Privacy policy of WIVW GmbH

Version 17.05.2024

1. Subject of this privacy policy

Due to the sensitivity and need for protection of personal data (hereinafter referred to as "data"), it is the top priority of WIVW GmbH (hereinafter also referred to as "controller", "we", "us") to protect the persons whose data is processed (i.e. "you", "your") as well as the data itself. To this end, we comply with the statutory provisions of the General Data Protection Regulation (GDPR) and the country-specific data protection regulations applicable to WIVW GmbH, which regulate the processing of personal data.

In the following, we will inform you whether and what data we store about you and how and for what purpose we process your data. We also inform you about the initial transmission and the type of data transmitted, as well as the protective measures taken. As the privacy policy is based on the terminology of the GDPR, but should be easy to read and understand for everyone, we would first like to explain some important terms.

• Personal data (Art. 1 No. 4 GDPR) is all information with which we can identify you as a person. This can be data that allows us to identify you directly (e.g. your name) or data that allows us to identify you indirectly (e.g. by assigning an IP address).
• Processing (Art. 4 No. 2 GDPR) is any operation that is carried out in connection with the data. This can be, for example, the collection of data, storage or deletion.
• Consent (Art. 4 No. 11 GDPR) is the expression of your will (declaration, clearly confirming action) with which you indicate that you consent to the processing of your data.
• (For processing) Controller (Art. 4 No. 7 GDPR) is the natural or legal person who decides how and for what purpose data is processed.
• Third party (Art. 4 No. 10 GDPR) is any natural or legal person or body other than you or us or other persons who are authorized to process personal data under our direct responsibility.

2. Responsible body

The controller within the meaning of the GDPR, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is

Würzburg Institute for Traffic Sciences (WIVW GmbH)

Robert-Bosch-Straße 4

97209 Veitshöchheim

Phone: +49-931-78009-0

Fax: +49-931-78009-150

E-mail: info@wivw.de

3. Data protection officer

The contact details of the data protection officer of WIVW GmbH are

Data Protection Officer

Würzburg Institute for Traffic Sciences (WIVW GmbH)

Robert-Bosch-Straße 4

97209 Veitshöchheim

E-mail: datenschutzbeauftragte@wivw.de

If you have any questions or suggestions regarding data protection at WIVW GmbH, you can contact our data protection officer at any time.

4. Collection and use of data

The scope and type of collection/use of your data differs depending on whether you visit our website only to retrieve information or to make use of services offered by us.

4.1 Accessing information

If you only wish to retrieve information from our website, it is generally not necessary for you to provide personal data. Rather, in this case we only collect and use the data that your Internet browser automatically transmits to us and that is stored in the server log files. The following are recorded

- Date and time of access to one of our web pagesYour browser type

- the browser settings

- the operating system used

- the last and current page you visited

- the amount of data transferred and the access status (file transferred, file not found, etc.)

- your IP address.

This usage data is stored separately from any other data you may provide to us. There is no linking of the usage data with your other data and no conclusions are drawn about your person. The usage data is generally required for accessing the website. Beyond this, we only use the data to optimize our website with the help of anonymized, statistical evaluations. For reasons of technical security, i.e. to defend against attempted attacks on the web server, as well as due to the legal obligation to provide law enforcement authorities with the data necessary for prosecution in the event of an attack, your usage data is stored by us for a short period of time, for a maximum of 7 days. Our legitimate interest in data processing also lies in these purposes. The legal basis for the processing is therefore Art. 6 para. 1 lit. f) GDPR.

4.2 Making contact

Further data will only be stored by us with your express consent (Art. 6 para. 1 lit. a) GDPR).

You have the option of sending us a message via the contact form. In this case, we will ask you for your name and e-mail address. You can also provide your telephone number, but this is not absolutely necessary. Alternatively, you can send us an e-mail. By completing and sending your message, you agree that we may store your data in order to respond to your inquiry. Depending on the content of your inquiry, your data may be forwarded within WIVW GmbH to the person responsible for responding, about which we will then inform you. Your data will be processed exclusively for the purpose of responding to your inquiry. Your data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal or legal prosecution. Depending on your request, your data will be stored further or deleted.

