Concorso d'Eleganza Villa d'Este

Go to the store and download the event app


Information pursuant to Article 13 of the General Data Protection Regulation (GDPR):

We treat your data in accordance with the same high standards that you expect from our products and services. Our aim is to create and maintain the basis for a trusting business relationship with our customers and prospective customers. The confidentiality and integrity of your personal data are of particular concern to us.

Who is responsible for data processing?

Bayerische Motoren Werke Aktiengesellschaft, Petuelring 130, 80788 Munich, Germany; registered office and court of registration: Munich HRB 42243 (hereinafter referred to as “BMW”) shall provide certain audio, photo and video recordings to the customer under the designation “Concorso d’Eleganza Villa d’Este” and is responsible for data processing in this context.

What data do we process and for what purpose?

Your personal data are processed in connection with the Concorso d’Eleganza Villa d’Este for the following purposes:

Media Coverage about an event related to BMW (Article 6 (1) (f) GDPR)

In the context of the Concorso d’Eleganza Villa d’Este, audio, photo and video data are processed to ensure media coverage (publishing channels of the Concorso d’Eleganza Villa d’Este: official company and brand channels: Instagram, Facebook, LinkedIn, X, PressClub) based on legitimate interests.

How long do we store your data for?

We store your personal data only for as long as the relevant purpose requires such storage. If data are processed for multiple purposes, the data will be automatically deleted or stored in a form that cannot directly be traced back to you, as soon as the last specified purpose has been fulfilled.

How is your data stored?

We store your data based on the state of the art. For example, the following safeguards are used to protect your personal information from misuse or any other unauthorised processing:

  • Access to personal data is restricted to a limited number of authorised persons and is granted exclusively for the stated purposes only.
  • The data collected will only be transmitted in encrypted form.
  • Sensitive data are only stored in encrypted form.
  • The IT systems for processing the data are technically isolated from other systems to prevent unauthorised access, e.g. through hacking.
  • In addition, access to these IT systems is continuously monitored to detect and preclude misuse at an early stage.

Who do we share information with and how do we protect it?

BMW is a company with an international presence. Personal data are preferably processed within the EU by BMW employees, national sales companies, authorised dealers and service providers commissioned by us.

If data are processed in countries outside the EU, BMW will ensure that your personal data are processed in accordance with European data-protection standards on the basis of EU-standard agreements, including the appropriate technical and organisational measures. If you would like to see the specific security safeguards for the transfer of data to other countries, please contact us using the communication channels listed below.

BMW is a company with global operations. Personal data are preferably stored and processed within the EU by BMW employees, national sales companies, BMW partners and service providers commissioned by us. In exceptional cases, processing may also take place outside the EU, e.g. in the USA. Subject to your consent, the transfer is carried out in accordance with Article 49 (1) (a) GDPR.

For certain countries outside the EU, such as Canada and Switzerland, the EU has already determined a comparable level of data protection. Given the comparable level of data protection, data transmission to these countries does not require any special approval or agreement.

Contact details, rights of data subjects and your right to complain to a supervisory authority

If you have any questions about the way we use your personal data, please contact

You can also contact the responsible data-protection officer:

Data Protection Officer
Petuelring 130
80788 Munich, Germany

As an individual whose data is subject to processing, you may assert certain rights against us in accordance with the GDPR and other relevant data-protection regulations. The following section contains explanations of your rights under the GDPR.

Rights of data subjects

In accordance with the GDPR, you, as a data subject, are entitled to the following rights in particular:

Right of access by the data subject (Art. 15 GDPR):

You may request information about the data we hold about you at any time. This information includes, but is not limited to, the categories of data we have processed, the purposes for which we have processed this data, the origin of the data if we did not collect it from you directly, and, if applicable, the recipients to whom we have transferred your data. You can request a copy of your data free of charge. If you need to obtain additional copies, we reserve the right to charge you accordingly.

Right to rectification (Art. 16 GDPR):

You can ask us to rectify your data. We will take reasonable measures to keep the information we hold and process about you accurate, complete, and up to date, based on the most current information available to us.

Right to erasure (Art. 17 GDPR):

You can request the deletion of your data, provided there are legal requirements in place to support this. This may be the case under Art. 17 GDPR if:

  • the data are no longer required for the purposes for which they were collected or otherwise processed;
  • you withdraw the consent on which the data processing is based and there is no other legal basis for the processing;
  • You lodge an objection to the processing of your data and there are no overriding legitimate grounds for processing, or you object to the processing of your data for direct marketing purposes;
  • the data were unlawfully processed,

unless the processing is necessary

  • in order to ensure compliance with a legal obligation that requires us to process your data;
  • in particular in relation to statutory retention periods;
  • to enforce, exercise or defend legal claims.

Right to restriction of processing (Art. 18 GDPR):

You have the right to request that we restrict the processing of your data if:

  • you dispute the accuracy of the data – in which case processing may be restricted specifically for the time it takes us to verify the accuracy of the data;
  • processing is unlawful, but you reject erasure of your personal data, requesting that the data usage be instead restricted;
  • we no longer need your data, but you need it to establish, exercise or defend your rightful claims;
  • you have lodged an objection to the processing of your data, as long as it has not yet been established whether our legitimate reasons outweigh yours.

Right to data portability (Art. 20 GDPR):

At your request, we can transfer your data to another responsible person so long as this is technically possible. However, you are entitled to this right only if the data processing is based on your consent or is necessary to carry out a contract. Rather than receive a copy of your data, you may also ask us to transfer the data directly to another responsible person specified by you.

Right to object (Art. 21 GDPR):

You have the right to object to the processing of your data at any time for reasons that arise from your particular situation, as long as data processing is based on your consent, on our legitimate interests or those of a third party. In this case, we will cease to process your data. This does not apply if we can demonstrate that there are compelling legitimate grounds for processing that outweigh your interests, or if we need your data for the establishment, exercise or defence of legal claims.

Time limits for the fulfilment of the rights of data subjects

We make every effort to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific right or complexity of your request.

Restriction of information in the fulfilment of the rights of data subjects

In certain situations, we may be unable to provide you with information about all your data, due to legal requirements. If we are unable to fulfil your request for information in such a case, we will notify you of the reasons.

Complaints to supervisory authorities

BMW AG takes your concerns and rights very seriously. However, if you believe that we have not responded in an appropriate manner to your complaints or concerns, you have the right to lodge a complaint with a responsible data-protection authority.

Privacy Preference