Data Protection Notice regarding Audi connect

D. Online Services

Please note that some of the online services are offered not only via the MMI, but also on the optionally available Audi Rear Seat Entertainment (Rear Seat Entertainment for MMI 3G+, Audi Tablet for MIB2 and MIB2+) and can be used there as well. The following information on data processing applies accordingly

The specific data and purposes of the data processing depend primarily on the particular vehicle and the vehicle equipment and the services used. Please note that not all services listed may be available for your vehicle or in your country.

The list and specification of all the maximum available features, regardless of your vehicle model and the specific software version, is only for the purposes of this Data Protection Notice and does not intend or lead to an expansion of the features or functional scope of your specific vehicle. 

I. Registration and Login of Your Vehicle

To provide the online services in your vehicle and to secure your vehicle's communication, your vehicle registers with our IT systems for each driving cycle. For this purpose, your vehicle sends the following data or categories of data from your vehicle in the course of the registration: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner). If you use personalised services, your login data for your myAudi account, which you enter in the vehicle, will be transmitted to our IT systems. This means that certain data that you store in your myAudi account is also available in the vehicle (further information can be found in the information for the respective services).

For the use of certain online services, signed proof of authorisation (so-called "credentials") is transferred to your vehicle (e.g., OAuth token), with which our service providers can verify the authorisation to use a service. We only transmit the proof of authorisation to the service provider, without having to transmit your vehicle identification number or any other specific reference to you or your vehicle (pseudonymous authorisation). Information on the use of pseudonymous authorisation can be found under the individual services.

To check your authorization to use services, your vehicle registers with the IT systems of AUDI AG in every driving cycle.

In addition to your vehicle identification number, we also log the time and type of service used in order to identify and analyse disruptions for the purposes of the legitimate interests pursued by us. The log data is stored for 4 months for this purpose.

For unforeseen events, we also collect data for monitoring and analysis purposes in order to ensure the quality of the services offered. In this case, information such as the type, origin and time of the event, the vehicle systems affected and the general conditions are transmitted and processed in the backend.

II. Audi connect Navigation & Infotainment

1. Personal Route Assistant

The personal route assistant supports you intuitively in reaching your navigation destinations. After successful registration, the parking locations of your vehicle, relationships between parking locations, specific routes driven, charging stations used as well as the day of the week and times are processed in the background.
Based on the learned data, probable navigation destinations are suggested to you when you get into the vehicle. If you do not select any of the destinations offered, you will be shown alternative routes in the event of traffic disruptions on routes that have already been learned.

The prerequisite for using the service is the registration and opening of a myAudi account. For the personalised service, the assignment to your pseudonym across driving cycles is necessary. For this purpose, a unique pseudonym (user ID) is assigned to your myAudi user name. The data is synchronised using your pseudonymous user ID.

After you delete data in one of your MMI systems, it is also deleted at our service provider after the next successful synchronisation of all end devices. You have the option of deleting the data learned from you from the vehicle completely or relating to the last 24 hours at any time.

2. Online Map Update

With this service, the navigation database can be updated online directly in the vehicle. To do this, the vehicle analyses which regions within a country (e.g., Bavaria) are relevant for the vehicle and transmits this information to our service provider. 

The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. The data are transmitted to the service provider with a different pseudonym for each driving cycle (pseudonymous vehicle ID). If you are logged in as a user in the vehicle, a pseudonymous user ID will also be transmitted. The service provider does not receive your name or your vehicle identification number (VIN).

In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, available memory for the update package, installation result, information about the software versions used, map or map tile versions used, data consumption. 

3. myAudi Navigation

myAudi Navigation provides you with personalised navigation services. 

The personalized services of myAudi Navigation require the assignment to your pseudonym across driving cycles. For this purpose, your myAudi user name and your vehicles are each assigned a unique pseudonym (user ID and vehicle ID); the service provider only receives the pseudonyms. The data is synchronised using your pseudonymous user ID and your pseudonymous vehicle IDs. The service provider does not receive your name or your vehicle identification number (VIN). After you delete data in one of your MMI systems or your myAudi app, it is also deleted at our service provider after the next successful synchronisation of all of your end devices.

If your vehicle supports the e-tron route planner, additional information about energy consumption, climate vehicle data and vehicle climate control settings as well as the charging data is sent so that we can provide route suggestions in the myAudi app, taking into account the available charging stations and the electric range of your vehicle. This data is stored in your myAudi account until it is overwritten by sending a new data record from the vehicle or until you delete your myAudi account.

Destinations created while the privacy settings are activated (last destinations, favourites) are assigned to your profile and synchronised again with your myAudi account after the privacy settings have been switched off. If you want to prevent subsequent synchronisation of certain destinations, you must manually delete these destinations before deactivating the privacy settings.

4. e-tron Route Planner

The "e-tron route planner" service allows you to calculate charging routes using your mobile device. In order to calculate a suitable route with the specific consumption of your vehicle, we process the following data or categories of data from your vehicle as part of the service: 

• Pseudonymised vehicle identification number (which can uniquely identify your motor vehicle)
• Consumption values (e.g. for different speed ranges, auxiliaries)
• Characteristic curves for electrical consumption
• Climate settings
• Range calculation mode
• Current range
• Maximum range
• Time of data transmission
• Battery charge level
• Planned target charge level at the charging stop
• Information on trailer mode
• Set speed limit
• Information on the installed charging socket
• Information on the installed battery and its charging characteristics
• Individual consumption values
• Ascent/descent of the route (topographical factor)

The corresponding data is sent to our IT systems after the vehicle is switched on or switched off and is then available for retrieval via the myAudi app. 

The use of the e-tron route planner in the myAudi app is possible for the main user and every activated vehicle user. Activation is carried out by the main user in the myAudi app.

Only the last data record sent by the vehicle is saved so that it can be displayed and overwritten when a new data record is sent.

The following data is processed to validate and optimize the accuracy and quality of the charging point of interest data in the navigation system and in the e-tron route planner, e.g. by correcting the location of a charging station or the possible charging power in the navigation system, as well as to ensure the best possible charging experience with regard to functionality and the information provided at the charging point:

• Anonymized ID, which does not allow any conclusions to be drawn about the owner or a vehicle, but which allows the data to be assigned to a vehicle over time
• Time stamp of the data points
• Position data of the vehicle (longitude, latitude, orientation)
• Information about the charging station (charging station identifier (EVSE-ID), maximum available current, voltage and power of the charging station)
• Status of plug detection, activation and locking
• Temperature values of the charging sockets, the HV battery and the environment
• Charging parameters of the vehicle (maximum charging power achieved, target charging current DC voltage value of the HV battery, maximum possible charging current, maximum charging power that the vehicle can draw from the charging infrastructure, current charging current of the vehicle from the charging station (incl. (incl. consumer), current charging current of the vehicle in the HV battery (minus consumer), SoC of the HV battery (start SoC, current SoC, end SoC), target SoC (customer input), remaining charging time, validity of the remaining charging time calculation, software status of the charger)
• Vehicle operating mode (charging scenario and strategy, charging mode, charger functional status, HV battery preconditioning status, use of bank charging, use of DC booster, vehicle error status, charging LED status, charging schedule creation, charging session ID, derating status)
  

New information based on the validation and optimization can be displayed in the navigation system and taken into account in the route guidance.

The data is continuously transmitted to the IT systems of AUDI AG and CARIAD SE from the time the charging cable is plugged in until it is unplugged from the vehicle charging socket. 

To improve the charging experience, the data for all charging processes (AC and DC) is stored for a period of 3 months. For AC charging processes, the anonymized ID is stored for no longer than 7 days. 

For the validation and optimization of the accuracy and quality of the charging point of interest data, the data without the anonymized ID is stored for 2 years. 

After this period has expired, the data is automatically deleted, provided there are no statutory retention obligations.

5. Map Display in myAudi app and MMI Rear Seat Entertainment

The "Map display in myAudi" service provides you with an up-to-date navigation map.

In order to be able to display a current navigation map in the MMI Rear Seat Entertainment and the myAudi app, information on the map section to be displayed is transmitted to our service provider. 

The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used. 

6. Destination Memory

The Destination Memory service allows you to store navigation destinations in a personal online destination repository. By using your myAudi account and your mobile data connection, you can synchronize your navigation destinations across multiple devices and vehicles.

As part of this service, we process the following data or categories of data from your vehicle:

• Pseudonymized customer ID
• Destination data: address, POI name, category (e.g., gas station)
• Metadata / usage data related to your destinations: time of creation, time of last use, number of uses, last modification

This information is obtained either directly from your inputs in the vehicle or via the myAudi app. At carefully defined intervals, your recent destinations and favorites are overwritten based on your most recent usage.

7. Active Guidance Sync

The Active Guidance Sync service enables you to synchronize an active route guidance (guidance to a specific destination) across multiple touchpoints and frontends, ensuring a seamless navigation experience. For example, you can start route guidance on your mobile device (e.g., via the myAudi app) and transfer it to your vehicle’s navigation system.

During synchronization, the following information is exchanged between the in-vehicle infotainment system, the navigation services backend, and the myAudi app:

• Locations (name, latitude/longitude), waypoints, charging stations
• Route criteria associated with this guidance
• EV route settings (for electric vehicles)
• UUID of the route guidance
• eTag for synchronization purposes (a pseudo-timestamp used to identify which version is active in the vehicle and backend)
• Expiration timestamp (after which the guidance is no longer active)
  

Data stored in the navigation services backend is deleted after 24 hours or as soon as you reach your destination and the route guidance is turned off.

