This is the privacy policy of BMW Malaysia Sdn. Bhd., BMW Credit (Malaysia) Sdn. Bhd. and BMW Lease (Malaysia) Sdn. Bhd. (hereinafter collectively referred to as “BMW Group Malaysia” or “We”). BMW Credit (Malaysia) Sdn. Bhd. and BMW Lease (Malaysia) Sdn. Bhd. shall be collectively referred to as “BMW Credit & Lease”. BMW Group Malaysia, its parent companies and its respective subsidiaries, related companies and jointly controlled entities shall collectively be referred to as “BMW Group of Companies”. We may update this privacy policy from time to time by publishing the amended version on our websites. This privacy policy applies to personal information we hold about individuals. We will only use your personal information in accordance with the current data protection law in Malaysia and this privacy policy.

We try to keep our website secure. However, we ask you to recognise that when providing your information to us through our website or when you send us or ask us to send you any of your confidential information by email, that the internet and email communications over the internet may not be secure. We cannot be responsible for any loss or unauthorised interception of information transmitted via the internet which is beyond our control.

Our website may contain links to other websites outside of BMW Group Malaysia. Our privacy policy only applies to our website. We are not responsible for the content, privacy or security of other websites. If you submit any personal data to any BMW Group of Companies websites, the processing of your personal data shall be governed in accordance with the privacy policies of the respective BMW Group of Companies entity.

The confidentiality and integrity of your personal data is a matter of prime importance to us. We shall therefore process and use your personal data, which shall include your name, contact number, email address and mailing address and all such personal information, your sensitive personal data, which shall include date of birth, identification card or passport number, as you may have provided to us as stated below, with care and in accordance with the statutory provisions. 

Provision of your personal data is voluntary. However, if you do not provide us your personal data, we may not be able to provide you the products or services you request or process your personal data for the purposes set forth below.

Please understand that should you provide insufficient information, inaccurate information or decline to provide obligatory information that we request for, we may not be able to process your requirements and/or requests and ultimately be unable to provide you with your requirements and/or requests.

Personal data that we receive, and process will vary, depending on the types of products and services requested by you and may include but are not limited to:

• data which are collected from sales orders, application, consent or other forms, personal documents or as provided by you such as name, address, e-mail address, telephone number, occupation, identity card number, passport number, income, employer’s details, and any other such information that may be relevant to your application or request,
• data which may be provided by applicable co-hirers, guarantors, paymasters and/or parties providing security to a particular contract such as name, contact number, addresses,
• data collected through participation in customer satisfaction surveys, or when you respond to communications from or BMW Group of Companies, data provided by BMW Group of Companies and dealers, third party vendors, service providers, insurance companies which are consented by you,
• data about your transactions with BMW Credit & Lease such as the account status, account balances, repayment records, and account activity, data collected from credit bureau reports and credit reporting agencies to indicate your credit worthiness,
• data which may be provided by banks/financial institutions to verify genuineness of your provided documents such as bank statements, investment receipts,
• data which may be provided by plaintiffs and/or defendants of legal cases and/or legal firms to verify the status of any legal cases involving yourself (if any),
• data provided by governmental agencies, regulatory and statutory authorities,
• data provided by you such as comments, queries, or messages that you may submit to BMW Group Malaysia in whatever manner, or
• data from publicly available sources.

Personal data are collected, processed and used for the business activities of BMW Group Malaysia and to provide you with the services and/or products you have requested, including but not limited to the following purposes:

• to help BMW Group Malaysia verify your identity when you contact us,
• to respond to inquiries, comments and suggestions from you,
• to enable BMW Group of Companies, BMW authorized dealers, approved third party vendors and/or service providers to provide you with your requested products or services,
• to help BMW Group Malaysia detect and prevent fraud and/or illegal activities,
• to enforce or defend BMW Group Malaysia’s rights and your rights under, and to comply with, all applicable legislation, laws and regulations,
• for general administration purposes,
• for audit and risk management purposes,
• to conduct research, surveys and trend analysis on various matters, such as for product development, statistical, security and testing purposes,
• for transfer or proposed transfer of any part of BMW Group Malaysia’s interests, obligations, business and/or operations,
• if you obtain or have obtained products and/or services from BMW Credit & Lease:
• for BMW Credit & Lease to evaluate and monitor your financial standing and credit worthiness,
• for BMW Credit & Lease to perform facility reviews on approved credit facilities,
• for BMW Credit & Lease to manage and maintain your account, and if needed, to recover debts,
• for assessing, processing, and investigating insurance claims by BMW Credit & Lease, or
• for all other purposes incidental and associated with any of the above.

Additionally, your personal data may be collected, processed and used for the following optional purposes (“Optional Purposes”):

• to deal with the mailing and communication of information literature (e.g. invitations to exclusive events, information on promotions and offers, sending magazines and/or newsletters), or
• to identify other products and services which might be of interest to you and to inform you about BMW Group Malaysia’s products and services.

