Data Processing connected to test vehicles
An important enabler in our mission to develop mobility solutions for a different tomorrow is to be able to enhance a comfortable and safe driving and riding experience by the development of assisted, connected and automated functions for the vehicle.
This is the reason why we use properly marked test vehicles with sensors and cameras to register data that will allow further development and tuning of the equipment needed for autonomous functions.
Any long-lasting relationship is built on respect and trust, therefore privacy and integrity of your personal data is of the utmost importance to our company.
Which entity is responsible for data processing?
China Euro Vehicle Technology, based at Pumpgatan 1, 417 55 Gothenburg (hereinafter referred to as "CEVT"), is the controller as defined by the General Data Protection Regulation (hereinafter referred to as "GDPR") and is responsible for processing data as Data Controller for video and audio recordings. This is to be used for the development of assisted, connected, partly automated, and autonomous driving functions.
Which data do we process and what do we use it for?
At CEVT we focus a lot on the safety of our vehicles and one of the parts that we are constantly working on for a safer performance is Advanced Driving Assistance Systems (ADAS). ADAS functionalities are heavily data dependent and therefore we have equipped our vehicles with sensors like cameras, radars and lidars to collect data.
These sensors capture environmental information, just like the way human receive information. Data like image and sound will be processed in the vehicle's “brain” and based on that the car will actuate. Receiving such information does not mean that we are interested in analyzing any personal information.
To train the vehicles “brain” is a continuous development and testing repeated over and over again. The “brain” is trained to find the static and dynamic traffic movements, pedestrians crossing the roads, bicyclists etc. At each stage where any new functionality is developed, the vehicles need to be driven on the road and tested. If anything, unexpected happens the collected data will be analyzed for debugging purposes to improve the quality of the vehicle functionality, before it is being verified again. And it will continue until the vehicles are proven safe enough to be delivered to our customers. As we do care a lot about safety, we also care a lot about data privacy.
We have marked our test cars with labels with QR codes and individuals will be able to contact CEVT to receive more information of our purpose and handling of the collected data, or to submit a request for data removal,
Even though CEVT strives to limit the use of Personal information some situations can occur. Individual can at this time exercise there right according to privacy laws Individual can in this case contact CEVT.
What is the legal basis for this data processing?
The legal basis for the collection and processing of these video and audio recordings of the surroundings of the test vehicles (including the recording of personal data such as video recordings of pedestrians, drivers) by us is the legitimate interest of CEVT pursuant to Art. 6 (1) lit. f GDPR.
CEVT's legitimate interest in the processing and storage of these video and audio recordings results from its interest in operating the test vehicles and in further developing the platform for assisted, connected, partly automated and autonomous driving.
During the development process, the data collected by the test vehicles will be used to develop and validate the algorithms for different functions of automated driving.
Furthermore, there is also a legitimate interest in processing the data of the test vehicles after the start of production, which is particularly important (i) to develop/validate updates of the software ("bug fixing") and (ii) to establish a defense in case of litigation or (iii) to comply with legal obligations, in particular with regulatory requirements. In addition, CEVT has a keen interest in improving vehicle and road safety through the development of its driving systems. Also, this could serve the interest of the general public.
The video and audio recordings of test vehicle surroundings are necessary to ensure the safe use of the assisted, connected, partly automated and autonomous vehicles.
How long do we store your data?
We store your personal data only as long as required for the intended purpose.
How do we store your data?
The following safeguards are used, for example, to protect your personal data from misuse and or any form of unauthorized processing:
Access to personal data is restricted to a limited number of authorized persons for the stated purposes.
The data collected is only transmitted and stored in an encrypted form.
The IT systems used are separated from other IT systems to prevent unauthorized access.
IT systems are constantly monitored to detect access and prevent misuse.
Personal data will as soon as possible be anonymized
With whom do we share data and how do we protect you?
Due to the massive complexity and the requirement to fulfil the highest standards of accuracy, extensive testing including millions of driving kilometers are needed to develop and tune the functions that will allow the assisted, connected and autonomous driving in our vehicle. Such an enormous undertaking to develop and tune both hardware & software for autonomous driving through data collection cannot be performed by our company alone. Therefore, we have established long-lasting cooperation with reliable partners, like suppliers (including development and technology service providers) to strengthen and refine this development.
The transfer of video and sensor data to our partners is subjected to the strict purpose of technical development. Mainly the personal data gathered during this development and testing phase will be used to develop, validate and refine the hardware and software that will enable the autonomous drive operation of the vehicle including the software integration with the software from the rest of the vehicle.
