John Morrison Motors Limited – Revised Privacy Policy.

1. What company is covered by this policy?

The following company is covered by this policy in the Republic of Ireland;

Short name	Full name
Morrison BMW	John Morrison Motors Limited

Note: for ease of reading the company is referred to throughout this policy by its Short name.

Morrison BMW is registered at this address:

Old Cork Road

Cahir

Co. Tipperary

E21 XD25

What Morrison BMW does:

 

Morrison BMW provides Sales and Aftersales services.
Morrison BMW sells BMW and MINI vehicles.

Morrison BMW provides Aftersales services for BMW and MINI vehicles.

Morrison BMW acts as a Finance Intermediary and Insurance Intermediary in respect of car sales and services only.

Morrison BMW as Data Controllers and our responsibilities:

Morrison BMW is responsible for, and is the Data Controller of your personal information that it receives through our BMW and MINI websites.

Although this Privacy Policy describes some of the uses of your information made by Morrison BMW and MINI.



Contact details of each of the Data Controllers listed above and their Data Protection Officers can be found on the company website under Data Controller.

Changes to this Privacy Policy:

We may modify or update this privacy policy from time to time.

If we change this privacy policy, we will notify you of the changes. Where changes to this privacy policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under GDPR Law.

2. HOW DO WE COLLECT YOUR PERSONAL INFORMATION.

These are the main ways we collect your information:

• If you contact us directly via our websites or via telephone to request information about our products and services.
• If you buy a product or service directly from us (e.g. Lifestyle).
• If you reply to our direct marketing campaigns (e.g. filling out a response card).
• If your vehicle data (incl. vehicle identification number) is transferred to BMW AG while you’re having your vehicle serviced or repaired.
• If with your permission, other BMW Group legal entities or business partners transfer your personal data to us.
• If we acquired your personal data from other sources with your permission.
• When you apply for finance from BMW FS.

If you give information on behalf of someone else you must ensure that they have been provided with this Privacy Policy before doing so.

If you are under 16 please do not provide us with any of your information unless you have the permission of your parent or guardian to do so.

Please help us to keep your information up to date by informing us of any changes to your contact details or preferences. You may change or review your preferences by clicking here.

3. WHAT INFORMATION MAY BE COLLECTED ABOUT YOU.

The following types of personal information about you may be collected:

Contact Details

• Name
• Address
• Phone numbers
• Email address

Interests

• Information you provide us about your interests
• Including the type of vehicles you are interested in.

Website and Communication Usage

• How you use our website and whether you open or forward our communications, including information collected through cookies and other tracking technologies our cookie policy.

Sales and Services Information

• Relating to purchases and services, including complaints and claims.

Credit and Anti-Fraud Information

• Which establishes your identity, such as driving licences, passports and utility bills
• Information about transactions, requests for credit and non-payment of debts with us and third parties and credit ratings from credit reference agencies
• Fraud, offences, suspicious transactions, politically exposed person and sanctions lists where your details are included.

Device and Service Usage

• How you use your device (mobile or vehicle) and services offered on the device.

 

 

Vehicle Configuration Details

• Information about the features and current settings of your vehicle (identified by the Vehicle Identification Number).

Vehicle Technical Information

• About how the engine and systems within the vehicle perform.

Vehicle / Device Location Information

• Your vehicle’s or mobile device’s location

4. HOW YOUR PERSONAL INFORMATION MAY BE USED.

Use of personal information under EU data protection laws must be justified under one of a number of legal grounds and we are required to set out the grounds in respect of each use in this policy.

The main uses of your information are:

Customer Support and Marketing - to respond to enquiries and to bring you news and offers.

Morrison BMW use your personal data for customer care and for personalised communication of BMW and MINI product and service information, where necessary with your consent.

In order to ensure that you receive relevant and personalised communications. This may include data which is generated by your use of BMW or MINI products, for example contact details, preferences, customer history, vehicle data, app usage and online behaviour.