8. Online Search

Various service providers are connected to make it easy to search for numerous POIs (Points of Interest) in different categories via your MMI system, MMI Rear Seat Entertainment or your myAudi app, various service providers are connected with whom we also share data for the purpose of providing their services. The data transfer follows the principle of data minimization and only to the extent necessary for the provision of the services by the service providers. As far as possible, all requests from your vehicle are anonymized.

As part of the services, when you make a search query, your vehicle sends the following data or categories of data to the IT systems of AUDI AG in order to be able to process your search query: the time you accessed the service and the type of query you sent via the MMI, pseudonymous information to check the authorisation of your vehicle or the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), the search term, the selected system language, the vehicle position (location data place and time), model, drivetrain type, model year and/or the position that you have defined yourself (search position) – whether you have specified the vehicle position or the search positions is not transmitted.

If you use the option of voice control for the POI search, your vehicle will also send your voice data after activating this function. The IT systems of AUDI AG, in turn, forward the queries to the respective content provider to provide the requested information. The vehicle identification number or another identifying feature for assigning the request to a vehicle or a person is not transmitted. However, since these are location-based services, it is necessary for each service to transmit your current position (vehicle or myAudi app) or the search position or route you have selected. The type of POI (e.g., hotel, restaurant, car parks) or searched name are transmitted as parameters for the search. In addition, the system language and type of units of measurement, e.g., kilometres or miles, are transmitted in order to provide the search result in the correct language and unit of measurement. We or the content provider process the above data to provide the service in order to be able display the desired information to you (e.g., charging stations, petrol stations, parking spaces, restaurants, train and bus timetables, arrival and departure times, etc.) in proximity to your current position or destination and for the other purposes mentioned below.

Below you will find a list of the individual services:

Online POI search: This service allows you to search for numerous POIs of different categories, e.g., restaurants, hotels, transport facilities, leisure activities, etc. Fuel prices: This service allows you to search for current fuel prices. In addition to the general parameters, the type of fuel relevant to your vehicle is also transmitted.

Charging stations: This service allows you to search for suitable charging stations.

Parking information: This service allows you to search for parking spaces and car parks.

Weather: This service allows the retrieval of weather information.

Train information: This service allows you to search for train stations/bus stops and their arrival and departure times.

Flight information: This service allows you to search for airports and arrival or departure times. The content provider is:

Country information: This service allows the display of country-specific regulations for many European countries.

Navigation destinations powered by Google: This service allows you to search for numerous navigation destinations in different categories, e.g., restaurants, hotels, transport facilities, leisure activities, etc. If you use your myAudi app for the search, the queries from the Google destination search are sent directly to the systems of the service providers. In contrast to the POI services described above, your vehicle or the myAudi app sends the requests for the Google destination search directly to the service provider's systems. In addition to pseudonymous information for authorisation to use the service, the current vehicle position or the search position you have selected, the search text and the set system language are transmitted. 

9. On-Street Parking

The on-street parking service allows you to search for and display parking spaces along streets.

To do this, your vehicle sends parking events that include GPS positions of the vehicle before and during a parking event together with time stamps and information from vehicle sensors on vehicle speed, direction of travel and metadata on the quality of the sensor data. These data are transmitted from your vehicle to the IT systems of AUDI AG. They are not stored there, but forwarded directly to the service provider. The data are processed there.

When searching for on-street parking, the search location (which may match your current vehicle location) is sent to the service provider. Communication with the service provider is pseudonymous (session ID).

10. Parking position

The "Parking position" service allows you to call up the last known location of your vehicle after it has been switched off and locked. The address and navigation to the location can be displayed in myAudi.

As part of the service, we process the following data or categories of data from your vehicle: last known position of the vehicle when locking the vehicle together with the VIN. It is not possible to retrieve the position while driving.

The last parking position is visible to every myAudi authorized user that the main user has activated for this vehicle.

The last position is saved until the vehicle sends a new position as part of the service. No movement profiles of your vehicle are created. The service can be deactivated by the main user in myAudi.

The aforementioned data is available to you until you delete it. You can delete the data in myAudi or via your smartphone.

11. Online Routing

The Online Routing service provides you with a route calculated online, taking current traffic conditions into account.

As part of this service, we process the following data or categories of data from your vehicle:

• Current vehicle position (starting point for route calculation)
• Destination
• Optional: waypoints
• Optional: route preferences, e.g., avoiding highways or toll roads
• For route updates: the route path of the currently driven route (list of lat/long coordinates) to detect whether an alternative route is being used
  

For EV online route calculation, the following additional data is transmitted alongside the parameters listed above:

• Current consumption profile of the vehicle
• Vehicle-specific charging parameters (current and maximum charging power, charging curve)
• Optional: manually planned charging stops

In addition to the service-specific data mentioned above, metadata required for service delivery is transmitted: timestamps, information on software versions used, and map or map tile versions.

Data transmission follows the principle of data minimization. All requests from your vehicle are pseudonymized. Authorization checks are performed pseudonymously. For each driving cycle, data is transmitted to the service provider using a different pseudonym (session ID). The service provider does not receive your name or your vehicle identification number. The data transmitted to the service provider is processed exclusively for service delivery, service optimization, and service development.

12. Online Traffic Information

The "Online traffic information" service informs you about current traffic events and shows the traffic flow in the map and along the route of your MMI system or myAudi app.

To this end, your vehicle sends the following data to the IT systems of AUDI AG: current position of your vehicle (use in the vehicle) or the current map section to be displayed (use in the myAudi App), the desired destination, and settings in your vehicle for traffic information.

The data is sent in accordance with the principle of data minimisation. Under this principle, all queries from your vehicle are pseudonymised. The review of the usage authorisation is conducted pseudonymously. During each driving cycle, the data is sent with a different pseudonym (session ID) to the service provider. The service provider does not receive your name or your vehicle identification number (VIN). In addition to the service-specific data detailed above, the metadata required to provide the service is transmitted: time stamp, information about the software versions used, map or map tile versions used.

The service provider continuously receives the position data over a driving cycle as well as information from vehicle sensors on vehicle speed, direction of travel and metadata on the quality of the sensor data. This data is continuously sent from your vehicle to the service provider - if necessary via the IT systems of AUDI AG.

Data transmission follows the principle of data economy. To this end, all requests from your vehicle are pseudonymized. The check of authorization for use is pseudonymized. The data is transmitted to the service provider with a different pseudonym (session ID) for each driving cycle. The service provider receives neither your name nor your vehicle identification number. 

13. Online Traffic Sign Information 

The "Online traffic sign information" service updates the speed limits stored on your MMI system.

To do this, your vehicle sends the recognised traffic signs, the GPS positions of the vehicle before, during and after detection together with time stamps and information from vehicle sensors on vehicle speed, direction of travel and metadata on the quality of the sensor data. This data is continuously forwarded to the service providers – if necessary via the IT systems of AUDI AG. The data are processed there.

For quality assurance and checking the correctness of the recognition, it is necessary for the transmitted data to be stored for up to one week. After that, the transferred data is automatically deleted. Only the products of the processing, i.e., traffic signs with position and last detection time, remain saved until they are overwritten by new detections. A reference to your pseudonym (session ID) then no longer exists.

To query online traffic signs, your vehicle also sends the selection of relevant map tiles (tiles along the route and around the current vehicle position) to the IT systems of this service provider at regular intervals.

14. Online Traffic Light Information

The "Online traffic light information" service shows you information about the traffic light ahead in the form of a speed recommendation for crossing the next traffic light when it is green or, if this is not possible, a waiting time at the next traffic light.

To do this, your vehicle sends the current vehicle position (GPS position) to query relevant intersections in the vicinity as well as crossing data after passing an intersection with a connected traffic light to IT systems of AUDI AG. In addition to location and time information, this crossing data also contains information about the intersection and other service-specific attributes without personal reference.

In addition, we process the above personal data for the purposes of quality assurance and checking the correctness of the switching forecasts of a traffic light as well as to create anonymised and aggregated evaluations and store the above data for up to 12 months.

15. Hazard Information 

The local hazard information service shows you hazardous spots, such as slippery roads, breakdowns, accidents, impaired visibility.

For this purpose, your vehicle occasionally sends the condition of the road and, depending on the event, the type of hazardous spot as well as the associated time and GPS positions, driving speed and direction of travel of the vehicle and other information on the vehicle condition (e.g., light status) and environmental conditions (e.g., outside temperature).

These data are transmitted from your vehicle to the IT systems of AUDI AG. They are not stored there, but forwarded directly to the service provider. 

16. Online News

The “Online News” service provides you with up-to-date news and information from around the world directly in your vehicle.

As part of this service, we process the following data or categories of data from your vehicle:

• Time of access to the service
• Type of request submitted via the MMI
• Vehicle Identification Number (VIN), which uniquely identifies your vehicle and links it to a specific owner
• myAudi user ID

Within the scope of Audi connect, AUDI AG merely enables the use of the communication or information service you have separately subscribed to from the online news provider (“Service Provider”) in your vehicle. Accordingly, we forward your specified identification data (username and password) to the Service Provider so that they can grant you access to the service and make it available as part of the connect services portfolio.

The identification and connection data required for this purpose are processed and used for service delivery and proper functioning of the services in accordance with applicable legal requirements. Your identification data is stored by AUDI AG to allow you to use the personalized information service without having to log in separately for each session.

Any further data processing related to the use of the service is governed by the terms of use and privacy notices already agreed upon between you and the Service Provider. Current information from the Service Provider (including imprint details, applicable terms of use for the services, and any data processing by the Service Provider) can be found on the following websites: www.afp.com, www.tagesschau.de, www.dw.com, as well as any additional RSS feed providers you may have added.