In respect of the purposes above, your personal data may be disclosed to and processed by:

• companies of the BMW Group of Companies (including our appointed agencies) within and outside Malaysia,
• BMW authorised dealers throughout and within Malaysia,
• data centres and servers located worldwide for storage purposes,
• BMW Group Malaysia’s approved service providers and third parties in connection with the operation of BMW Group Malaysia’s business, entities to whom you have consented the disclosure of your personal data to,
• BMW Group Malaysia’s professional advisors and external auditors, including without limitation legal advisors, financial advisors and consultants, and
• Governmental and regulatory authorities to comply with statutory, regulatory and governmental requirements, including any regulatory and governmental bodies in the European Union or other countries that your personal data is transferred to, for purposes such as reporting, risk, audit, controlling and any other obligatory functions and requirements.

If you obtain or have obtained products and/or services from BMW Credit & Lease your personal data may additionally be disclosed to:

• any hirer, guarantor, security provider and/or indicated paymaster for the facilities,
• credit reporting agencies defined under the Credit Reporting Agencies Act 2010,
• Bank Negara Malaysia, its participating financial institutions and other financial institutions,
• panel debt collection agencies in the event of any default in payment, and insurers, and
• insurance underwriters and/or brokers.

We take these measures to protect your personal data from loss, misuse, modification, unauthorised or accidental access or disclosure, alteration or destruction:

• by ensuring your personal data is kept as required by Personal Data Protection Act 2010;
• by ensuring that our staff not to misuse your personal data;
• by performing contract/agreement with system vendor, appointed courier company to ensure that they abide by the principles of the Personal Data Protection Act 2010 and our security measures; and
• putting in place physical, electronic and procedural safeguards in line with industry standards;

BMW Group Malaysia uses strict procedures and security features to prevent unauthorised access wherever possible. Personal data provided to BMW Group Malaysia via email are protected during transit using encryption such as Transport Layer Security (TLS). When personal data is stored by BMW Group Malaysia, we use computer systems with limited access housed in facilities using physical measures. Data stored in cloud services is in encrypted form including when they utilise third-party storage. The level of security of personal data which kept in a non-electrical environment are also treated with strict procedures and means.

BMW Group Malaysia will retain your personal data for a period that is as long as is necessary to fulfil the purposes for which it was collected. This includes a minimum period of seven (7) years after your relationship with us has ended. After this period, we will permanently delete your personal data. We will dispose your information by destroying the paper-based personal data and deleting the electronic personal data permanently.

Subject to the exceptions provided under Malaysian law, you can obtain information about your personal data stored by BMW Group Malaysia and, may request access to see any information stored about you and request correction, updating, deletion or disabling of the same at any time. Kindly contact us in writing at the contact details provided below for this purpose. Should you have any queries, objections or complaints about the processing of your personal data or if you wish to limit the processing of your personal data for the Optional Purposes or if you wish to withdraw consents which you have provided voluntarily, please contact us in writing using the contact details provided below.

We reserve the right to impose a fee for access of your personal data in the amounts as permitted under law. In respect of your right to access and/or correct your personal data, we have the right to refuse your request to access and/or make any correction to your personal data for the reasons permitted under law.

If you would like to make any requests to access or correct your personal data, forms are provided upon request. For this you may contact Customer Service:

• Hotline: 1 800 88 3000
• International: +603-2172 0088
• Email: bmw@my.bmw-apac.com

As a parent or legal guardian, please do not allow the minor (individuals under 18 years of age) under your care to submit personal data to BMW Group Malaysia. In the event that such Personal Data is provided to BMW Group Malaysia, you hereby consent to the processing of the minor’s personal data and personally accept and agree to be bound by this privacy policy and take responsibility for his or her actions. 

In some circumstances you may have provided personal data relating to other individuals (such as your spouse, family members or friends) and in such circumstances you represent and warrant that you are authorised to provide their personal data to BMW Group Malaysia and you have obtained their consent for their personal data to be processed and used in the manner as set forth in this Privacy Policy.

Attention: 

Data Privacy Officer – Mr. Lim Keng Biau, Francis (francis.lim@bmw.com.my)

Contact No.: 03-8887 3817

Or

Customer Data Delegate – Ms. Natalia Pavlenko (natalia.pavlenko@bmw.com.my)

Contact No.: +60 12-787 6629

Address: 3501, Jalan Teknokrat 5, 63000 Cyberjaya, Selangor.

BMW Voice: 1800 88 3000

MINI Voice: 1800 88 6464

International: +603-2172 0088

Email: bmw@my.bmw-apac.com   minivoice@mini.com

or 

Attention:

Data Privacy Officer – Ms. Srisopha Koammapat Niran (Srisopha.Niran@bmw.com.my)

Contact No.: 03-8317 1974

Address: 3501, Jalan Teknokrat 5, 63000 Cyberjaya, Selangor.

Telephone: +603-2719 2688

Email: csinfo@bmw.com.my

In the event of any conflict between the version in English and other language versions, the English version shall prevail.