Vehicle Sales & Service – to process your sale, configure and service your vehicle

Morrison BMW will obtain Contact Details, Vehicle Configuration Details, Vehicle Technical Information and Sales and Services Information when you purchase, service or repair a vehicle from or with them as part of the sale or service and will use it to provide the services you request and notify you of issues in relation to your vehicle. This information may be accessed by BMW UK and BMW AG to troubleshoot technical or other issues relating to the delivery of these services.

The above mentioned controllers may also receive limited Vehicle Location Information during the repair process which will be used only in accordance with Location Information Safeguards.

Vehicle Finance – to assess your eligibility for finance and administer its repayment

When you apply for finance from BMW Financial Services (FS) via Morrison BMW you must provide certain personal information. Morrison BMW may share the information with Credit Reference and Fraud Prevention Agencies to help them decide whether to offer you finance. Using information about you in this way is necessary for Morrison BMW to make this decision and if you do not provide it to Morrison BMW they may not be able to offer you finance. Your information will be used by Morrison BMW / BMW FS as follows:

• BMW FS will check records about you and others held by them and by Credit Reference and Fraud Prevention agencies , for example to assess your application for credit and verify identities to prevent and detect crime and money laundering. The Credit Reference Agencies will place a search footprint on your credit file that may be seen by other lenders. They will supply public information (for example information held on the electoral register) as well as shared credit and fraud prevention information. The Fraud Prevention Agencies will use your personal information to prevent fraud and money-laundering and to verify your identity.
• If you are making a joint application or if you advise BMW FS of a director or that you have a spouse or financial associate, they will link your records together so you must be sure that you have their agreement to disclose information about them. Credit Reference Agencies also link your records together and these links will remain on your and their files until such a time as you, a director or your partner successfully files for a disassociation with the Credit Reference Agencies to break that link.
• If you give BMW FS false or inaccurate information or BMW FS suspect or identify fraud , they will record this and may also pass on the information to Fraud Prevention Agencies and other organisations involved in crime prevention. Law enforcement agencies may also access and use this information. If fraud is detected, you could be refused certain services, finance or employment.
• BMW FS and other organisations may access and use from other countries the information recorded by Fraud Prevention Agencies, which may be publicly-available sources.
• Your data may also be used for other purposes for which you give your permission or, in limited circumstances, when required by law or where permitted under the terms of relevant data protection and privacy law.

If you would like full details about how your information will be used by us, Credit Reference Agencies and Fraud Prevention Agencies, including details of your rights in relation to your information, or you would like to obtain contact details of the Credit Reference and Fraud Prevention Agencies.

Some applications may be automatically rejected due to our automated credit or anti-fraud filters. Wherever your application is rejected you may explain your position to BMW FS and BMW FS will reconsider the position if the rejection decision was undertaken without human intervention. BMW FS will provide you with general information on why your application has been rejected should the application not be accepted after human intervention.

BMW FS does not share Credit and Anti-Fraud Information with centres, BMW UK or BMW AG.

Compliance with legal requests for your information – to comply with our legal obligations to law enforcement, regulators and the court service.

We may be legally required to provide your information to law enforcement agencies, regulators and courts and third party litigants in connection with proceedings or investigations anywhere in the world. Where permitted, we will direct any such request to you or notify you before responding unless to do so would prejudice the prevention or detection of a crime.

Legal grounds for processing of your personal information.

The use of your information set out above is permitted under EU data protection law on the basis of these principal legal grounds:

• where you have consented to the use (you will have been presented with a consent form in relation to any such use and may withdraw your consent at any time
• By contacting us as 353 52 7441122
• Or by sending an email to [email protected]
• Or by writing to us at:

Morrison BMW, Cork Road, Cahir, Co. Tipperary.

• where necessary to enter into or perform our contract with you
• where we need to use it to comply with our legal obligations
• where we use it to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights (our legitimate interests include promoting the BMW Group business and tailoring news and offers to your profile, research and development of vehicle related products and services, assessing your credit-worthiness, detecting fraud and criminal activities)
• where necessary for us to defend, prosecute or make a claim against you, us or a third party

There may be uses that are permitted on the basis of other grounds; where this is the case we will use reasonable endeavours to identify the ground and communicate it you as soon as possible after becoming aware of the new basis.