17. Connected Radio

The "Connected Radio" service provides basic functions to supplement the radio function in your vehicle.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner) and, in the countries and regions of Taiwan, South Korea, Japan, Hong Kong and Macao, the approximate vehicle location.

The VIN is used to compare the vehicle with the service list. The location, which is collected in the Asian countries mentioned above, is necessary to complete transmitter information (e.g. the transmitter logo). The location is only accurate to 700 meters and, as it is not combined with the VIN (vehicle identification number) or other customer data, cannot be assigned to a specific person.

18. Amazon Music /Apple Music

Within the scope of Audi Connect, AUDI AG only enables the use of the audio streaming service in the vehicle that you have already obtained separately (currently: Amazon Music, Apple Music).

A non-personalised token provided by the service provider is transmitted for use in the vehicle. This token will be stored for the use of the service in the vehicle, so that you do not have to log in separately for each individual use process.

The respective conditions and notices of the service provider (e.g., Terms of Use, Data Protection Notices) shall apply to any further data processing within the scope of the use of the service.

19. Online Voice Dialog System / Audi Assistant

The “Online Voice Dialogue System / Audi Assistant” service is an intelligent voice assistant that responds to your voice commands and can be compared to a “smart home” assistant (e.g., Alexa). In addition to responding to voice inputs such as “Drive me to…”, the Audi Assistant can also recognize usage patterns and proactively offer suggestions and automations (e.g., “Would you like to always stop here…?”).

As part of these services, we process the following data or categories of data from your vehicle:

• Time of access to the service
• Spoken voice data or text for speech recognition
• Language settings
• For destination inputs: the recognized search term and the current vehicle position (location data)
• Pseudonymized ID for technical assignment of the request

To use these services, you must explicitly activate them via the corresponding voice command or through the vehicle menu and consent to data processing. The voice data or text is converted into an audio or text data format by our service provider, and the results are sent back to the vehicle.

20. Online Voice Dialog System with Amazon Alexa

The “Online Voice Dialogue System with Amazon Alexa” service is an intelligent voice assistant provided by a third-party provider that responds to your voice commands.

As part of this service, we process the following data or categories of data from your vehicle:

• Time of access to the service
• Spoken voice data
• Language settings
• Token provided by the provider of the voice assistant you have linked (currently: Amazon Alexa)

Within the scope of Audi connect, AUDI AG merely enables the use of the communication or information service you have separately subscribed to from the voice assistant provider (currently: “Amazon Alexa”) in your vehicle.

21. Audi Smartphone Interface

Supplementary to section C.I.1. Smartphone Integration e.g., Android Auto or Apple CarPlay, your vehicle sends data to your mobile device connected via the smartphone interface. This includes the following data: steering angle, lights on/off, speed, GPS signal, ESP sensors. Which data is actually sent depends on the function you use.

In addition, your mobile device transmits data to your vehicle that you have actively enabled on the device when the connection between the vehicle and device is activated. This includes the following data: name and Bluetooth and Wi-Fi address of the connected mobile device, call lists, music titles, playlists, content of the screen of your mobile device.

The name of your end device is stored locally in the vehicle in order to be able to identify different devices, and you can delete it in the vehicle at any time. The other data is transmitted during an active connection, but not saved.

No data is sent to the IT systems of AUDI AGAUDI AG only enables the use of the communication or information service in the vehicle that you use via the mobile device. Accordingly, the vehicle sends the required data to the connected end device. For further data processing, in particular the forwarding of data to a service provider in the context of the use of the service, the terms of use agreed between you and the service provider or their associated privacy notices apply and you should refer to this for further information.

22. Wi-Fi Hotspot

You can use the "Wi-Fi hotspot" service to set up a Wi-Fi hotspot for your vehicle using your mobile device in your vehicle.

As part of the service, we process the following data or categories of data from your vehicle: MAC address and name of the end device used. This data is stored in the vehicle so that you can reconnect your end device more quickly. The Wi-Fi hotspot may use the service D.II.22. Bundled Connectivity.

23. Bundled Connectivity

This service enables every user to purchase data packages from a partner mobile phone provider of AUDI AG for the use of the Wi-Fi hotspot and to use them in the connected vehicle. This prerequisites the registration of a SIM owner with the mobile phone provider.

As part of the service, we process the following data or categories of data from your vehicle: Vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner). This is necessary to establish the connection between the SIM and the vehicle.

We have no influence on the scope of the data that the mobile phone provider collects in connection with the purchase of a data package and your use of the service. The collection, processing, transmission and use of personal data as well as the purpose of use is determined exclusively by the mobile phone provider. For more information, the data protection information of the mobile phone provider and your rights and settings options for protecting your privacy, please refer to the data protection information of the mobile phone provider Cubic³.

24. User Profiles

Once a user has been identified in the vehicle using their myAudi account, the service ”User Profiles” enables the automatic adoption of the last personal settings within the framework of convenience and infotainment functions in the vehicle.

As part of the service, we process the following data or categories of data from your myAudi account: pseudonym, profile picture (photo), and infotainment preferences.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner).

With regard to the convenience settings, we process depending on the respective equipment, e.g.,

• Settings of seat and steering wheel positions
• Suspension and climate control settings
• Driver assistance and driver information systems
• Settings in instrument cluster and infotainment system
• Customisations such as interior lighting

With regard to the data you have entered yourself in infotainment functions, we process depending on the respective equipment, e.g.,

• Multimedia data such as music, movies or photos for playback in an integrated multimedia system,
• Address book data for use in connection with an integrated hands-free device or an integrated navigation system,
• Entered navigation destinations,
• Data on the use of Internet services.

Your personal settings in the area of convenience and infotainment functions are stored in the IT systems of AUDI AG for your personal myAudi account. If you log in to any vehicle with your myAudi login data, your personal settings will be automatically applied depending on the vehicle equipment. Your usage behaviour is not analysed.

If your myAudi account is deleted, the above data is also deleted from the IT systems of AUDI AG.

III. Audi connect Remote Control

1. Vehicle Status

The vehicle status report service allows you to view various vehicle data via myAudi or your mobile end device. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner) as well as the current status of the doors (locking status) and status of windows, hatches and, if applicable, convertible/sunroof, spoiler status, fuel and oil level (OK/NOK), maintenance interval data for service and oil change if applicable,  mileage, total range or individual range, parking light status, current warning messages, parking brake status, battery charge level for e-tron vehicles as well as AdBlue values for diesel vehicles.

The corresponding data are sent directly to our IT systems via the app upon turning on or turning off the vehicle, locking and unlocking, when opening or closing doors as well as upon reaching the critical state of charge of the 12V battery or on your request by access in myAudi or on your mobile end device, and is subsequently available for retrieval via the app and via myAudi. In addition, your vehicle sends the position of your vehicle when the vehicle is turned off. The vehicle status is visible to every authorised myAudi user who has been activated by the primary user for this vehicle.

In addition, receiving of push notifications can be activated. These provide any vehicle status information or recommendations that are available for this vehicle (e.g. temperature-based charging information regarding the drive performance of e-tron vehicles).

Only the last record sent by the vehicle is stored so that it can be displayed to you, and this is overwritten when a new record is sent.

2. Remote Trip Statistic (RTS)

The "Remote Trip Statistic (RTS)" service supports you in optimizing your driving style. Personal driving data such as acceleration, speed, engine speed and braking behavior are measured and displayed in a detailed statistical representation.

As part of the service, we process the following data or categories of data from your vehicle: route length, consumption (fuel consumption, electrical consumption), total mileage at the start and end of the journey, average speed and journey duration. Depending on your model or the equipment of your vehicle, not all of the data listed may be transmitted from your vehicle.

The data is transferred for display in myAudi or on your smartphone after a journey has been completed. You can call up the transferred data at any time via myAudi or your smartphone.

The aforementioned data is available to you until you delete it. You can delete the data in myAudi or via the smartphone

3. Remote operation and display of charging / charging equipment status (Remote Battery Charging)

The "Remote operation and display of charging / charging equipment status" service provides you with data relating to the battery charging process, such as the current charge status.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), user ID, properties and status of the vehicle and the charging process (battery charge status, battery size, battery temperature, status of the charging plug), timestamp of the journey and status of readiness to drive (ignition "off"/"on"), outside temperature and position data. Depending on the vehicle model, we may not process all of the data listed above.

We process the aforementioned data to provide the service in order to give you personalized recommendations and suggestions for optimized settings for configuring charging processes via the app based on your battery usage and charging behavior. This service is available to the last logged-in user in the vehicle.

You will receive the charging instructions via push notifications in the myAudi app, provided you have activated them. We store your data for 30 days or until you unassign the vehicle from your myAudi account.

4. Plug & Charge

The "Plug & Charge" service allows you to insert your digital Plug & Charge charging card into your vehicle. This automatically authorizes your e-tron at compatible charging stations - you no longer have to start the charging process with an RFID card or in the app.  
  
As part of the service, we process the following data or categories of data from your vehicle: the VIN, the availability and function status (activated/deactivated/error), the hardware and software information of your vehicle, as well as data from your charging contract: the provider information, your contract number, the validity period.
  
We use your personal Audi ID as an identification feature to display the correct data to you when you use the service.
  
The data from your charging contract is received by the IT systems of our system operators when the data is changed by the card provider and forwarded to your vehicle. 
  
We store the settings for your function and contract status until you change them yourself or delete the assignment of the vehicle to your myAudi account. The information from your vehicle is deleted each time a new data record is sent, so that only the current data record is saved. The last 10 actions are stored there to fulfill the contractual services and to ensure system security.

