Corporate governance means acting in accordance with the principles of responsible company management oriented towards value creation. In the BMW Group, this aspiration includes all divisions of the BMW Group. The crucial cornerstones of the corporate culture here are:

 

  • Observance of the regulations and the applicable law.
  • Corporate governance with clear targets directed at the interests of all stakeholders.
  • Supreme environmental and social standards as well as due diligence in the supply chains.
  • Transparent reporting and corporate communication.
  • Cooperation based on trust between Management Board, Supervisory Board and employees.

COMPLIANCE

bmw

INTEGRITY IS PART OF HOW WE VIEW OURSELVES.

For the BMW Group, compliance is far more than adhering to the applicable law and in-company regulations. Compliance is part of how we see ourselves as well as a culture of integrity put into practice and a binding framework for all entrepreneurial activities – worldwide.

OUR COMPLAINCE MANAGEMENT-SYSTEM (CMS).

The CMS which applies throughout the BMW Group is based on the Prevent-Detect-Respond approach. It defines specific measures of prevention, monitoring, control and reaction.

 

The CMS is based on the risk situation of the company and covers all relevant areas of compliance: Prevention of fraud; Export control; Prevention of money laundering; Compliance with antitrust law; Prevention of corruption; Human rights; Data protection; Technical compliance.

BMW Group Report
A matter of heritage BMW luxury class

INTEGRATED REPORT ON THE STATUS QUO

Decarbonization, circularity, social aspects as well as respect for the environment and human rights in the supply chain are strategic focus areas to reduce our emissions and ensure the responsible use of raw materials.

BMW Group Report
BMW Digital Premium BMW 1 Series

OUR DATA PROTECTION

Protection of our customers’ data, right to informational self-determination and data sovereignty has an especially high priority:

 

  • As a matter of principle, personal data is collected in accordance with laws and regulations including but not limited to POPIA and its regulations as well as the international security standard ISO 27001.
  • Personal data is only collected and used if this is legally approved and any affected persons have given their consent.
  • All applications are checked against current IT security measures.
  • Internal communication takes place exclusively via a highly secure connection.