AVL Software & Functions Privacy Notice

In this privacy policy, we, AVL Software & Functions, describe how we collect and process personal data.

We process your personal data exclusively in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws and regulations.

We reserve the right to change this privacy policy at any time. Changes will be published on our website. Please check our privacy policy regularly to stay informed of any changes.

Responsibilities

The controller responsible for the processing of your personal data is:

AVL Software & Functions GmbH

Im Gewerbepark B29

93059 Regensburg

Please note that this privacy policy is not necessarily a comprehensive description of all our data processing activities. It is possible that other privacy policies, specific privacy notices, general terms and conditions or similar documents may apply to certain circumstances.

Collection, processing & use of your personal data

Data collection

This Privacy Policy applies to all your interactions with AVL Software & Functions via the AVL Software & Functions via the AVL Software & Functions website, its subsites (avl-functions.com) and data from the following sources:

1. Data of business customers, suppliers, and other business partners:

Information in connection with your professional functions and activity (e.g. for the conclusion and execution of contracts with you or your employer)
Information about you in correspondence and in dialogue with third parties
Information about you that has been provided to us by people associated with you (family members, consultants, legal representatives, etc.) for the conclusion or execution of contracts with you or with their cooperation (e.g. references)
Information from our distributors and other business partners for the purpose of ordering or supplying services to or by you

2. Data from publicly accessible sources

Information about you that can be found publicly in the media or on the Internet (if specified in individual cases, e.g. in connection with job applications, media reports, marketing/sales)
Your interests and other sociodemographic data
Information from public registers
Data obtained in connection with administrative or judicial proceedings

3. Data from test drives

The development and testing of vehicles, functions and systems as well as other services require the use of test vehicles under real environmental and traffic conditions
The test drives are carried out with specially labelled test vehicles in public traffic areas. Data is recorded by sensors, measuring devices, and video measurement technology
The processing of your personal data takes place in connection with the creation and evaluation – including the recording, processing and storage of video and image recordings – of data recordings from the vehicle’s environment
This data processing affects anyone who is in the vicinity of one of the labelled vehicles during journeys for research, development and testing purposes

4. Data in connection with your use of our websites, apps and applications:

IP address of the computer accessing the site
Date and time of access
URL of the accessed page
Status message on whether the access was successful
Amount of data transferred
The referrer URL from which the user came to the accessed page
HTTP User Agent (Device, Operating System, Browser)
Information stored in cookies set by us
Log files that we have created to record an event that occurred during your visit (e.g. acceptance of the terms of use)

5. Information about the collection of personal data when you send us an e-mail:

If you contact us by e-mail, via a contact form on our website (e.g. to download a publication) or via other areas on the website, the data you provide (e-mail address and, if applicable, your first and last name, as well as explicitly requested information or other data provided by you) will be processed by us to answer your questions, to process the transactions you have requested, or to send you information about AVL Software & Functions products and solutions (legal basis is Art. 6 para. 1 lit. b GDPR).

Purpose of data processing and legal basis

1. Based on your consent (Art. 6 para. 1a GDPR)

Where you have given us consent to process your personal data for specific purposes (e.g. analyzing certain activities for marketing purposes, when registering to receive newsletters, when taking photos or videos at events, etc.) the processing is carried out and based within the scope of such consent, unless we have another legal basis where this is required. The consent given can be revoked at any time but does not affect the lawfulness of the processing of data until revocation.

2. For the fulfillment of contractual obligations (Art. 6 para. 1 b GDPR)

The purpose of data processing is primarily in line with the respective services provided or received. More detailed information on the purpose of data processing can be found in the relevant contractual documents and terms and conditions.

3. Due to legal requirements (Art. 6 para. 1c GDPR)

As a globally active company, we are subject to various legal obligations, i.e. statutory and official requirements or industry self-regulation. The purpose of processing may therefore include, for example, the assessment under tax law and fulfillment of control and reporting obligations.

4. Due to a necessity for the protection of vital interests of the data subject or another natural person (Art. 6 para. 1 d GDPR)

If a visitor has been injured in our company, their personal data would have to be passed on to a doctor, hospital or other third party for this reason.

5. As part of the balancing of interests (Art. 6 para. 1f GDPR)

Where necessary, we process personal data beyond the actual fulfillment of the contract to protect our legitimate interests or those of third parties:

Assertion of legal claims and defense in legal disputes and official proceedings
Marketing interaction, market and opinion research (e.g. making contact during events or at trade fairs, filling out questionnaires and other forms)
Prevention and investigation of criminal offenses
Video surveillance and other measures to protect against burglary or to collect evidence in the event of security incidents
We process your personal data for research, development, testing and validation of driver assistance systems and automated driving functions to increase road safety on public roads. For this purpose, we also collect image and video recordings of other road users (vehicles and people)

Your rights

You can assert the following rights against AVL Software & Functions at any time. The relevant contact details for exercising your rights can be found in the “Your contact” section:

Right to information: In accordance with Art. 15 GDPR, you have the right to receive information from us about the processing of your personal data
Right to rectification: You have the right to rectify your personal data stored by us (pursuant to Art. 16 GDPR)
Right to cancellation: If the conditions set out in Art. 17 GDPR are met, you have the right to request the erasure of your personal data
Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if the requirements of Art. 18 GDPR are met.
Right to data portability: Where applicable (Art. 20 GDPR)
Right to objection: In accordance with Art. 21 GDPR, you have the right to object to the processing based on Art. 6 para. 1 lit. f GDPR. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims
Revocation of consent: If we process your data based on the consent that you have given us, you can revoke this consent at any time. The revocation does not affect the legality of the processing carried out based on the consent until the revocation.
Right to complain: In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority for data protection if the requirements are met.

