1.     Instruction of Third Party SDKs

In order to ensure the implementation of My BMW App related features and stable operation of application, we may use the software development packages (SDKs) provided by the third parties to achieve relevant purposes. You can click the privacy policy links below to check the rules of third-party for the use and protection of personal information. Please notice that the personal information type of third party SDKs may change for the edition update, tactic change and others. The official instruction to public shall be prevail.

Name of SDK: Tencent OCR SDK

Name of the third party entity: Shenzhen Tencent Computer System Co., Ltd.

Usage purpose: to complete online real-name registration (RNR) process.

Usage scenario: online real-name registration (RNR) of Connected driving card

Personal information type: Identification Card information, VIN.

System permission: Camera permission, Network permission

Sharing method: Directly collect through SDK

Privacy policy link: https://cloud.tencent.com/document/product/866/72779

 

Name of SDK: Alipay Pay Task SDK

Name of the third party entity: Alipay (China) Network Technology Co., Ltd.

Usage purpose: to call Alipay complete online payment; risk control, and to better choose the internet lines and internet optimization; fix the function failure in part of device and system.

Usage scenario: when calling Alipay complete online payment

Personal information type: IMEI, IMSI, MAC address, Hardware serial number, ICCID, SSID, BSSID, gyroscope sensor details, network type, operator details, WIFI status/parameter/list, system setting, system property, device manufacturer, device model, operating system.

System permission: Access to network permission, Access to network status permission, Prohibit screenshot and recording permissions

Sharing method: Directly collect through SDK

Privacy policy link: https://opendocs.alipay.com/common/02kiq3

 

 

Name of SDK: Getui push SDK

Name of the third party entity: Merit Interactive Co.,Ltd.

Usage scenario: Notification push service

(1) Usage purpose: used for improving the efficiency of channel resource, enhance the efficiency and stability of notification push

Personal information type: Device model, device brand, system version, notification switch status and application installation list

(2) Usage purpose: used for generating unique push target ID (CID) and device ID (GID), to ensure the accurate notification push and identify

Personal information type: Device identifier, including IMEIOAIDAdvertising IDSerial NumberIMSI

(3) Usage purpose: in order to maximally ensure the network connection stability and build long link. Through getting the device network status and change, to provide stable and continued push service

Personal information type: Internet information (IP address, WiFi information, base station informationoperator information)

System permission: Notification permission, Network permission, Acquire network information, Acquire Wifi information

Sharing method: Directly collect through SDK

Privacy policy link: https://docs.getui.com/privacy/

 

 

Name of SDK: Harmony OS Push SDK

Name of the third party entity: HUAWEI Software Technology Co., Ltd.

Usage scenario: Notification push service

(1) Usage purpose: in order to ensure accurate delivery of message push and accurate identification of message devices

Personal information type: OAID, AAID, device platform, device vendor used to generate a unique push target ID (CID) and device ID (GID)

(2) Usage purpose: To provide a stable push ability

Personal information type: Device brand, device model, and system version

System permission: Network permission, Notification permission and Read device information permission

Sharing method: Directly collect through SDK

Privacy policy link: https://developer.huawei.com/consumer/cn/doc/development/HMSCore-Guides/sdk-data-security-0000001050042177

 

 

Name of SDK: Tencent Cloud Eye Facelive SDK

Name of the third party entity: Tencent Cloud Computing(Beijing) Co., Ltd.

Usage purpose: Facelive video is used for live detection and real-person verification, it is necessary to compare and verify the name, ID number, and facial video with the information stored in the reputable identity authentication platform or the national citizen ID number query service center. Guide users to perform colorful light for live detection and real-person verification in an environment with normal lighting, reducing the authentication failure caused by environmental factors. To obtain the network connection type for transmission optimization; IP address is needed for network transmission, and to establish communication with SDK server; device information is required to monitor device risk environment, malicious application detection, ROM hijacking attacks, network security monitoring, and other security checks and protection functions. This is to identify whether the device and the user of this SDK are genuine, and timely intercept cheating, hijacking or attacks during the face-scanning process. It's also needed to troubleshoot faults occurring during SDK operation, analyze abnormalities and performance issues of the SDK and device itself, facilitating localization and analysis of anomalies.

Usage scenario: Real-name registration and facial recognition

Personal information type: Identity Card information (name, ID number), facelive video and photos, Light sensor information, Device model, operating system, network connection type, IP address, system Settings, system properties (including sensor list information), camera (camera parameters, interfaces).

