Privacy policy

Controller

Bimmer Manufaktur GmbH, Chiemseestraße 38, D-83278 Traunstein, Germany, phone: +49-861-90029-0.

Purpose and legal basis

This portal exists solely to register and manage beta testers for products of Bimmer Manufaktur GmbH (currently: an Android Auto retrofit for BMW navigation systems). Processing is based on your consent (Art. 6(1)(a) GDPR), which you give when registering and may withdraw at any time with effect for the future, and on carrying out the beta test (Art. 6(1)(b) GDPR).

What data we process

• Registration: username, e-mail address, password (stored only as a hash), country, product, navigation system, vehicle identification number, optionally mobile number and message, chosen language, time of registration and of e-mail confirmation.
• Technical: when you submit a form we store a salted hash of your IP address and browser identifier (not the address itself) to protect against abuse. Failed login attempts and spam defence are logged briefly.
• Cookies: after logging in we set one strictly necessary session cookie (bt_session, 30 days, HttpOnly). There are no tracking or advertising cookies and no embedded third-party services.

What we use the data for

To manage your beta tester account, to send the confirmation code and to notify you by e-mail about the start and progress of the beta test. We need the VIN and the navigation system to check whether your car is suitable for the test. If you voluntarily give us a mobile number, we add you to the beta testers' WhatsApp group; WhatsApp's privacy policy (Meta Platforms Ireland Ltd.) then applies in addition. The number is not used for any other purpose.

Disclosure and hosting

Data is not passed on to third parties, except to the WhatsApp group if you wish. The server is operated by Hetzner Online GmbH (Gunzenhausen, Germany). E-mails are sent via the mail server of Bimmer Manufaktur GmbH.

Retention

Unconfirmed registrations are deleted automatically after 7 days. Confirmed accounts are kept until the end of the beta programme or until you withdraw your consent, and are deleted afterwards. Technical protection logs are deleted after 30 days at the latest.

Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection, and the right to withdraw your consent at any time. Simply write to the address above or reply to one of our e-mails. You may also lodge a complaint with a data protection supervisory authority, e.g. the Bavarian State Office for Data Protection Supervision (BayLDA).