Data controller

T.O.B. s.r.o. with a registered office at Bánovská 1033, 913 21 Trenčianska Turná (the "dealer") is your personal data controller.

The dealer is an independent entity that is not part of the BMW Group but operates under the BMW brand through a license to sell and service BMW vehicles. Please refer to the BMW Group Slovakia Data Protection Policy ("BMW Slovakia") or BMW Financial Services ("BMW FS") for information on personal data processing by BMW Group companies.

How we collect your personal data

The dealer will collect your personal data in the following cases:
  • If you contact us directly, e.g. through the dealer's webpage to request information about BMW products and services.

  • If you buy a product or service directly from us.

  • If you respond to our direct marketing campaigns, e.g. fill in a reply card or enter data on our webpage.
  • If your personal data is forwarded to us from BMW Group companies or other third parties.
  • If other business partners transfer your personal information to us with permission.
  • If we obtain your personal data from other sources, e.g. commercial intermediaries.
If you provide data on behalf of someone else, you must ensure that this Data Protection Policy is provided to him/her beforehand. If you are under the age of 16, please do not provide us with any of your information unless you have the consent of a parent or guardian. Please help us keep your information up to date by informing us of any changes to your contact information or preferences.

What data can be collected about you

The following types of data may be collected about you:

  • Contact Information ► - Name, title, initials, address, telephone numbers, e-mail address.
  • Personal information ► - Date of birth, marital status, family members, driving license type, occupation, test drive, hobbies, preferred payment method, preferred contact channel, VIN, company name.
  • Interests ► - Information about your vehicle preferences.
  • Using the website and communication ► - How you use our website and whether you open or forward our communications, including information collected through cookies and other tracking technologies, (for details, see our cookie policy here).
  • Sales and service information ► - Purchase related information including Customer ID, contract numbers, choice of funding through BMW Financial Services, Support and Service including complaints and claims.
  • Customer history data ► - Customer satisfaction rate and additional self-care information, offers received, vehicle purchase data including model, configuration, purchase date, registration date, registration number, order date, delivery date, vehicle holder, pricing, warranty information, residual value, optional insurance information (e.g., number of household vehicles, use of mobility services), purchase data for parts, accessories, and lifestyle products, data collected during dealer visits (e.g. requests, consultation information, responsible sales consultant, service history), campaign history and responses, complaint history, service history.
  • Using devices and services ► - How you use your device and the services offered, mobile device or vehicle.
  • Vehicle configuration data ► - Information about the functions and current settings of your vehicle, identified by VIN.
  • Technical specifications of the vehicle ► - Details of how the engine and systems work or worked within the vehicle, tank fill level, remaining range, RTTI data (inbound navigation data), outdoor temperature, mileage, average speed.
  • Vehicle / device location data ► - The position of your vehicle or mobile device.

How your data can be used

The use of personal data under EU data protection regulations must be based on one the following legal purposes, determined specifically for each use as contained in this protection policy.

An explanation of the scope of available legal purposes can be found here.

Customer support and marketing - Responding to questions and providing you with news and offers ►

The dealer collects contact information, personal information, interests, customer history data, site usage and communication, and can use sales and service data, vehicle configuration data and technical data about the vehicle to determine which news and offers are most likely to be attractive to you. The dealer can contact you regarding these offers in accordance with your marketing preferences. The dealer can share this information with T.O.B. s.r.o. and BMW Financial Services to further track your requests and provide you with the most relevant offers.

Reason for use: Consent, legitimate interest

Legitimate interest: Processing is based on the dealer's legitimate interest in promoting and providing information about its products and services. The fundamental rights and freedoms of current and potential customers have been weighed against the dealer's interest in processing personal data for the stated purpose.

Choice: Marketing consent may be revoked at any time. The customer may also object to data processing for direct marketing purposes.

Vehicle sales and service - Processing sales, configuration and service details of your vehicle ►

The dealer obtains contact details, vehicle configuration data, vehicle specifications and sales and service data, as well as customer history information when you buy, service or repair the vehicle as part of a sale or service, including warranty claims, which are used to provide necessary services and to report any problems with your vehicle. The company T.O.B. s.r.o. and BMW AG may have access to this information to resolve technical or other issues related to the provision of these services.

The abovementioned operators may also obtain limited vehicle location data during the repair process which will only be used in accordance with location data guarantees

Providing personal data for the purpose of selling and servicing vehicles is a contractual requirement. Failing to do so will have an impact on the proper performance of the contract or may render it unfeasible.

Reason for use: Performance of the contract, legitimate interests

Legitimate interest: Processing is based on the dealer's legitimate interest in maintaining the highest standard of sales, service and products offered by the dealer. The fundamental rights and freedoms of customers have been weighed against the dealer's interest in processing customer personal data for the identified purpose.

Choice: The Customer may object to the processing of his/her personal data at any time for any reason.

Compliance with binding requests for your data - Following the legal obligations of law enforcement agencies, regulators and courts ►

The dealer is subject to Slovak law and must comply accordingly. This includes the provision of data to law enforcement agencies, regulators and courts or dispute counterparties in proceedings or investigations anywhere in the world that they are obliged to do so. Where permitted, we will address any such request with you or you will be informed prior to our response unless it is at the expense of investigating or preventing a crime.

Providing personal data to comply with binding requests for your data is a legal requirement that depends on the particular application.

Reason for use: Statutory Obligation; the establishment, exercise or defence of legal claims.

Choice: None

Transfer to third parties

Personal data may be transferred to third parties while ensuring a legal basis.

