DATA
Protecting your personal data when you visit our website and use our services is important to us. The processing of personal data, such as the name, address, e-mail address, or telephone number of a data subject shall always be in line with the General Data Protection Regulation (in the following: GDPR), and in accordance with the country-specific data protection regulations applicable to the BMW Foundation Herbert Quandt.
In the following, we would like to inform you about when we collect which data, how we use them and on which legal basis.
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in member states of the European Union and other provisions related to data protection is:
BMW Foundation Herbert Quandt
Reinhardtstr. 58
10117 Berlin
Website: www.bmw-foundation.org
Name of Data Officer
Magellan Säugling RechtsanwaltsgmBH
Brienner Straße 11, 80333 München
Tel. +49 89 5880316-10, Fax +49 89 5880316-11
info@magellan-legal.de
Data protection refers to the protection of personal information. This includes information regarding your identity such as your name, e-mail address or phone number. Such personal data is collected and stored only with al legal basis provided by the GDPR.
The BMW Foundation Herbert Quandt collects a series of general data and information when a data subject or automated system calls up the website. Personal data are processed by BMW Foundation employees, global contract partners, and by service providers we have commissioned, preferably within the EU. Your personal data will not be passed on to other third parties or used otherwise without your express consent. Exceptions can apply, for example if a legal requirement makes it necessary to provide information to authorities for the purposes of either public safety or criminal prosecution.
If data is processed in countries outside of the EU, the BMW Foundation uses EU standard contracts, including suitable technical and organizational measures, to ensure that your personal data are processed at the same level as European data protection. If you wish to see the specific security precautions for the transfer of your data to other countries, please contact us via the communication channels listed below.
In some countries outside the EU, for example Canada and Switzerland, the EU has determined that the level of data protection is comparable to that in Europe. The comparable level of data protection means that data transfer into these countries does not require any special permission or agreement.
Your personal data will be erased if you withdraw your consent (GDPR Article 17) via data-privacy@bmw-foundation.org or +49 30 3396 3500. We keep your personal data only as long as needed for the specified purpose. If we process your data for a number of purposes, they will be automatically deleted or stored in a way that cannot be used to identify an individual once the last specified purpose has been fulfilled.
If you want to obtain information about our storage of your personal data (GDPR Article 15) or wish to correct your data (GDPR Article 16), please contact us via data-privacy@bmw-foundation.org or +49 30 3396 3500.
We deploy various security measures in line with the current state of the art to protect and maintain the security, integrity, and availability of your data. These measures include:
– strict criteria for authorization to access your data (restriction to a limited number of people) and exclusively for the specified purpose;
– transfer of acquired data exclusively in encrypted form;
– storage of confidential data exclusively in encrypted form;
– firewall safeguarding of IT systems to provide protection against unauthorized access, for example by hackers;
– permanent monitoring of access to IT systems to detect and prevent the misuse of personal data.
A cookie is a small text file which is copied onto your hard disk by a website. Cookies do not cause any damage to your computer and do not contain any viruses. The cookies from our webpages do not collect any personal information about you.
You can disable the use of cookies any time via your browser settings. If you do this, you may not be able to use the full functionality of this website.
We are using the following cookies on our website:
Name of cookies: Cookie Consent
Type: first party
Usage: Record the user’s consent to our cookie policy.
Valid for: 1 year
Name of cookies: _gid
Type: first party
Usage: Google Analytics user identification
Valid for: 24 hours
Name of cookies: _ga
Type: first party
Usage: Google Analytics user identification
Valid for: 2 years
Name of cookies: _gat
Type: first party
Usage: throttle request rate for analytic calls
Valid for: 1 min
This website uses Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie will be generally transmitted to and stored by Google on servers in the United States. IP anonymization is activated on this website. This means that Google will truncate your IP address within the Member States of the European Union or in other contracting parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. Google will use this information for the purpose of compiling reports on website activity and providing the website provider with other services relating to website activity and internet use.
Furthermore, you can prevent Google’s collection and use of data generated by the cookie and related to your use of the website by downloading and installing this browser add-on.
On this website, the BMW Foundation Herbert Quandt has integrated components of the enterprise Facebook Inc. Facebook is a social network.
A social network is a place for social meetings on the Internet, an online community, which usually allows users to communicate with each other and interact in a virtual space. A social network may serve as a platform for the exchange of opinions and experiences or enable the internet community to provide personal or business-related information. Facebook allows social network users to include the creation of private profiles, upload photos, and network through friend requests.
The operating company of Facebook is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, the controller is the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each call-up to one of the individual pages of this Internet website, which is operated by the controller and into which a Facebook component (Facebook plug-ins) was integrated, the web browser on the information technology system of the data subject is automatically prompted to download display of the corresponding Facebook component from Facebook through the Facebook component. An overview of all the Facebook Plug-ins may be accessed under https://developers.facebook.com/docs/plugins/. During the course of this technical procedure, Facebook is made aware of what specific sub-site of our website was visited by the data subject.
