Data protection notice

Last updated 2021.11

The BMW Group knows that the use of your data requires your trust. The BMW Group is committed to the strictest data protection guidelines and will only use your information for clearly described purposes and in accordance with your data protection rights.

Who is responsible for processing data?

Bayerische Motoren Werke Aktiengesellschaft, Petuelring 130, 80788 Munich, with its registered office in Munich and entry in the commercial register at the Munich Local Court under number HRB 42243 (hereinafter referred to as "BMW").  The BMW Motorrad Connected Service (hereinafter referred to as the "Service") is a family of applications and services. The Service includes the BMW Motorrad Connected app for iOS and Android BMW provides you with the Service and handles the associated data processing activities.

What information can be collected about you and how is it used?

In order to provide you with the personalised features and the various functions of the Service, BMW collects, stores and processes your personal data in accordance with applicable law.

The data collected for the Service will be processed for the following purposes:

A. Conclusion of the contract for the use of the service (Art. 6(1)(b) GDPR)

The following categories of data are processed in order to use the Service:

Login with the BMW Group ID:
To be able to make full use of the BMW Motorrad Connected app, you must register. Once you have registered, you will receive an online customer account that gives you access to further portals and offers from the BMW Group. For the BMW Group login service, your data will be passed on to the BMW Group company that acts as the provider of the applications you use. BMW AG stores data from your customer account separately from any other (including potentially identical) data about you that may be available to the BMW Group.

B. Provision of the personalised features of the Service (Art. 6(1)(b) GDPR)

BMW Motorrad Connected offers services that work without login and those that can only be used after successful login. To realise these services, the Service collects and processes various data.

Service data

Service descriptions

Use of your location

You can authorise the app to record your location as long as you are actively using the app or the app is open in the background. In order to use the app, you do not have to agree to the recording of your location, but certain functions of the app depend on whether the location information of your mobile device and vehicle are permitted to be used. If you authorise the app to use your location, navigation via the app is possible (destination guidance, POI search, position display on the navigation maps). If you allow your location to be used and recorded, your journeys are additionally recorded in the "Activities". The "Activities" function must be activated manually once in order for the routes to be recorded. All route data can be viewed and deleted by the app user at any time. Deleting the vehicle profile also results in the removal of all associated "Activities". In this context, please note that the continued activation of GPS running in the background can significantly reduce the battery life of your mobile device.

Provided that you have consented to the recording of your location information, the app will store your location data indefinitely. If you choose not to permit location sharing to the app or the "Activities" function is not turned on, the app will no longer capture it.

Digital map

The digital map in the app is provided by TOMTOM International BV. For the purpose of displaying the digital map, the location is transmitted from your mobile device directly to TOMTOM International BV. All data processing by TOMTOM International BV is based solely on this location information, without any other data about you or your mobile device, and in accordance with TOMTOM International BV's Privacy Policy. You can find these at https://www.tomtom.com/privacy/.

Localisation via last mile function

The app shows you the location of your parked vehicle on the map. The app requires location sharing of the mobile device for this function.

Vehicle status

The vehicle status displayed in the app (e.g. maintenance interval, check control messages) is saved/displayed in the app and deleted as soon as the vehicle profile is removed.

Locating a petrol station

The app uses the "Petrol station search" function on the start page to find the nearest petrol station for you. In order to do so, the app sends your current location to the servers of TOMTOM International BV. The server then determines the nearest petrol station and transmits this information to the app.

Search function

The app includes a search function that allows you to search for an address or a point of interest in the app as well as in the vehicle. For this purpose, the app transmits the search term and your current location to an external service provider in order to display a list of places or addresses corresponding to the search criteria. The determined destination is transferred to the navigation and can be called up again via "Last destinations" or via "Favourites". The list can be deleted at any time via the corresponding menu item at the bottom of the page.

Weather function

The app provides you with weather information at your current location. This information is provided through our partner VAISALA (Vaisala GmbH). In order to do this, the app sends your current location to VAISALA's servers. The servers determine the weather information and then transmit it to the app.

