You are here

Privacy and Cookie Policy

Privacy Policy - online version

This Privacy Policy is to be employed by all Alphera websites.  This must be linked to and from any satellite sites, where we are the data controller.

A layered (level) approach has been adopted to be aligned with a common BMW Group standard. This is described below.

The layered approach:

Level 1 - Overview of all sections:

This is the landing page of all Alphera sites will link to. It will use the URL https://alphera.co.uk/privacy-policy

Level 2 - Main text of each section:

Each of the sections in this level are linked to from Level 1. In some sections there is additional information beyond the Level 1 description. Location of this additional detail needs to be agreed before publication.

Level 3 - Further details:

Like Level 2, this level contains the additional detail that supports the policy text. It will not be part of the overall Privacy Policy as it is not under our direct control.

LEVEL 1: Alphera privacy Policy at https://alphera.co.uk/privacy-policy

This the landing page of the online Privacy Policy. All sections have been amended in line with local and central requirements.

Each of the nine boxes below link to the relevant detail section of the policy, i.e. Level 2.

*****insert table*****

LEVEL 2: ALPHERA Privacy Policy

These are the main text areas of the policy, linked to from each of the nine sections on the main policy landing page. The wording and link-images should reflect the landing page.

Which companies are covered by this policy

This is the privacy policy of ALPHERA Financial Services, a trading name of BMW Financial Services (GB) Limited.

References in this policy to “ALPHERA”, “we” or “us” are references to ALPHERA Financial Services. ALPHERA Financial Services trades at the following address:          

Summit One

Summit Avenue

Farnborough

Hampshire

GU14 0FB

ALPHERA as Data Controllers and its responsibilities:

ALPHERA is the Data Controller of the information which is used to grant and provide finance to you.

Ultimately, BMW AG is the parent company of the BMW Group in the UK and provides much of the IT infrastructure through the above mentioned companies. BMW AG is generally a service provider or Data Processor to ALPHERA.

Contact details of the Data Protection Officer for ALPHERA can be found here.

Although this Privacy Policy describes some of the uses of your information made by BMW, MINI and BMW Motorrad Centres, they may collect other information relating to you. Each BMW, MINI and BMW Motorrad Retail Centre is a Data Controller in relation to the information it processes for its own purposes. Their privacy policies will set out how they use your information.  If you have any queries regarding the use of your information by BMW, MINI and BMW Motorrad Centres please contact them directly or visit the privacy policy on their website.

Changes to this Privacy Policy:

We may modify or update this privacy policy from time to time.

If we change this privacy policy, we will notify you of the changes. Where changes to this privacy policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under local law (e.g. to object to the processing). 

  How do we collect your personal information

These are the main ways we collect your information.

  • If you contact us directly via our websites or via our customer services teams to request information about our products and services or to make an enquiry or other request.
  • From our network or motor dealers and brokers authorised to promote ALPHERA Financial Services products.
  • From our other Group companies and carefully selected business partners who provide products and services under one of our brands; and
  • Occasionally from other third parties who may lawfully pass to us information about you.

We may also transfer your personal information to a third party without your consent if it is in its legitimate interest or if there is a contractual obligation to do so.

If you give information on behalf of someone else you must ensure that you have their permission and that they have been provided with this Privacy Policy before doing so.

If you are under 16 please do not provide us with any of your information unless you have the permission of your parent or guardian.

Please help us to keep your information up to date by informing us of any changes to your contact details or marketing preferences. You may change or review your preferences by clicking here.

What information may be collected about you

The following types of personal information about you may be collected:

  • Contact Details
    • Name
    • Address
    • Phone numbers
    • Email address
  • Interests
    • Information you provide us about your interests
    • Including the type of vehicles you are interested in.
  • Website and Communication Usage
    • How you use our website and whether you open or forward our communications, including information collected through cookies and other tracking technologies (our Cookies Policy).
  • Credit and Anti-Fraud Information
    • Which establishes your identity, such as driving licences, passports and utility bills
    • Information about transactions, requests for credit and non-payment of debts with us and third parties and credit ratings from credit reference agencies
    • Fraud, offences, suspicious transactions, politically exposed person and sanctions lists where your details are included.
    • Employment history
    • Bank details
    • ALPHERA may also ask you to provide information about your health if it becomes aware of a condition that might affect your ability to repay the finance without difficulty.
  • If you apply for a BMW or MINI Branded insurance policy BMW FS will also ask you to provide:
    • certain information about your driving history, your past insurance claims (if any) and any accidents or motoring convictions;
    • provide the same information about any other drivers that may be on the policy;
    • confirm to us that: you have all other drivers’ permission to provide the information to us; that the other drivers are aware of the contents of this privacy policy; that the other drivers do not have any objection to us using or sharing their information in accordance with this privacy policy.