If the data subject is logged in at the same time on Facebook, Facebook detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-site of our Internet page was visited by the data subject. This information is collected through the Facebook component and associated with the respective Facebook account of the data subject. If the data subject clicks on one of the Facebook buttons integrated into our website, e.g. the “Like” button, or if the data subject submits a comment, then Facebook matches this information with the personal Facebook user account of the data subject and stores the personal data.
Facebook always receives, through the Facebook component, information about a visit to our website by the data subject, whenever the data subject is logged in at the same time on Facebook during the time of the call-up to our website. This occurs regardless of whether the data subject clicks on the Facebook component or not. If such a transmission of information to Facebook is not desirable for the data subject, then he or she may prevent this by logging off from their Facebook account before a call-up to our website is made.
The data protection guideline published by Facebook, which is available at https://facebook.com/about/privacy/, provides information about the collection, processing and use of personal data by Facebook. In addition, it is explained there what setting options Facebook offers to protect the privacy of the data subject. In addition, different configuration options are made available to allow the elimination of data transmission to Facebook. These applications may be used by the data subject to eliminate a data transmission to Facebook.
The BMW Foundation Herbert Quandt has integrated components of the LinkedIn Corporation on this website. LinkedIn is a web-based social network that enables users with existing business contacts to connect and to make new business contacts. Over 400 million registered people in more than 200 countries use LinkedIn. Thus, LinkedIn is currently the largest platform for business contacts and one of the most visited websites in the world.
The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, United States. For privacy matters outside of the United States Linkedin Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a LinkedIn component (LinkedIn plug-in) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to the download of a display of the corresponding LinkedIn component of LinkedIn. Further information about the LinkedIn plug-in may be accessed under https://developer.linkedin.com/plugins. During the course of this technical procedure, LinkedIn gains knowledge of what specific sub-page of our website was visited by the data subject.
If the data subject is logged in at the same time on LinkedIn, LinkedIn detects with every call-up to our website by the data subject—and for the entire duration of their stay on our Internet site—which specific sub-page of our Internet page was visited by the data subject. This information is collected through the LinkedIn component and associated with the respective LinkedIn account of the data subject. If the data subject clicks on one of the LinkedIn buttons integrated on our website, then LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores the personal data.
LinkedIn receives information via the LinkedIn component that the data subject has visited our website, provided that the data subject is logged in at LinkedIn at the time of the call-up to our website. This occurs regardless of whether the person clicks on the LinkedIn button or not. If such a transmission of information to LinkedIn is not desirable for the data subject, then he or she may prevent this by logging off from their LinkedIn account before a call-up to our website is made.
LinkedIn provides under https://www.linkedin.com/psettings/guest-controls the possibility to unsubscribe from e-mail messages, SMS messages and targeted ads, as well as the ability to manage ad settings. LinkedIn also uses affiliates such as Eire, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua, and Lotame. The setting of such cookies may be denied under https://www.linkedin.com/legal/cookie-policy. The applicable privacy policy for LinkedIn is available under https://www.linkedin.com/legal/privacy-policy. The LinkedIn Cookie Policy is available under https://www.linkedin.com/legal/cookie-policy.
On this website, the BMW Foundation Herbert Quandt has integrated components of Twitter. Twitter is a multilingual, publicly-accessible microblogging service on which users may publish and spread so-called ‘tweets,’ e.g. short messages, which are limited to 140 characters. These short messages are available for everyone, including those who are not logged on to Twitter. The tweets are also displayed to so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter allows you to address a wide audience via hashtags, links or retweets.
The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, UNITED STATES.
With each call-up to one of the individual pages of this Internet site, which is operated by the controller and on which a Twitter component (Twitter button) was integrated, the Internet browser on the information technology system of the data subject is automatically prompted to download a display of the corresponding Twitter component of Twitter. Further information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons. During the course of this technical procedure, Twitter gains knowledge of what specific sub-page of our website was visited by the data subject. The purpose of the integration of the Twitter component is a retransmission of the contents of this website to allow our users to introduce this web page to the digital world and increase our visitor numbers.
If the data subject is logged in at the same time on Twitter, Twitter detects with every call-up to our website by the data subject and for the entire duration of their stay on our Internet site which specific sub-page of our Internet page was visited by the data subject. This information is collected through the Twitter component and associated with the respective Twitter account of the data subject. If the data subject clicks on one of the Twitter buttons integrated on our website, then Twitter assigns this information to the personal Twitter user account of the data subject and stores the personal data.
Twitter receives information via the Twitter component that the data subject has visited our website, provided that the data subject is logged in on Twitter at the time of the call-up to our website. This occurs regardless of whether the person clicks on the Twitter component or not. If such a transmission of information to Twitter is not desirable for the data subject, then he or she may prevent this by logging off from their Twitter account before a call-up to our website is made.
The applicable data protection provisions of Twitter may be accessed at https://twitter.com/privacy?lang=en.