Usage analysis

The app also collects information on the use of the app. The information which is delivered in a way that cannot be traced back to you personally is transferred to our commissioned service provider MIXPANEL (Mixpanel, Inc., Attn: DPO, 405 Howard St., 2nd Floor, San Francisco, CA 94105) in the USA. Furthermore, this information is transmitted together with the app ID which is created when using the app for the first time. The app ID is created in a way that does not allow the user behind the app ID to be identified. We analyse this information, which is not traceable to you, in pursuit of our legitimate interest in understanding how each feature is used and which features are most popular. This allows us to assess how the app can be further improved and implement appropriate measures.

If you wish to object to this usage analysis, you can separate the unique app ID from the transmitted usage information. In order to do so, please deselect the "Allow use of data analytics" item in the app settings. There, you will be given the opportunity to use the app without any further collection of anonymous usage data. For more information on data processing by MIXPANEL, please visit: https://mixpanel.com/legal/privacy-overview/

In the unlikely event of a serious malfunction and a resulting app crash, we offer you the opportunity to submit technical details to us. In this way, we can ensure that the stability and quality of the software is continuously increased. Based on your consent, this data is transmitted to our contracted service provider APPCENTER (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399) in the USA and processed there accordingly before it is viewed by our support staff. The information cannot be traced back to you personally. For more information on data processing by APPCENTER, please visit: https://docs.microsoft.com/en-us/appcenter/gdpr/.

Feedback function

You have the option of sending us any suggestions for improvement or enquiries via e-mail. In order to be able to support you appropriately, data necessary for technical support is already transferred automatically to the e-mail template. You can remove these from the email at any time if required. In order to process your request comprehensively, we reserve the right to contact you subsequently via e-mail.

Synchronisation of your data (with login)

The Service offers to store your app data on BMW's servers. This data includes, among other things, recorded and planned routes. If you change your terminal device or if your terminal device is no longer usable, you can continue to use your data on a new terminal device.

Delete

You can delete the data from your app at any time. There are several ways to delete the data:

Consent

When you start the app for the first time, you will be asked to give your consent for some specific types of data before the service starts collecting the data. If you decline, the functions that require this data will be disabled.

Special consent is required for:

Refusal of data collection

You have the right to unsubscribe at any time.

If you want to continue using the app but do not want to continue allowing data collection for certain types of data.

If you refuse to collect other data, the app will stop working.

C. Ensuring product quality and the development of new products (Art. 6(1)(f) GDPR)

Beyond the mere provision of the service, the data according to Section B is also processed with the aim of quality assurance and the development of new products and services by BMW. These processing measures serve BMW's justified goal of providing products and services of the highest quality as well as new and innovative offerings.

To protect your privacy, data used to improve our products and develop new services is stored in a form that does not link it directly to you or your vehicle.

The stability of the Service is continuously monitored.  When critical system faults are detected, some of the data collected under Section B may be examined in more detail with the aim of determining the cause of the fault and its rectification.  Access to this information is strictly limited and only occurs when it proves necessary to correct critical errors.

D. Consent-based customer care (Art. 6(1)(a) GDPR)

If you have separately agreed to further use of your personal data for advertising or market research purposes, this data will be used accordingly.

E. Compliance with the legal provisions to which BMW is subject (Art. 13(1)(c), Art. 6(1)(c) GDPR)

BMW also processes personal data if there is a corresponding legal obligation. This is the case, for example, if your vehicle is the subject of a recall or other technical measures.

In addition, the collected data is also used in the context of securing the operation of the IT systems (backend and vehicle); such as:

The data collected is also processed as part of our internal compliance management process, which we use to check that the contract has adequately informed you and that the authorised BMW retailer has complied with all legal requirements.

BMW is subject to a large number of other legal requirements and cooperates with the relevant authorities within the scope of these. For this purpose, we process your data to the extent necessary and pass it on to the competent authorities, if necessary within the scope of legal reporting obligations or upon lawful request.

Furthermore, we may process your data in the event of a legal dispute if the legal dispute necessitates the processing of your data.

F. Transfer of data to certain third parties

The Service includes functions that selected third parties use to provide certain functions. In most cases, the data is anonymised, such as the request to the map service provider to provide the map image to your location. In other cases, features can only be executed if personal data is transferred to third parties.

If personal data must be transferred to third parties in order to carry out features, you will be informed accordingly or must give your consent before the data is transferred.

Data may also be transferred to other third parties (e.g. public authorities) if we are lawfully requested to hand over data.

How do we collect your personal data?

BMW collects your personal data under the following circumstances:

How do we ensure the security of the information?

