Our Legal & Privacy Policies
We ask you to take note of the following information:Great care has been taken to ensure that the information on this site is correct. The BMW Foundation Herbert Quandt, however, cannot guarantee the accuracy, completeness, and currency of the information provided on this site. The BMW Foundation Herbert Quandt may not be held liable for any damages resulting directly or indirectly from using this site, unless they are due to willful intent or gross negligence. The BMW Foundation Herbert Quandt is not responsible for the contents of the third-party websites it links to. If you have accessed our site from a third-party website, the BMW Foundation Herbert Quandt assumes no responsibility for the contents of that third-party website.The website of the BMW Foundation Herbert Quandt and all its contents, such as texts and images, are protected by copyright. The contents of this site must not be copied, distributed, altered or made available to third parties for commercial purposes. We would like to point out that images and pictures on this website may be copyrighted by third parties. Any use outside of the narrow confines of the copyright law is not permitted without approval. It is not permissible to sell or rent any of the contents of this website to third parties.BMW Foundation Herbert QuandtPraterinsel 380538 MunichEmail: info@bmw-foundation.orgThe BMW Foundation is located in Munich and Berlin, Germany. It is a private operating foundation under civil law and a member of the Bundesverband Deutscher Stiftungen (German Federal Association of Foundations). The BMW Foundation is represented by its Board of Directors:Dr. Heba AguibHeike SchneeweisChairman of the Board of Trustees: Dr. Nicolas PeterResponsible Supervisory Authority:Government of Upper Bavaria, Maximilianstraße 39, 80538 MunichRegistration Number:1222.12.1.3_M-Q-1-01Responsible for Content:Esben Ehrenreich, VP Communications & Narratives, Praterinsel 3, 80538 Munich
Contact InformationE-Mail
info@bmw-foundation.orgWebsite
www.bmw-foundation.orgDesign
Interone GmbH
Blumenstrasse 28
89331 Munich
info@bmw-foundation.orgWebsite
www.bmw-foundation.orgDesign
Interone GmbH
Blumenstrasse 28
89331 Munich
I. Name and contact information of the data controller
Your contact, who is the data controller as defined in the European General Data Protection Regulation (“EU GDPR”) and in other domestic data privacy legislation of the member states or any other data privacy law related provisions is:BMW Foundation Herbert Quandt
Praterinsel 3
80538 Munich
Germany(hereinafter referred to as “we,” “us” or “our”).
Praterinsel 3
80538 Munich
Germany(hereinafter referred to as “we,” “us” or “our”).
II. Contact information of the data protection officer
The protection of your personal data is important to us. To underscore this importance, we have commissioned a consulting firm specializing in data protection and security to handle these central matters. Our data protection officer is a member of this highly experienced group of experts.Our consulting firm is:Magellan Compliance GmbH, Raiffeisenallee 9, 82041 Oberhaching, Germany / www.magellan-datenschutz.deIf you have any data protection and data security related questions associated with our company, please contact our data protection officer directly. Email: datenschutz_bmw_foundation@magellan-compliance.de / Phone: +49 89 382 22501
III. General data processing information
1. ScopePrincipally, we will only process your personal data if this is necessary in order for us to provide you with a functional version of our website and of our content as well as services.2. Legal basisIf we have obtained your consent to the processing of your personal data, the legal basis for such processing is Art. 6 Sect. 1 S. 1 lit. a) EU GDPR.If we process your personal data with the aim of meeting contractual mandates or in conjunction with the negotiation of a contractual relationship, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. b) EU GDPR.If the processing of personal data is necessary in order for us to meet any legal obligations, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. c) EU GDPR.If we process your personal data to protect our or any third party’s legitimate interests, provided your interests or fundamental rights and freedoms do not outweigh the preceding interests, the legal basis for the processing of such data is Art. 6 Sect. 1 S. 1 lit. f) EU GDPR.3. Retention periodYour personal data shall be deleted as soon as the purpose of its retention no longer exists or, if you have a right to object to the processing, you have withdrawn your consent. It is possible that your data will be stored longer if this has been defined in the respective European or domestic legislation, in Union-law provisions, acts or any other provisions we are subject to. In these cases, your personal data shall, however, be blocked.4. External linksIf we provide links to external websites, this Privacy Policy shall not apply to the processing of your personal data by the data controller of the linked website. Hence, we recommend that you review the data privacy policies on external websites you visit. If such a linkage should require a legal basis for the resulting processing of your personal data, it shall be your consent pursuant to Art. 6 Sect. 1 S. 1 lit. a) EU GDPR, which you shall grant by clicking on the respective link.As a rule, the clicking on any such links (hyperlinks) will result in the processing of your following personal data:
- IP address,
- Screen resolution,
- Deployed browser,
- Bandwidth,
- Language settings.
