DISCLAIMER

Data Protection

ALPINA Burkard Bovensiepen GmbH + Co. KG take the privacy of your personal information very seriously and will only use your personal information in accordance with the current data protection law in Germany and this privacy policy. We will not pass on your personal information to third parties without your consent.

Private Policy

1. Name and contact details of the responsible person / company
ALPINA Burkard Bovensiepen GmbH + Co. KG
Alpenstraße 35-37 86807 Buchloe / Germany
Directors: Andreas Bovensiepen, Florian Bovensiepen
Telephone: +49 (0) 8241 / 5005 – 0
Fax: +49 (0) 8241 / 5005 – 155
E-Mail: datenschutz@remove-this.alpina.de


2. External data protection officer 
TÜV SÜD Akademie GmbH
External Data Protection Officer ALPINA
Westendstraße 160
80339 München / Germany 


3. Establishment of contact and data collection
3.1. Customer service and data maintenance

ALPINA Burkard Bovensiepen GmbH + Co. KG (hereinafter referred to as ALPINA) tries to make it as easy as possible for the customer to contact us in order to be able to respond to any requests as quickly as possible. For this reason it is possible to establish contact with ALPINA at different points. These include the ALPINA contact form of the website (see 3.2), the ALPINA landing pages (item 3.3), the ALPINA Car Configurator, and the ALPINA Car Search for used and new vehicles (see 3.4) as well as registration form for thr "ALPINA News" mailing (see 3.6). Regardless of the contact possibilities already mentioned, it is possible for the customer to grant ALPINA consent with regard to customer service (see item 5).

All requests of this type are queried using the double opt-in procedure. All requests can only be processed if an e-mail automatically generated by ALPINA is confirmed by the recipient of the request. It is therefore necessary for the recipient to provide a correct e-mail address in order to confirm his identity. If the e-mail is not confirmed, no data is being stored or processed. The request procedure is aborted and deleted.

It is also possible to establish contact via the ALPINA online shop (see 3.5) and via ALPINA corporate presences on various social platforms (see 3.6). It is not possible at this point to grant consent regarding customer service beyond the request made, so that only the respective request can be processed. 

3.2. ALPINA contact form
The website contact form can be used to send customer requests directly to an expert department of ALPINA Burkard Bovensiepen GmbH + Co. KG. This process requires the customer name, a valid e-mail address, a categorization of the request and a description of the request. The request will only be forwarded if the customer confirms the confirmation e-mail sent in response (see item 3.1 for the so-called double opt-in procedure). 

If the customer requires customer service that goes beyond the request, the customer can grant consent to customer service (see item 5). The declaration of consent is not necessary to process the request.

3.3. ALPINA landing pages
During the launch of a new BMW ALPINA model, a special micro site will by offered by ALPINA on the Internet (so-called ALPINA landing pages), which allows the customer direct contact to ALPINA regarding the model. Besides a detailed product description and presentation, a contact form is offered on the ALPINA landing page. Moreover, the customer can request information about the product sent to him by post. The name, address and e-mail address are required for processing the request. Moreover, the confirmation e-mail must be confirmed (see item 3.1 for the so-called double opt-in procedure). If it is not confirmed, no data will be stored and the procedure cannot be completed. 

In addition, a voluntary declaration of consent can be granted if the customer requires customer service that goes beyond the request (see item 5). The declaration of consent is not necessary to process the request.
Furthermore, the data can be viewed by responsible service providers for the technical implementation and support of the micro sites (see item 6).

Infrequently it is possible for costumers to subscribe for test drives via ALPINA landing pages. Participation of these test drives is only for customers aged 23 and above. To make sure of that an age verification is necessary. Furthermore ALPINA needs the name and the e-mail address to ensure the organization of the test drive. The confirmation of the recipient's e-mail address will be done by double opt-in. Entering all other information is optional and is not necessary for the process . This data will be used for improved offerings and customer service. After submitting the request ALPINA will be contact the customer by mail or, if desired, also by telephone (after voluntary provision of  a telephone number) and forwarded this request to the ALPINA sales partners (see item 6) for completing the organization of the test drive.

3.4. ALPINA Car Configurator and ALPINA Car Search for used and new vehicles
Using the ALPINA Car Configurator it is possible to request offers for new ALPINA vehicles. Using the ALPINA Car Search it is possible to request offers for warehouse vehicles of ALPINA or a dealer. An enquiry via the ALPINA Car Configurator or the ALPINA Car Search is sent directly to the respective ALPINA sales partner of the BMW dealer organisation and a copy of the enquiry to ALPINA Burkard Bovensiepen GmbH + Co. KG. These processes require the customer name, a valid e-mail address and the customer’s address. The request will only be forwarded if the customer confirms the confirmation e-mail sent in response (see item 3.1 for the so-called double opt-in procedure). If it is not confirmed, no data will be stored by ALPINA.