The RESPOND Program by the BMW Foundation Herbert Quandt is jointly implemented together with UnternehmerTUM (UnternehmerTUM Projekt GmbH, Lichtenbergstraße 6, 85748 Garching, Germany). In the event of your application for the RESPOND Accelerator Program, personal data will be analyzed and reviewed jointly by the BMW Foundation Herbert Quandt and UnternehmerTUM. In the application process, we work with a service provider called Leadspicker (Leadspicker is offered by WEB Project, s.r.o., ID No.: 28596935, registered seat at Želatovská 2767/37, Přerov I-Město, 750 02 Přerov, the Czech Republic).
You can find further information about the data security of Leadspicker here: https://leadspicker.com/web/legal/privacy/. We have – according to the EU-GDPR – a data protection agreement with Leadspicker to ensure the data security and your above-mentioned rights.
Your data will also be stored within the UnternehmerTUM network database. For this purpose, we use Salesforce and G-Suite. Salesforce is offered by Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 München, Deutschland. You can find the privacy policy of Salesforce here: https://www.salesforce.com/de/company/privacy/.
G-Suite is offered by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA. The privacy policy of Google can be found here: https://gsuite.google.com/terms/mcc_terms.html and here: https://gsuite.google.com/terms/dpa_terms.html.
We use LineUpr GmbH (Könneritzstraße 7, 01067 Dresden) as a technical service provider for our event applications. A separate, password-protected and non-public application is created for each event. The password will only be made available to participants of the event and BMW Foundation staff. LineUpr’s privacy policy can be found here: https://lineupr.com/de/privacy-policy
LineUpr is responsible for the technical operation of the applications while the BMW Foundation Herbert Quandt is responsible for the content. LineUpr is prohibited from selling your data and using it for purposes other than providing the respective event applications of the BMW Foundation Herbert Quandt.
Art. 6(1) lit. a GDPR serves as the legal basis for processing operations for which the BMW Foundation Herbert Quandt obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6(1) lit. b GDPR.
The same applies to such processing operations which are necessary for carrying out pre-contractual measures, for example in the case of inquiries concerning our products or services. Is our company subject to a legal obligation by which processing of personal data is required, such as for the fulfillment of tax obligations, the processing is based on Art. 6(1) lit. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would have to be passed on to a doctor, hospital or other third party. Then the processing would be based on Art. 6(1) lit. d GDPR. Finally, processing operations could be based on Article 6(1) lit. f GDPR. This legal basis is used for processing operations which are not covered by any of the abovementioned legal grounds, if processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.
Such processing operations are particularly permissible because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a client of the controller (Recital 47 Sentence 2 GDPR).
In line with the basic EU data protection regulations, as the person affected you have the following rights in particular vis-à-vis the BMW Foundation Herbert Quandt:
Right to information (Article 15 GDPR):
You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data.
Right to correction (Article 16 GDPR): You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us.
Right to deletion (Article 17 GDPR): You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 GDPR, this can be the case if
– The data are no longer required for the purposes they were acquired or otherwise processed
– You revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing
– You object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising
– The data have been processed illegally where the processing is not necessary
– To ensure adherence to a legal obligation that requires us to process your data
– In particular with regard to legal retention period
– To assert, exercise or defend against legal claims
Right to restriction of processing (Article 18 GDPR): You can request that we restrict the processing of your data if
– You dispute the correctness of the data – for the period of time we need to check the correctness of the data
– The processing is illegal but you do not wish to have your data deleted and request a restriction of use instead
– We no longer need your data, but you need them to assert, exercise or defend against legal claims
– You have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours.
Right to data transferability (Article 20 GDPR): At your request, we will transfer your data – where technically possible – to another responsible entity. However, this right only applies if the data processing is based on your consent or is required to fulfill a contract. Instead of receiving a copy of your data, you can ask us to send the data directly to another responsible entity that you specify.
Right to objection (Article 21 GDPR): You can object to the processing of your data at any time for reasons that arise from your special situation provided the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we are able to prove there are compelling, defensible reasons for the processing that outweigh your interests or we require your data to assert, exercise or defend against legal claims.
As a general principle, we make every effort to comply with all requests within 30 days. This time limit, however, can be extended for reasons related to the specific rights of persons affected or complexity of your request.
In certain situations, legal specifications might require us not to provide information regarding all of your data. If we have to refuse your request for information in such a case, we will inform you of the reasons for refusal at the same time.
The BMW Foundation Herbert Quandt takes all the right of data subjects very seriously. However, if you are of the opinion that we have not dealt with your data adequately, you have the right to submit a complaint to the data privacy protection authorities responsible. The supervisory authority responsible for our company is:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Telefon: +49 (0) 981 180093-0
Telefax: +49 (0) 981 180093-800
E-Mail: poststelle@lda.bayern.de
Data Officer
Magellan Säugling RechtsanwaltsgmBH
Brienner Straße 11, 80333 München
Tel. +49 89 5880316-10, Fax +49 89 5880316-11
info@magellan-legal.de
This privacy policy applies only to content on our servers, not to websites linked to or from our website.
[As of: February 08, 2023]
