Privacy
Privacy Policy Bodywork Juma Leuven
Introduction
This privacy policy applies to the processing of personal data by
Carrosserie Juma Leuven NV, Brusselsesteenweg 66, 3020 Herent, KBO 0435.559.791 (hereinafter referred to as “Carrosserie Juma Leuven” or “we”, “us”, or “our”)
The basic principles of this policy are based on the requirements of European data protection and privacy legislation, REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR”, hereinafter referred to as such).
Carrosserie Juma Leuven and the BMW Group: who's who?
Carrosserie Juma Leuven is an independent company and we are not part of the BMW Group. We use the BMW Group brands (BMW, BMWi, Mini, BMW Motorrad) under license to sell and service BMW Group vehicles and products. We provide customer services and support for technical issues.
We are appointed and recognized as a dealer by BMW Belgium Luxemburg NV/SA (hereinafter: “BMW Group Belux”) , which is part of the BMW Group. BMW Group Belux coordinates the activities of BMW Group in Belgium and Luxembourg: it provides dealers and agents, provides second-line support for technical issues, manages websites such as BMW.be and MINI.be, MyBMW accounts and the ConnectedDrive Service and promotes the BMW Group brands. BMW Group Belux also provides direct sales, for example via Fleet, Diplomatic Sales and BMWi agents.
When we act for BMW Financial Services Belgium NV/SA (hereinafter: “BMW Financial Services”) , which is part of the BMW Group, we do so as an intermediary for their financial contracts (e.g. leasing and renting contracts, instalment sales ) or for concluding their maintenance contracts.
BMW AG Munich , Bayerische Motoren Werke Aktiengesellschaft, Petuelring 130, 80788 Munich, (hereinafter referred to as "BMW AG") is the parent company of the BMW Group and provides most of its IT infrastructure through the aforementioned companies. BMW AG distributes its brands, products and services in various regions through affiliated companies that act as importers of these brands, products and services. Examples of affiliated companies of BMW AG in Belgium are: BMW Group Belux and BMW Financial Services.
Definitions
The terms used in this Privacy Policy have the same meaning as described in the GDPR.
Who is responsible for the processing of your personal data?
Carrosserie Juma Leuven is the 'controller' of personal data about you that you, and also BMW Group Belux, provide to us. Personal data collected by BMW Group Belux about your requests for sales and maintenance are forwarded to us if we have been specified by you as your favorite BMW dealer, “or if we are designated as your regional partner in the absence of a choice, as 'controller' to 'controller'. Where BMW Group Belux provides direct sales, we may sometimes act as a 'processor' (e.g. Diplomatic Sales, BMWi agents). While this Privacy Policy describes some of the ways in which BMW Group Belux uses your information, they may also collect other information about you and use that information in accordance with their own privacy policies, which you should consult. You should contact BMW Group directly Belux with questions about how your data is used. We refer you to the privacy policy of BMW Group Belux for more information.
BMW Financial Services is, where applicable, responsible for the processing, as 'controller' of the personal data collected in order to provide you, at your request, with their financial and maintenance contracts. We mainly act as 'processor' of your personal data , with the exception of consumer credit contracts, where we, in our role as credit intermediary, act as 'controller'. We refer you to the privacy policy of BMW Financial Services for more information.
BMW AG is primarily a service provider or data processor for the aforementioned parties. In addition to being the controller for data received through the use of the Connected App, BMW AG is also a joint controller (together with BMW Group Belux) for the technical provision of ConnectedDrive Services, mobile connected devices and connected car devices. BMW AG is the controller for vehicle data within the scope of product development, quality assurance and product liability. Please refer to the BMW AG privacy policy for further information.
Each of the above-mentioned controllers will use reasonable efforts to ensure that queries relating to processing by controllers other than those mentioned above are referred to the correct controller.
How do we collect your personal data?
- We collect your personal data through various touch points and contact channels where you will be informed via privacy messages before we collect the data, if:
- You contact us directly, e.g. via websites or by telephone to request information about our products and services;
- You purchase a product or service directly from us (e.g. repair or maintenance services);
- You provide us with your personal data in the context of BMW Financial Services products;
- You book a test drive with us;
- You participate in one of our events;
- You respond to our direct marketing campaigns, e.g. by completing a response card or entering data online on one of our websites;
- Your personal data is legally forwarded by companies of the BMW Group (e.g. BMW Group Belux, BMW Financial Services), or by other third parties;
- We obtain your personal data from other sources (e.g. list brokers).
Please help us keep your information up to date by notifying us of any changes to your contact details or preferences.
What personal data do we collect?