If the customer requires customer service that goes beyond the request, the customer can grant consent to customer service (see item 5). The declaration of consent is not necessary to process the request. If the customer grants consent, the request will be passed on to ALPINA Burkard Bovensiepen GmbH + Co KG as well as to the respective trade organisation.

3.5. ALPINA online shop
ALPINA sells its own lifestyle articles and accessories through the ALPINA online shop. The online shop is based on the e-commerce system of Shopware AG and is managed by the service providers listed in item 6 in addition to ALPINA. 

In the online shop the articles can be selected and an order can be initiated. The order is sent directly to the respective expert department and processed there. An order requires the name, an e-mail address, the invoicing address and the shipping address. This data is collected in order to carry out the order process. In addition, a customer account can be created in the ALPINA online shop. The customer can thus store, view and if necessary change the data provided.
https://shop.alpina-automobiles.com/account

The data is stored in the ALPINA customer database and in the online shop system. Consent for further customer service cannot be given here. All data is only stored within the ALPINA online shop. Information on storage period, right to access and deletion can be found in items 8 and 9. However, a customer account is not necessary to carry out an order process. In the case of a single order, customer data will only be stored in the ALPINA customer database in accordance with legal requirements and will not be used for further customer measures. Currently only prepayment is offered as payment method, so that no bank details are stored. 

3.6. ALPINA News
ALPINA regularly distributes promotional e-mails with information about ALPINA and current ALPINA events and campaigns (e.g. anonymised customer surveys). You can register using the “ALPINA News” form to be included in the group of recipients. An e-mail address is required for registering. All other details are not mandatory for the registration, but serve a more targeted approach and can therefore be provided voluntarily. In order to guarantee the authenticity of the data, the confirmation of a verification e-mail is required (see item 3.1 for the so-called double opt-in procedure). If it is not confirmed, no data will be stored and the procedure cannot be completed. We refer to your voluntary declaration of consent with regard to the personal data you have provided, which was collected under item 3.1.-3.5 (legal basis: Art. 6 para. 1 lit. a EU GDPR).

We use rapidmail to send our promotional e-mails. Your data will thus be transmitted to rapidmail GmbH in the role of a processor. rapidmail GmbH is not allowed to use your data for purposes other than sending the newsletter. rapidmail GmbH is also not authorized to pass on or sell your data. rapidmail is a certified German software provider for newsletters and was carefully chosen according to the requirements of the GDPR and the German Federal Data Protection Act (BDSG).

For the purpose of analysis, e-mails sent via rapidmail contain so-called tracking pixels, which connect to the rapidmail servers when the e-mail is opened. This way it can be determined whether a newsletter message was opened. With the help of rapidmail, we can also determine whether and which links are clicked on in the newsletter message. All the links in the e-mail are so-called tracking links, which can be used to count your clicks.

Further notes on data privacy: For more details, please refer to the rapidmail data privacy notes at: https://www.rapidmail.de/datensicherheit For more details on the rapidmail analysis functions, please refer to the following links: https://www.rapidmail.de/wissen-und-hilfe

You may revoke your consent to the storage of your data and their use for the newsletter dispatch at any time by clicking on the unsubscribe link in the newsletter or by sending an e-mail to datenschutz@remove-this.alpina.de.

Following your revocation of consent, the data already stored will be anonymised and used for statistical purposes.

3.7. Contact through social networks

3.7.1. Facebook Inc. (“Facebook”) | Facebook Ireland Inc., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland:  Privacy policy https://de-de.facebook.com/policy.php
3.7.2. Twitter Inc. (“Twitter”) | Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland: Privacy policy https://twitter.com/de/privacy
3.7.3. Instagram /// Online service and part of Facebook Ireland Inc., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland: Privacy policy https://help.instagram.com/519522125107875
3.7.4. Google LLC and YouTube LLC (subsidiaries of Google LLC) | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland: Privacy policy https://policies.google.com/privacy?hl=de&gl=de
3.7.5. Vimeo LLC: Privacy policy: https://vimeo.com/privacy
3.7.6. XING SE: Privacy policy https://privacy.xing.com/de/datenschutzerklaerung
3.7.7. LinkedIn Inc.: Privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

3.8. Processing of personal data for the purpose of  application 
If you wish to submit an unsolicited or targeted application for one of our advertised vacancies, please send your application documents to the e-mail address provided on our website. For the purpose of receiving and processing your application, we process your personal data depending on the extent of the personal data transmitted by you. Legal basis for the processing of your personal data: Decision on or establishment of an employment relationship pursuant to Article 26 of the German Federal Data Protection Act. You are welcome to send us your application documents in an access-protected file. Please contact us and provide us with the information required to access your application documents. 

