Severs Breeman BMW & MINI considers the protection of personal data important. Therefore, we process your data with the utmost care and according to the guidelines of the General Data Protection Regulation (AVG), which will be enforced from 25 May 2018. You can read more about this in this privacy statement.
Who we areThis privacy statement applies to the following entities:
This Privacy Statement applies only to the above-mentioned entities and does not apply to BMW Group Netherlands and its affiliated entities BMW Nederland B.V., BMW Financial Services B.V. and BMW Holding B.V. Rijswijk or to other BMW, MINI and Motorrad contract partners. The websites of these companies have their own privacy policies.
What is personal dataPersonal data is any information about an identified or identifiable natural person. You can think of your name and address. However, data like your license plate or the chassis number of your car are also (indirect) personal data, because they can be traced back to you as a person.
Basis of processingThe General Data Protection Regulation states in Article 6 that there must be a basis for the processing of personal data. Without a basis, no personal data may be processed. The General Data Protection Regulation has the following bases:
When executing a contract, the recording of personal data is permitted if, for example, there is a test drive, the purchase or maintenance of a vehicle, the ordering of spare parts, the execution of warranty work, the handling of damage or the changing of winter/summer tyres. Participation in an event for which you have registered is also covered by the agreement.
A legal obligation includes, for example, the registration of a vehicle, the obligation to report technical recalls or the financial obligation to retain invoices for 7 years.
We speak of a legitimate interest in the case of, for example, a quotation for a new vehicle or for maintenance (if you are not yet one of our customers), marketing or an invitation to an event (if you are one of our customers), but this also includes camera surveillance (theft prevention).
Consent is used if no other legal basis applies. Consent is also requested, for example, for the transmission of personal data to BMW Group Netherlands (importer).
The processing of personal data in the case of vital interest occurs when there is a serious risk to the health of the customer or third parties.
The fulfilment of a task in the public interest, for example, public health or social protection, does not apply to us. The same applies to the fulfilment of a task of public authority, which refers to government agencies or public bodies.
Purpose and personal dataThe General Data Protection Regulation states in Article 5.1.b that there must be a purpose for collecting and processing personal data.
There are various purposes for which we may process your personal data. These include:
If you have an agreement with us or we are in the pre-contractual phase of an agreement (offer), we have the justified interest to send you information about our products and services (direct marketing) and organisation (newsletter). We may also invite you to events, whereby we select the appropriate event for you based on the targeted information you provide. If you do not wish to receive this information, you can lodge an objection with us (see Right of Objection).)
If we do not have an agreement with you or if we are not in the pre-contractual phase of an agreement, we may only send you information about our products or services (direct marketing) or company (newsletter) with your consent. We also invite you to events only on the basis of consent. If you do not wish to, you can withdraw your consent at any time (see withdrawal of consent).
What personal dataThe following categories of personal data are recorded from you:
Copy of identity documentSometimes it is necessary for us to ask you for a copy of your identity document. In this case, we apply the following agreements:
Camera surveillanceOur locations are equipped with cameras. We consider this important for the safety of you and your vehicle, our employees and our vehicles. The camera images are deleted after 4 weeks. We retain the camera images for longer if this is necessary, for example, for a police investigation following a theft or other incident.
Data about your vehicleWe store the following data about your vehicle:
Data in your vehicleData is also present in your vehicle. Below are the categories of these data, followed by a description of each category.
Operational vehicle dataThese data include:
This data is stored in the following cases:
As a rule, this data is read out using the legally prescribed connection for On-Board Diagnosis (OBD) in the vehicle itself. The operational data that is read out documents the technical condition of the vehicle or the individual components. This data helps with diagnostics, warranty compliance and quality improvements. This information, as well as information regarding component loads, technical events, malfunctions and other errors, is transmitted together with the chassis number to the importer BMW Group Nederland and the manufacturer BMW AG in Munich (Germany).
BMW is also liable for its products. For this purpose, the operational data of the vehicles are also used, e.g. for recall campaigns. This data can also be used to verify warranty claims and retrofit claims from customers.
Function memories in the vehicle can be reset at your request during repairs or maintenance.
Functions relating to comfort and infotainmentYou can save your settings for comfort and individualisation in the vehicle and change or reset them at any time. These settings are (if available):
Depending on the possibilities in your vehicle, you can enter the following data in the infotainment functions:
The comfort and infotainment data can be stored locally in the vehicle or on the device you have connected (smartphone, USB stick, MP3 player). You can delete these data yourself at any time. These data can also be transferred from the vehicle. This only takes place at your request and, in particular, when using online services in accordance with the settings you have chosen.
