferences?

 

You can review and change your privacy settings at any time in the app under the settings menu. Depending on the vehicle model, you can also access a privacy menu in your vehicle in which you can also change the vehicle related settings.

 

Your data privacy rights, your right to complain and contacting BMW.

 

BMW is committed to protecting your privacy. This Privacy Policy govern the collection, use, and disclosure of your personal and vehicle information using the BMW Motorrad Connected Ride App in Canada pursuant to the BMW Canada BMW Motorrad Connected Ride App Terms and Conditions of Use.

If you have any questions about our privacy practices or would like to request a copy of our Privacy Policy, please contact our Privacy Officer.

By email: privacy@bmw.ca

 

By phone: 1-800-567-2691

 

By postal mail: BMW Canada Inc., Privacy Officer

50 Ultimate Drive
Richmond Hill, Ontario L4S 0C8
privacy@bmw.ca

 

If you would like access to review, modify, correct or update the accuracy of any personal information you provide on activation, please contact the BMW Customer Relations Centre.

By email: customer.service@bmw.caBy phone: 1-800-567-2691

Calls may be recorded for quality assurance, employee training and compliance purposes.

 

 

 

Minors

 

The BMW Motorrad Connected Ride App is not designed or intended for use by children under the age of 16. We do not knowingly collect any personal information from anyone under the age of 16 without the prior, verifiable consent of a parent or guardian. Such parent or guardian may, upon requestiew the information provided by the child and require that it be deleted.

In all communications to us, please indicate that you are writing concerning the BMW Motorrad Connected Ride App application. We will do our best to respond to all reasonable inquiries in a timely manner.Additionally, you are entitled to lodge a complaint with a supervisory authority.Our Privacy Policy may change from time to time. When we change the policy in a material way, a notice will be posted within the BMW Motorrad Connected Ride App along with the updated Privacy Policy.

 

 

Version 1.3 Endpoint NA (en)