We back up your data using the latest technology. For example, we apply the following security measures, among others, to protect your personal data against misuse or any other form of unauthorised processing:

How long do we store your data?

We only store your personal data for as long as is necessary for the respective purposes.  If the data are processed for different purposes, they are then automatically deleted immediately or stored in a form that cannot be traced back to you as soon as these purposes have been fulfilled.

Depending on the data type, the Service stores the data for different periods of time.  The storage period results from the following categories:

Who do we share your data with and how do we protect it?

BMW is a company operating on a global scale.  In the EU, your personal data is preferably processed by BMW employees, national sales companies, authorised dealers and service providers commissioned by us.

If data is processed outside the EU, BMW will ensure that your personal data is processed in accordance with the European data protection directives using standard contracts in accordance with EU requirements and in accordance with appropriate technical and organisational measures.

How to view and change your privacy preferences

You can check and change your privacy settings at any time in the settings menu of the app.

Your data protection rights, your right to complain and your right to contact BMW

As BMW processes your data, you have the opportunity to exercise certain rights under the General Data Protection Regulation and other relevant protective legislation.   This section describes your rights under the General Data Protection Regulation (GDPR).

Your rights

Under the GDPR, you have the following rights:

Right to revocation of consent (Art. 7 GDPR):

If you wish to withdraw your consent to the processing of your data by the Service, select the "Reset app" option in the app and then delete the app from your smartphone.

Right to access your information (Art. 15 GDPR):

You have a right to access the personal data we hold about you at any time. This right to access concerns, among other things, the categories of data we process, the purposes of processing, the source of the data if we do not receive it directly from you and, where applicable, the recipients to whom your data is disclosed. You will receive a free copy of your data. If you require additional copies, we reserve the right to charge you accordingly.

You can view the data collected or created by the Service in the app itself. In the app, data is shown as part of the display of the feature that captures or uses it.

Right to rectification (Art. 16 GDPR):

You can request BMW to correct your data. We will take appropriate steps to ensure the up-to-dateness, accuracy, completeness and relevance of the personal data we hold and process about you based on the latest information available to us.

You can correct most files processed by the Connected Service directly in the app.

Right to erasure (Art. 17 GDPR):

Provided that the legal requirements are met, you can request the deletion of your data.

According to Art. 17 GDPR, this is the case when:

Unless the processing is necessary in order to:

Right to restriction of processing (Art. 18 GDPR):

You may refuse us the right to process on the following grounds:

If you object to the accuracy of the data, the data will initially not be further processed until we have had the opportunity to verify the accuracy of the same.

If the processing is unlawful, you object to the erasure of your data. and request a restriction of use instead.

We no longer need your data, but you do need it to assert, exercise or defend legal claims.

You object to the processing, and there are no overriding legitimate interests on our part in processing your data that override your personal rights.

Right to data portability (Art. 20 GDPR):

At your request, we will transfer your data to other data controllers under the prerequisite of technical feasibility. However, you only have this right if the data processing is based on your consent or a contract. Instead of receiving a copy of your data yourself, you can instruct us to transfer the data directly to another data controller to be named by you.

Right to object (Art. 21 GDPR):

You have the right to object to data processing at any time on grounds relating to your particular situation, provided that it is based on your consent or our legitimate interests or those of third parties. In this case, we will not process your data any further. The latter does not apply if we can demonstrate compelling legitimate grounds for processing that override your interests, or if your data is used to assert, exercise or defend legal claims.

Time limits for the fulfilment of data subjects' rights:

We will use our best endeavours to meet your requirements within 30 days. However, this deadline may be extended due to the specific rights or complexity of your requests.

Information restriction in the implementation of data subjects' rights:

In certain circumstances, we may not be able to disclose all information about your data to you due to legal requirements. If we are forced to object to your right to information in these cases, we will inform you of the reasons for the refusal at that time.

Complaints to the regulatory bodies:

BMW AG takes your concerns and rights very seriously. However, if you believe that we are not handling your complaints or concerns with due care, you can lodge a complaint with the relevant data protection authority.

Contact BMW

For this purpose, please contact BMW Customer Service

via e-mail: connectedride@bmw.com

Or you can contact the BMW data protection officer directly:

BMW AG
Data Protection Officer
Petuelring 130
80788 Munich
datenschutz@bmw.de

Version 1.2 Endpoint ROW (en)