Smartphone integration (e.g. Apple Carplay)It is possible to connect your smartphone or other mobile devices to the vehicle (if your vehicle is equipped with corresponding devices). You can then operate these devices using the controls integrated in the vehicle. This allows images and sound from the smartphone to be displayed via the multimedia system. In addition, data from the vehicle will also be sent to your Smartphone. Depending on the type of integration, this may include position data, day/night mode and other general vehicle data. You can find more information in the "Infotainment Systems" section of your vehicle's manual. Integration allows the use of selected apps from the Smartphone, such as navigation or music playback. There is no other interaction between Smartphone and vehicle, especially no active access to the vehicle data. The way other data is processed is determined by the provider of each app used. Whether you can choose settings and, if so, which settings you can choose, depends on the respective app and the respective operating system of your Smartphone.
Online servicesIf your vehicle is connected to a mobile phone network, this connection enables the exchange of data between your vehicle and other systems. The connection to the mobile phone network is made possible by the vehicle's own transmitter and receiver or the mobile device (such as a Smartphone) which you carry in the vehicle. Online functions can be used over this mobile phone network. This includes online services and applications/apps provided by the manufacturer or other providers.
Online services of BMWWith regard to BMW online services, the respective functions are described by BMW at appropriate places (such as the Owner's Manual, BMW Drivers Guide App, BMW websites) with the corresponding information in accordance with data protection legislation. Personal data may be used to provide online services. Data exchange for this purpose takes place via a secure connection. These include BMW IT systems that have been specifically developed for this purpose. Any collection, processing or use of personal data beyond the scope of this service takes place solely on one of the following bases: legal obligation (e.g. statutory emergency call system e-Call), contract or consent.
Third-party servicesIf you use services of other providers (third parties), these services are the responsibility of the respective provider and are subject to the data protection terms and conditions of use of this provider. We have no influence on the content exchanged via this service. We therefore recommend that you obtain information from this third-party service provider as to the nature, scope and purpose of the collection and use of personal data in the context of these third-party services.
Data on the location of your vehicle or mobile deviceBMW may receive this location data in the course of providing BMW ConnectedDrive services and the BMW Connected App. This data is used in accordance with the detailed descriptions of the services and security measures for location data.
Recipients and categories of recipientsThese are parties to whom we transfer your personal data. These are government agencies such as:
If you have applied to us for financing and/or insurance, your data will be shared with, among others:
The importer, BMW Group Netherlands, also receives your personal data for conducting surveys on products and services developed by BMW and for issuing the BMW or MINI Service Card. In the first contact, BMW Group Netherlands will provide you with further information on the processing of your personal data.
Security measuresWhen we process your data, we always use appropriate technical and organisational measures.
Third countries or international organisationsWe are part of the BMW organisation, which operates worldwide. By preference, your personal data is processed within the European Union (EU). If data is processed outside the EU, BMW uses standard contracts and appropriate technical and organisational measures to ensure that your data is processed at the same level of data protection as within the EU. There are also countries outside the EU, such as Switzerland for example, where the EU has determined that the level of data protection is equivalent to that of the EU (adequacy decision). No special contracts are required for these countries.
If you want to know in which countries your personal data is processed, please contact us at the e-mail address below:
Retention period of personal dataWe do not retain your personal data longer than the statutory or fiscal retention period. The financial retention period is 7 years. If there is no statutory retention period, we will retain the data for a maximum of 5 years after the last contact or vehicle date.
If we have received your personal data for making an offer or to provide you with other information and you have never purchased anything from us, we will retain your data for a maximum of 5 years. If, after this period, you also want to be kept informed about our products and services, we will need your permission and must demonstrably register this permission.
CookiesFor the use of cookies, please refer to our cookie policy.Your rights as a customerWhen personal data about you are processed, you also have rights under the General Data Protection Regulation. These rights are:
At the time we collect your personal data, we are obliged to let you know:
We will make this known to you by referring you to our privacy statement.Right of inspection:You have the right to inspect your personal data. This concerns the following data:
You can gain access by looking into our systems or by receiving an overview from us.
For all the above rights, we must be able to establish that the request actually comes from you. This may mean that we ask you to come to our office to identify yourself. We do this because we do not want your data to fall into the hands of unauthorised persons.
You can apply for the above rights via:
We will give you a (written) confirmation of your request. We will comply with your request within 30 days. If we need more time, we will let you know within 30 days. The period for compliance may be extended by up to 2 months.
If we cannot comply with your request, we will let you know with a written motivation.
Withdrawal of consentIf we process your data on the basis of "consent", you can withdraw your consent at any time. You can do this at datasecurity@seversbreeman.nl. Withdrawal of consent does not have retroactive effect. This means that all processing of personal data that we previously carried out on the basis of consent will remain lawful. When you withdraw your permission, the processing will be discontinued by us, unless it is necessary because of a legal obligation.
ComplaintIf you have any questions or wish to make a complaint regarding the processing of your personal data, please contact us first. You can do this via datasecurity@seversbreeman.nl.
If your question or complaint is not resolved to your satisfaction, please contact the Dutch Data Protection Authority, www.autoriteitpersoonsgegevens.nl.
Amendments privacy statementWe reserve the right to amend this privacy statement. You will, if necessary, be informed of a change. In this declaration, the latest date of amendment will always be indicated.
Date of Privacy Statement: 07 April 2021 - Version 1.0