IV. Data processing on our website
a. Provision of the website and generation of logfiles (1) Description and scope In conjunction with offering our website we will process your personal data to ensure the error free presentation of our website on your PC or mobile device. Because of that, we have to store some of your personal data for the duration of the session. Furthermore, we will store your personal data temporarily in logfiles, to guarantee that our website will work properly, and the operation of our IT systems is secure. Any other processing of your personal data in logfiles will not occur. The following personal data will be processed for the provision of the website and for the generation of logfiles:
- IP address,
- Access date,
- Access time,
- If applicable, previously visited website,
- Used browser,
- Used operating system.
- IP address,
- Language settings of your browser,
- The browser you use.
- IP address,
- The browser you use,
- Screen resolution.
a. Email contact (1) Description and scope The following personal data will be processed along with any interactions via email:
- First name,
- Last name,
- Email address,
- Content of the message.
a. Newsletter (1) Description and scope The following personal data will be processed in conjunction with the delivery of our newsletter:
- Email address.
- Two bytes of the IP address,
- Accessed website,
- Previous website (referred website),
- Accessed subsites,
- Time and duration of your website visit,
- Number of website visits,
- Browser.
a. Exercising of the rights you have as a data subject pursuant to Art. 12 et seq. EU GDPR (1) Description and scope In conjunction with the management of the rights of data subjects, we will process your personal data. To that end, we will process any contact information you have shared in this context only to process and respond to your message and to subsequently document that the processing was in compliance with the applicable laws within the scope of our accountability obligations. The following personal data will be processed in conjunction with the management of data subject rights:
- First name,
- Last name,
- Postal address,
- Email address,
- Phone number.
V. Other data processing outside our website
a. Description and scope We will process your personal data in conjunction with the operation of our Facebook fan page to reach out to and interact with users and visitors of “Facebook,” the social network. Occasionally, we will also publish information about our company and any related offers/promotions. In the event that you directly interact with our Facebook fan page (e.g., by sending us a message through Messenger), we will process the data you have shared with us only for the recording and the submission of a response to your inquiries. Moreover, we can generate statistics on Facebook fan page visits. This information is compiled by Facebook (“Facebook Insights”) and enables us to approach the marketing of our activities more effectively and in a more targeted manner. With regard to Facebook Insights data, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for the processing of data. For this purpose, we have executed a contract with Facebook Ireland Limited to define which of the two companies will process which obligations pursuant to the EU GDPR. You may review the most important content of this contract at: https://www.facebook.com/legal/controller_addendum as well as on https://www.facebook.com/legal/terms/page_controller_addendum Information on the data Facebook uses to conduct usage analyses related to our Facebook fan page and which information Facebook provides for the purpose of data processing linked to the Facebook Insights function is available here: https://de-de.facebook.com/legal/terms/information_about_page_insights_data For additional information on the processing of your personal data by Facebook Ireland Limited please go to: https://www.facebook.com/about/privacy or to https://de-de.facebook.com/legal/terms/information_about_page_insights_data b. Legal basis Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR. c. Purpose The data processing purpose is the analysis of your visitor usage patterns on our Facebook fan page and the organization of our Facebook fan page with the aim of matching your interests and to process inquiries. d. Retention period Information about the retention period of your personal data by Facebook Ireland Limited is available at: https://www.facebook.com/about/privacy e. Objection and removal option If you do not want your personal data to be recorded in conjunction with the operation of our Facebook fan page, you have the option to at any time object to the processing of your personal data within the scope of the operation of our Facebook fan page, which will subsequently apply to all future transactions. In this case, we will forward your revocation request to Facebook Ireland Limited.
a. Description and scope We will process your personal data in conjunction with the operation of our Instagram channel to reach out to and interact with users and visitors of the social network “Instagram”. We will also publish information about our company on this channel. In the event that you directly interact with our Instagram channel (e.g., by sending us a direct message), we will process the data you have shared with us only for the recording and the submission of a response to your inquiries. Moreover, we can generate statistics on Instagram channel visits. This information is compiled by Instagram (“Instagram Insights”) and enables us to approach the marketing of our activities more effectively and in a more targeted manner. For Instagram Insights data, we and Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for the processing of data. For this purpose, we have executed a contract with Facebook Ireland Limited to define which of the two companies will process which obligations pursuant to the EU GDPR. The most significant content of this contract can be reviewed at: https://www.facebook.com/legal/controller_addendum as well as https://www.facebook.com/legal/terms/page_controller_addendum Information on the data Facebook uses to conduct usage analyses related to our Instagram channel and which information Facebook provides for the purpose of data processing linked to the Instagram Insights function is available here: https://de-de.facebook.com/legal/terms/information_about_page_insights_data For additional information on the processing of your personal data by Facebook Ireland Limited please go to: https://privacycenter.instagram.com/policy/ as well as https://de-de.facebook.com/legal/terms/information_about_page_insights_data b. Legal basis Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR. c. Purpose The data processing purpose is the analysis of our achievements with our Instagram channel as well as the organization of our Instagram channel with the aim of matching your interests and processing inquiries. d. Retention period Information about the retention period of your personal data by Facebook Ireland Limited is available at: https://privacycenter.instagram.com/policy/ e. Objection and removal option If you do not want your personal data to be recorded in conjunction with the operation of our Instagram channel, you have the option to at any time object to the processing of your personal data within the scope of the operation of our Instagram channel, which will subsequently apply to all future transactions. In this case, we will forward your revocation request to Facebook Ireland Limited.
