Data protection project Shuttles&Co
Privacy policy project „Shuttles&Co“
The German Aerospace Centre e.V. (hereinafter referred to as "DLR") takes the protection of your personal data, which you provide to us in your capacity as a data subject (m/f/d) of the "Shuttles&Co" project, very seriously.
We would like to inform you about which personal data we process in the context of the "Shuttles&Co" project, for how long and for what purposes we do this and provide you with further information required by data protection law.
In the project, six thermal cameras were mounted on lamp posts at several junctions in Berlin. These are intended to detect vehicles and vulnerable road users as well as wrong-way drivers. The thermal camera also works in the dark, as the system detects the heat emitted by road users. This allows the sensor to detect vehicles and vulnerable road users even at night, at great distances and in unfavourable weather conditions. The resolution can be described as QVGA, i.e. 320x240 pixels. No conclusions can be drawn about people.
In accordance with the GDPR and the BDSG, we use the terms defined therein. The definitions can be viewed on the Internet, for the GDPR at https://dsgvo-gesetz.de/ and for the BDSG at http://www.gesetze-im-internet.de/bdsg_2018/__2.html.
1. Name und Anschrift des Verantwortlichen
The controller within the meaning of the GDPR is
German Aerospace Centre (DLR)
Institute of Transportation Systems
Rutherfordstraße 2
12489 Berlin
Internet: https://www.dlr.de
2. Name und Anschrift des Datenschutzbeauftragten
German Aerospace Centre (DLR)
The DLR Data Protection Officer
Linder Höhe
51147 Köln
E-Mail: datenschutz[at]dlr.de
3. Purpose of the data processing
The purpose of data processing is scientific research to create new control algorithms in order to reduce the remaining waiting time at traffic light systems.
4. Legal basis for data processing
The legal basis for the processing is Art. 6 (1) (f) and Art. 89 GDPR. Important note; subject to the exceptions to the rights under Articles 15, 16, 18 and 21, the legal basis of Art. 89 (2) GDPR (scientific research) is invoked. See point 8.
5. Data categories
Procedure
The ThermiCam2 records the video data. Send a live stream via the air interface to a processing unit in the control cabinet of the traffic light system. The data is not saved. This live stream is then immediately analysed and subsequently discarded.
6. Recipient/third party
No personal data is recorded to the extent that faces or licence plates are recognised. This means that no personal data can be passed on.
7. Storage
There is no persistent storage of the data. The data is only stored temporarily in the camera's internal memory for a short time slot of maximum 350ms and then processed immediately.
8. Cancellation
The data is not stored persistently; after the internal buffer time of 350ms, the data is deleted from the camera's internal memory.
9. Your rights in relation to your personal data
If your personal data (see 5. Data categories) is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller in accordance with the provisions set out below:
(1) In accordance with Art. 15 GDPR, you can request information about the personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your personal data has been or will be disclosed, the planned storage period and the existence of the rights explained in this section 4 and 6.
(2) In accordance with Art. 16 GDPR, you can request the immediate correction of incorrect or incomplete personal data stored by us.
(3) In accordance with Art. 17 GDPR, you may request the erasure of your personal data stored by us, unless the processing is necessary for reasons specified by law, in particular for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or potential defence of legal claims.
(4) In accordance with Art. 18 GDPR, you may request the restriction of the processing of your personal data if you dispute its accuracy, if the processing is unlawful but you refuse to delete it and we no longer need the personal data, but you need it for the assertion, exercise or defence of legal claims or if you have lodged an objection to the processing in accordance with Art. 21 GDPR.
(5) In accordance with Art. 20 GDPR, you may receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or request that it be transferred to another controller.
(6) In accordance with Art. 7 Para. 3 GDPR, you can revoke your data protection consent at any time. As a result, we may no longer continue the data processing that was based on this consent in the future.
(7) Right to object pursuant to Art. 21 GDPR If personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation, unless the processing is necessary for the fulfilment of a task carried out in the public interest, Art. 21 para. 6 of the GDPR.
(8) In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, the supervisory authority of your usual place of residence or workplace or the registered office of the controller is available for this purpose.
To exercise these rights, please contact the office specified in section 2.