Transfer to third parties.

Personal information which we collected may be transferred to third parties on your behalf, only with your consent.

This is only shared in a secure manner, using a consistent security protocol. When we share with other parties we ensure that they only use your personal data for the purpose it was collected and do not allow them to abuse this agreement.

The types of third parties are:

• Marketing agencies who run and manage marketing campaigns on our behalf
• Event companies who run and manage sponsored events on our behalf

5. HOW DO WE KEEP YOUR PERSONAL INFORMATION SAFE.

We use a variety of security measures, including encryption and authentication tools, to help protect and maintain security, integrity and availability of your information.

Although data transmission over the Internet or website cannot be guaranteed to be secure, we and our business partners work hard to maintain physical, electronic and procedural safeguards to protect your information in accordance with applicable data protection requirements. Our main security measures are:

• tightly restricted personal access to your data on a 'need to know' basis and for the communicated purpose only
• transferred collected data only in encrypted form
• highly confidential data stored only in encrypted form - e.g. credit card information
• firewalled IT systems to prohibit unauthorised access e.g. from hackers
• permanently monitored access to IT systems to detect and stop misuse of personal data.

If you have a personal password which enables you to access certain parts of our websites or any other portal, app or service we operate, do not forget your responsibility for keeping this password confidential. We ask you not to share your password with anyone.

6. HOW LONG WE KEEP YOUR PERSONAL INFORMATION FOR.

We retain your information only as long as is necessary for the purpose for which we obtained them and any other permitted linked purposes. If information is used for two purposes we will retain it until the purpose with the latest period expires; but we will stop using it for the purpose with a shorter period once that period expires.

We restrict access to your information to only those persons who need to use it for the relevant purpose.

Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised or destroyed securely.

Use for marketing:
We retain your personal information for as long as is necessary, but only for the relevant purpose that we collected it for. You retain the right to remove this consent at any point.

Use to perform a contract:
In relation to your information used to perform any contractual obligation with you we may retain that data whilst the contract remains in force plus one year to deal with any queries or claims thereafter.


Where claims are contemplated:
In relation to any information where we reasonably believe it will be necessary to defend or prosecute or make a claim against you, us or a third party, we may retain that data for as long as that claim could be pursued.

7. WHO MAY WE SHARE YOUR INFORMATION WITH.

Your personal information may be accessed by our staff and authorised agents.

 

8. HOW TO CHANGE YOUR PRIVACY PREFERENCES.

You can change your preferences, or withdraw your consent in relation to how Morrison BMW uses your personal information in one of the following ways:

• You are able to request information about your data stored at Morrison BMW and request the correction, deletion or restriction of your personal data for analytics and/or marketing use.
• By contacting us as 353 52 7441122
• Or by sending an email to [email protected]
• Or by writing to us at:

Morrison BMW, Cork Road, Cahir, Co. Tipperary.

9. CONTACTING MORRISON BMW ABOUT THIS PRIVACY POLICY.

If you have any questions in relation to our use of your information you should first contact the Morrison BMW Retail Centre in one of the following ways:

• By calling us as 353 52 7441122
• Or by sending an email to [email protected]
• Or by writing to us at:
  Morrison BMW, Cork Road, Cahir, Co. Tipperary.

In addition you may contact the responsible data privacy officer listed on our website for their contact details.

Under certain conditions you have the right to require us to:

• Provide you with further detail on the use we make of your information
• Provide you with a copy of your information
• Update any inaccuracies in the information we hold about you
• Delete any information about you that we no longer have a lawful ground to use
• Remove you from any direct marketing lists when you object or withdraw your consent
• Provide you with your personal information in a usable electronic format and transmit it to a third party (right to data portability)
• Restrict our use of your personal information
• Cease carrying out certain processing activities based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights (click Legal Grounds for more information).

Your exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime), our interests (e.g. the maintenance of legal privilege) and the rights of third parties.

If you are dissatisfied with our use of your information or our response to any exercise of these rights you have the right to complain to the Irish data protection commissioner.