2.1 The purpose of which you have given your consent:
We may rely on your consent to collect, use, disclose and/or cross-border transfer your Personal Data for the purposes mentioned in this Privacy Notice.
Where legal basis is consent, you have the right to withdraw consent at any time. This can be done so, by contacting our call center at 1397. The withdrawal of consent will not affect the lawfulness of the collection, use and disclosure of your Personal Data based on your consent before it was withdrawn.
2.2. The purposes we may rely on and other legal grounds for processing your Personal Data
Depending on the nature of our relationship with you, we collect, use and/or disclose your Personal Data for the following purposes, on the legal basis of legitimate interests, entering into or performance of contract, legal compliance, consent, or any other basis as permitted by applicable laws, as the case may be:
1) Business purposes: such as, to proceed with the transaction made by Business Partner, and perform any obligations and/or request made by Business Partners; to communicate with the Business Partner about products, services and projects of us or Business Partner (e.g., by responding to inquiries or requests);
2) Business Partner selection: such as, to verify your identity and Business Partner status, to conduct due diligence or any other form of background checks or risk identification on you and the Business Partner (including screening against publicly available government law enforcement agency and/or official sanctions lists); to evaluate suitability and qualifications of you and the Business Partner, to issue request for quotation and bidding; to execute contract with you or the Business Partner;
3) Business Partner data management: such as, to maintain and update lists/directories of Business Partner (including your Personal Data); to keep contracts and associated documents in which you may be referred to;
4) Relationship management: such as, to plan, perform, and manage the (contractual) relationship with the Business Partner (e.g., by performing transactions and orders of products or services, processing payments, performing accounting, auditing, billing and collection activities, arranging shipments and deliveries); to provide support services and keep tracks and records; to provide you a privilege and other offer; to learn more from your satisfaction; to manage and handling on complaint; to facilitate you on overseas events/trips and process on VISA application; to provide access to BMW system and other applications;
5) Business analysis and improvement: such as, to conduct research, data analytics, assessments, surveys and evaluation, reports on our products, services and your or the Business Partner's performance; to develop and improve marketing strategies and products and services;
6) Registration and Authentication: such as, to register, verify, identify, and authenticate you or your identity;
7) Complying with reasonable business requirements, including but not limited to internal management, training, service quality, auditing, reporting, submissions or filings, data processing, control or risk management, statistical, trend analysis and planning or other related or similar activities;
8) IT systems and support: such as, to provide IT and helpdesk supports; to create and maintain code and profile for you; to manage your access to any systems to which we have granted you access; to remove inactive accounts; to implement business controls to enable our business to operate; to enable us to identify and resolve issues in our IT systems; to keep our systems secure, to perform IT systems development, implementation, operation and maintenance;
9) Security and system monitoring: such as, to authenticate and access controls and logs where applicable; to monitor system, devices and internet; to ensure IT security, prevention and solving crimes, as well as risk management and fraud prevention;
10) Dispute handling, such as, to solve disputes, enforce our contracts, establish, and exercise or defense of legal claims;
11) Any investigation, complaints and/or crime or fraud prevention;
12) Compliance with internal policies and applicable laws, regulations, directives and regulatory guidelines;
13) Liaising and interacting with and responding to government authorities or courts or tribunals;
Where we need to collect your Personal Data as required by law, or for entering into or performing the contract we have with you or Business Partner and you fail to provide that data when requested, we may not be able to fulfill the relevant purposes as listed above.
We will only collect, use, and/or disclose sensitive data on the basis of your explicit consent or where permitted by law.