CEVT and partners do not use collected data to identify individuals since this is not relevant to the main purpose of this data collection which is the development and refinement of functions (hardware and software) needed for assisted, connected and autonomous drive of our vehicles.
From the data collected the only distinction that will be made is to identify pedestrians as persons (as distinguished from other road users like cars and trucks) and their direction of movement.
Personal data transfer inside European Union, European Economic Area, or counties outside the EU, that have comparable level of data protection such as Canada and Switzerland etc. (Data transfer to these countries does not require special approval or agreement) CEVT is always using Data processing Agreement (DPA).
If data is processed by one of our partners outside the European Union, CEVT uses European Standard Contractual Clauses (SCC) to ensure that the data collected is handled and protected according to European data protection standards. For further details on how collected data is transferred and protected please contact us through the channels specified below.
If you have question around the use of your Personal data, please contact the Data Protection Office at email@example.com
Marking of the test vehicles
The test vehicles are marked with the following or similar stickers. The stickers are attached to the sides and in the rear of the vehicles.
Rights of the data subject
You have the right to exercise your rights as a Data subject. Such requests should be lodged to the Data Protection Officer at CEVT (see contact details below).
CEVT strives to limit the processing of personal data for our training. That means in certain situations, we may be unable to respond to your request as a data subject due to legal requirements or information available to us.
For example, at CEVT we are not using facial recognizing software. We may not be able to retrieve images of recorded persons without additional information (such as time and place) since such identification is not necessary for the purposes pursued by CEVT,
CEVT are prevented by law from carrying out additional data processing for the purpose of identification; in such cases, your rights under Art. 15 to 20 GDPR may not be applicable.
Your data subject's rights may only apply if you provide us with additional information which enables us to clearly identify you. With additional information provided, we may not in some cases be able to verify your entitlement to access or delete the data, since we do not identify any persons on the video and audio recordings, and would therefore not know who the data subjects on the recordings are, and your data subject rights are restricted due to rights of others or the need to keep the data for reasons of law.
During and immediately after the data collection activities of the test vehicles (e.g. if you are an individual walking by within the camera’s view and you become aware of the recording), you can directly object and ask the test driver for the deletion of relevant data.
Right to access (Art. 15 GDPR):
You are entitled to obtain a confirmation from CEVT as to whether your Personal data are being processed by CEVT and, if so, access to the Personal data and the following information:
The categories of data we process, the purposes for which it is processed, the source of the data if not collected directly from you, and, if applicable, the recipients with whom we have shared your data. You can obtain a copy of your data from us free of charge. If you require multiple copies, we reserve the right to charge you for these copies.
Right to rectification (Art. 16 GDPR):
CEVT will take steps in accordance with the applicable legislation to keep your Personal data accurate, complete and up to date. If you identify that any Personal data related to you is inadequate, incomplete or incorrect, you are entitled to have the Personal data corrected.
Right to erasure (Art. 17 GDPR):
Under certain circumstances, such as when you have revoked your previously given consent and there is no other legal ground available for CEVT to process your Personal data, you may request to have your Personal data erased.
Right to restriction of processing (Art. 18 GDPR):
You are under certain circumstances entitled to restrict the processing of your Personal data to only comprise storage of the Personal data, e.g. during the time when CEVT assesses whether you are entitled to have Personal data erased in accordance with section Right to erasure
Right to data portability (Art. 20 GDPR):
When Personal data is processed on the basis of your consent or on the basis that the processing is necessary in order to perform a contract with you, and provided that the Personal data have been provided by you, you are entitled to receive a copy of your Personal data in a common machine-readable format.
Right to object (Art. 21 GDPR):
If the processing of your Personal data is based on a balancing of interests and you deem that your integrity interest overrides CEVT's legitimate interest to process your Personal data, you may, on grounds related to your particular situation, object to the processing by contacting CEVT on the contact details below, in which case CEVT must have a compelling reason in order to continue to process the Personal data for the relevant purpose.
Time limits for compliance with the rights of the data subject
We make every effort to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific right or complexity of your request.
Complaint to supervisory authorities
You are welcome to contact us with any enquiries and complaints that you may have regarding the processing of your Personal data. However, you also have the right to lodge complaints pertaining to the processing of your Personal data to the Swedish Supervisory Authority (Sw. Integritetsskyddsmyndigheten (IMY).
CEVT Pumpgatan 1,
417 55 Gothenburg Göteborg, Västra Götalands län
Telephone: +46 (0)31 309 75 70
CEVT`s Data Protection Office can be contacted on: