The following types of data may be collected about you:

• Contact Information ► - Name, title, initials, address, telephone numbers, e-mail address.
• Personal information ► - Date of birth, marital status, family members, driving license type, occupation, test drive, hobbies, preferred payment method, preferred contact channel, VIN, company name.
• Interests ► - Information about your vehicle preferences.
• Using the website and communication ► - How you use our website and whether you open or forward our communications, including information collected through cookies and other tracking technologies, (for details, see our cookie policy here).
• Sales and service information ► - Purchase related information including Customer ID, contract numbers, choice of funding through BMW Financial Services, Support and Service including complaints and claims.
• Customer history data ► - Customer satisfaction rate and additional self-care information, offers received, vehicle purchase data including model, configuration, purchase date, registration date, registration number, order date, delivery date, vehicle holder, pricing, warranty information, residual value, optional insurance information (e.g., number of household vehicles, use of mobility services), purchase data for parts, accessories, and lifestyle products, data collected during dealer visits (e.g. requests, consultation information, responsible sales consultant, service history), campaign history and responses, complaint history, service history.
• Using devices and services ► - How you use your device and the services offered, mobile device or vehicle.
• Vehicle configuration data ► - Information about the functions and current settings of your vehicle, identified by VIN.
• Technical specifications of the vehicle ► - Details of how the engine and systems work or worked within the vehicle, tank fill level, remaining range, RTTI data (inbound navigation data), outdoor temperature, mileage, average speed.
• Vehicle / device location data ► - The position of your vehicle or mobile device.

The use of personal data under EU data protection regulations must be based on one the following legal purposes, determined specifically for each use as contained in this protection policy.

An explanation of the scope of available legal purposes can be found here.

Customer support and marketing - Responding to questions and providing you with news and offers ►

The dealer collects contact information, personal information, interests, customer history data, site usage and communication, and can use sales and service data, vehicle configuration data and technical data about the vehicle to determine which news and offers are most likely to be attractive to you. The dealer can contact you regarding these offers in accordance with your marketing preferences. The dealer can share this information with RIJA – Bavaria, s.r.o. and BMW Financial Services to further track your requests and provide you with the most relevant offers.

Reason for use: Consent, legitimate interest

Legitimate interest: Processing is based on the dealer's legitimate interest in promoting and providing information about its products and services. The fundamental rights and freedoms of current and potential customers have been weighed against the dealer's interest in processing personal data for the stated purpose.

Choice: Marketing consent may be revoked at any time. The customer may also object to data processing for direct marketing purposes.

Vehicle sales and service - Processing sales, configuration and service details of your vehicle ►

The dealer obtains contact details, vehicle configuration data, vehicle specifications and sales and service data, as well as customer history information when you buy, service or repair the vehicle as part of a sale or service, including warranty claims, which are used to provide necessary services and to report any problems with your vehicle. The company RIJA – Bavaria, s.r.o. and BMW AG may have access to this information to resolve technical or other issues related to the provision of these services.

The abovementioned operators may also obtain limited vehicle location data during the repair process which will only be used in accordance with location data guarantees

Providing personal data for the purpose of selling and servicing vehicles is a contractual requirement. Failing to do so will have an impact on the proper performance of the contract or may render it unfeasible.

Reason for use: Performance of the contract, legitimate interests

Legitimate interest: Processing is based on the dealer's legitimate interest in maintaining the highest standard of sales, service and products offered by the dealer. The fundamental rights and freedoms of customers have been weighed against the dealer's interest in processing customer personal data for the identified purpose.

Choice: The Customer may object to the processing of his/her personal data at any time for any reason.

Compliance with binding requests for your data - Following the legal obligations of law enforcement agencies, regulators and courts ►

The dealer is subject to Slovak law and must comply accordingly. This includes the provision of data to law enforcement agencies, regulators and courts or dispute counterparties in proceedings or investigations anywhere in the world that they are obliged to do so. Where permitted, we will address any such request with you or you will be informed prior to our response unless it is at the expense of investigating or preventing a crime.

Providing personal data to comply with binding requests for your data is a legal requirement that depends on the particular application.

Reason for use: Statutory Obligation; the establishment, exercise or defence of legal claims.

Choice: None

Transfer to third parties

Personal data may be transferred to third parties while ensuring a legal basis.

