Bmw Legal Compliance

BMW is subject to various other legal obligations. In order to fulfil these obligations, we process your data to the extent necessary and, if necessary, transmit them to the competent authorities within the framework of legal reporting obligations. Transparency, openness and compliance are a priority in our corporate culture. We firmly believe that exceptional innovation can only be achieved under these conditions. Our legal department is a dynamic group of experienced lawyers and lawyers who work hand in hand with their international colleagues to address the challenges we face as a global automotive brand. Deadlines for the respect of the rights of data subjectsIn principle, we strive to respond to all requests within 30 days. However, this period may be extended for reasons related to the specific rights of the data subjects or the complexity of your application. As part of the BMW Group Business Relations Compliance programme, we therefore implement a structured compliance due diligence process for certain business relationships with business partners. This applies in particular to the BMW Group`s business partners and certain service providers such as sales agents and consultants. On this basis, measures are implemented with our business partners to avoid compliance risks. This may include conducting compliance training and specific monitoring activities. Use for customer service For customer service, data collected from you may be kept for 3 to 10 years, unless you request the deletion of such data and there are no contractual or legal requirements that conflict with this deletion request.

Group Compliance provides various IT tools that help BMW Group departments and employees understand and comply with relevant legal requirements in everyday situations. In order to avoid legal risks, employees can discuss their issues with their managers and the responsible departments of the BMW Group, in particular the legal, corporate audit and corporate security departments. The Code of Conduct translates the BMW Group`s corporate values into key maxims for action and creates transparency for employees and the public on key areas of compliance. On this basis, legal compliance requirements are transferred to internal regulations and processes and implemented. In addition, bmw Group Compliance Contact serves as an additional point of contact for employees, customers, suppliers and other external parties when it comes to compliance. The same applies if defects or other circumstances are discovered that could lead to non-compliance with the law. Information can also be provided anonymously upon request. BMW Group assures informants that it will not take any steps to identify the source of the information provided anonymously. This does not apply if BMW Group Compliance Contact is misused. All employees are regularly informed through various internal communication activities.

Compliance communication makes an important contribution to establishing compliance in the corporate culture. Compliance training is designed to enable BMW Group employees to assume their personal responsibility for lawful conduct in their respective fields of business. Compliance training is delivered online and in the classroom to meet the needs of different audiences. The corporate culture of the bmw Group is characterised by clear responsibility, mutual respect and trust. Legal conduct and ethical conduct are an integral part of our business activities and are an important prerequisite for the long-term success of our business. Our ultimate goal is to avoid risks that could jeopardize the trust of our customers, shareholders, business partners and the public in the BMW Group. To this end, the BMW Group has implemented a compliance management system with tools and measures to help employees deal with compliance risks. Compliance functions advise global departments on all compliance matters. The consultation approach is holistic and takes into account departmental and local particularities.

The data collected in connection with the conclusion of the contract or the provision of services will be processed for the purposes set out below. An explanation of the scope of this legal basis can be found here. A. Customer service (Art. 6 para. 1 b, g, f) of the EU General Data Protection Regulation)BMW uses your personal data to process your request (e.g. requests and complaints to BMW Customer Service). For all questions relating to the processing of a request, we will contact you without separate consent, for example in writing, by telephone, by courier or by e-mail, depending on the contact details you have provided.

Right to erasure (art. 17 of the EU General Data Protection Regulation): You can ask us to delete your data if the legal requirements are met. In accordance with Article 17 of the EU General Data Protection Regulation, this may be the case if a restriction is necessary in providing information about the rights of data subjectsIn certain situations, legal requirements may require us not to provide information about all your data. If, in such a case, we have to refuse your request for information, we will also inform you of the reasons for the refusal. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of consent until the revocation. B. Compliance with the legal obligations to which BMW is subject (Art. 6 para.

1 c, f) of the EU General Data Protection Regulation)BMW processes personal data even if there is a legal obligation to do so. To support the provision of the services and purposes listed above, BMW uses a number of service providers commissioned by BMW AG under strict data protection data processing conditions. The BMW Group`s compliance management system includes a variety of prevention, monitoring, control and response measures to support compliance with legal and ethical requirements. These apply to all BMW Group units worldwide. If additional compliance requirements exist in individual countries or business units, these are met by applying local or company-specific regulations and compliance tools. Your expertise and legal acumen could play a critical role not only in protecting our brand at the national level, but also in anticipating and managing emerging risks that could have a global impact. In addition to eliminating misconduct and illegal acts, other risk reduction measures may be required, which may include appropriate personnel measures and sanctions in the event of individual misconduct. The range of sanctions may cover the entire spectrum, as appropriate.

The BMW Group has set up a company-wide compliance organisation to inform employees of possible compliance risks and to ensure compliance with requirements at local and international level. Right to object (art. 21 EU General Data Protection Regulation): You may object at any time to the processing of your data for reasons arising from your particular situation, provided that the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we can demonstrate compelling and justifiable reasons for the processing that outweigh your interests or if we need your data to assert, exercise or defend legal claims. We also process your data in the event of legal conflicts, if the dispute requires data processing. Use to comply with a contractIn order to fulfil contractual obligations, data collected from you may be kept for as long as the contract is in force and – depending on the nature and scope of the contract – for 6 or 10 years beyond this period in order to comply with legal accounting requirements and to ensure the clarification of any questions or claims after the end of the contract. We only process your data if this is permitted by applicable legal regulations.