How your personal information may be used

Use of personal information under data protection laws must be justified under one of a number of legal grounds and we are required to set out the grounds in respect of each use in this policy. An explanation of the scope of the grounds available can be found here.

The main uses of your information are:

Customer Support - to respond to enquiries.

ALPHERA will use your personal data for customer care.  If you have a finance agreement with ALPHERA they may pass on your agreement details (term, monthly payment, rate, mileage, final payment, and agreement number and vehicle details) to the retailer who sold your vehicle to you to discuss your end of contract options, and if you agree, to discuss any future financing with ALPHERA.

Vehicle Finance – to assess your eligibility for finance to comply with legal obligations and for legitimate interests. For e.g.to ensure that ALPHERA offers the most appropriate offers of finance to you, to ensure that the services function correctly, to prevent fraud and money laundering and to ensure that your records are accurate and up to date

When you apply for finance from ALPHERA you must provide certain personal information.  ALPHERA may share the information with Credit Reference and Fraud Prevention Agencies to help them decide whether to offer you finance. Using information about you in this way is necessary for ALPHERA to make this decision and if you do not provide it to ALPHERA they may not be able to offer you finance. Your information will be used by ALPHERA and these agencies as follows:

  • ALPHERA will check records about you and others held by them and by Credit Reference and Fraud Prevention agencies, for example to assess your application for credit and verify identities to prevent and detect crime and money laundering. The Credit Reference Agencies will place a search footprint on your credit file that may be seen by other lenders. They will supply public information (for example information held on the electoral register) as well as shared credit and fraud prevention information. The Fraud Prevention Agencies will use your personal information to prevent fraud and money-laundering and to verify your identity.
  • If you are making a joint application or if you advise ALPHERA of a director or that you have a spouse or financial associate, they will link your records together so you must be sure that you have their agreement to disclose information about them. Credit Reference Agencies also link your records together and these links will remain on your and their files until such a time as you, a director or your partner successfully files for a disassociation with the Credit Reference Agencies to break that link.
  • If you give ALPHERA false or inaccurate information or ALPHERA suspect or identifies fraud, they will record this and may also pass on the information to Fraud Prevention Agencies and other organisations involved in crime prevention. Law enforcement agencies may also access and use this information. If fraud is detected, you could be refused certain services, finance or employment.
  • ALPHERA and other organisations may access and use from other countries the information recorded by Fraud Prevention Agencies, which may be publicly-available sources.
  • Your data may also be used for other purposes for which you give your permission or, in limited circumstances, when required by law or where permitted under the terms of relevant data protection and privacy law.

If you would like full details about how your information will be used by us, Credit Reference Agencies and Fraud Prevention Agencies, including details of your rights in relation to your information, or you would like to obtain contact details of the Credit Reference and Fraud Prevention Agencies, please: visit www.experian.co.uk/crain or www.equifax.co.uk/crain

ALPHERA uses automated decision-making tools to help it to decide whether to offer you finance. Based on the information you provide us, we will compare this against different metrics to determine whether you meet the eligibility criteria for finance or to determine whether you will be able to make repayments on a vehicle without difficulty. If your application for finance is rejected using automated means alone, you will be given the opportunity to ask for the decision to be reviewed manually. This does not mean that the decision will be changed.

ALPHERA does not share credit and anti-fraud information with Retail Centres or any of the other BMW Group companies.

ALPHERA will also use your personal information to manage its contractual obligations and to enforce its rights under the finance agreement. For example, if you fall into arrears or break any other term of the agreement, ALPHERA may pass on your details to a debt collection agency for the purpose of collecting the debt or to a vehicle recovery agent to repossess the vehicle or to solicitors to issue court proceedings against you.  ALPHERA may also activate your GPS tracker or review publicly available information to trace your whereabouts. For full details of how ALPHERA processes your personal information please refer to the “Use of Your Information” clause in your finance agreement.

Compliance with legal requests for your information – to comply with our legal obligations to law enforcement, regulators and the court service

We may be legally required to provide your information to law enforcement agencies, regulators, courts and third party litigants in connection with civil or criminal proceedings or investigations anywhere in the world. Where permitted, we will direct any such request to you or we may notify you before responding unless to do so would prejudice the prevention or detection of a crime.