For your and our security, we reserve the right to request proof of your identity before we fulfill your request

Your contact

Contact person for exercising your rights:

AVL Software & Functions GmbH

Attn.: Data Protection Officer

Im Gewerbepark B29

93059 Regensburg

Privacy.sfr@avl.com

Application of automated individual case decisions

In principle, we do not use automated decision making in accordance with Art. 22 GDPR. If an automated decision is nevertheless made in exceptional cases, we will inform you separately in each individual case, insofar as this is required by law.

Storage of your personal data

To offer you the best possible customer service, we store the data that you have provided during your interactions with AVL Software & Functions. We delete the data collected in this context after storage is no longer required for contractual and legal obligations. We may need to archive data beyond this period if this is required by statutory retention requirements. In such cases, we limit the processing to what is necessary to fulfill the statutory retention rules.

Safety of processing

Considering the state of the art, the costs of implementation, the nature, scope, context and purpose of processing as well as the risk, likelihood and severity of a potential infringement of the rights and freedoms of natural persons, AVL Software & Functions makes reasonable efforts to protect personal data against accidental and unlawful destruction and loss. AVL Software & Functions strives to ensure that personal data is used properly and to protect it from unauthorized access, use or disclosure. We use a combination of process, technology and physical security controls to protect personal data from unauthorized access, use or disclosure.

Within AVL, only those people have access to your personal data who need this data to fulfill their assigned functions and to develop or improve our products and services.

Our website may contain links to other websites. Please note that this privacy policy does not apply to external websites that can be accessed via links on our website. We recommend that you read the data protection declarations of the respective websites.

Transfer to third parties

We pass on your personal data to third parties in the following cases:

Any personal data that you provide online via AVL websites may be shared with other AVL group companies. We will only do this if it is appropriate. AVL group companies are bound by the group-wide privacy policy.
Certain of those recipients may be within the European Economic Area (EEA), but they may also be in any country worldwide. You must anticipate your data to be transmitted to any country in which the AVL group of companies is represented by affiliates, branches, or other offices, as well as to other countries where our service providers are located. If we transfer data to a country without adequate legal data protection, we ensure an appropriate level of protection as legally required by way of using appropriate measures or we rely on the statutory exceptions of consent, performance of contracts, the establishment, exercise, or enforcement of legal claims, overriding public interests, published personal data or because it is necessary to protect the integrity of persons concerned.

Involving service providers

We use processors to perform various services. In this case, we ensure that the requirements pursuant to Art. 28 GDPR (provision describing the security precautions applicable when using processors) are complied with.

Secure transfer

Special categories of personal data are encrypted during transmission over the Internet using TLS encryption technology (TLS = Transport Layer Security) or similar technology.

Usage of personal data for marketing purposes

In addition to processing your personal data for business reasons, we may use your data for the following marketing purposes (the legal basis is Art. 6 (1) (f) GDPR):

Sending of interest-based newsletters
To invite you to an event and webinars
To keep you informed about the latest product and software releases, product recommendations, market trends/insights and promotions
To send you invitations to participate in surveys that help us improve our communication and communication platform
To send you emails with updates on technical developments and similar information
In some cases, we ask for your consent to use your data for marketing purposes and sales promotion measures (legal basis is then Art. 6 para. 1 lit. a GDPR).
Our affiliated company AVL based in Graz (www.avl.com) may send you a newsletter. You can read about your rights regarding AVL’s data processing and marketing activities here: AVL Privacy Policy.

In some cases, we ask for your consent to use your data for marketing purposes and sales promotion measures (legal basis is then Art. 6 para. 1 lit a GDPR).

Cookies

Use of cookies

To provide you with the best possible user experience and to improve our website, we use cookies, tags and similar technologies. Cookies are text files that are downloaded to your computer or mobile device when you visit a website or use an app.

Google Analytics

We use Google Analytics, a web analytics service provided by Google Inc., to improve our product and service offerings. Google Analytics sets cookies that enable us to analyze the use of our websites. The information generated by the cookie is usually transferred to a Google server in the USA and stored there.

Permanent cookies set by the service provider are used for this purpose. The service provider does not receive any personal data from us (and does not store any IP addresses), but can track your use of our website, combine this information with data from other websites that you have visited, which are also tracked by the service provider, and use these findings for its own purposes (e.g. control of advertising).

If you have registered with the service provider yourself, the service provider will also recognize you based on the information you have provided to it. The processing of your personal data by the service provider is then the responsibility of the service provider in accordance with its data protection provisions. The service provider only informs us how our respective website is used (no information about you personally).