4.3 Customer area

If you are a customer of WIVW GmbH, you can obtain access to the customer area in consultation with us. This can be set up in order to provide you with certain information or services as part of a contractual agreement. When you visit the customer area, in addition to the above-mentioned data for the use of the homepage, the time of registration, your IP address and the content accessed are logged. This provides us with information as to whether the contractually agreed service has been used. The log files are deleted at the end of the contractual relationship. Your data will not be passed on to third parties unless there is a legal obligation to pass it on or the passing on serves the purpose of criminal or legal prosecution. The legal basis for this data processing is Art. 6 para. 1 lit. b) GDPR.

4.4 Registration for the test person panel

If you are interested in being included in our panel of test subjects, you are welcome to contact us. For an initial contact, we will only process your contact details.

However, each study has different, specific requirements for the participating test subject, which is why we will need further data from you if you are accepted onto our panel. This includes, for example, information about your driving experience, experience with different vehicle types and driver assistance systems, education, age or required visual aids. We process the data that you have provided to us in connection with your test subject registration exclusively in order to contact you for study participation (real driving, simulator studies, surveys, workshops, interviews, PC tests, etc.) and to be able to assign you to suitable studies. The data processing takes place exclusively with your consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your data in the WIVW test person panel will be deleted if you so wish and no longer wish to be contacted for study participation. In principle, only those persons have access to your data who need it for the proper conduct of our studies. Your data will not be passed on to third parties. The data is processed exclusively on the WIVW's own server.

4.5 Tools

To make it easier for you to find the WIVW, we have integrated the URL of Google Maps from the provider Google. The service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, the parent company Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: "Provider").

We would like to take this opportunity to point out that when you use Google Maps, the provider may process your IP address, location data and other personal data. This is only done with your consent (Art. 6 para. 1 lit. a) GDPR), usually through the settings of your mobile device / browser. Only when you click on the link and thus give your consent will you be forwarded to the provider and data processed by the provider. We have no influence on this data transfer. You can revoke your consent at any time with effect for the future by deactivating this service.

Restriction of data processing: Data processing by the provider takes place regardless of whether you are logged into a Google account or not. If you are logged in, your data can be assigned to your user account. If you do not want this to happen, log out of your account before using the tool. Blocker tools can also be used to prevent calls from Google servers. Google stores your data as usage profiles in order to use them for needs-based advertising, for example. You have the right to object to the creation of user profiles, whereby you must contact Google to exercise this right. You can find more information about the provider's data processing in the Google data protection information (https://policies.google.com/privacy) and adjust your personal data protection settings there.

An adequacy decision exists for the transfer of data to the USA and Google LLC is certified in accordance with the EU-US data protection agreement (Data Privacy Framework).

Of course, you can also use any other route planner to display the route to the WIVW. The respective data protection information of the tool used applies.

5. Recipient / passing on of data

The data you provide to us will not be passed on to third parties, except in the exceptional cases mentioned above.

However, we would like to point out at this point that we may use service providers for the operation of this website or, for example, for e-mail services. It may happen that a service provider obtains knowledge of personal data. We select our service providers carefully - particularly with regard to data protection and data security - and take all measures required under data protection law to ensure permissible data processing. Where necessary, we conclude an order processing contract with the service providers in accordance with Art. 28 GDPR. This also ensures that the service provider offers sufficient guarantees that it has taken appropriate measures to protect your data in accordance with the provisions of the GDPR and the other applicable country-specific data protection regulations. The web server is located in Germany, which means that data processing primarily takes place within the EU.

In the event that you conclude a contract with us in the further course of contacting us, it may be necessary for your data to be passed on to service providers in the areas of banking, taxes and tax advice or - within the framework of the legal requirements - to the tax authorities.

6. Data processing outside the European Union

Data processing by us is generally carried out on servers in Germany or the European Union. As a matter of principle, we do not process data outside the European Union.