Your personal information may be transferred to the following entities:

• Companies within the BMW group
• Contract partners and repair shops
• Companies providing services to the dealer such as IT maintenance
• IT maintenance, IT hosting, providers of the customer interactive center

While we cannot guarantee that data sent over the Internet or through the webpage will be free of cyber attacks, we and our subcontractors and business partners work hard to maintain physical, electronic and procedural safeguards to protect your data in accordance with applicable privacy requirements.

All your data is stored on secure servers or in secure permanent records by us, our subcontractors or business partners and is accessible and used only under our security policies and standards or the equivalent standards of subcontractors or business partners.

We use a range of security measures including encryption and authentication tools to help protect and maintain the security, integrity and availability of your data.

While we cannot guarantee that data sent over the Internet or through the home page will be free of cyber attacks, we and our subcontractors and business partners work hard to maintain physical, electronic and procedural safeguards to protect your data in accordance with applicable privacy requirements. 

Among other things, we use measures such as:

• Strictly restricted personal access to your data on a “need-to-know” basis and only for specifically stated purposes
• Transfer of collected data only in encrypted form

• Storing highly confidential data - e.g. credit card information - only in encrypted form

• Use of firewalls on IT systems to prevent unauthorized access
• Continuous monitoring of IT systems access to detect and halt the misuse of personal data

In cases where a password, (provided by us or chosen by you), is required to access parts of our webpage or any other portal, application, or service we operate, you are responsible for maintaining the confidentiality of the password and for any other security practices we inform you of. We ask you not to share your password with anyone.

Location data guarantees

Some services can only be provided through access to your location or your vehicle's location. We take the confidentiality of this location data very seriously.

The following guarantees apply to location data, including data acquired as part of vehicle service:

• Data is retained and linked to you or your vehicle only as long as necessary to fulfil the purpose for which you have given consent
• Data is obtained or accessed when it is necessary for provision of the requested service or in cases where we are legally obliged to keep and/or provide information. If we are asked to provide information to law enforcement agencies or any other third party, we will inform you if it is not at the expense of investigating or preventing a crime, or we are prohibited from doing so
• Vehicle location data and device location data are not linked unless specifically required for the provision of selected service
• Any other use of location data for analytical purposes will be based on irreversibly anonymized data sets

RIJA – Bavaria, s.r.o. and BMW Financial Services may have access to vehicle location data and BMW AG may have access to the location data of equipment through the services they provide (e.g. ConnectedDrive).

At the time of purchase, activation or configuration of a service or application, (ConnectedDrive or Connected App), you will be provided with a detailed description of the location data obtained to provide location-dependent service. You can choose whether we store or collect this data on the MyBMW self-service portal. If not, future location data will no longer be collected. Please note that we may not be able to provide some features if you limit the collection of your location data.

Your personal data may be transferred to a country outside the European Economic Area (EEA) for any of the above purposes where data protection laws may be of a lower standard than within the EEA. We will ensure that all of your data that is available outside the EEA is handled under the applicable guarantee.

The European Commission has approved some countries outside the EEA, such as Canada and Switzerland, as countries that provide equivalent protection to that of the EEA Data Protection Regulations and therefore no additional legal safeguards are required. In countries that do not have such approvals, such as India or Japan, we will request your consent for transfer, or transfer it under contractual clauses approved by the European Commission which directly impose equivalent data protection obligations on the recipient unless permitted by applicable law on data protection in order to conduct such transfers promptly.

Please contact us here to request a copy of the specific guarantee for your data export.

You have the right to:

• Request further details about the use of your data
• Access your personal data and a copy of the data which has been provided to us
• Receive your personally provided data in a structured, commonly used machine-readable form, and, where feasible, transfer it with your consent or by the terms of your contract automatically to another controller without restriction
• Request updates or changes to any inaccuracies in your data
• Request deletion of any data we no longer have a legal requirement to hold
• Revoke your consent in order to terminate data processing in cases where processing is based on consent and related to direct marketing
• Object to any processing, including profiling, based on legitimate interests or due to a specific situation unless our reasons override your data protection rights
• Request limits to how your data is used, e.g. during the investigation of a complaint

Your application of these rights is subject to certain exceptions in the public interest, (such as the investigation or prevention of a crime), our interests, (e.g. legal confidentiality), or the rights and freedoms of others. If you exercise any of these rights, we will verify your entitlement and respond without unnecessary delay within thirty days. In complicated cases or when many requests have been received, this period may be extended by anothersixty days, in which case you will be notified.

If you are dissatisfied with the use of your data or our response to the application of these rights, you are entitled to file a complaint with the data protection office at https://www.dataprotection.gov.sk.