1. 1. Purpose

   BMW Korea (Co.) collects and utilizes personal information of members to provide as diverse services as possible for users to use BMW Driving Center.

2. 2. Items To be Collected and Purpose of Collecting Personal Information
   1. ① Items to be collected
      1. A. Essential items: Name, date of birth, gender, mobile phone number, phone number, address, e-mail address, bank account name holder, credit card information, ID, PIN, question and answer to give clue to PIN, I-PIN, connected information (CI), Information to check duplicated registration (DI), IP address, date of visit, service use records
      2. B: Optional items: Occupation, Marital status, interested models, expected timing of vehicle purchase
   2. ② Purpose of collection by item
      1. A. Essential items
         • - Name, date of birth, gender, ID, PIN: to identify individuals, building statistics, etc.
         • - Mobile phone, phone number, address, e-mail address: For the purpose of notification including information on implementation of the contract, for marketing purpose including event information such as service campaign
         • - Name, address, mobile phone number, address: for delivery of products ordered by customers, for statistical purpose
         • - Question and answer to give clue to PIN: For speedy process to remind of PIN when users forget their PIN
         • - Name of a legal representative/e-mail address, mobile phone number/telecommunication provider in use: To confirm legal representative’s consent for minors under the age of 14
         • - Bank account, name of account holder, name of bank, credit card information: To provide payment settlement service
         • - IP Address, date of visit, service use records (personal information automatically created): To prevent unauthorized/illecit use, to keep log in case of dispute settlement
      2. B. Optional items
         • - Occupation, marital status, vehicle model currently driving, interested model, expected timing of vehicle purchase
3. 3. Use and Period of Holding Personal Information Collected
   1. ① Pursuant to Act on Promotion of Information and Communications Network Utilization and Information Protection, etc, for members with no record of using the services in recent 3 years their information can be discarded or stop being managed in a method stipulated by the act.
   2. ② Information of members shall be discarded once the purpose of information collection or provision will be fulfilled as follows. However, when it is required to keep the information for a certain period of time as stated in the Act on Consumer Protection in Electronic Transactions, etc or Commercial Law or company policy for the purpose of confirming related rights and obligations, the information shall be stored for the designated period of time.
      • - For membership information, when the membership is cancelled or disqualified, consents of the members shall be obtained by disclosing the purpose of information storage, period and items of information to be stored in advance.
        1. A. Records of contract or commitment cancellation: 5 years
        2. B. Records in payment and provision of goods and others: 5 years
        3. C. Records of handing customer complaints and dispute settlement: 3years
        4. D. Record of mark, advertisement: 6 months
        5. E. Records of site access log: 3 months
        6. F. Records to prevent re-registration to avoid illicit use: 30 days
   3. ③ When members request to review information including transaction information stored after obtaining members’ consent, it shall be immediately processed to open the data for review after checking ID authentication.

※ You have the right to disagree with collection/use of personal information but when you disagree to provide essential items of personal information, it could restrict use of the services. However, disagree with provision of information required for marketing purpose only will not limit use of service.

1. 1. Objectives

   BMW Korea (Co.) may provide personal information of members who agree to provide their information to business partners of the Company, to provide wider spectrum of services and enhance quality of services.

2. 2. Information to be Collected and Used

   Business partners to whom personal information to be provided, items of information to be provided and purpose of information provision are as seen in the table below. The provision is made only for the information of those who agree with provision of information to a 3rd party and the information provided shall not be used outside of designated purpose. Member information shall be protected in accordance with relevant laws and regulations on personal information protection and all-out efforts are made to tighten up security to prevent incidents like information leakage.

   Information to be Collected and Used

   To whom information to be provided		Items of Information to be provided	Purpose of Use	Period of use
   Dealer	Grand Motors, National Motors, Deutsche Motors, Dongsung Motors, Barbarian Motors Shinho Motors, Kolon Motors, Handok Motors	Name, date of birth, gender, mobile phone number, phone number, address, e-mail address, occupation, marital status, vehicle model currently driving, interested mode, expected timing of vehicle purchase, Driving Center use information	Personal ID check to invite to events and provide services, purpose of information provision and sales including solicitation via phone ,SMS, e-mail and DM	Until fulfilling the purpose of personal information collection and use (when there is request for deletion, delete the information after ID checking)

3. 3. Withdrawal of Consents to Information Provision

   Members who want to withdraw consents to 3rd party Information provision can request to review, correct and delete information even after it is already provided to a 3rd party. Request for information review, correction and deletion and withdrawal of consent can be made via phone call or fax after ID confirmation. If members do not want to provide information in the future or want to renew consent, it also can be made via phone or fax after ID confirmation.

   • - When members file a request to withdraw consent to information provision that is already provided based on consents to use of information for marketing purpose, information of the members will be withdrawn or deleted safely and become irrecoverable using technical method within 7 days at the max after the request to change the consent status or withdraw consent.