Data Privacy Statement
BMW AG takes the protection of your personal data very seriously. Hereby we explain how we protect your privacy and what the implications are for you if you use the Urby app. It goes without saying that we comply with all statutory provisions regarding data protection. As soon as you click the button ‘I accept’ in the app, you confirm that you have read, understood and agree with the information regarding the usage of your data in this privacy statement. This privacy statement explains the usage of your data per function of the app. Please note, that the available functions per user can differ. Consequently, it is possible that there are functions described which might not be relevant for you. BMW AG exclusively uses your data for the purpose of providing you the Urby service. The use of your data for the purpose of advertisement or market investigation is only legalized in case of your explicit consent. You have the right to request information at any time about the data stored about yourself by BMW, to have your data corrected or deleted, to demand restriction of processing, to object to processing or to request the portability of your data. For this purpose, you may contact BMW via email@example.com . In case you have doubts that your concerns and complaints in respect to an appropriate processing of your personal data are not dealt with special care, you have the right to lodge a complaint with a supervisory data protection authority. Further details regarding your privacy rights can be found at: https://www.bmw.com/en/footer/legal-disclaimer.html
Information about location-based data
The Urby app can locate your geographical position based on your device, as long as you explicitly agreed to and as far as your device supports this function. Your position is determined by GPS-signal, satellite signal, mobile connectivity, WLAN-connection or other network-based methods.
The Urby app exchanges location-based data as well as device- and network recognition data with BMW servers. As our services can be offered on various platforms and applications, those again can access this location-based data. The information is not used to personally identify you, as long as you did not explicitly give us your approval. Collected data is permanently stored, yet all anonymized/pseudonymized within 24 hours. If any questions regarding the usage of your data in the Urby app, please contact us via: firstname.lastname@example.org
Registration and Login
A unique ID is generated when downloading the iOS app. This ID is sent to Apple Inc., Cupertino, CA, USA, as well as to BMW AG to enable push notifications. After downloading the app from the app store, you are asked to enable location-based services and push notifications. When agreed, only your current location is sent as start point to the BMW AG server at the moment that you request a trip.
After installing the application on your device, it is necessary to register for the service. For registration, we ask you the following information: email address, first name, last name, company and department name, phone number, and password. The email address also serves as user name. This data is sent on a secure connection to the BMW servers, where they are stored. Here, the password is stored in the database as hash. Additionally, device data like phone model, operating system and version are being send to BMW servers, to optimize user experience and compatibility of the service. After successful registration, a token is generated based on the unique user name. This token is stored on your device to enable cryptically secured data communication between your device and the BMW servers. Collected data is anonymized/pseudonymized within 24 hours and permanently stored. This data is used to analyze errors and create anonymized/pseudonymized user statistics.
Data usage The Urby app connects to the BMW servers in regular intervals to update the information for your active trip.
Your personal data can be used to get in contact with you to inform you about change of service, important notifications regarding our service or product, and for customer relation management purposes. Furthermore, your data is used to develop, manage and improve our service concept, your service experience and our service offer.
BMW AG uses third-party vendors and hosting partners as commissioned service providers to provide the necessary hardware, software, networking, storage, and related technologies. These third parties and partners are only allowed to process and analyze your data for the purpose of this service. Our services and products are provided via resources and servers which are distributed all over the world. Therefore, it is possible that your data will be transferred to other countries than the country where you are using our services and products. We guaranty you a legal basis for such transfers as well as an adequate security of your data in accordance with regulations. In exceptional cases like prosecution, we are obliged to cooperate with local authorities and give access to data according to the local law. In case BMW decides to buy, sell, join or reorganize in any form, we reserve the right to disclose personal data in favor of the potential or actual buyer and its subsidiaries.
For the purpose of crash reporting and real-time analytics, the Urby app uses the framework “Crashlytics” by Fabric. Fabric's analytics engine provides insights into app usage like number of downloads, engagement and number of certain function calls. We use the information we get from Crashlytics only to improve our services and products. Further information about fabric’s use of data for marketing purposes, settings and options to object can be found at: https://fabric.io/kits/ios/crashlytics