4. Automatically collected data

4.1. Cookies
Cookies are small text files that a web browser receives when visiting a homepage and stores locally on the PC, provided the web browser used is enabled for this. Cookies are not required for the smooth use of all ALPINA online presences. The user is free to deactivate cookies (see items 4.1.1 to 4.1.5). Our service providers use cookies to improve the quality of the ALPINA website’s design and content. ALPINA does not use cookies for sales or marketing purposes. Furthermore, cookies are not assigned to personal data. 

So-called session cookies are used only for the duration of a user’s visit to ALPINA’s online services. They are used, for example, to record which products have been viewed in the ALPINA online shop or placed in the shopping cart. If you leave our website, these cookies will be deleted. Persistent cookies are used in order to be able to offer products matching the interests of the user, as well as to improve the quality of our website during subsequent visits. The cookies used can be managed at any time in the web browser settings (see items 4.1.1 to 4.1.5).

As a rule, cookies cannot damage the software of the PC. They do not pose a security threat in the sense of viruses or the spying out of personal data. Nevertheless, we recommend using the Internet with up-to-date virus protection and an up-to-date and intact firewall at all times.  To accept, refuse, view and delete cookies, please use the help function of your browser. For the most common web browsers you will find links for managing, blocking or deleting cookies below.

4.1.1 Internet Explorer: https://support.microsoft.com/de-de/help/278835/how-to-delete-cookie-files-in-internet-explorer
4.1.2. Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen
4.1.3. Google Chromehttps://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de
4.1.4. Safari MacOS: https://support.apple.com/kb/ph21411?locale=de_DE
4.1.5. Opera software: help.opera.com/Linux/12.10/de/cookies.html

4.2. Google Analytics
Google Analytics is a web analysis service of Google LLC (“Google”) for the statistical evaluation of website use. The information is evaluated by ALPINA with date and time for internal statistical purposes with regard to advertising measures, website use and website optimisation. All analysed information is limited to the ALPINA websites and their use. Apart from ALPINA, service providers have access to the results (see item 6). The user’s behaviour is evaluated anonymised. Tracing back to personal data is not possible for ALPINA and its service providers. Pseudonymous user profiles are not created. Please find the terms of use for Google Analytics in the following link:
https://www.google.com/analytics/terms/de.html

Google Analytics uses a so-called tracking code, which is embedded in the HTML code of the individual pages of our websites. The information generated by the tracking code about your use of the websites is usually transmitted to a Google server in the USA and stored there.  In case of activation of the IP anonymisation, Google will truncate/anonymise the last octet of the IP address for Member States of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address is transmitted to a server in the USA and truncated there. On behalf of the website provider Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage to ALPINA. Google will not associate your IP address with any other data held by Google. If an analysis of user behaviour and the use of Google Analytics is not desired, a browser plug-in which prevents the analysis and processing can be downloaded and installed under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

In addition or as an alternative to the browser add-on, you can prevent tracking by Google Analytics on our pages by clicking on this LINK. An opt-out cookie is installed on your device. This will prevent Google Analytics from collecting data for this website and this browser in future as long as the cookie remains installed in your browser.

Should you wish to obtain information about the data stored by Google, you can find out about this under the following link. These data are stored separately from any Google Analytics data and can neither be viewed nor used in any form by ALPINA and its service providers.
https://myaccount.google.com/intro/dashboard

4.3. Google Maps
We integrate the maps of the “Google Maps” service – a map service that displays geographical information visually. Google Maps is a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland. Google Maps collects, processes or uses personal data according to its own specifications, which is why ALPINA assumes no responsibility for data collection, processing or use of data by Google Maps. Please note the terms of use of Google Maps (Google) at http://www.google.com/intl/de_en/help/terms_maps.html and the privacy policy of Google Maps (Google) at http://www.google.com/policies/privacy/. ALPINA does not receive any data from Google Maps or any data that may arise from the use of Google Maps.

4.4. Matomo
This website uses the open source software Matomo for the statistical evaluation of visitor access. The data collected by Matomo will not be transferred to other servers or passed on to third parties, but used in anonymised form to improve our offer. If your browser supports the “Do-Not-Track” technology and you have activated it, your visit is automatically ignored.

By using this website, you consent to the processing of data about you by Matomo in the manner and for the purposes set out above.

5. Purposes and legal bases of the processing
5.1 Customer service
(e.g. information concerning products and services, sending catalogues, sending newsletters via e-mail, offers, invitations to events).
We refer to your voluntary declaration of consent with regard to the personal data you have provided, which was collected under item 3.  (Legal basis: Art. 6 para. 1 lit. a EU GDPR).

5.2 ALPINA Car Configurator and ALPINA Car Search for used and new vehicles
Fulfilment of a contract or implementation of pre-contractual measures with the customer. (Legal basis: Art. 6 para. 1 lit. b EU GDPR)

5.3. Organization of ALPINA test drives (ALPINA landing pages)
Fulfilment of pre-contractual measures with the customer. (Legal basis: Art. 6 para. 1 lit. b EU GDPR)

6. Categories of recipients
We will only transfer your personal data to further recipients or grant further recipients access to your personal data if this is necessary for the respective purposes of processing these personal data, if we have entrusted further recipients with the performance of individual tasks or services and access to these personal data is necessary or cannot be excluded as a result or processors according to Art. 28 EU GDPR. The categories of recipients of personal data are:

• Internal departments involved in the execution of the respective business processes
• ALPINA sales partners within the BMW dealership network (see 5.2)
• Service providers for the maintenance and administration of our website
• Service providers for the purpose of order processing (i.a. sending newsletters via e-mail)

The transmission of your personal data processed through our website to the above-mentioned recipients is based on your consent in accordance with Article 6 para. 1 lit. a of the European General Data Protection Regulation, provided this is necessary for the fulfilment of a contract or the implementation of pre-contractual measures with you in accordance with Article 6 para. 1 lit. b of the European General Data Protection Regulation, due to the legitimate interest of the controller pursuant to Article 6 para. 1 lit. f of the European General Data Protection Regulation, due to order processing pursuant to Article 28 para. 1 of the European General Data Protection Regulation or, if necessary, for the decision or establishment of an employment relationship pursuant to Article 26 of the German Federal Data Protection Act.

In addition, your personal data processed through our website will be transmitted to state institutions or authorities if we are obliged to provide information within the scope of possible legal obligations or by official or judicial decision. Furthermore, your personal data processed through our website will be transmitted to government institutions or authorities if this is necessary to prosecute criminal offences against us as the injured party or to prosecute disruptions or misuse of our online offers or telecommunications services and facilities or to assert, exercise or defend civil law claims. (Legal basis for the processing of your personal data: legitimate interest of the controller pursuant to Article 6 para. 1 lit. f of the European General Data Protection Regulation, processing for other purposes by non-public bodies pursuant to Article 24 para. 1 of the German Federal Data Protection Act).

7. Data transfer to third countries (outside of the EU / EEA)
In principle, no personal information will be transmitted by ALPINA to third countries. If the interested party is not a resident of the EU / EEA, we will contact the nearest ALPINA sales partner of the BMW dealership network, who will in turn make contact with the interested party.

8. Storage duration and criteria for the storage of personal information
If, after 5 years, you do not respond to the sending of information concerning ALPINA products, all personal information relating to you will be deleted. If you no longer wish to have your personal information stored for the above purposes, you may exercise your rights at any time (see No. 8 an No. 9 – Deletion and Revocation). However, a deletion can only take place if there are no legal retention periods and it is technically possible. Otherwise personal information is made anonymous.

ALPINA stores personal data which are received in the context of applications. This data will be deleted after completion of the application process. This applies to applications (digital or in paper form) that are intended for a specific vacancy. Data which are part of unsolicited applications are stored for six months. If this data should be stored beyond the named period, a written consent of the applicant must be available.

9. Rights of those affected – your rights
We would like to point out, that your right to information, correction or deletion, limitation of processing and the right to personal information portability can be implemented at any time. To do this just contact us: datenschutz@remove-this.alpina.de

10. Note on the revocation of the declaration of consent
The revocation of the given consent can be made at any time. Please contact us. The legality of the processing carried out on the basis of the consent until the revocation (sending information on ALPINA products) is not affected.

11. Existence of a right of appeal to a supervisory authority
If you, as the affected person, believe that the present processing of your personal information violates specific content and requirements of the EUGDPR(Data Protection Regulation “Regulation (EU) 2016/679”), you have the right to complain to the competent supervisory authority.

12. Profiling - automated decisions
No automated decision-making is used to send information concerning ALPINA products.