Privacy Notice

Collection of video, image and audio data as part of the project “Automated Driving Alliance” between Robert Bosch GmbH and CARIAD SE

The protection of personal data is a top priority for Robert Bosch GmbH and CARIAD SE (hereinafter "Cooperation Partners") or (“We”) and is a major factor in all our business processes.

The Cooperation Partners conduct street recording activities to collect data necessary for the research, development, and testing of driver assistance systems, automated driving, driving functions, and other services (“Street Recording”) in a partnership under a joint responsibility. This privacy notice describes how we and our suppliers collect, and process and use personal data collected during the Street Recording.

1. What information do we collect?

We or our suppliers conduct the Street Recording in public traffic areas and (insofar as legally permissible) on private factory, testing, and other facilities.

The vehicles are equipped with camera systems with different angles of coverage, focal lengths and sensor technologies, and in some cases with external microphones and other sensor systems. These systems collect, process and store video, image and audio data from the vehicle environment for the purposes described in Section 3 of this privacy notice.

This data may - depending on the individual use-case - also include the following personal data:

• Faces, other characteristics  of road users and other passengers in the vicinity of the vehicles.
• license plate numbers, other characteristics and surroundings of vehicles.
• acoustic information from the vicinity of the vehicles
• Other from other sensor systems (such as radar, LIDAR) as well as GPS position and time stamp

While faces may appear in the collected video and image data, our further processing focuses on their characteristics as 'objects' within the environment (e.g., shape, movement patterns) for technical system development, not for identifying individual persons. We also do not use this data for biometric identification or authentication purposes.

2. Who is responsible entity for the processing, and who can I contact for further information?

Within the scope of the “Automated Driving Alliance” project, the Cooperation Partners are jointly responsible for the data processing activities described below.

For these specific data processing activities, the legally required joint controllership agreement has been concluded between the Cooperation Partners.

For more information on the joint controllership, please see Section 8.

Joint Controllers:

Robert Bosch GmbH
Robert-Bosch-Platz 1
70839 Gerlingen- Schillerhöhe
Germany

and

CARIAD SE
Major-Hirst-Straße 7
38442 Wolfsburg
Germany

If you would like to contact us, please use the following contact options:

E-Mail: privacy@automated-driving-alliance.com

To exercise your data subject rights and to report data protection incidents, you can contact both Cooperation Partners Data Protection Departments:

Data Protection Officer - Robert Bosch GmbH:

Abteilung Informationssicherheit und Datenschutz Bosch-Gruppe (C/ISP)
Postfach 300220
70442 Stuttgart
Germany

E-Mail: DPO@bosch.com

Data Protection Officer - CARIAD SE:

Major-Hirst-Straße 7
38442 Wolfsburg
Germany

E-Mail: privacy@cariad.technology

3. Why do We use personal data and on which legal bases?

The purposes of the data processing are research, development and testing in the areas of driving assistance systems, automated driving, driving functions and other services, including the documentation of these processes and fulfilment of other downstream obligations.

Research, development and testing of such systems require their use in test vehicles under real environmental and traffic conditions - also in public traffic areas - including the acquisition, processing and storage of video, image and audio recordings during and after these operations.

These data sets are used to research, develop and test technical systems for the perception and classification of road users, vehicles, infrastructure and other objects in the context of traffic and environmental situations.

Persons, vehicles, other objects and audio information will be analyzed, classified and processed as "objects" in the context of traffic and environmental situations, e.g. as

• pedestrian on the right-hand side of the road
• car at an intersection
• siren signal behind the vehicle

The primary legal ground of the processing is the pursuit of our legitimate interests in conducting research, development, and testing procedures for driving assistance systems, automated driving, driving functions, and other services which are crucial for enhancing road safety and transportation efficiency. Where required by applicable local law, we will also rely on other legal bases such as explicit consent, contractual necessity, or compliance with a legal obligation.

4. Will the personal data be transferred to third parties?

The data is only shared with other companies affiliated with the BOSCH or CARIAD group, with Cooperation Partners, development partners, data processors or other third parties within purposes described above.

Data will only be shared where legally permissible.

Categories of recipients to whom personal data may be disclosed within the scope of the purposes described above are in particular:

• Internal and external cooperation partners as well as development partners of the persons responsible within the framework of the research and development processes.
• Suppliers within the scope of the research and development processes.
• Other service providers (in particular IT service providers as well as service providers for data processing / data evaluation).

If personal data is transferred to recipients countries outside the region where you are located, and which may not guarantee a comparable level of data protection, we ensure that appropriate safeguards are in place. This may be through standard contractual clauses, binding corporate rules, or other recognized mechanisms. .

5. Do We use your personal data for automated decision-making or profiling?  

No.

6. How long will We store the personal data?

The video and image data are processed and stored for as long as is necessary for the research, development and testing processes mentioned. If, on a case-by-case basis, there is a further legal basis or a further legitimate interest for continued storage and processing (for example, for the proper documentation of the aforementioned processes, due to legal retention obligations or other legal requirements), the data will be stored for a corresponding longer period of time.

7. What rights do you have?

You have the following rights, that can be exercised against any of the joint controllers.

• Right of access: You have the right to obtain information about the processing of your data from us. You may assert a right of access regarding your personal data that we process. 
   
• Right of rectification and erasure: You may ask that we rectify any incorrect data. Insofar as legal requirements have been met, you may request completion or erasure of your data. This provision does not apply to data that are subject to statutory retention requirements. Insofar as access to this data is not needed, however, their processing will be restricted (see below). 
   
• Restriction of processing: Insofar as legal requirements have been met, you may ask us to restrict the processing of your data. 
   
• Objection to data processing: You have the right to object to the processing of your data.
   
• Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction or place of residence, if you believe that the processing of your personal data infringes applicable data protection laws.
  

8. Information on joint controllership

What is the reason for the joint controllership of the Cooperation Partners?

Robert Bosch GmbH and CARIAD SE work closely together in function and vehicle development as part of the “Automated Driving Alliance” project. This also applies to the processing of personal data, insofar as this has been collected by corresponding development vehicles. The Cooperation Partners have jointly defined the processing phases of this data in the individual process stages. They are therefore jointly responsible for the protection of your personal data within the process steps described below.

For which process stages is there joint controllership?

The joint controllership of the Cooperation Partners includes the collection, storage and further processing of video, image and audio data. The Cooperation Partners collect data on vehicles and transmit it to a common IT system where the data is stored and can be accessed or processed by both Cooperation Partners for research, (further) development and testing purposes.

Outside the project, the Cooperation Partners can process data under separate responsibility, provided this is legally permissible.

What have the parties agreed?

As part of their joint controllership, the Cooperation Partners have also agreed that the collection of data also fulfils the information obligations with regard to joint controllership.

What does this mean for data subjects?

Data protection rights can be asserted both with Robert Bosch GmbH and with CARIAD SE through the contact data provided in Section 2. The Cooperation Partners will inform each other without delay about requests from data subjects. They will provide each other with all information necessary to respond to such requests in a timely manner.

9. Amendments of our privacy notice 

We reserve the right to amend our privacy notice from time to time to reflect changes in the way We process your personal data. Please ensure that you are viewing the most recently revised version of our privacy notice. 

Last revised on: 28/04/2026