Legal grounds for processing of your personal information

The use of your information set out above is permitted under data protection law on the basis of these principal legal grounds:

BMW

Customer Information Centre

Phoenix One

59 - 63 Farnham Road

Slough

Berkshire

SL1 3TN

  • Where necessary to enter into or perform our contract with you
  • Where we need to use it to comply with our legal obligations
  • Where we use it to achieve a legitimate interest and our reasons for using it outweigh any prejudice to your data protection rights (our legitimate interests include promoting the BMW Group business and tailoring news and offers to your profile, research and development of vehicle related products and services, assessing your credit-worthiness, detecting fraud and criminal activities)
  • Where necessary for us to defend, prosecute or make a claim against you, us or a third party

There may be uses that are permitted on the basis of other grounds; where this is the case we will use reasonable endeavours to identify the ground and communicate it you as soon as possible after becoming aware of the new basis.

Who may we share your information with

Personal information which we collect may be transferred to third parties on your behalf, only with your consent where necessary.

The types of third parties apart from the BMW companies already stated are:

  • Our network of motor dealers and brokers authorised to promote ALPHERA Financial Services products;
  • Our carefully chosen business partners who provide products or services under one of our brands; and
  • Our service providers and agents who perform services on our behalf, such as credit card processors and data management firms.

This is only shared in a secure manner, using a consistent security protocol. When we share with other parties we ensure that they only use your personal data for the purpose it was collected and do not allow them to abuse this agreement.

ALPHERA may also transfer your personal information to a third party if it is in its legitimate interest or if there is a contractual obligation to do so. For example, ALPHERA may pass on your personal details to a third party debt recovery agent if you fail to make the payments due under your finance agreement or to a vehicle recovery agent to collect the vehicle at the end of your finance agreement. For full details of how ALPHERA uses and shares your personal information please refer to the “Use of Your Information” clause in the finance agreement.

How do we keep your personal information safe

We use technical and organisational security measures including encryption and authentication tools to protect your personal information, against manipulation, loss, destruction, and access by third parties.

Although data transmission over the Internet or website cannot be guaranteed to be secure, we and our business partners work hard to maintain physical, electronic and procedural safeguards to protect your information in accordance with applicable data protection requirements. Our main security measures are:

  • Tightly restricted personal access to your data on a “need to know” basis and for the communicated purpose only
  • Transferred collected data only in encrypted form
  • Highly confidential data stored only in encrypted form - e.g. credit card information
  • Firewalled IT systems to prohibit unauthorised access e.g. from hackers
  • Permanently monitored access to IT systems to detect and stop misuse of personal data.

If you have a personal password which enables you to access certain parts of our websites or any other portal, app or service we operate, do not forget your responsibility for keeping this password confidential. We ask you not to share your password with anyone.

How long we keep your personal information for

We retain your information only as long as is necessary and only for the purpose for which we obtained them.  We restrict access to your information to only those persons who need to use it for the relevant purpose.

Our retention periods are based on business needs and your information that is no longer needed is either irreversibly anonymised or destroyed securely.

Use to perform a contract:

  • In relation to your information used to perform any contractual obligation with you we may retain that data whilst the contract remains in force plus six years to deal with any queries or claims thereafter.

Where claims are contemplated:

  • In relation to any information where we reasonably believe it will be necessary to defend or prosecute or make a claim against you, us or a third party, we may retain that data for as long as that claim could be pursued.

Transfer to third parties

BMW is a global company. Your personal information may be accessed by our staff, agents or contractors from a country outside the European Economic Area (EEA) for any of the purposes set out in this policy. These countries may have in place data protection laws which may be of a lower standard than in the EEA. We will ensure that any of your information that is accessible outside the EEA is handled subject to appropriate safeguards.

Certain countries outside the EEA, such as Canada and Switzerland, have been approved by the European Commission as providing essentially equivalent protection to EEA data protection laws and therefore no additional legal safeguards are required. In countries which have not had such approval, we will either ask for your consent to the transfer or transfer it subject to European Commission approved contractual terms that impose equivalent data protection obligations directly on the recipient unless we are permitted under applicable data protection law to make such transfers without such formalities.

ALPHERA will not share your contract information with other Group Companies other than as specifically mentioned in this Privacy Policy or the Use of Information clause on the finance agreement.

Please contact us if you would like to see a copy of the specific safeguards applied to the export of your information.

How to change your privacy preferences

You can change your marketing preferences, or withdraw your consent in relation to how ALPHERA uses your personal information in one of the following ways:

BMW Customer Information Centre

Phoenix One

59 - 63 Farnham Road

Slough

Berkshire

SL1 3TN

* Calls are free of charge plus your phone company's access charge.

Contacting ALPHERA about this privacy policy

If you have any questions in relation to our use of your information you should first contact the BMW Customer Information Centre in one of the following ways:

BMW Customer Information Centre

Phoenix One

59 - 63 Farnham Road

Slough

Berkshire

SL1 3TN

In addition you may contact the responsible data privacy officer listed click here for their contact details.