5. Charging applications from third-party providers

The "third-party charging applications" service offers you, as an electric vehicle user, statistics on your charging behavior and supports you in optimizing your charging costs. In order to use such an application, you must have the corresponding third-party application installed on your smartphone and be registered as the main user of the vehicle and logged in as such.

When using these services, the following data is collected and transmitted to the provider of the charging application you are using, depending on the service:

1. Charging statistics (charging data)
   VIN (with which your vehicle can be clearly identified and assigned to a specific owner) Charging status (percentage), mileage (according to on-board display), time stamp (day, time), position (GPS data according to vehicle system determination), vehicle status (engine on/off) and window/door status (open/closed).
2. Charging control (charging control)
   VIN (with which your vehicle can be clearly identified and assigned to a specific owner) Charging status (percentage), time stamp (day, time), charging location for cost-optimized charging incl. position (GPS data after vehicle system determination. Only a comparison of the position takes place, no storage or forwarding), (charging process (on/off).

If the vehicle is driven by a second or guest user (main user logged off), no data is transferred to the corresponding third-party provider. The data is deleted by us immediately after it is passed on to the third-party provider.

6. Remote control parking heater

The "Remote control parking heater" service allows you to air-condition your vehicle before starting your journey.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), the planned departure timer entered by you, heating effect (defrosting or heating the interior), availability of the parking heater functionality (status tank empty, battery empty, system error), current status of the air conditioning (heating, ventilation, not active) and, if air conditioning is running, the remaining running time. Your vehicle sends this data to the IT systems of AUDI AG with the time stamp when a timer, the air conditioning status (start, end of an air conditioning process), a change in the remaining runtime and/or the availability of the parking heater functionality is changed.

We store your timer settings until you change them yourself or delete the assignment of the vehicle to your myAudi account. In order to fulfill our contractual services to ensure system security, the last 10 actions are stored there. The oldest of the aforementioned data records is deleted when a new climate control information data record is sent.

7. Remote control of air conditioning (e-tron)

The "Remote climate control" service allows you to control the climate in your vehicle before you start your journey.

As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), current air conditioning status in the vehicle, availability of the stationary air conditioning functionality (empty tank, empty battery, system error status). We also process the air conditioning timers you have planned in myAudi, selection of the heating source and special configurations of the parking cooler (e.g. heating of the glass surfaces and seat air conditioning).

When air conditioning is running, the remaining running time is also processed. Your vehicle sends this data to the IT systems of AUDI AG with the time stamp when a timer is changed, the air conditioning status (start, end of an air conditioning process), the remaining runtime is changed and/or the availability of the parking cooler functionality is changed. 

We process the aforementioned data to provide the service in order to communicate with your vehicle and to enable you to configure and control the air conditioning process via smartphone or myAudi and to display the air conditioning status.

The climate control timers and settings you have configured are saved until you change them. The climate control information from your vehicle is overwritten each time a new data record is sent, so that only the current status is stored by us.

8. Remote control locking and unlocking

The "Remote control locking and unlocking" service allows you to lock and unlock your vehicle using your mobile device.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), executed action (lock/unlock), condition of the vehicle doors and hatches and time stamp and ID of the mobile end device used.

The corresponding data is sent directly to AUDI AG upon execution of the service and will then be available for retrieval using your smartphone via the myAudi app and via myAudi. The service can be deactivated by the primary user in the myAudi

We log the use of the service and store the actions for up to 5 years for the purposes of system security and theft protection and tracking.

9. Remote honking and flashing

The "Remote horn and indicator" service allows you to trigger the vehicle's horn and indicators via your mobile device. As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), action performed and time stamp as well as ID of the mobile device used, current position of your vehicle (location data) and position of your mobile device.

We process the aforementioned data to provide the service in order to enable remote-controlled honking and flashing of your vehicle within a certain radius around your vehicle via the app. The position of the vehicle and the end device is required for the radius detection.

The position data of your mobile device will be deleted after the action has been carried out. We store the aforementioned data from the last 10 actions (action and time) to fulfill the contract and secure our systems until you delete the assignment of the vehicle to your myAudi account. The oldest aforementioned data will be deleted when a new data record is sent.

10. Anti-theft alarm system

The "anti-theft alarm system" service informs you by push message within the myAudi app when the alarm system is triggered.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), detected event (triggering event) and timestamp. In addition, we transmit the current status of the anti-theft alarm system (so-called arming status) to the IT systems of AUDI AG each time the status changes in order to be able to validate alarm events.

The last alarm event is displayed in your myAudi app and an alarm history is saved to your myAudi account.

We process the aforementioned data to provide the service in order to provide you as the main user or authorized secondary user with alerts via push message within the myAudi app if your vehicle's anti-theft alarm system is triggered.

You can view the last alarm event via your myAudi app and delete it there.

We store the data in connection with your myAudi account until you delete it or delete the assignment of the vehicle to your myAudi account. In any case, an alarm event will be deleted 30 days after the detected event.

11. Remote Vehicle Tracking / Stolen Vehicle Locator

The "Remote Vehicle Tracking / Stolen Vehicle Locator" (RVT / SVL) service is a service that can be used to locate the stolen vehicle in the event of theft / hijacking.

As part of the service, the following data or categories of data from your vehicle are processed once or periodically in the event of theft: Current position data set (longitude, latitude, altitude meters, direction, accuracy measure), speed, engine status, ignition on/off and door opening.

Tracking is started by the call center of the respective region, which is operated by Bosch Service Solution GmbH, and the vehicle sends the aforementioned data to the call center. Tracking is only started if the theft has been reported to the police in accordance with the process. This is verified again by the call center agent after your call to the call center. The data is only passed on to the relevant police or authority in accordance with the process.

The call center for USA, Canada and Mexico records the calls and stores the voice recordings and other tracking data for 2 years. The call center in the Asia-Pacific region for Malaysia, Singapore, Australia, New Zealand and Korea does not store voice recordings. Further data will be deleted after 4 years on March 31.

12. Mobile Device Key

The Audi connect service “Mobile Device Key” is a personalized and security-relevant feature that allows the user to lock, unlock, and start the vehicle using a mobile device.

To properly assign the “Mobile Device Key” to a user’s mobile device, the device transmits the following data to AUDI AG’s IT systems for authentication and authorization purposes:

• Device name
• Encrypted user ID
• Key identifier
• Certificate from the trusted authority
• Electronic signature of the owner certificate

This data is stored in AUDI AG’s IT systems together with the Vehicle Identification Number (VIN), which uniquely identifies your vehicle and links it to a specific owner, and the assigned “Mobile Device Key.” This is necessary to ensure the device is recognized as an authorized key.

When a “Mobile Device Key” is assigned to a user, the respective vehicle is also linked to that user, allowing the user to view the vehicle in their myAudi account. The primary user can check via their mobile device or in the vehicle (MMI) which users (email addresses) are associated with which key names (as defined by the primary user).

When using the “Mobile Device Key”—i.e., locking, unlocking, and starting the vehicle via the mobile device—data is exchanged between the mobile device and the vehicle using Near Field Communication (NFC), Ultra-Wideband (UWB), and Bluetooth Low Energy (BLE). This data is not transmitted to AUDI AG.

However, when changes occur during the use of the “Mobile Device Key,” the following data is transmitted to AUDI AG’s IT systems and logged for monitoring and ensuring service security as part of contract fulfillment:

• ID of the “Mobile Device Key” (if applicable)
• ID of the conventional radio key (if applicable)
• ID of the “Mobile Device Key Card” (if applicable)
• Vehicle Identification Number (VIN)
• Key type
• Key card status
• Function status
• Type of change (e.g., key switch during vehicle start, key card activated/deactivated, function activated/deactivated)
• Time of change

13. Audi connect Remote Start

The Remote Start service is a connect function that enables the vehicle to be started via the myAudi app.

As part of the service, we process the following data or categories of data from your vehicle and smartphone: the vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), device ID (with which your smartphone can be clearly identified), user ID (with which a user can be clearly identified) and availability of Remote Start functionality (requirements not met, etc.). Your vehicle sends this data to the IT systems of AUDI AG.

The data is stored for 10 years so that, in the event of a product liability claim, it can be traced from which mobile device and end user the activation/deactivation took place. The relevant pairing data for the Remote Start service is stored until you delete the assignment of the vehicle to your myAudi account.

Data for analyzing the service, e.g., in the event of malfunctions and customer complaints, is automatically deleted from the above-mentioned system after 30 days.

IV. Audi connect emergency call & service

1. Statutory emergency call / eCall

The "eCall" emergency call service, which is required by law in many countries, sends a legally defined minimum data record in the event of manual or automatic activation and sets up a voice call to an emergency call control center.

The data record contains the following data vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), vehicle type (passenger car or light commercial vehicle), type of vehicle drive (e.g. gasoline, diesel, natural gas, battery, etc.), the current position of the vehicle (location data location and time) as well as the last 3 locations of the vehicle and direction of travel, number of vehicle occupants, time stamp, trigger type (manual, automatic).

When the emergency call is triggered, your vehicle sends the aforementioned data directly to the relevant emergency call centers, which are designated by the relevant authorities of the country on whose territory they are located to be the first to accept and process eCalls to the single European emergency number 112.

The service is automatically activated by default and cannot be deactivated. This ensures that your vehicle cannot be tracked during normal operation due to this service, i.e. no electronic tracking can take place.

The data record is generated when the call is triggered and stored locally for the duration of the emergency call and up to 1 hour after the emergency call.

