“IAV lumits” enables you to check the standards and specification conformance of your V2X messages. You can upload the messages to be evaluated as a pcap file, formatted as described here. Within only a few minutes you will receive an email with a download link to the evaluation result. Thus, in only a few minutes of time you have a complete overview if your V2X implementations corresponds to the relevant message standards.
With the help of this Privacy Notice, you can obtain an overview of what personal data (“Data”) is collected and processed when you use „IAV lumits”, and what rights you have related to the processing of your Data. For further information, please see our Privacy Notice for Business Partners.
This Privacy Notice does not cover any data processing that is done by AWS in its own responsibility. For further information on AWS data processing, see the AWS Privacy Notice.
We, IAV GmbH Ingenieurgesellschaft Auto und Verkehr („IAV“), Carnotstr. 1, 10587 Berlin as the data controller are responsible for protecting your Data.
If you have any questions regarding data protection or your rights or regarding this privacy Notice, please do not hesitate to contact our data protection officer. He can be reached by email at datenschutzbeauftragter@iav.de.
A. User data
Description and scope of data processing:
Your user profile contains the following data:
- Name and Surname
- Email address
- Company name
- Company address
- If applicable (i.e. for users not registering through AWS marketplace): coupon code and usage of coupon.
You provide your name, email address and company name and address during the registration process.
We also process your User-ID, rights/role as well as login data and service request data when you use „IAV lumits “.
Purposes of data processing:
The processing of this data is necessary to enable and manage your use of „IAV lumits” and to provide you with the result of our service’s evaluation.
Legal basis:
We store the data based on the performance of a contract (Art. 6 I b) and based on legitimate interests (Art. 6 I f GDPR). Our legitimate interest is to achieve the purpose described above. We also process the data for compliance with a legal obligation (Art. 6 I c GDPR).
Storage period and control options:
Your user profile is stored as long as you do not request to delete your profile.
B. Pcap Data and evaluation result
Description and scope of data processing:
When you use „IAV lumits “, the following content data are processed:
- The entire content of the pcap file you provide
- The evaluation results.
The content of the pcap file as well as the evaluation result usually do not contain any personal data.
Purposes of data processing:
The temporary storage of this data is necessary to evaluate the pcap file with our service.
Anonymized, extracted data from your pcap file and evaluation result will be used for internal analysis. This analysis serves the purpose of improving our service and better adapting it to your needs. From this anonymized data, it will not be possible to draw conclusions to individual users from which the V2X messages originated.
We may use the data for marketing and presentation purposes through further anonymization and statistical evaluation. The data will be anonymized in a way that does not allow for conclusions to individual users, organizations or ITS stations.
Storage period and control options:
The uploaded pcap files are stored for an indefinite period.
The generated evaluation results are stored for 7 days. The point of deletion is determined by “date of the evaluation” + 7 days.
C. User Feedback
Description and scope of data processing:
After your free trial phase, we may ask you to voluntarily provide further information and feedback. This information and feedback entails:
- Location and size of your organization
- Business Area of your organization
- Type of your V2X / C-ITS deployment (test pilot, funded project, series deployment, ...)
- Number of operated C-ITS stations
- C-ITS Services you operate or develop
- Role of the user (developer, operator, traffic engineer, test engineer, ...)
- Feature requests for our service
- Rating of our service (wrt. Usability, helpfulness, quality, speed, support, ...)
- Typical issues you encounter when developing or operating your C-ITS services.
Before internal use, the data will be anonymized in a way that no conclusions to individual users are possible. The evaluation is executed in the context of role, organization, or market. For external purposes, the data will be anonymized further, so that no conclusions to individual organizations are possible.
Purposes of data processing:
Anonymized user feedback data will be used for internal analysis. This analysis serves the purpose of improving our service and better adapting it to your needs. From this anonymized data, it will not be possible to draw conclusions to individual users.
We may use the anonymized data for marketing and presentation purposes through further anonymization and statistical evaluation.
Legal basis:
We process this data based on legitimate interests (Art. 6 1 f GDPR) to be able to achieve the purposes described above.
Storage period and control options:
Anonymized user feedback is usually stored indefinitely.
IAV:
Within IAV, your Data is processed according to the need-to-know-principle by persons who require the data for the purposes described.
Third parties:“IAV lumits” runs on AWS and therefore your data is stored with AWS. To the extent necessary we might also transfer your data to other suppliers, e.g. in the field of IT services and applications, advisory, compliance and legal. These suppliers are contractually obliged to maintain confidentiality and fulfill the requirements under data protection law. AWS as well as other suppliers that are processors have signed a contract to ensure that Data will be processed strictly according to our instructions.
According to Articles 15 to 21 and 77 of the GDPR, you have the following data subject rights if the legal requirements are met.
- Information, Art. 15 GDPR
- Correction, Art. 16 GDPR
- Deletion, Art. 17 GDPR
- Restriction of processing, 18 GDPR
- Objection, Art. 21 GDPR
- Data portability, Art. 20 GDPR
You can exercise your rights via the contact channels mentioned above.
For example, if you believe that our data processing is unlawful or that we have not granted the rights described above to the extent necessary, you have the right to lodge a complaint with the competent data protection supervisory authority pursuant to Art. 77 GDPR.
Last updated: March 2024
