Privacy Policy
Data Controller
Website visits
When you access our website, the following information about you is automatically stored as server log files:
This data is collected on the basis of Article 6 (1) (f) GDPR and the purpose of the data collection is the operation, maintenance and protection of our systems. By default, the data accrues every time a connection is established with a web server on the Internet. If an error occurs while using our website or if we suspect an attack or misuse, this data is used to reproduce the scenario that occurred. Your IP address is additionally used to determine the number of visitors to our website on a monthly basis. All data collected in this way is stored for a period of six months and then deleted.
- Your web browser
- Your operating system
- Your IP address and port
- The accessed web page or components thereof
- The website from which you visit us
- The access time
This data is collected on the basis of Article 6 (1) (f) GDPR and the purpose of the data collection is the operation, maintenance and protection of our systems. By default, the data accrues every time a connection is established with a web server on the Internet. If an error occurs while using our website or if we suspect an attack or misuse, this data is used to reproduce the scenario that occurred. Your IP address is additionally used to determine the number of visitors to our website on a monthly basis. All data collected in this way is stored for a period of six months and then deleted.
Newsletter
We offer you the opportunity to subscribe to our newsletter to receive updates on news, special offers, or events three to four times a year.
Our newsletter is sent via the service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach handles the technical distribution and management of email addresses on our behalf. We have a data processing agreement with CleverReach in accordance with Art. 28 of the GDPR, which ensures that your data is processed and protected only in accordance with our instructions. For more information, please see CleverReach’s privacy policy: https://www.cleverreach.com/de-de/datenschutz/
We need your email address to send you the newsletter. Optionally, you may voluntarily provide additional information (e.g., name, title) to personalize the newsletter. During the sign-up process, your registration is verified using the so-called double opt-in procedure: After registering, you will receive an email asking you to confirm your registration. Only after this confirmation will your email address be added to the mailing list. CleverReach also stores statistical data on newsletter usage (e.g., open and click-through rates) to optimize the newsletter. These analyses are conducted using pseudonymized data and are not used to create personal profiles. Your data is processed based on your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect—for example, by clicking the unsubscribe link at the end of each newsletter or by sending an email to datenschutz@fzi.de.
Your data will be stored for as long as your newsletter subscription remains active. After you unsubscribe from the newsletter, your data will be deleted from the mailing list, provided there are no legal retention requirements.
Data processing takes place exclusively on servers within the European Union. No data is transferred to third countries.
Cookies and analytical tools
When you visit our site, WordPress sets what is known as a session cookie, which is automatically deleted after the end of your visit or browser session. This is a small text file that is stored on your computer and saved by your browser. It is used for WordPress to remember your language setting.
Cookie-based data processing is carried out on the basis of Art. 6 (1) (1) (f) GDPR to protect our legitimate interests. Our legitimate interests here lie in particular in being able to provide you with a technically optimized website that is user-friendly and tailored to your needs, as well as to ensure the security of our systems.
The FZI uses the Matomo analysis tool on its website.
YouTube
When you activate embedded videos on our website, a connection to YouTube’s servers is established and a data transfer is started. We have no influence on the scope and content of the data that is transmitted to YouTube and possibly other YouTube partners by activating the plugin. Among other things, the YouTube server is told which of our pages you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve the user experience, and prevent abusive behaviour. YouTube uses cookies to collect information about user behaviour. The cookies remain on your terminal device until you delete them. You can prevent YouTube from storing cookies by making the appropriate settings in your browser software.
If you are logged into your YouTube account, you enable YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account before activating the play button.
The integration of YouTube videos is implemented in the “Privacy Mode” of the Elementor page builder, i.e. as long as the video is not clicked, no data is transmitted to YouTube. Accordingly, videos are only played if you have given your consent by clicking on them and the data transfer is thus based on your consent. For more information on the handling of user data, please refer to YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy.