2. Private emergency call

The "Private emergency call" service is an emergency call that can be triggered either automatically by activating the vehicle's internal sensors or manually (by pressing a button) by the vehicle occupant(s).

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), control (information about whether the emergency call was made manually or automatically, the current position of the vehicle (location data and time stamp), the vehicle type, vehicle energy storage type (e.g. petrol, diesel, natural gas, gasoline, diesel, natural gas), the type of vehicle, the type of fuel used (e.g. gasoline, diesel, natural gas, natural gas), the type of vehicle and the type of fuel used.(e.g. petrol, diesel, natural gas, battery, etc.), time of the emergency event, number of passengers in the vehicle, language setting, crash intensity (at the measuring points, front, left, right and rear or in the event of a rollover), seat occupancy of the vehicle occupants and door status. The vehicle positions before and after the emergency event are also stored in the vehicle. The last vehicle position before the vehicle was last switched off is continuously stored in the vehicle, even without an emergency call event, so that at least the last recorded location is known, even if no current location can be calculated and transmitted to the call center in the event of an accident.

When the emergency call is triggered, the vehicle sends the aforementioned data to our call center. This establishes an audio connection between the vehicle occupants and the nearest rescue coordination center (police, control center, traffic inspection) and forwards the data required for the operation accordingly.

The aforementioned data is not transmitted to us for processing the respective emergency call, but directly to the call center. In some vehicle models, the individual emergency calls are logged in a ring buffer (limited to data documenting that an emergency call has been made - not the content of the emergency call) and continuously overwritten. The call center records the emergency call (voice call) and stores the caller's recording (to enable possible queries/recalls to the vehicle) for 24 hours. The other data from the emergency call is stored for a period of 10 years.

The service is automatically activated by default and cannot be deactivated. It is ensured that your vehicle cannot be tracked during normal operation due to this service, i.e. no electronic tracking can take place.

Information on data processing in the context of the statutory emergency call can be found at D.IV.1.

3. Damage and breakdown assistance

The "Audi Damage Service" and "Online Breakdown Call" services offer you a simple way of contacting the call center of your importer (for the German market, this is Audi) in the event of an accident or breakdown. Your importer is the importer of the country of registration of the main user in myAudi.

If there is no main user, the connection is established with the importer of the vehicle's country of destination. Both services must be confirmed or triggered proactively in the vehicle. Alternatively, the service can also be used without Audi connect via the telephone hotline. A call center employee collects your personal and case-related data.

The call center employee can access your Audi ID profile data to ensure fast and targeted assistance and case recording. We forward this to the importer. In the case of the German market, no forwarding takes place. Identification takes place via your name and date of birth (if necessary also via the telephone number of the SIM card installed in the vehicle or the chassis number). The data will be forwarded for further processing to the preferred dealer you have selected in the myAudi system world (or a different dealer that you name to the call center on the phone). You also have the option of forwarding your data to your insurance company, provided it is digitally connected, for faster claims processing.

You use the service by confirming it (e.g. from the vehicle, the Audi apps or by actively calling the call center).

We process the following data or categories of data as part of this service and forward them to the importer to provide the service (no forwarding takes place in the case of market Germany): customer data (titel, salutation, name, date of birth, address, country, telephone numer, email address, license plate), vehicle data (VIN, brand, mileage, remaining range, model name, model year, colour, transmission, drive type, year of manufacture vehicle type, equipment features), insurance data (e.g. name of the insurance company of the accident reporter, insurance number of the accident reporter, type of damage), claim data (hit zone, hit severity, day of accident, time of accident, trigger, warning lights, DTCs, GPS data, correctness of GPS data, direction of travel, type of damage, damage recording date, preliminary damage calculation, service due date, last service).

We process your aforementioned data to provide the service in order to provide you with rapid assistance in the event of an accident or breakdown. For the purpose of providing the service, the importer or, for the German market, Audi, will pass on the data to your service partner and your insurance company on request. Outside Germany, please refer to the importer's data protection information for more detailed information on data processing by the importer.

Your importer (in the case of German market Audi) will pass on the data to fulfill a contract with the third party or, on the basis of your consent, to third parties explicitly selected by you (e.g. insurance company). By passing on the data, you can access the Audi connect services.

Operating, hosting and support service providers (so-called processors) are used in connection with Audi damage and breakdown assistance.

In the context of data processing for Audi claims and breakdown assistance, information may be accessed from the USA in connection with technical support. Your data will be stored for as long as is necessary to provide the Audi connect service to you or as long as there is a legitimate interest in further storage.

4. Automatic service reminder

When activating the service “Automatic Service Reminder” via your myAudi account, you can select an Audi partner and provide your contact details (name, phone number, or email address).

Before a scheduled service interval, the following data will be transmitted to Audi:

• Vehicle condition data (e.g., mileage, fuel level, oil level)
• Service-related data (e.g., maintenance interval data, event log entries, warning lights)
• Vehicle Identification Number (VIN)

This data is then forwarded together with your contact details to the Audi partner you selected for scheduling and performing the service. The collected vehicle condition data is also stored by Audi to ensure proper service delivery.

If the selected Audi partner cannot provide the service, the data will be forwarded to the national sales company responsible for your country so that an appointment with another Audi partner can be offered. In cases of business relocation, takeover, or merging of dealer codes, your stored data will be reassigned to a new Audi service partner by the respective sales company.

Additionally, we process the status of your service activation, your VIN, and the Audi partners you have stored for reporting purposes.

You can view, modify, or delete your stored data at any time in the service configuration. The data will be retained as long as the service is active. Personal data related to a specific service request will be anonymized 90 days after the request is closed. Vehicle condition data collected by Audi will be stored for six months and then deleted. Data used for reporting on service usage will be removed once the service is deactivated.

5. Predictive maintenance reminder

The "Predictive maintenance reminder" service proactively monitors wear parts in the vehicle.

The stored service partner and the contact details (name, telephone number, e-mail address, preferred communication channel) of your myAudi profile are used to provide the service. This information is requested as required when the service is activated and can be changed in your myAudi profile at any time.

For the predictive maintenance reminder, the following vehicle data is transmitted to our IT systems and stored for up to 4 years:

• Vehicle identification number (with which your motor vehicle can be clearly identified and assigned to a specific owner),
• Time stamp of the data recording,
• Vehicle status and diagnostic data (e.g.: Mileage, outside temperature, tire pressure, status information about the 12V battery and tire pressure monitoring battery, currently active warning lights/information about the brake fluid level)
• and service-relevant data (e.g.: remaining mileage and running time until the next oil change, date and mileage of the last inspection, maintenance interval data, vehicle master data, event memory entries, warning messages, history memory for warning lights/indications and the error code of the event (including time stamp and mileage for the error entry))

The specific data processed depends primarily on the vehicle in question and the vehicle equipment.

Your selected service partner will use your data for the specific purpose of preparing an appointment, making contact and carrying out the individual service.

6. Theft and location assistant

The "Theft and location assistant" service can detect theft and manipulation attempts - such as an attempt to electronically short-circuit the vehicle - on your vehicle and report them immediately to the service provider commissioned by Audi.

To activate the service, we process the following data, which you enter in your myAudi account when activating the service: Registration: name and contact details (address, up to 3 mobile numbers) as well as information about the vehicle (color, body shape, license plate number), vehicle identification number (with which your motor vehicle can be clearly identified and assigned to a specific owner).

If the vehicle detects tampering, the vehicle sends us and the service provider the following data or categories of data: Tampering event, current vehicle position (location data location and time), vehicle status data (mileage, battery voltage, speed, tank level, time out of the vehicle, ignition status, engine status). The vehicle then cyclically transmits the current vehicle position.

We transmit this data to our service provider. The service provider then uses the contact details provided by the main user to pass on the alarm.

With the consent of the main user and if a theft is confirmed or reported by the main user, the service provider transmits the last known vehicle position to the national security or investigating authorities.

If the main user reports a theft, the aforementioned data can also be actively retrieved from the vehicle via the service provider.

This service can only be activated or deactivated by the main user. It cannot be deactivated via C.II. Privacy settings (Privacy Mode).

7. Speed Alert

With the "Speed Alert" service, you can define an alarm in myAudi for speeding and an associated time frame.

As part of the service, we process the following data or categories of data from your vehicle: VIN, information if the speed alerts stored in myAudi are exceeded within the defined times. Your vehicle informs you in myAudi when the vehicle exceeds the defined speed and when the violation ends.

Depending on the vehicle, the service can be protected against deactivation either directly via the vehicle MMI or via myAudi in the privacy settings.

We store the data until you delete it from myAudi or delete your Audi ID yourself.

8. Geofence Alert

With the "Geofence Altert" service, you can define and save a radius or area for a geofence in myAudi using GPS localization data. For each zone, you can define a one-off or periodic time frame for when the zones should be active.  Your vehicle informs you in myAudi when the vehicle leaves the defined permitted area or enters the prohibited area. After re-entering or leaving the respective zone, there is a message indicating that the violation has ended.

We process the following data or categories of data from your vehicle as part of the Audi connect online services: VIN, events when leaving/re-entering the defined permitted geo-zone, events when entering/re-entering the defined prohibited geo-zone.

Depending on the vehicle, the service can be protected against deactivation either directly via the vehicle MMI or via myAudi in the privacy settings.

We store the data until you delete it from myAudi or delete your Audi ID yourself.