The following types of information are collected:
- Contact details (name, initials, title, gender, address, email, telephone/mobile number, fax, etc.);
- Personal information (date of birth, marital status, family members, (type of) driving license, profession, requests for information/test drive, preferred dealer, hobbies, preferred payment method, preferred contact channel, VIN, company name, …);
- Identification data (customer number/customer ID, contract number, etc.);
- Customer history (customer satisfaction score; quotes received; vehicle purchase details (incl. model, configuration, date of purchase, date of registration, license plate number, date of order, date of delivery, owner, price); warranty information; residual value; purchase details of parts, accessories and lifestyle products; details collected during visit to dealer (e.g. requests, consultation information, responsible sales advisor, maintenance history); campaign history / responses to campaigns; optional customer data about own vehicles of other manufacturers via e.g. the BMW used car platform; participation in events (location, company ); complaint history; maintenance history ...);
- Vehicle usage data - If the user has a ConnectedDrive/Ride account, the following data can be used: fuel tank capacity; remaining range, RTTI data (GPS input data), outside temperature; position data (including the pick-up location for rental cars, and the parking position) of a parked vehicle, only with activated ConnectedDrive/Ride account); mileage, average speed, use of digital services, etc.);
- Data provided in the context of BMW Financial Services products (e.g. contact details, contract information such as contract term, creditworthiness data, ...);
- App/website/social media data - If the user has registered or logged in, it is possible to use the following data: data on average app usage (click behavior in the apps), position data, use of online entertainment, use of our visited website (s), cookie data (subject to cookie policy approval), use of our social media websites (e.g. visits to and posts on forums, etc.).
What are the purposes and legal grounds for processing your personal data?
Sales, including test drives, accessories and lifestyle products, quotes - to respond to quote requests and to provide BMW Group services and products to you. This processing is based on the necessity for the performance of a contract, including pre-contractual interaction.
Financial contracts and maintenance contracts – to be able to draw up requests for quotations, or to provide a financial contract or maintenance contract, or to exercise contract management. This processing is carried out because it is necessary for the performance of the agreement, including in the pre-contractual phase, or because it is necessary to comply with a legal obligation.
Marketing communications, personalized marketing based on profiling/analytics, customer support and market research - To answer your questions and provide you with news and offers, for customer service, for specific communications about BMW Group products and services as well as for market research.
Carrosserie Juma Leuven processes and uses the personal data you provide (e.g. contact and personal data such as date of birth and type of driving license, hobbies and preferences) for customer service purposes, for specific communication of BMW Group products and services as well as for market research. Carrosserie Juma Leuven may use these data to its affiliated companies, who may use your data and contact you for the purposes stated above. Updates may be shared between the affiliated companies. This processing is based on our legitimate interest to maintain the best possible customer relationship and direct marketing.
Personal data may be used to create an individual customer profile by means of a statistical procedure. Thanks to this profile, you will receive marketing communications that are relevant to you, such as personalized offers from BMW Group Belux and from companies affiliated with BMW Group Belux (e.g. BMW Financial Services) as well as certain of its authorized dealers and service partners (e.g. the preferred dealership you have indicated, the authorized partner for the purchase, maintenance or advice regarding your vehicle as well as your regional partner). This processing is carried out on the basis of our legitimate interest to maintain the best possible customer relations and direct marketing.
The customer profile is forwarded from BMW Group Belux to the affiliated companies of BMW Group Belux (e.g. BMW Financial Services) and to certain of its authorized dealers and service partners (e.g. the preferred dealership you have specified, the authorized partner for purchasing, maintenance or advice regarding your vehicle as well as your regional partner). For the purposes stated above, and these companies may contact you with information relevant to you. Where available, the following data provided directly by you, or data generated by your use of products or services of BMW Group Belux or companies affiliated with BMW Group Belux (e.g. BMW Financial Services) and certain of its authorised dealers and service partners (e.g. the preferred dealership you have indicated, the authorised partner for purchase, maintenance or advice) regarding your vehicle as well as your regional partner), are used for the development of your profile: contact details (e.g. name, address, e-mail address); additional information and/or preferences (e.g. favourite dealership, hobbies); identification data (e.g. customer or contract number); customer history (e.g. received quotes, car purchase data, dealership data); vehicle data (e.g. usage data regarding BMW Connected app: mileage, range); app/website/social media data (e.g. online account usage data regarding myBMW or myMINI).
Maintenance, including repairs - regular maintenance, repairs, bodywork, air conditioning service, tire service, window repair, winter check, navigation updates, etc. This processing is done on the basis of the necessity for the performance of a contract, including pre-contractual interaction.
Aftersales/ After-sales service – to provide you with after-sales services, such as the sale of parts, warranty for new and used cars, BMW Road Assist (breakdown and accident), car wash, and car rental. This processing is done on the basis of the necessity for the performance of a contract, as well as on the basis of our legitimate interest to maintain the best possible customer relationship and to provide after-sales services.
Ensuring quality products and services from BMW Group, development of new products and services
We may use the data we receive through the provision of services for the quality assurance of products and services and product development. This processing is based on the balanced interests of meeting the high expectations of our customers regarding the quality of our current premium products and services. to meet their needs, as well as to accommodate their wishes in the field of new innovations.
In addition, BMW AG may use the data it receives through the provision of services to BMW Group Belux or its authorized dealers (including location data) in depersonalized form for the purpose of quality assurance of products and services and for product development. For this use, your information will first be depersonalized so that it cannot be directly linked to you.