Under certain conditions you have the right to require us to:

  • Provide you with further detail on the use we make of your information
  • Provide you with a copy of your information
  • Update any inaccuracies in the information we hold about you
  • Delete any information about you that we no longer have a lawful ground to use
  • Remove you from any direct marketing lists when you object or withdraw your consent
  • Provide you with your personal information in a usable electronic format and transmit it to a third party (right to data portability)
  • Restrict our use of your personal information
  • Cease carrying out certain processing activities based on the legitimate interests ground unless our reasons for undertaking that processing outweigh any prejudice to your data protection rights (click Legal Grounds for more information).

Your exercise of these rights is subject to certain exemptions to safeguard the public interest (e.g. the prevention or detection of crime), our interests (e.g. the maintenance of legal privilege) and the rights of third parties. 

If you are dissatisfied with our use of your information or our response to any exercise of these rights you have the right to complain to the Information Commissioner's Office which regulates the processing of personal data in the UK (click ICO for more information).

LEVEL 3: Reference text linked in section 2:

Data Privacy Officer Contact Details

If you have questions in relation to our use of your personal information you should contact the relevant Data Privacy Officer:

BMW Financial Services (GB) Ltd

Data Protection Officer

DataPrivacyOfficer@bmwfin.com

Tel: 01252 923900                                                                     

Changes to this Privacy Policy:

We may modify or update this privacy policy from time to time.

If we change this privacy policy, we will notify you of the changes. Where changes to this privacy policy will have a fundamental impact on the nature of the processing or otherwise have a substantial impact on you, we will give you sufficient advance notice so that you have the opportunity to exercise any rights you may have under local law (e.g. to object to the processing). 

 

BMW Cookie Policy

What is a Cookie?

A cookie is a small text file that stores Internet settings. Almost every website uses cookie technology. The cookie is downloaded by your Internet browser the first time you visit a website. The next time you visit this website from the same device, the cookie and the information in it are either sent back to the originating website (first-party cookies) or to another website to which it belongs (third-party cookies). By that, the website can detect that it has already been opened using this browser, and in some cases it will then vary the content it shows.

Some cookies are extremely useful because they can improve your user experience when you return to a website you have already visited. This assumes that you are using the same device and the same browser as before; if so, cookies will remember your preferences, will know how you use the website, and will adapt the content you are shown so that it is more relevant to your personal interests and needs.

Your cookie settings on this website.

Cookies on this website that do not require approval.

Cookies that are essential, also known as ‘strictly necessary’ cookies, enable features without which you would not be able to use the website as intended. These cookies are used exclusively by BMW and are therefore known as first-party cookies. They are only saved on your computer while you are actually browsing the website. An example of why strictly necessary cookies are used is so that when you open the car configurator, you receive a version of it which corresponds to the data volume which your current Internet connection can handle.

Another example of what these cookies do is facilitate a switch from http to https when you change pages, so that the security of data transmitted is maintained. Furthermore, a cookie of this kind is used to store your decision about the use of cookies on our website. Your consent is not required for the use of strictly necessary cookies.

Strictly necessary cookies cannot be disabled using the features of this website.

Categories of Cookies

Based on what function cookies have and the purpose for which cookies are used, there are four categories of cookie: strictly necessary cookies, performance cookies, functional cookies and marketing cookies.

Strictly necessary cookies

Are essential in order to enable you to move around the website and use its features. Without these cookies, some services cannot be provided – for example, remembering previous actions (e.g. entered text and vehicle configurations) when navigating back to a page in the same session.

Performance cookies

Gather information about how a website is used – for example, which pages a visitor opens most often, and whether the user receives error messages from some pages. These cookies do not save information that would allow the user to be identified. The collected information is aggregated, and therefore anonymous. These cookies are used exclusively to improve the performance of the website, and with it the user experience.

Functional cookies

Enable a website to save information which has already been entered (such as user names, languages choices, and your location), so that it can offer you improved and more personalised functions. For example, a website can offer your local, price-relevant tax information if it uses a cookie to remember the region in which you are currently located. Functional cookies are also used to enable features you request such as playing videos. These cookies collect anonymous information and cannot track your movements on other websites.

Marketing cookies

Are used to deliver adverts and other communications more relevant to you and your interests. They are also used to limit the number of times you see an advertisement and to help measure the effectiveness of advertising campaigns. They remember whether you have visited a website or not, and this information can be shared with other organisations such as advertisers. Cookies for improving group targeting and advertising will often be linked to site functionality provided by other organisations.

Your cookie settings on this website.

You can completely disable cookies in your browser at any time.

It is important to note that if you change your settings and block certain cookies, you will not be able to take full advantage of some features of our site, and we might not be able to provide some features you have previously chosen to use.