Social Media
To protect your privacy rights, the FZI does not embed social media feeds on its website. Accordingly, no information about you is transmitted to third parties (such as Twitter/X or Facebook) when you use our website. The buttons in the footer of our website are links to our social media sites and you must actively click them to be redirected there.
Applications
When you access our application portal, you will be redirected to the site of our software partner Abacus Umantis AG.
By registering in the application portal, you provide the company with your personal data about a specific application for the purpose of a job search. Your data is also stored and processed on the systems of our software partner Haufe-umantis AG. The FZI and the software partner Haufe-umantis AG have taken the necessary organizational and technical measures to ensure the confidentiality of your application.
All employees of the HR department as well as our software partner are obliged to maintain confidentiality about personal data within the scope of their employment contract. Thanks to an automatically activated 128-bit encryption, a secure transmission of your data is ensured. Data processing takes into account the general standards for data security in accordance with the current state of the art.
During the application process, the usual correspondence data such as postal address, email address and telephone numbers are stored in the applicant database in addition to the title, last name and first name. In addition, application documents such as a letter of motivation, curriculum vitae, vocational, educational and training qualifications, and job references are recorded.
This data will only be stored, evaluated, processed or forwarded internally as part of your application. It is only accessible to employees of the Human Resources Department and the persons responsible for selection at the FZI. In the case of unsolicited applications, we decide on a case-by-case basis for which of our units your application is relevant and make it available to the heads of the relevant organizational units. Under no circumstances will your data be passed on to companies or persons outside the FZI or used for other purposes. The processing of your data is thus based on Art. 6 (1) (b) GDPR and Section 26 (1) (1) BDSG
The data may be processed for statistical purposes. It is not possible to draw any conclusions about individual persons. he legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
If you start a job at the FZI, your personal data and contact details will be placed in your personnel file.
If you have applied but received a negative response, your details will be stored for around 3 months after the application process has been completed and then deleted (profile and application). The deletion of the data is not communicated.
When you apply, you can give us your consent to store your application in a talent pool in case of rejection, in order to send you interesting job offers beyond the specific vacancy. If you are no longer interested, you can delete your data (profile and application) at any time. If your application is assigned to a talent pool, the data will remain stored for 6 months. This is followed by an inquiry by email as to whether you are still interested in working at the FZI. Unless the entry is then renewed for another 6 months, it will be deleted. In this case, your data will be processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR and Section 26 (2) (1) BDSG
Event registration
When you register for one of our events, a contract with us is formed upon your acceptance of our General Terms and Conditions for Events, for which we need your first and last name.
After submitting the registration form via our booking tool, you will receive an email listing your details for verification. To do this, we need your email address. If the event requires a participation fee, we also need your company name and address for billing purposes, or your home address if the invoice is to be sent to you personally. We also collect your phone number on an optional basis so we can contact you if you have questions or there are last-minute changes to the event schedule. Data collection is therefore based on Article 6(1)(b) of the GDPR. After the event you registered for has ended, all data collected in this manner will be deleted.
If, when registering, you optionally choose to stay in touch with us via our newsletter to receive further invitations to events that may be of interest to you, your email address will also be used for this purpose and stored as described below.
During an event, photos and videos may be taken for documentation purposes (see also the Event Terms and Conditions). In this context, images of you will be captured. These recordings may be used for public relations purposes on the organizer’s website, on social media platforms, in print publications, and in news briefs and press releases. The legal basis for this is Article 6(1)(b) of the GDPR.
Hybrid or virtual events
If the event is held in a hybrid or virtual format, additional personal data will be processed from you.
Personal data collected during your participation in a hybrid or virtual event, including, in particular, audio and video data, the displayed username, text messages sent via the chat function (if applicable), and technical data (IP address, date and time of the request, time zone, access status/HTTP status code, amount of data transferred, website from which the request originates, browser (including language and version), operating system, and the user’s device used (including MAC address), will also be processed for the purpose of organizing and conducting the event. The legal basis for this is Article 6(1)(f) of the GDPR. Once the event has concluded, any data stored locally will be deleted.