a. Description and scope We will process your personal data in conjunction with the operation of our LinkedIn Page to reach out to and interact with users and visitors of the social network “LinkedIn”. We will also publish information about our company on this channel. In the event that you directly interact with our LinkedIn Page (e.g., by sending us a message) we will process the data you have shared with us only for the recording and the submission of a response to your enquiries. Moreover, we can generate statistics on LinkedIn Page visits. This information is compiled by LinkedIn (“Page Insights”) and enables us to approach the marketing of our activities more effectively and in a more targeted manner. For LinkedIn Page Insights data, we and LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are jointly responsible for the processing of data. For this purpose, we have executed a contract with LinkedIn Ireland Unlimited Company to define which of the two companies will process which obligations pursuant to the EU GDPR. The most significant content of this contract can be reviewed at: https://legal.linkedin.com/pages-joint-controller-addendum Information on the data LinkedIn uses to conduct usage analyses related to our LinkedIn Page and which information LinkedIn provides for the purpose of data processing linked to the Page Insights function is available here: https://www.linkedin.com/help/linkedin/answer/a547077/linkedin-page-analytics-overview?lang=de For more information on the processing of your personal data by LinkedIn Ireland Unlimited Company, please visit: https://de.linkedin.com/legal/privacy-policy b. Legal basis Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR. c. Purpose The data processing purpose is the analysis of our achievements with our LinkedIn Page as well as the organization of our LinkedIn Page with the aim of matching your interests and processing inquiries. d. Retention period Information about the retention period of your personal data with LinkedIn Ireland Unlimited Company is available at: https://www.linkedin.com/legal/privacy-policy e. Objection and removal option If you do not want your personal data to be collected in conjunction with the operation of our LinkedIn Page, you have the option to object at any time to the processing of your personal data within the scope of the operation of our LinkedIn Page, which will subsequently apply to all future operations. In this case, we will forward your revocation request to LinkedIn Ireland Unlimited. Information concerning the processing of your personal data by LinkedIn can be reviewed at: https://de.linkedin.com/legal/privacy-policy
a. Description and scope We manage a YouTube channel, which is being operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As the operator of YouTube, Google Ireland Limited collects and processes personal data to the extent described in its Data Privacy Policy. Information on the processing of your personal data by Google Ireland Limited may be reviewed at: https://policies.google.com/privacy?hl=de&gl=de If you contact us directly through our YouTube channel (for instance by sending a message or posting a comment), the data shared by you will only be processed for the purpose of recording and responding to your inquiries. We can also generate statistics on visits to our YouTube channel. This information is compiled by YouTube through its “Analytics” service and allows us to approach the marketing of our activities more effectively and to render them more targeted. The data YouTube uses to generate usage analyses related to our YouTube channel and which information YouTube provides for the processing of data in conjunction with the Analytics tool, may be reviewed here: https://support.google.com/youtube/answer/9002587?hl=de b. Legal basis Legitimate interest, Art. 6 Sect. 1 S. 1 lit. f) EU GDPR. c. Purpose The data processing purpose is the analysis of your visit patterns when you are on our YouTube channel, as well as the analysis of the success of videos we upload and the processing of inquiries. d. Retention period Information about the retention period of your personal data by Google Ireland Limited is available at: https://policies.google.com/privacy?hl=de&gl=de#inforetaining e. Objection and removal option If you do not want your personal data to be processed by Google Ireland Limited, you have the option to at any time object to the processing of your personal data in conjunction with the operation of our YouTube channel, which will affect all future endeavors. In this case, we will forward your revocation request to Google Ireland Limited.
a. Description and scope In conjunction with the recurring commissioning of services that are related to the procurement of products and the implementation of tenders, we maintain a database, in which we, in addition to the company names, in particular also process the names and the business contact data of the respective contacts. We process the following personal data in our database:
- First name,
- Last name,
- Business email address,
- Business phone number.
a. Description and scope If you are interested in taking part in our network, being connected to other members of our network, staying in contact with us and getting information on our activities, programs and events, we will register you in our data base (Salesforce-based) for this purpose. For the registration in our data base, we process the personal data you provide to us, in particular the following contact data:
- Name,
- Surname,
- Email address,
- Telephone number,
- Country/region,
- Gender,
- Social media profile,
- Company and position.