System permission: Camera permission, Access to network permission and Access to network status permission

Sharing method: Directly collect through SDK

Privacy policy link: https://privacy.qq.com/document/preview/4661fcc5ceb04a4f878a5874c86b34a2

 

Name of SDK: Sensor SDK

Name of the third party entity: Sensors Data Network Technology (Beijing) Co., Ltd.

Usage scenario: when you browse and click in My BMW App

(1)    Usage purpose: to identify user through the anonymized ID

Personal information type: device attribute information (OAID, UUID), device connection information (browser type, carrier info, device brand, operating system version, device model), SD Card data, application installation list.

(2)    Usage purpose: to make user behavior analysis

Personal information type: Logs info, App usage, Sensor URL, browser type, language, timestamp, Application info, App ID, App name, App version, User behavior data

System permission: Access to network permission, Read device information permission

Sharing method: Directly collect through SDK

Privacy policy link:  https://manual.sensorsdata.cn/sa/latest/en/sdk-22255999.html

 

 

  1. Instruction of Personal Information Sharing to BMW Affiliated Companies

In order to provide you with related services, we would share your personal information with the affiliated companies.

  1. Instruction of Personal Information Sharing to Third Party Vendors

In order to provide you with related services, we would share your personal information with the third party vendors below. The detailed information sharing instructions are as follows,

 

Third party vendor:

(1) Vendors for brand cooperation charging: MALLSHARE (Beijing)Media Technology Co., Ltd., TELD New Energy Co., Ltd., Beijing Sinoair Century Culture Communication Co., Ltd.

Usage purpose: in order to provide vehicle charging, charging card and invoicing services

Usage scenario: Plug and Charge, Public charging station query service, Dedicated parking and charging service

Personal information type: name, phone number, car plate number, email address, transaction amount.

Sharing method: API

Privacy policy link: https://moxuan.crocusi.com/h5/index.html#/privacy

https://cv.teld.cn/module/Pictivity.html#/ActivityPage3?hiCode=yszcteld

http://bmw.chinasinoair.com/?code=081qKG000gSVoO1Nr94009C4HE2qKG0m&state=STATE#/policy

(2) Vendors for public charging point: Wangbang Star Charge Technology Ltd., Shanghai SAIC Anyo Charging Technology Co., Ltd., Shanghai EV Power Limited, Beijing XiaoJu New Energy Automobile Technology Co., Ltd., Potevio New Energy Co., Ltd., TELD New Energy Co., Ltd., KuaiDianDongLi (Beijing) New Energy Technology Co. limited., State Grid Smart Internet of Vehicles Co., Ltd.

Usage purpose: in order to provide vehicle charging, charging card and invoicing services

Usage scenario: Plug and Charge, Public charging station query service, dedicated parking and charging service

Personal information type: name, My BMW ID, phone number, car plate number, VIN, email address, address, vehicle SOC, and charging card type.

Sharing method: API

Privacy policy link: https://app-cdn.starcharge.com/wap/index.html#/privacyPolicy?cityCode=320400&city=320400&lmdTag=1&userId=d663843c-ca50-4a54-899a-f9319a07a014&appVipType=0&localCity=320400&version=7.6.0&token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJzdGFyQ2hhcmdlQXBwIiwiZXhwIjoxNjY5NDMwODE5LCJpYXQiOjE2NjMzODI4MTksInVzZXJJZCI6ImQ2NjM4NDNjLWNhNTAtNGE1NC04OTlhLWY5MzE5YTA3YTAxNCJ9.3yXK9DFlxn7KMwmpAWuTf5tl8SvJRKft6oNCGej5Qns&navheight=88

http://app.anyocharging.com:8981/privacy/

https://h5-prod.e-chong.com/ev-app-h5/#/privacyPolicy

https://page.udache.com/driver-activity-biz/baichuan-policy-agreement/index.html?mode=2&bc_appid=120084&bc_scene=epower_app&lang=zh-CN#/xpub?cid=111696&cnt_id=21092214475&s=op-json-oOShHdCK5

http://appinfo.ims-ptne.cn/privacyAgreement/privacyprotocol.html

https://cv.teld.cn/module/Pictivity.html#/ActivityPage3?hiCode=yszcteld

https://h5.fleetingpower.com/helpdetail/202002/6?isdown=1om

https://cdn-evone-oss.echargenet.com/resource/protocal/private.html