Protecting your personal data when you visit our website and use our services is important to us. Your data will be protected within the limits of the law. In the following, we would like to inform you about when we collect which data and how we use them.
Collection and Processing of Personal Data
Data protection refers to the protection of personal information. This includes information regarding your identity such as your name, mailing address, e-mail address or phone number. Such personal data are collected and stored only if you have given us your consent to do so – for example, if you have subscribed to our newsletter (GDPR Article 6(1)(a)).
Use, Disclosure and Deletion of Personal Data
The BMW Foundation Herbert Quandt uses your personal data exclusively for the purposes of administering the website and of communicating with you. Personal data are processed by BMW Foundation employees, global contract partners, and by service providers we have commissioned, preferably within the EU. Your personal data will not be passed on to other third parties or used otherwise without your express consent. Exceptions can apply, for example if a legal requirement makes it necessary to provide information to authorities for the purposes of either public safety or criminal prosecution.
If data are processed in countries outside of the EU, the BMW Foundation uses EU standard contracts, including suitable technical and organizational measures, to ensure that your personal data are processed at the same level as European data protection. If you wish to see the specific security precautions for the transfer of your data to other countries, please contact us via the communication channels listed below.
In some countries outside the EU, for example Canada and Switzerland, the EU has determined that the level of data protection is comparable to that in Europe. The comparable level of data protection means that data transfer into these countries does not require any special permission or agreement.
Your personal data will be erased if you withdraw your consent (GDPR Article 17) via firstname.lastname@example.org or +49 30 3396 3500. We keep your personal data only as long as needed for the specified purpose. If we process your data for a number of purposes, they will be automatically deleted or stored in a way that cannot be used to identify an individual once the last specified purpose has been fulfilled.
Subscribers to the newsletter can unsubscribe from the newsletter any time via the unsubscribe link at the end of the newsletter and thus revoke their consent to the storage of their e-mail address and name.
If you want to obtain information about our storage of your personal data (GDPR Article 15) or wish to correct your data (GDPR Article 16), please contact us via the communication channels listed below.
Protection of Personal Data
We deploy various security measures in line with the current state of the art to protect and maintain the security, integrity, and availability of your data. These measures include:
- strict criteria for authorization to access your data (restriction to a limited number of people) and exclusively for the specified purpose;
- transfer of acquired data exclusively in encrypted form;
- storage of confidential data exclusively in encrypted form;
- firewall safeguarding of IT systems to provide protection against unauthorized access, for example by hackers;
- permanent monitoring of access to IT systems to detect and prevent the misuse of personal data.
A cookie is a small text file which is copied onto your hard disk by a website. Cookies do not cause any damage to your computer and do not contain any viruses. The cookies from our webpages do not collect any personal information about you.
We are using the following cookies on our website:
Name of cookies: _ga
Type: first party
Usage: Google Analytics user identification
Valid for: 2 years
Name of cookies: _gat
Type: first party
Usage: throttle request rate for analytic calls
Valid for: 10 min
Name of Cookies: wfvt_XXXXXXX, wordfence_verifiedHuman
Type: First Party
Verwendungszweck: Cookies set by wordfence security to identify users. Plugin is used to protect the site against malicious attacks.
Valid for: 30 min, 24h
Name of Cookies: cookie_notice_accepted
Type: First Party
Usage: Stores the information if cookie-notice-message was accepted or not
Valid for: 30 days
Furthermore, you can prevent Google’s collection and use of data generated by the cookie and related to your use of the website by downloading and installing this browser add-on.
We use the so-called “double opt-in” process for registration to our newsletter. This means that, after registering, you receive an e-mail asking you to confirm your registration. Registration to the newsletter is recorded in order to be able to document the registration process in accordance with legal requirements.
The data you provide when registering for the newsletter are used for newsletter delivery only. You can revoke your consent to the storage and use of your data and e-mail address at any time via the unsubscribe link in the newsletter.
We use Newsletter2Go as newsletter software. Your data are transmitted to Newsletter2Go GmbH (Köpenicker Str. 126, 10179 Berlin). Newsletter2Go is not allowed to sell your data or use them for other purposes than the delivery of newsletters from the BMW Foundation Herbert Quandt.
More information is available here: https://www.newsletter2go.de/informationen-newsletter-empfaenger/
Mobile Event App
LineUpr is responsible for the technical operation of the applications while the BMW Foundation Herbert Quandt is responsible for the content. LineUpr is prohibited from selling your data and using it for purposes other than providing the respective event applications of the BMW Foundation Herbert Quandt.
Rights of persons affected
In line with the basic EU data protection regulations, as the person affected you have the following rights in particular vis-à-vis the BMW Foundation Herbert Quandt:
Right to information (Article 15 of basic EU data protection regulations): You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data.
Right to correction (Article 16 of basic EU data protection regulations): You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us.
Right to deletion (Article 17 of basic EU data protection regulations): You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 of basic EU data protection regulations, this can be the case if
- The data are no longer required for the purposes they were acquired or otherwise processed
- You revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing
- You object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
- The data have been processed illegally where the processing is not necessary
- To ensure adherence to a legal obligation that requires us to process your data
- In particular with regard to legal retention periods
- To assert, exercise or defend against legal claims
Right to restriction of processing (Article 18 of basic EU data protection regulations): You can request that we restrict the processing of your data if
- You dispute the correctness of the data – for the period of time we need to check the correctness of the data
- The processing is illegal but you do not wish to have your data deleted and request a restriction of use instead
- We no longer need your data, but you need them to assert, exercise or defend against legal claims
- You have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours.
Right to data transferability (Article 20 of basic EU data protection regulations): At your request, we will transfer your data – where technically possible – to another responsible entity. However, this right only applies if the data processing is based on your consent or is required to fulfill a contract. Instead of receiving a copy of your data, you can ask us to send the data directly to another responsible entity that you specify.
Right to objection (Article 21 of basic EU data protection regulations): You can object to the processing of your data at any time for reasons that arise from your special situation provided the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we are able to prove there are compelling, defensible reasons for the processing that outweigh your interests or we require your data to assert, exercise or defend against legal claims.
Time limits for compliance with the rights of persons affected
As a general principle, we make every effort to comply with all requests within 30 days. This time limit, however, can be extended for reasons related to the specific rights of persons affected or complexity of your request.
Restriction in the provision of information regarding the rights of persons affected
In certain situations, legal specifications might require us not to provide information regarding all of your data. If we have to refuse your request for information in such a case, we will inform you of the reasons for refusal at the same time.
Complaints to supervisory authorities
The BMW Foundation Herbert Quandt takes your reservations and rights very seriously. However, if you are of the opinion that we have not dealt with your complaints or reservations adequately, you have the right to submit a complaint to the data privacy protection authorities responsible.
Please contact us for all matters relating to your personal data at:
BMW Foundation Herbert Quandt
+49 30 3396 3500
[As of: 17.05.2018]