道路测试与数据采集隐私告知

本告知说明 SonicRide 在公共道路测试和汽车数据采集过程中可能如何处理个人数据。具体项目的车辆标识、二维码或项目告知应优先说明该项目的数据负责人、目的和联系渠道。

1. 谁对数据负责

SonicRide 可能以数据控制者身份决定特定道路测试的目的与方式，也可能仅代表主机厂、Tier 1 或其他客户作为数据处理者执行采集。项目现场告知将识别适用的数据控制者。SonicRide 作为控制者时，联系方式如下：

2. 为什么车辆可能进行记录

测试车辆可能配备摄像头、雷达、激光雷达、GNSS/IMU 和其他车载传感器，用于开发、验证和改进智能驾驶、驾驶辅助、智能座舱及车辆安全功能；评估不同道路、交通规则和环境条件；记录测试异常并验证整改结果。记录范围受传感器视角、测试配置和任务状态限制，车辆可见并不表示所有传感器正在记录。

3. 可能涉及的数据

采集内容主要面向道路、交通设施、车辆动态和系统性能。公共道路环境中可能附带记录行人、骑行者、其他道路使用者的影像、车牌、声音（仅在项目明确启用时）、时间、位置与道路场景。识别自然人不是采集目的；我们原则上不进行人脸识别，也不利用附带影像建立个人画像。

4. 法律依据与合法利益

在 SonicRide 作为控制者且记录不可避免地涉及个人数据时，处理通常基于 GDPR 第 6(1)(f) 条的合法利益：研发和验证车辆安全功能、提高系统可靠性、履行客户测试目标以及维护道路测试安全。我们在项目启动前评估必要性、比例性和对个人权利的影响；若适用法律要求其他依据，我们将采用相应依据。

5. 数据最小化与保护

我们按项目限制传感器、视角、分辨率、采集地点和时段；实施基于角色的访问控制、传输和静态加密、操作日志以及保密义务。在可行且不影响测试目的时，对人脸、车牌和其他可识别特征进行遮挡、删除或不可逆去标识化。

6. 接收方与国际传输

数据仅向为项目目的确有需要的客户、汽车产品研发合作方、测试和标注服务商、托管或安全供应商以及依法有权的机构提供。接收方受合同、保密和数据保护义务约束。传输至欧洲经济区以外时，适用充分性决定、欧盟标准合同条款、传输影响评估和必要的补充保障。

7. 保存期限

可识别的原始记录只保存至完成采集、质量核验、缺陷分析、去标识化和约定交付所必需的时间。具体期限按照项目目的、客户合同、数据量、技术验证周期、法定保存义务和潜在权利主张确定。项目专用告知如规定更短期限，以该期限为准。期限届满后，数据将被删除、不可逆匿名化或转交给适用的数据控制者。

8. 您的权利

在法律规定范围内，您可申请访问、更正、删除、限制处理、数据可携，并反对基于合法利益的处理。由于道路记录通常没有姓名索引，请尽可能提供日期、时间、地点、车辆描述和其他可帮助定位记录的信息。为保护他人，我们可能要求核实身份。若 SonicRide 仅为处理者，我们会将请求转交适用的数据控制者。

9. 投诉与联系方式

请发送邮件至 info@sonicride.net，主题注明“Road Recording Privacy”。您也可向 Der Hessische Beauftragte für Datenschutz und Informationsfreiheit 投诉：Wilhelmstraße 7, 65185 Wiesbaden；poststelle@datenschutz.hessen.de。

Road Testing and Recording Privacy Notice

This notice explains how SonicRide may process personal data during public-road testing and automotive data collection. Vehicle signage, a QR code or a project-specific notice should identify the controller, purpose and contact route applicable to the particular programme.

1. Who is responsible

SonicRide may determine the purposes and means of a test as controller, or may collect data only as a processor for an OEM, Tier 1 supplier or another client. The project notice identifies the applicable controller. Where SonicRide acts as controller, contact us at:

2. Why test vehicles may record

Vehicles may use cameras, radar, lidar, GNSS/IMU and other sensors to develop, validate and improve automated-driving, driver-assistance, digital-cockpit and vehicle-safety functions; assess different roads, traffic systems and environmental conditions; document anomalies and verify corrective work. Sensor field of view, configuration and task status limit recording. Seeing a test vehicle does not mean that every sensor is recording.

3. Data that may be captured

Collection focuses on roads, infrastructure, vehicle dynamics and system performance. Public-road scenes may incidentally include images of pedestrians, cyclists and other road users, licence plates, audio only where explicitly enabled, time, location and road context. Identifying people is not the purpose. As a rule, we do not perform facial recognition or build profiles of people appearing incidentally.

4. Legal basis and legitimate interests

Where SonicRide is controller and recording unavoidably includes personal data, processing normally relies on Article 6(1)(f) GDPR: developing and validating vehicle-safety functions, improving system reliability, fulfilling legitimate testing objectives and maintaining safe road-test operations. Before collection, we assess necessity, proportionality and the impact on individual rights. We use another legal basis where applicable law requires one.

5. Data minimisation and safeguards

We limit sensors, field of view, resolution, locations and collection periods to project needs. Safeguards include role-based access, encryption in transit and at rest, logging and confidentiality obligations. Where feasible without defeating the test purpose, faces, licence plates and other identifying features are blurred, removed or irreversibly de-identified.

6. Recipients and international transfers

Data is disclosed only where needed to the client, automotive development partners, testing or annotation providers, hosting and security providers, and legally authorised bodies. Recipients are bound by contract, confidentiality and data-protection duties. Transfers outside the EEA use an adequacy decision, EU Standard Contractual Clauses, transfer-impact assessment and supplementary safeguards where required.

7. Retention

Identifiable raw recordings are kept only as long as necessary for collection, quality checks, defect analysis, de-identification and agreed delivery. The period is determined by the project purpose, client contract, data volume, technical validation cycle, statutory duties and potential legal claims. A shorter project-specific period prevails. At the end, data is deleted, irreversibly anonymised or handed to the applicable controller.

8. Your rights

Subject to law, you may request access, correction, erasure, restriction, portability and object to processing based on legitimate interests. Road recordings are usually not indexed by name, so please provide the date, time, location, vehicle description and other details that can help locate a record. We may verify identity to protect others. If SonicRide acts only as processor, we will route the request to the applicable controller.

9. Complaints and contact

Email info@sonicride.net with “Road Recording Privacy” in the subject. You may also complain to Der Hessische Beauftragte für Datenschutz und Informationsfreiheit, Wilhelmstraße 7, 65185 Wiesbaden; poststelle@datenschutz.hessen.de.