LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA.

We only process your data if an applicable law permits us to do so. We process your data on the basis of Art. 6 and Art. 9 GDPR in particular, as well as on the basis of consent pursuant to Art. 7 GDPR. Among other things, we will base the processing of your data on the following legal bases. Please note that this is not a complete nor exhaustive list of legal bases, but merely examples that are intended to make the legal basis more transparent.

• Consent (Art. 6 Para. 1 S. 1 lit. a), Art. 7 GDPR, or Art. 9 Para. 2 lit. a), Art. 7 GDPR): We will process certain data only on the basis of your previously given explicit and voluntary consent. You have the right to revoke your consent at any time with future effect.
• Fulfilment of a contract/pre-contractual measures (Art. 6 Para. 1 S. 1 lit. b) GDPR): In order to initiate or execute your contract with BMW, BMW branches, and BMW partners, we need access to certain data.
• Fulfilment of a legal obligation (Art. 6 Para. 1 S. 1 lit. c) GDPR): BMW is subject to a number of statutory requirements. To meet these requirements, we must process certain data.
• Preservation of legitimate interests (Art. 6 Para. 1 S. 1 lit. f) GDPR): BMW will process certain data in order to safeguard its interests or those of third parties. However, this only applies if your interests do not dominate in individual cases.