9. Valet Alert

With the "Valet Alert" service, you can use GPS localization data to define and save a radius or area for a geofence in myAudi as well as an alarm for speeding (Speed Alert). Your vehicle informs you in myAudi if the vehicle leaves the defined permitted area or exceeds the defined speed. After re-entering the permitted zone or the permitted speed range, you will receive a message that the offense has ended. We process the following data or categories of data from your vehicle as part of the Audi connect service: VIN, event exceeding/falling below the stored speed limit, events when leaving/re-entering the defined geo-zone.

Depending on the vehicle, the service can be protected against deactivation either directly via the vehicle MMI or via myAudi in the privacy settings.

We store the data until you delete it from myAudi or delete your Audi ID yourself.

10. Online-Car-Care

The Audi connect service “Online-Car-Care” (OCC) is a personalized feature that informs you about exceptional service events and field measures via myAudi and the infotainment system.

The service includes the following functions:

Anomaly Assistant (Fleet Function): A four-stage feature that monitors the health status of the vehicle using online fleet data.

1. Event Monitoring: The vehicle’s condition is monitored online to detect unusual clusters of anomalies within certain parts of the fleet.
2. Analysis: Causes of anomalies in affected vehicles are analyzed.
3. Information: Online Car Care in the vehicle and the myAudi app displays exceptional service events, service actions, and recalls. If desired, you can conveniently contact your service partner via the Audi Online Service Appointment feature. Where available, certain measures can be implemented via a software update.
4. Prediction: Some anomalies can be detected predictively, meaning vehicle data indicates that an anomaly is likely to occur in the future. You will be informed in the vehicle and in myAudi and can contact your service partner via the Audi Online Service Appointment feature if desired.
   

Notification Assistant: Displays relevant driver notifications and instrument cluster warning lights in the myAudi app.

Reminder Function: If a critical warning light remains active for an extended period or distance, you will receive an email reminder.

Field Measure Assistant: Manages vehicle-specific field measures and displays them across all customer touchpoints.

Demand-Based Field Measure Control: By collecting vehicle online data, it can be determined in advance whether your vehicle is affected by a specific field measure. You will only be informed about measures relevant to your vehicle, helping to avoid unnecessary workshop visits.

To provide this service, we process the following data from your vehicle and make the information available in myAudi and in the vehicle:

• Vehicle Identification Number (VIN)
• Timestamp of data collection
• Mileage
• Certain operational data

This includes operational data indicating potential repair needs:

• Vehicle status information
• Environmental conditions
• Operating states of system components
• Deviations leading to event log entries in internal vehicle systems
• System reactions in specific driving situations
• High-voltage battery charge status (for EVs)
• Estimated range

Data transmission follows the principle of data minimization. AUDI AG uses all collected data exclusively to calculate predictive repair forecasts. Your vehicle sends this data at regular intervals (sometimes during each use) or when certain conditions occur (e.g., event log entry, changes in environmental or operating states).

Data may also be transmitted when an operating state changes and triggers an event log entry, or cyclically (e.g., every 500–1000 km, at vehicle start, or during charging).

In AUDI AG’s IT systems, this data is linked via the VIN with technical production data and previous workshop records to determine vehicle specifications such as transmission, engine code, production period, and software/hardware versions. Where the VIN is not required for further analysis, it is replaced with a pseudonym so that data is processed without personal reference but still linked to a specific vehicle. Personal reference is restored only in justified exceptional cases, such as performing recalls or addressing safety-related anomalies.

Data is stored for five years.

If the “Automatic Service Reminder” service is used, the information about active warning lights or predictive models is additionally forwarded to the dealer.

The Online-Car-Care service can only be activated or deactivated by the primary user. You can temporarily disable the transmission of certain data via privacy settings (see Chapter C.II. Privacy settings (Privacy Mode)), although this may limit the functionality of connect services.

We do not use this data to create profiles.

In addition to vehicle data, we process your name and email address from myAudi solely to inform you about potential repair needs (predictive information and field measures) and important warning lights or driver notifications.

11. Remote vehicle diagnostics

The "Remote vehicle diagnostics" service makes it possible to collect data on the current vehicle condition and, in the event of a fault, to carry out a vehicle diagnosis remotely if required. The result of the diagnosis is stored in the myAudi app and at the customer support contact points and contains a recommended course of action for the specific diagnostic result.

To provide the service, we process the following data or categories of data from your vehicle and make the information available in myAudi and the customer support contact points:

The vehicle identification number (with which your motor vehicle can be clearly identified and assigned to a specific owner), the time stamp of data collection and the mileage, as well as certain other operating data in the vehicle.

This includes operating data that provides information about existing faults: Vehicle status information, environmental conditions, operating conditions of system components and deviations from system conditions that result in an event memory entry in the internal vehicle systems. 

Data transmission follows the principle of data economy, i.e. AUDI AG evaluates all data collected to calculate the current vehicle status.

Your vehicle sends the aforementioned data when a change in an operating status occurs that leads to an event memory entry in the vehicle, when certain conditions are met (e.g. change in ambient or operating conditions, etc.) and at regular cyclical intervals, e.g. when starting the vehicle and during a charging process.

This service can only be activated or deactivated by the main user. 

You have the option of temporarily deactivating the transmission of certain data from your vehicle at any time as part of the privacy settings, which may restrict the usability of the connect services.

We do not use this data to create profiles.

V. Other Audi connect services

1. Online Logbook

The "Online logbook" service enables the semi-automatic management of electronic logbooks. In addition, the main user can view various vehicle data via myAudi or their mobile device.

As part of the service, we process the following data or categories of data from your vehicle: The vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), the user ID associated with the myAudi account and:

• At the start of the journey: date, time, mileage, GPS position, city, zip code, country
• At the end of the journey: Date, time, mileage, GPS position, city, zip code, country, name of the main user

The function takes this data from the navigation system and uses it to generate a logbook entry. We also process the category of the logbook entry specified via the vehicle display (business trip, work trip, private trip, not categorized) and, if applicable, the business purpose and the business partner.

If a mobile device is connected to the vehicle, the main user can automatically transfer the business purpose and business partner from the smartphone's system calendar to the logbook via the myAudi app and transmit them to our IT systems. To do this, the myAudi app accesses the calendar of the main user. The subject of the appointment is taken from the calendar for the business purpose data field and the organizer of the appointment is taken from the calendar for the business partner data field. The corresponding data is then available to the main user for retrieval via myAudi.

All logbook entries are available to the main user for re-categorization in myAudi 7 days after the start of the journey. Logbook entries that have not been fully categorized are automatically categorized as private journeys after 7 days. 

We store this data for 3 years or until the main user deletes it via myAudi before the 3 years have expired. Logbook entries from the vehicle are no longer transmitted to our IT systems if the main user has deleted their myAudi account or if a main user is no longer nominated in the vehicle.

For this comparison, we process the data entered by the main user in myAudi. This includes name, place of residence and the vehicle's registration number.

2. Online logbook (digital manual)

The "Online logbook (Digital Manual)" service enables the digital display of the on-board literature in your MMI.

As part of the service, we process the following data or categories of data from your vehicle: Vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner).

The vehicle identification number is transmitted to the IT systems of AUDI AG when the function is started and is used to provide the on-board literature associated with your vehicle model.

The transmitted vehicle identification number is stored for 60 minutes after the function is called up and then discarded.

3. Audi connect key

The "Audi connect key" service enables you as the user to open, lock and start the vehicle using a mobile device.

For the proper assignment of the Audi connect key to a user's mobile device, this device transmits the following data to the IT systems of AUDI AG for the purpose of authentication and authorization: Card Production Life Cycle Data (CPLC), type of secure element, device type, app version and OS version as well as Google Cloud Messaging / Firebase Cloud Messaging token.

This data is stored in the IT systems of AUDI AG together with the vehicle identification number (with which your vehicle can be uniquely identified and assigned to a specific owner) and the assigned Audi connect key for the purposes of authentication and authorization verification until the assignment of the end device is resolved. This is necessary so that the device is recognized as an authorized key. AUDI AG uses processors as hosting and support service providers to provide the service.

When an Audi connect key is assigned to a user, the respective vehicle is also linked to the user and the user can see the vehicle and the vehicle equipment in the myAudi app. The main user can see which user (e-mail address) is assigned to the vehicle with which key name, which the main user has assigned themselves. 

When using the Audi connect key, i.e. when opening, locking and starting the vehicle using the mobile device, data is exchanged between the mobile device and the vehicle using Near Field Communication (NFC). This data is not transmitted to AUDI AG.

When the Audi connect key is used, the following data is transmitted to the IT systems of AUDI AG and logged and stored for the purposes of monitoring and ensuring service security in order to fulfill the contract: ID of the Audi connect key (if applicable), ID of the conventional radio key (if applicable), ID of the Audi connect key card (if applicable), vehicle identification number (with which your motor vehicle can be clearly identified and assigned to a specific owner), key type, status of the key card, status of the function, type of change (e.g. change of vehicle key when starting the vehicle, key card activated/deactivated, function activated/deactivated), time of the change and mileage.

4. Functions on Demand

The "Functions on Demand" service enables the user to activate additional vehicle functions permanently or for a limited period of time.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your vehicle can be clearly identified and assigned to a specific owner), vehicle status, activation information and, if applicable, the term of the purchased license. We process this data for the purpose of activating the function.

5. Audi as a Matchmaker

The "Audi as a Matchmaker" service enables the user to permanently or temporarily activate design elements for the MMI, so-called "themes".

When themes are activated via the vehicle, we process the following data Vehicle Identification Number, country of the vehicle, theme. Themes remain visible to other users even after the vehicle has been reset to factory settings. 

6. Audi Application Store

With the "Audi Application Store" service, we provide you with a store with selected apps for your infotainment system.