7. Retention period and deletion of the collected data

Your personal data will only be stored for as long as is necessary for the provision of our services or for the purpose of storage. Sometimes it may be necessary to store data for a longer period due to statutory or legal obligations to which WIVW GmbH is subject.

If the purpose of storage ceases to apply or if a statutory storage period expires, the data will be deleted in accordance with the statutory provisions.

8. Cookies

Like many other websites, we also use the technology of cookies. Cookies are text files that are sent from our web server to your browser when you visit our website and are stored on your computer for later retrieval.

We only use so-called session cookies or temporary cookies, i.e. cookies that are only stored temporarily for the duration of your use of one of our websites. The purpose of these cookies is to continue to identify your computer during a visit to our website when you switch from one of our websites to another and to be able to determine the end of your visit. Cookies do not damage your computer and do not contain viruses.

Cookies are deleted as soon as you end your browser session.

You can determine yourself whether cookies can be set and retrieved using the settings in your browser. For example, you can completely deactivate the storage of cookies in your browser, restrict it to certain websites or configure your browser so that it automatically notifies you as soon as a cookie is to be set and asks you for feedback. For technical reasons, however, it is necessary to allow the aforementioned session cookies in order to ensure the full functionality of our website.

We do not collect or store personal data in cookies in this context. We also do not use any technologies that link the information collected by cookies with user data.

9. Website analysis

No web analysis services are used.

10. Data security

We use technical and organizational security measures to protect personal data that is generated or collected, in particular against manipulation, loss or unauthorized access. Our security measures are continuously adapted in line with technological developments. Unfortunately, Internet-based data transmissions can still have security gaps, meaning that absolute protection cannot be guaranteed. However, you have the option of transmitting your data to us by alternative means, such as by telephone or in person.

11. Your rights

Under the GDPR, you are granted the following rights in connection with your data. To exercise your rights, you can contact our data protection officer or another employee at any time.

11.1 Right to information

You have the right to receive information and confirmation from us at any time free of charge about the personal data stored about you. This information includes, for example, information about whether we process any of your data and, if so, what type of data, for what purpose the data is processed, who any recipients of the data are and how long the data is stored (Art. 15 GDPR). If you make a request for information, we ask for your understanding that we may then require proof from you that you are the person you claim to be.

11.2 Right to rectification

If we process incorrect data about you, you have the right to request the correction of this data without delay (Art. 16 GDPR).

11.3 Right to erasure ("right to be forgotten")

In certain cases, you have the right to demand that we erase your data without undue delay, for example if it is no longer required for the purpose for which it was collected, if the statutory retention obligation has been fulfilled or if you withdraw your consent to processing (Art. 17 GDPR). The prerequisite for this is that further processing of your data is not necessary or required by law.

11.4 Right to restriction of processing

Under certain conditions, you have the right to demand that we restrict the processing of your data if deletion is not possible or the obligation to delete is disputed (Art. 18 GDPR).

11.5 Right to data portability

You have the right to receive the data concerning you that you have provided to us in a structured, commonly used and machine-readable format (Art. 20 GDPR).

11.6 Right to withdraw your consent under data protection law

You have the right to withdraw your consent to the processing of your data at any time. However, any processing that took place before you withdrew your consent remains valid (Art. 7 para. 3 GDPR).

11.7 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of data concerning you which is based on point (e) or (f) of Article 6(1) GDPR (Article 21(1) GDPR). In this case, we will no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

If we process your data for the purpose of direct marketing, you have the right to object to this type of processing at any time.

You also have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out for scientific or statistical research purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

11.8 Right to lodge a complaint with the supervisory authority

If we cannot help you satisfactorily and you are of the opinion that we are not processing your data in accordance with data protection regulations, you have the right to lodge a complaint with a supervisory authority.

12. Changes to the data protection information

We will revise this data protection notice in the event of changes to this website or other occasions that make this necessary. You will always find the current version here on this website.