Data Privacy

Data processing in connection with our hearing car

At the Fraunhofer IDMT in Oldenburg, we have been researching and developing methods for data security and technical data protection, such as acoustic anonymization strategies, for years. We are working on specific technologies for the requirements of the market, as modern vehicles have numerous driver assistance systems, such as cameras, lidar and radar, which help with parking or lane keeping. However, cars still lack a sense of hearing. However, it is very important to be able to perceive and classify outside noises in order to follow the traffic around you. To this end, we use our appropriately labeled test vehicles to record data with various sensors, including video and audio recordings in the vehicle interior and the vehicle environment.

1. Collection, processing and use of your personal data

Who is responsible for data processing?

The Fraunhofer IDMT Oldenburg Branch for Hearing, Speech and Audio Technology HSA (hereinafter referred to as “Fraunhofer IDMT in Oldenburg” or “Fraunhofer IDMT-HSA”), located in 26129 Oldenburg, Marie-Curie-Straße 2, as part of the Fraunhofer Institute for Digital Media Technology IDMT, located in 98693 Ilmenau, Ehrenbergstr. 31, is a legally non-independent institution of the Fraunhofer-Gesellschaft zur Förderung der angewandten Forschung e.V., 80686 Munich, Hansastraße 27c (registered under Munich VR 4461).  The Fraunhofer IDMT is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”) for the processing of personal data in connection with video and audio recordings relating to the development of assisted, connected, partially automated and autonomous driving functions.

What data do we collect and for what purpose?

The personal data mentioned here, which is collected through the use of our marked test vehicles on public roads, is processed as follows:

The test vehicles are equipped with various sensors, microphones and video cameras. Public road traffic (surroundings of the test vehicle) can be recorded on video and audio files and stored for further analysis and, if necessary, combined with other sensor data.

The audio recordings, such as from the siren, are used to recognize that the vehicle in motion must pull over in the event of an approaching emergency vehicle with the siren running and right of way. The video, audio and sensor data are used during the test drives to recognize road users and basic traffic scenarios and to act accordingly. In a further evaluation of the recordings, the video, audio and sensor data are used to develop and improve the algorithms for the assisted, networked, partially automated and autonomous driving functions.

The acoustic sensors on and in the vehicle process the audio data directly and only pass on metadata. While still on the sensor, the data stream also passes through a privacy filter that filters out speech components in the audio data. Conversations from passers-by inside and in the immediate vicinity of the car are therefore not included in the analysis. The Fraunhofer IDMT-HSA never identifies people in the data records.

What is the legal basis for this data processing?

The collection, processing and use of your personal data is based on a balancing of interests in accordance with Art. 6 para. 1 lit. f GDPR. The Fraunhofer IDMT-HSA has a legitimate interest in the processing of your data for the further development of driver assistance and information systems as well as automated driving functions and comfort functions. Information about your rights, including the right to object to the processing of your personal data, can be found in section 2 of this statement.

The video and audio recordings of the test vehicle environment are necessary to ensure the safe use of assisted, connected, partially automated and autonomous vehicles.

How long do we store the data?

We only store your personal data for as long as the respective purpose requires. If data is processed for several purposes, the data will be deleted or only stored in a form that cannot be traced back to you as soon as the last specified purpose has been fulfilled.

How is the data backed up?

We secure your data according to the state of the art. For example, the following security measures are used to protect your personal data from misuse or other unauthorized processing:

• Access to personal data is additionally technically restricted for a limited number of authorized persons for the declared intentions:
• Collected data is only transmitted in encrypted form.
• The IT systems for processing the data are technically isolated from other systems in order to make unauthorized access, e.g. through hacking, more difficult and to prevent it where possible.
• In addition, access to these IT systems is permanently monitored in order to detect and prevent misuse at an early stage.

Who do we share the data with?

We share the data with universities and other research institutes in order to work together in the field of research and development. As a large amount of data is required for analysis, we also share this with our cooperation partners. The transmission of video, audio and sensor data to our cooperation partners is subject to strict purpose restrictions (i.e. for development and research purposes in the field of highly and fully automated driving).

The Fraunhofer IDMT-HSA and its cooperation partners do not use the video, audio and sensor data to identify persons, as the identification of persons is not relevant for the development of assisted, networked, partially automated and autonomous driving systems. For the development of the platform for assisted, connected, partially automated and autonomous driving, it is only relevant and necessary that relevant environmental data is recorded for the driving task.

Labeling of the test vehicles

The test vehicles are labeled with the following or comparable stickers or signs, which are attached to the outside of the test vehicles.

2. Your rights

You can exercise the following rights against the Fraunhofer IDMT-HSA at any time free of charge. The contact details for exercising your rights can be found in the “Contact options” section

Right of access by the data subject (Art. 15 GDPR):

You have the right to request information on the data we hold about you from us at any time. This information includes, but is not limited to, the categories of data we process, the purposes for which it is processed, the source of the data if not collected directly from you, and, if applicable, the recipients with whom we have shared your data. You can obtain a copy of your data from us free of charge. If you require multiple copies, we reserve the right to charge you for these copies.

Right to rectification (Art. 16 GDPR):

You have the right to request that we rectify inaccurate data relating to you. Photographs or video recordings are by nature "correct" because they represent a photographed or recorded person in reality. We will not edit recordings in any way so that your stored data is accurate and up to date.

Right to erasure (Art. 17 GDPR):

You have the right to request that we erase your data, as long as the legal requirements for this are satisfied. This may be the case under Art. 17 GDPR if

• the data is no longer required for the purposes for which it was collected or otherwise processed; you withdraw the consent on which data processing is based, and there is no other legal basis for processing;
• you lodge an objection to the processing of your data and there are no legitimate reasons for processing, or you object to data processing for direct marketing purposes;
• the data was processed unlawfully, and provided that processing is not required
• for scientific research purposes and provided that the deletion of the data is not likely to prevent or seriously affect the achievement of that objective;
• to establish, exercise or defend legal claims. 

Right to restriction of processing (Art. 18 GDPR):

You have the right to request that we restrict processing of your data if

• you dispute the accuracy of the data – in which case processing may be restricted during the time it takes to verify the accuracy of the data;
• processing is unlawful, and you reject the deletion of your data, requesting that its usage be restricted instead;
• we no longer need your data, but you need it to establish, exercise or defend your rights;
• you have lodged an objection to its processing, as long as it is not certain that our legitimate reasons outweigh yours.

Right to data portability (Art. 20 GDPR):

You have the right to request that we transfer your data – if technically possible – to another responsible party. However, you may only enforce this right if data processing is based on your consent or is necessary for the performance of a contract. Rather than receiving a copy of your data, you may also ask us to submit the data directly to another responsible party specified by you.

Right to object (Art. 21 GDPR):

You have the right to object to the processing of your data at any time for reasons that arise from your particular situation, as long as data processing is based on your consent, on our legitimate interests or those of a third party. In this case, we will cease to process your data. This does not apply if we can show that there are compelling legitimate grounds for processing that outweigh your interests, or if we need your data for the establishment, exercise or defence of legal claims.

Deadlines for the fulfillment of data subject rights

We generally aim to comply with all requests within 30 days. However, this period may be extended for reasons relating to the specific data subject right or the complexity of your request.

Contact options

If you have any concerns about data protection, please contact our data protection officer using the contact form.

Version of: November 2024