The following data or categories of data from your vehicle are processed when you use the Audi Application Store:

• IT usage data: Audi User ID, information about purchased license packages and services, status of the apps currently in the vehicle (installations performed, uninstallations, downloads, updates per user or vehicle), saved user settings (for example, selected shopping region, activation of automatic updates), queued installations by the customer or administrators, user accesses with corresponding time stamps, IP address as part of the web application.
• Vehicle identification number (VIN) (with which your vehicle can be clearly identified and assigned to a specific owner).
• Vehicle usage data: Configured language settings in the vehicle
• Vehicle master data: Vehicle country of registration, make, model, year of manufacture, installed infotainment control unit, software version of the infotainment system, Android API level, CPU architecture

The IT usage data is stored until the MyAudi account is deleted. The IP address and user accesses in the form of log files are stored for 30 days, with the exception of log files for audits. These are stored for 12 months.

The vehicle usage data and the VIN are only processed and not stored and are only used to assign the language setting. All other data is stored until the MyAudi account is deleted.

For information on data processing as part of the ordering and payment process, see the Audi Function Store data protection notice.

7. In-Car Office

The "In-Car Office" service allows the user to call up and display the mailbox and calendar on the central display in the vehicle and to automatically dial into conferences.

The following data or categories of data from the vehicle are processed as part of the service: Login data for the MyAudi user account, the Access tokens from Microsoft and Google as well as the mails and calendar data retrieved by the customer.

The user must enter the login data for Microsoft or Google in order to access the respective API (interface). In this way, emails and the calendar can now be retrieved or new content created. The latter are processed in the vehicle and sent back to the Microsoft or Google API.

Audi only acts as an interface and forwards the emails or calendar entries from the vehicle to the In-Car Office backend, which in turn compares them with the Microsoft or Google interface. Any further processing by Audi AG does not take place.

Audi AG stores the MyAudi user ID and the access tokens to the customers' mail accounts. These tokens are stored until the customer deletes them or the customer deactivates or deletes the MyAudi account.

The calendar and e-mail content accessed is stored in the vehicle for 30 days and then automatically deleted. The user can also delete the cache manually at any time via the settings of the In-Car Office app.

8. myAudi rewards

myAudi rewards is a feature that allows you to take part in challenges, collect points, and reach levels for which you can redeem rewards, subject to availability in your country, either from AUDI AG and/or a selected Audi dealership or service partner.

Once you activate the myAudi rewards service, the following categories of your personal data will be processed:

Your myAudi account data: Audi ID, full contact details, date of birth, license status (Remote & Control, Navigation & Infotainment), status level, preferred local Audi dealership/service partner (as specified in myAudi), vehicle identification numbers (VIN) of your registered vehicles, and your consent to data processing.

Your vehicle data: VIN, live vehicle data (such as operating status, speed, recuperation, fuel/energy consumption), use of certain vehicle functions like air conditioning and charging timer, time between starting and driving off, use of cruise control/adaptive cruise control settings, geolocation data, environmental data such as outside temperature, and charging stations used.

Your mobile device data: App usage data (e.g., how often you open the app within a given period), interactions with the app (e.g., responses to customer satisfaction surveys, information sent to local Audi dealerships/service partners during service requests).

If you submit a request to schedule an appointment for redeeming rewards with your selected Audi dealership/service partner, the following data categories will be transmitted to them: level, vehicle data (VIN, mileage, license plate), your personal contact details (name, address, email, mobile number), preferred date, alternative date, request for replacement mobility, preferred contact channel/contact details, and service request. In this context, Audi and the selected Audi dealerships/service partners act as independent data controllers.

Audi processes the aforementioned personal data and accesses your vehicle and/or mobile device data as described above to provide the requested service as contractually agreed and to enable the redemption and activation of rewards you have earned.

If the Audi dealership/service partner cannot process the service request for technical or organizational reasons, the transmitted data will be forwarded to the national sales company (importer) responsible for your country to offer you an appointment with an appropriate Audi dealership/service partner.

The above-mentioned vehicle data is also collected when the vehicle is used by secondary users or unidentified persons. Audi cannot determine who is actually driving the vehicle through the myAudi rewards service. Data collected from the vehicle is assigned exclusively to the primary user.

Your data will be stored and processed in Audi’s IT systems or those of Audi’s service providers in connection with your personal Audi account for as long as necessary for the purposes stated above. If you participate in myAudi rewards but have not activated a challenge, your personal data will still be collected for technical reasons but will not be used and will be deleted after a very short period (typically within a few seconds).

Personal data required to track challenge progress will be stored for 90 days if you have activated a challenge. Challenge results and the history of redeemed rewards will be stored for up to one year to display your challenge history. The number of points collected per year, cumulative total points, and corresponding level will be stored for up to three years. Non-vehicle-specific data such as trophies/badges will be stored as long as your myAudi account exists or the myAudi rewards feature is active. If your myAudi account is deleted, the personal data processed for the purposes stated above will also be deleted from Audi’s IT systems.

VI. Product safety, optimization and development

1. Vehicle and Product Safety

We process the following data or categories of data from your vehicle in order to improve vehicle and product safety for reasons of product monitoring as required by law and for business reasons:

1. the vehicle identification number (with which your motor vehicle can be clearly identified and assigned to a specific owner), the time stamp of data collection and the mileage
2. Deviations from system statuses that lead to an event memory entry in the internal vehicle systems
3. Operating states of system components that provide information about the display of indicator lights and driver information in the vehicle's instrument cluster
4. Operating states of system components that provide information about the software variant of the installed control units. This data is required to translate the raw data sent by your vehicle from detected deviations from system statuses into a readable format.
5. Operating states of system components that are required for product monitoring of important components, e.g. battery voltages of the high-voltage battery.
6. Operating states of system components that are required to analyze certain deviations from system states, e.g. the engine speed.
7. GPS data, which is only collected on a case-by-case basis if this is necessary to ensure the above-mentioned purposes; this data is deleted or anonymized immediately if it is no longer required for the purpose.

Your vehicle sends the data, e.g. in the event of a change in an operating status that leads to an event memory entry in the vehicle, cyclically, when the vehicle is switched on/off and/or during the charging process.

The analysis of certain deviations of system states may require recording and forwarding data up to 60 seconds before and after the deviation of interest. If the deviation to be examined occurs, data (1) and (6) are transmitted to AUDI AG. There is no permanent transmission of data from the vehicle.

Only the data required for product monitoring is collected.

The specific data and purposes of data processing depend primarily on the respective vehicle, the vehicle equipment and your country.

In the IT systems of AUDI AG, this data is linked using the VIN with technical data from production and previous workshop visits in order to be able to draw conclusions about vehicle equipment such as transmission, engine identification, etc. as well as the production period, software and hardware versions. If the VIN is not absolutely necessary for further analysis, it is replaced by a pseudonym, so that we process the data without reference to a specific driver or user, but with reference to a specific vehicle (via the pseudonym). A personal reference is only restored in justified exceptional cases, e.g., in order to enable recall campaigns or if errors relevant to safety or product liability are identified.

Data is stored for 10 years.

We process the aforementioned data for the purpose of product monitoring to maintain and further develop product safety and product conformity.

If you have activated the Online Car Care service, the data collected via this service will also be processed for the aforementioned purposes.

We do not use this data to create profiles. You have the option of temporarily deactivating the transmission of certain data from your vehicle at any time as part of the privacy settings (see section C.II.), which may restrict the usability of the connect services. If you would like to prevent the transmission of data from your vehicle for the aforementioned product monitoring purposes on more than a temporary basis, please contact our customer service department (see section B.II. Whom can I contact?)

2. Cyber security

When you use the online services, we collect cyber security-relevant data in your vehicle to detect and analyze cyber threats, potential vulnerabilities and cyber attacks.

We collect the following data or data categories and send them to the designated IT backend system: the vehicle identification number VIN (with which your vehicle can be clearly identified and assigned to a specific owner), the time stamp of the data collection, deviations from system states that could indicate a cyber security-relevant incident, including associated technical vehicle data.

In the IT systems of AUDI AG, this data is linked to other technical data using the VIN (e.g. software versions used on the components). If the VIN is not absolutely necessary for further analysis, it is replaced by a pseudonym so that we process the data without reference to a specific driver or user, but with reference to a specific vehicle (via the pseudonym). A personal reference is only re-established in justified exceptional cases, e.g. in order to be able to carry out recalls or if safety or product liability-related errors are detected.

3. Optimisation and Development of Vehicle Features and Vehicle-Related Online Services

For the purpose of optimizing our range of vehicle functions and adapting them to customer expectations, in particular the further development and new development of innovative functions, your vehicle sends data to us as part of temporary campaigns or as part of the provision of services and / or functions, provided that your vehicle has the additional vehicle equipment required for this (e.g. for the ACA (Adaptive Cruise Assist) driving function), various technical function data from the assistance systems, comfort systems, control elements or control units together with environmental data (outside temperature, brightness, road characteristics) and, if applicable, the associated position data and information on the length of the route, vehicle speed, vehicle status data (e.g., tank fill level or charge level, mileage), time of data collection and usage data to systems of AUDI AG. If there are error messages in your vehicle, these are sent to the systems of Audi AG for the purpose of error diagnosis.

Depending on the type of campaign, the data is transmitted using a randomly generated and time-limited session ID or another pseudonym, so that this data can no longer be assigned to you as the driver or user without additional information. For an analysis, we only collect the data that is required for the respective evaluation. Categories of data other than those specified above are not processed.