Presentations at hybrid or virtual events may also be processed and recorded as audio and video recordings and used for public relations purposes on the organizer’s website, on social media platforms, in print publications, and in brief reports and press releases. However, this applies exclusively to speakers with whom a usage agreement regarding the content has been concluded. The legal basis for this is Article 6(1)(b) of the GDPR.
If third-party tools are used, this will be noted separately.
Virtual tour of the FZI House of Living Labs
If you participate in our virtual HoLL tour, you will be redirected to the page of our service provider VR-EASY GmbH.
The following data of yours will be processed:
- web server logs incl. IP-Adresse
- statistical data such as device class and monitor resolution as well as
- an anonymized media process through the tour
In addition to providing the service, this data may be used for statistical purposes. It is not possible to draw any conclusions about individual persons. he legal basis for this is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
For more information about VR-EASY’s data processing, you can get information from our service provider directly at https://vr-easy.com/platform/datenschutzerklaerung_de.html.
Data processing related to FZI test vehicles
Our test vehicles are equipped with various sensors including radar, lidar, GPS sensors and video cameras. The surroundings/environment of the test vehicle can be recorded by video cameras, stored for further analysis, and may be combined with data from other sensors.
The processing of video and sensor data is necessary to perceive road users and traffic scenarios as well as interpret them and react accordingly. The recordings of the sensor data are used in order to research and improve algorithms of assisted, connected, semi-automated and automated driving functionalities.
We are not interested in identifying people and our system is not configured for that purpose because it is not necessary for the connected, semi-automated and autonomous driving functions. All traffic objects are categorized as car, motorcycle, pedestrian, etc. Nonetheless, the video files might include images of people, license plates or other personal data.
The legal basis for processing the video files of the environment of the text vehicles is our legitimate interest, pursuant to Art. 6 (1) lit. f GDPR (General Data Protection Regulation).
The legitimate interest of the FZI for processing those video recordings derives from the interest of operating the test vehicles and for researching connected, semi-automated and autonomous driving functionalities. The data processed by the test vehicles will be used for researching algorithms for various functionalities of connected, semi-automated and autonomous driving.
We store your personal data solely as long as required for the respective purpose. If data is processed for various/more than one purposes, the data will be deleted or stored in a form that cannot be directly traced back to you as soon as the last stated purpose is fulfilled.
We secure your data using state-of-the-art technology.
In the context of research projects, we can transmit data to research partners. The transmission underlies strict purpose limitations. The data will not be used by the partners to identify people.
If data is processed outside the EU, the FZI is using EU-standard contracts with appropriate technical and organizational measures to ensure that personal data is processed according to European data protection standards.
The test vehicles are labeled with the following or equivalent signs on the vehicles:
Contact
If you contact us via the e-mail addresses provided by the contact persons, we will process your e-mail address and the data provided in your e-mail in order to answer and process your inquiry. This is done on the basis of your consent. You can revoke this at any time.
Google Street Maps
To plan the route for your journey, you can
click on the “Route planner” button. You will be redirected to the Google Maps
service. As the service is not integrated in our website, no data are passed on to Google in the first place. Only by clicking the button and being redirected to the service does data processing by Google take place. Use of the route planner is voluntary and is based on your
decision. We do not receive any information about the route planning. Responsibility for the data processed by the service is held by Google Inc.
Your rights
As a data subject of a data collection, you have comprehensive rights (Art. 15-23 GDPR):
If you wish to assert your rights, simply send us an email to the above contact address. In addition, you, of course, have the right at any time to report any suspected violation of data protection law to the competent supervisory authority.
- The right of access to information about your data stored by us at any time
- The right to request the restriction of the processing of your data or to object to the processing
- The right to request the blocking or erasure of your data
- The right to have your data rectified
- The right to receive your data stored by us in a machine-readable format (“data portability”)
If you wish to assert your rights, simply send us an email to the above contact address. In addition, you, of course, have the right at any time to report any suspected violation of data protection law to the competent supervisory authority.