a. Description and scope When you participate in one of our events, we process your personal data for the purpose of managing your participation. In this context, we use the event app “LineUpr”, which we use to manage the event and your participation, including arrival, departure, catering, etc., as well as the feedback app “GetFeedback”, which we use to get your voluntary feedback after the event, so that we can continuously improve our offer. In the course of processing your registration and participation in the event, we will process the following personal data that you provide to us:
- Name,
- Surname,
- Country,
- Company and position,
- Email address,
- Telephone number,
- Short bio,
- Profile picture,
- Social media profile,
- Food intolerances or dietary preferences, if any,
- Physical restrictions, if any,
- Arrival and departure date and location,
- Flight number, if necessary,
- Opinion/Feedback, if you do not carry the survey anonymously,
- Any other information you wish to provide.
VI. Categories of Recipients
Within our company, we will share your personal data with those positions and departments that need them for all the above-mentioned purposes. In addition, we will, in some cases, use the services of different providers and will share your personal data with these other trustworthy recipients. These may, for instance, include the following:
- Printing companies,
- Lettershops,
- Scanning services,
- Banking institutions,
- IT service providers,
- Cooperation partners,
- Lawyers, tax advisors, and courts.
VII. Transfer to Non-EU and Non-EEA Countries
In conjunction with the processing of your personal data, it is possible that we share your personal data with trustworthy service providers in non-EU and non-EEA countries. These countries are nations that are not within the European Union (EU) or the European Economic Area (EEA). In this context, we cooperate only with such service providers who are in a position to give us qualified guarantees aiming at the protection of your personal data and who are in a position to warrant that your personal data will be processed in compliance with the stringent European Data Protection Standards. A copy of these qualified guarantees may be reviewed at our business. If we share any personal data with recipients in non-EU and non-EEA countries, this will be done on the basis of a so-called adequacy decision of the European Commission, or, if such a decision is not available, on the basis of so-called standard contractual clauses, which also have been passed by the European Commission.
VIII. Your rights
You are entitled to the following rights you may exercise in your relationship with us: 1. Right of access You have the right to receive information as to whether and which personal data of yours we process. In this case, we will provide additional information on: (1) The processing purpose,(2) The categories of data,(3) The recipients of your personal data,(4) The envisaged retention period or the criteria to determine the envisaged retention period,(5) Your additional rights,(6) In the event that you have not shared your personal data with us: All available information as to its origins,(7) If available: The existence of any automated decision making as well as information on the logic used, the expanse and the desired effects of the processing. 2. Right to rectification You are entitled to have your data corrected and/or completed if the personal data processed by us is incorrect or incomplete. 3. Right to restriction of processing You are entitled to the restriction of the processing of your data if: (1) We are reviewing the correctness of your personal data processed by us,(2) The processing of your personal data is illegal,(3) You need the personal data processed by us to pursue your rights after the purpose of processing the data has ended,(4) You have filed an objection against the processing of your personal data and we are in the process of reviewing your objection. 4. Right to erasure You are entitled to having your data deleted if: (1) We no longer need your personal data for the original purpose,(2) You revoke your consent and if there is no further legal basis for the processing of your personal data,(3) You have objected to the processing of your personal data and – if the matter in question is not direct marketing – there are no priority grounds for continued processing of the data,(4) The processing of your personal data is illegal,(5) The deletion of your personal data is mandated by law,(6) Your personal data refers to minors for information society purposes. 5. Right to notify If you have exercised your right to have data corrected, deleted or restricted in terms of processing, we will notify all recipients of your personal data, to correct, delete or restrict the processing of such data. 6. Right to data portability You have the right to receive any personal data you have provided to us based on consent or to perform a contract in a structured, commonly used and machine-readable format and to have same transferred to another data controller. If this is technically feasible, you have the right to instruct us to send this data directly to another data controller. 7. Right to object In the event that special grounds apply, you have the right to object to the processing of your personal data. In this case, we will no longer process your personal data, unless we are in a position to raise mandatory protection worthy grounds for continued processing. If your personal data is being processed for the purpose of direct marketing you do, at any time, have the option to object. 8. Right to revoke consent You have the right to revoke any consent you have given us at any time. The revocation of consent does not affect the legitimacy of any prior processing on the basis of consent. 9. Right to file a complaint with a supervisory authority Any other administrative or court enforced legal remedies notwithstanding, you shall have the right to file a complaint with the competent supervisory authority, if you are of the opinion that the processing of your personal data by us is in violation of the EU GDPR. The competent supervisory authority for our company is: Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)Promenade 1891522 AnsbachGermany Telephone: +49 (0) 981 180093-0Email: poststelle@lda.bayern.de