Customer Support
- We may process contact details, device and vehicle data, as well as device and service usage data when providing customer support. This processing is done on the basis of the necessity to perform a contract including pre-contractual interactions (in relation to the goods and services that you have purchased), to comply with legal obligations (including in relation to your rights as a data subject) or based on our balanced interest in offering our customers the best possible goods and services.
Compliance with legal obligations
We process your data to comply with our legal obligations, such as:
- Official reporting – to comply with required legal reporting;
- Compliance with our legal obligations under the Consumer Credit Act;
- Compliance with our legal obligations in relation to anti-money laundering legislation;
- Product liability;
- Liability for material defects;
- To comply with our binding requests for your data – to comply with our legal obligations to law enforcement authorities, regulators and courts: All controllers are subject to and must comply with the laws of the country in which they operate.
Transfer and share data
Sharing your personal data with BMW AG, BMW Group Belux, BMW Financial Services, or other third parties will only take place if you have given your consent, unless when we share your data:
- To comply with our legal obligations, such as liability requirements;
- To provide you with second-line support, and in particular customer support;
- To be able to prepare quotation requests or to conclude a contract with BMW Financial Services or in the context of contract management;
- To be able to perform our contractual obligations. For example, your vehicle data (including vehicle identification number) will be forwarded to BMW AG while your vehicle is in for maintenance or repair;
- To resolve technical or other issues relating to a purchase, service, or repair of a vehicle from or with us (for example, contact information, vehicle data, sales data, and service data may be shared with BMW AG to resolve the issue).
We, BMW Group Belux and BMW AG, use a number of service providers to assist us in providing the specified services and uses. BMW AG provides IT and storage services to the controllers for most of these uses and therefore stores the majority of your aforementioned data on behalf of the controllers. Other processors that assist us provide IT infrastructure, IT maintenance and IT services, as well as apps and digital solutions. We are also assisted by marketing agencies and creative agencies for customer management, marketing and events.
When we share personal data or when we use service providers, agreements are concluded with appropriate measures and safeguards for the processing and sharing of data.
How long do we keep your data?
We retain your personal data only for as long as necessary to fulfil the purpose for which we obtained it and for any other permitted related purposes (e.g. if necessary in the context of defending a claim). We limit access to your data to those persons who need to be aware of this in the context of the purpose.
Our retention periods are based on business needs and data that is no longer needed is either anonymized (anonymized information may be retained) or destroyed.
How do we protect your data?
We use a range of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity, and availability of your information.
We, together with our service providers, subcontractors and business partners, make every effort to maintain physical, electronic and procedural safeguards to protect your information in accordance with applicable data protection requirements. We use security measures such as:
Strict access rules to your data on a 'need to know' basis and only for the specified purposes;
Transfer of collected data in encrypted form;
Storage of highly confidential data (e.g. credit card details) only in encrypted form;
Firewalls in IT systems to prevent access by unauthorized persons, e.g. hackers, to permanently monitor access to IT systems to detect and stop misuse of personal data.
Location data security
Certain services are only accessible if you provide your location or that of your vehicle. We take the confidentiality of this location data very seriously.
The following measures are taken for location data (including information accessible as part of the maintenance process):
Will only be kept in a form that can be associated with you or your vehicle for as long as necessary to fulfil the purpose;
Will only be obtained or accessed in that form if this is necessary to provide the requested service or if we are required by law to retain and/or make this data available (and if we are required to release this data). If we disclose your personal data to law enforcement agencies or other third parties, we will inform you of this unless this would prejudice the prevention or detection of a crime or is not permitted);
Vehicle and device location data is not linked unless necessary to provide the requested service;
Any other use of the location data for analysis purposes is done with anonymized data sets.
We have access to the vehicle's location data and BMW AG has access to the device's location data through the services they provide (e.g. ConnectedDrive).
You will receive a detailed description of the location data we receive in order to provide a specific location-based service when you purchase the vehicle or activate or configure the service or app (e.g. ConnectedDrive).
What are your rights?
In certain circumstances, you have the right to ask us to:
We provide you with more details about how we process your personal data;
We will provide you with a copy of all data you have provided to us in a structured, commonly used and machine-readable format (“Data Portability”);
We correct any inaccuracies in the data in our possession;
We erase data that we are no longer permitted by law to have in our possession;
If the processing is based on consent and relates to direct marketing, you withdraw your consent so that we stop that particular processing;
You object to any form of processing, including profiling, on the basis of the weighed interests or grounds, unless our reasons for such processing override the infringement of your privacy rights;
We may use your information to a limited extent while a complaint is being investigated.
You exercise these rights subject to certain exceptions to protect the public interest (e.g. preventing or detecting crime) and our interests (e.g. preserving legal privilege). If you exercise these rights, we will, in most cases, within one month to check whether you are entitled to this.
If you are not satisfied with our use of your information or our response to the exercise of these rights, you have the right to lodge a complaint with your data protection supervisory authority. The Belgian supervisory authority for data protection is the Data Protection Authority .
Contact Us
If you have any questions regarding our use of your personal data, or regarding this privacy policy, or if you wish to exercise your rights in connection with the processing of your personal data, please contact us by letter or email: privacy@juma .net.bmw.be
Version 0