Your personal information may be transferred to the following entities:

  • Companies within the BMW group
  • Contract partners and repair shops
  • Companies providing services to the dealer such as IT maintenance
  • IT maintenance, IT hosting, providers of the customer interactive center

While we cannot guarantee that data sent over the Internet or through the webpage will be free of cyber attacks, we and our subcontractors and business partners work hard to maintain physical, electronic and procedural safeguards to protect your data in accordance with applicable privacy requirements.

All your data is stored on secure servers or in secure permanent records by us, our subcontractors or business partners and is accessible and used only under our security policies and standards or the equivalent standards of subcontractors or business partners.

How we maintain the security of your data

We use a range of security measures including encryption and authentication tools to help protect and maintain the security, integrity and availability of your data.

While we cannot guarantee that data sent over the Internet or through the home page will be free of cyber attacks, we and our subcontractors and business partners work hard to maintain physical, electronic and procedural safeguards to protect your data in accordance with applicable privacy requirements. 

Among other things, we use measures such as:

  • Strictly restricted personal access to your data on a “need-to-know” basis and only for specifically stated purposes
  • Transfer of collected data only in encrypted form
  • Storing highly confidential data - e.g. credit card information - only in encrypted form

  • Use of firewalls on IT systems to prevent unauthorized access
  • Continuous monitoring of IT systems access to detect and halt the misuse of personal data

In cases where a password, (provided by us or chosen by you), is required to access parts of our webpage or any other portal, application, or service we operate, you are responsible for maintaining the confidentiality of the password and for any other security practices we inform you of. We ask you not to share your password with anyone.

Location data guarantees

Some services can only be provided through access to your location or your vehicle's location. We take the confidentiality of this location data very seriously.

The following guarantees apply to location data, including data acquired as part of vehicle service:

  • Data is retained and linked to you or your vehicle only as long as necessary to fulfil the purpose for which you have given consent
  • Data is obtained or accessed when it is necessary for provision of the requested service or in cases where we are legally obliged to keep and/or provide information. If we are asked to provide information to law enforcement agencies or any other third party, we will inform you if it is not at the expense of investigating or preventing a crime, or we are prohibited from doing so
  • Vehicle location data and device location data are not linked unless specifically required for the provision of selected service
  • Any other use of location data for analytical purposes will be based on irreversibly anonymized data sets

T.O.B. s.r.o. and BMW Financial Services may have access to vehicle location data and BMW AG may have access to the location data of equipment through the services they provide (e.g. ConnectedDrive).

At the time of purchase, activation or configuration of a service or application, (ConnectedDrive or Connected App), you will be provided with a detailed description of the location data obtained to provide location-dependent service. You can choose whether we store or collect this data on the MyBMW self-service portal. If not, future location data will no longer be collected. Please note that we may not be able to provide some features if you limit the collection of your location data.

How long do we keep your data

We keep your data only as long as necessary to fulfil the purpose which we received it, or any other related purposes, (for example if it is relevant for defending a claim against us). If the data is required for two purposes, it will be retained until completion of both but we will cease using it for the shorter purpose immediately upon completion of that purpose.

We restrict access to your data to those who need it for relevant purposes.

Our retention periods are based on business needs. Data no longer needed is either irreversibly anonymized, (anonymized data can be stored), or safely disposed of.

Usage for customer support and marketing: For data used for customer support and marketing purposes, we may retain your information until the latest time we have received marketing approval from you, or from the day you last responded to our marketing communications (aside from opting out of further communications).

Usage to perform a contract for the sale and/or service of a vehicle: For data used to perform any contractual obligation, we may retain this information for the duration of the contract plus 10 years for the subsequent resolution of any queries or claims.

Where the enforcement of claims is contemplated: In cases where we reasonably believe it will be necessary to defend, prosecute or exercise a claim against you, us or a third party, we may retain customer data until it is possible to enforce this claim.

Transfer of your data to third countries

Your personal data may be transferred to a country outside the European Economic Area (EEA) for any of the above purposes where data protection laws may be of a lower standard than within the EEA. We will ensure that all of your data that is available outside the EEA is handled under the applicable guarantee.

The European Commission has approved some countries outside the EEA, such as Canada and Switzerland, as countries that provide equivalent protection to that of the EEA Data Protection Regulations and therefore no additional legal safeguards are required. In countries that do not have such approvals, such as India or Japan, we will request your consent for transfer, or transfer it under contractual clauses approved by the European Commission which directly impose equivalent data protection obligations on the recipient unless permitted by applicable law on data protection in order to conduct such transfers promptly.

Please contact us here to request a copy of the specific guarantee for your data export.

Contact details, data protection rights and complaints to the data protection authority

You have the right to:

  • Request further details about the use of your data
  • Access your personal data and a copy of the data which has been provided to us
  • Receive your personally provided data in a structured, commonly used machine-readable form, and, where feasible, transfer it with your consent or by the terms of your contract automatically to another controller without restriction
  • Request updates or changes to any inaccuracies in your data
  • Request deletion of any data we no longer have a legal requirement to hold
  • Revoke your consent in order to terminate data processing in cases where processing is based on consent and related to direct marketing
  • Object to any processing, including profiling, based on legitimate interests or due to a specific situation unless our reasons override your data protection rights
  • Request limits to how your data is used, e.g. during the investigation of a complaint

Your application of these rights is subject to certain exceptions in the public interest, (such as the investigation or prevention of a crime), our interests, (e.g. legal confidentiality), or the rights and freedoms of others. If you exercise any of these rights, we will verify your entitlement and respond without unnecessary delay within thirty days. In complicated cases or when many requests have been received, this period may be extended by anothersixty days, in which case you will be notified.

If you are dissatisfied with the use of your data or our response to the application of these rights, you are entitled to file a complaint with the data protection office at

Discover more

Súbory cookie na doméne

Akceptujte súbory cookie.
Zistiť viac, vrátane informácií o tom, ako odmietnuť súbory cookie.