To the extent possible, we anonymise the data in our IT systems before evaluation. If this is not possible, we largely analyse the data from your vehicle in such a way that no conclusions can be drawn about you or your vehicle. AUDI AG has established measures to ensure that a personal reference can only be established in justified exceptional cases, e.g. if errors relevant to safety or product liability are identified. We do not use this data to create profiles or evaluations based on individual vehicles. In addition, no data attributes are used that allow profiling or conclusions about your behaviour or behaviour patterns.

You have the option at any time to deactivate the transmission of data for the purpose of optimising and developing vehicle features from your vehicle as part of the privacy settings (C.II.), , although this may limit the usability of the Connect services

4. Development of driving systems to increase general road safety

In order to develop driver assistance and automated driving functions as well as services that may be suitable for increasing general road safety, data is recorded and extracted in predefined traffic situations that only occur very rarely by using sensors and image acquisition technology in all vehicles on the PPE and PPC platform. These traffic situations are defined in so-called campaigns.

These traffic situations can be safety-critical situations such as emergency braking or local peculiarities such as poor lane markings or special traffic signs.

The analysis of relevant situations generates important findings, which in turn can contribute to the continuous further development of systems and functions.

Anyone who is in the vicinity of your data-recording vehicle in the event of a relevant traffic situation or is involved in the traffic situation may be affected by this data processing.

AUDI AG does not identify individual persons in the data records at any time. Persons, vehicles and other objects are only considered as "objects" in the context of traffic and environmental situations, e.g. as "pedestrians on the right-hand side of the road".
AUDI AG is also working with the data to continuously refine the software for removing personal characteristics.

For the purposes of developing driver assistance and automated driving functions as well as services that may be suitable for increasing general road safety, the following data in particular may be processed from road users outside the vehicle:

• Image and video recordings of other road users (vehicles and persons)
• License plates and lettering on vehicles
• lettering on stores and street signs and
• other information in the immediate vicinity of the vehicles that is recorded using external sensors, supported by GPS position and time stamps.

Depending on the campaign, your vehicle sends this data together with the vehicle identification number or a randomly generated and time-limited ID or other pseudonym to the IT systems of AUDI AG. If a pseudonym is used, this data can no longer be assigned to you as the driver or user without additional information.

5. Connection test / check license status

You can use the "Connection test / Check license status" service to check the status of the licenses for the online services and the connection status of your vehicle If, for example, a service cannot be used, you can check here whether the licenses have expired or whether your vehicle is offline. As part of the service, we process the following data or categories of data from your vehicle: the vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner) and the current connection status (online/offline) or license status of the vehicle.

The corresponding data is sent directly to our IT systems when turning off the vehicle and will then be available for retrieval using your smartphone via the app and via myAudi. The vehicle status is visible to every authorised myAudi user who has been activated by the primary user for this vehicle. 

6. System update online

Via „System update Online“, we provide you with updates for your vehicle system for download and installation.

As part of the service, we process the following data or categories of data from your vehicle: vehicle identification number (with which your motor vehicle can be uniquely identified and assigned to a specific owner), software and hardware version and serial numbers of the hardware in order to check whether an update for your vehicle system is available and to provide the correct update version. 

VII. Advertising

1. Advertising communication and market research based on consent

Further product information and market research: If you would like to receive information about our products and services, you can order this advertising. For this purpose, we process the following data within the scope of the consent you have given for the purpose of sending marketing information: Last name, first name, e-mail address and/or telephone number). If you consent to being contacted by e-mail, we will use the so-called double opt-in procedure, i.e. we will send you an e-mail to the e-mail address provided asking you to confirm your consent. You can find out how to withdraw your consent in the section B.IV. What rights do I have?

If you have separately given your consent to the further use of your personal data, we will process your personal data in accordance with the scope described in the consent and, with your separate consent, also with a high degree of personalization on the basis of an individual customer profile and/or market research, and may pass it on to certain other sales partners. For details, please refer to the respective declaration of consent.

If you have given your separate consent to personalized advertising and, if applicable, on the basis of an individual customer profile, we process the following additional information:

Supplementary personal details / preferences, e.g.

• Company name, your relationship with this company if you use a company vehicle or are our contact person for this company
• A possible time when you may need a new vehicle and your interest in Audi vehicles and services as well as your requests for information and test drives etc.
• Preferred or current Audi partner(s)
• Vehicle identification number and other attributes linked to it (vehicle master data such as model, year of manufacture, equipment)
• Interests and hobbies
• Status of your data protection declaration of consent and selected or preferred communication channel
• Identification data, e.g. customer number, Audi ID, contract number

Customer history, e.g.

• Vehicle purchase data incl. model, configurations, purchase date, registration date, license plate number, order date, delivery date, owner, list price
• Campaign history and response (customer and prospect support programs and direct marketing measures)
• Vehicle usage data, e.g. contract data, geo and sensor data in connection with the USE of the customer. This includes information about Connect services (pseudonym), infotainment data, mileage, licenses (e.g. booking FoD).
• App / website / social media data
• if you have registered or logged in, your Audi ID, your account data

Audi uses the sales and customer service information collected in this way to

• Determine which information and offers are most likely to be of interest to you, and to
• contacting you in connection with this information and offers and for
• promotional communications about products and services in accordance with your privacy consent. This includes the topics of vehicles, genuine parts and accessories, lifestyle products, driver equipment, accessories and myAudi services as well as information from the data recipients selected in the consent, e.g.  VW Financial Services (leasing), Volkswagen Group Charging GmbH (charging service & tariff)

In the data protection declaration of consent, you also determine the communication channels (e.g. post, telephone, e-mail, push notification) on which we may contact you.

You also decide here whether you consent to the creation of an individual customer profile in order to receive personalized offers.

Where available, the following information provided by you or through your use of products or services may be included in the profile creation: contact information (such as name, address, e-mail); additional personal details/preferences (such as preferred retailer, hobbies); identification data (such as customer number, contract number); customer history (such as receipt of offers, vehicle purchase data, dealer information); vehicle data (such as usage data of the myAudi app: mileage, range); contract data (e.g. type and term of financial service contracts such as leasing or financing); app/website/social media data.

Data processing for advertising purposes generally takes place in Germany; under no circumstances is personal data transferred to a country outside the EU.

E. Local Data Storage

I. Personal POI

Using an SD card, the user can load their own points of interest (POI) into their vehicle. This data is displayed on the map and can be used for navigation. This data is stored locally in the vehicle. A transfer to us only takes place when used as part of another service.

II. Driver Availability Detection

This vehicle is equipped with a technical function for driver availability detection. Driver availability detection is active at all times while the vehicle is being driven and cannot be deactivated by the vehicle occupants.

This function is used, for example, for microsleep detection to ensure that the driver is ready to take over the wheel again if necessary even if traffic jam pilot is activated. This is because even in automated driving mode, the driver must always be able to take over the task of driving based on the traffic situation.

If the driver is not ready to take over the wheel despite repeated requests, the vehicle is stopped, the hazard warning lights are activated and an emergency call (eCall) is made. Driver availability is detected using a camera with infrared lighting, which is permanently installed in the vehicle in the upper area of the instrument panel. The cone of vision of this camera captures the driver's head. It cannot be aimed at other areas of the vehicle (e.g., front passenger seat).

The camera images are not recorded or saved, but are immediately transmitted to the relevant control unit in the vehicle for processing. The control unit analyses the current camera image using image evaluation software. This image evaluation software determines technical measurements of human facial features (e.g., the general position of the nose, ears or eyes) and uses these measurements to determine information about the driver's readiness to drive (e.g., based on the position of the head or the direction of the eyes). The image evaluation software may be able to detect whether the driver is unconscious or asleep, for example, and use this information to assess whether the driver is able to take the wheel again. The technical parameters generated by the image evaluation software are collected anonymously and are not assigned to a person by name and do not allow the driver's face to be reconstructed (i.e., only abstract technical parameters are recorded).

In order to be able to reactivate the driver availability detection as quickly as possible after a break in driving, the above technical parameters are stored in a small number of memory locations in the responsible control unit. As soon as the storage capacity in the responsible control unit is reached, the older technical measured variables are overwritten by the most recent ones.

III. Environment Monitoring

1. Traffic jam and parking pilot

The functionality of the traffic jam and parking pilots require the vehicle's route to be recognised and evaluated. For this purpose, cameras permanently installed in the area of the vehicle's exterior detect objects in the vehicle's driving range (e.g., lane boundaries, crash barriers). The live images from the cameras are transmitted to the responsible control unit.

The camera images are not recorded or stored, but transmitted directly to the relevant control unit in the vehicle for processing. The control unit analyzes the current camera image using image evaluation software. This image evaluation software determines anonymous technical measured variables, such as distances to stationary objects (e.g., crash barriers) or moving objects (e.g., vehicles driving ahead). The control unit evaluates these technical parameters and enables the traffic jam or parking pilot to control the vehicle.

The anonymous technical measured variables are stored in a volatile memory in the control unit for a few seconds. They do not allow any conclusions to be drawn about the identity of persons or vehicles (e.g. faces, license plate numbers).

F. Data processing is the sole responsibility of fleet operators

If the vehicle is part of a fleet, the respective fleet operator or a service provider commissioned by them to manage the fleet can access certain vehicle data and extract it from the vehicle.

This includes the vehicle identification number (with which the vehicle can be clearly identified and assigned to a specific owner), maintenance data when the vehicle is switched on (e.g. next oil change), trip data when the vehicle is switched off, remaining range data, fuel level or battery charge status for e-tron vehicles and warning lights when the vehicle is in operation. If necessary, the fleet operator can also record the position of the vehicle when it is switched off. 

The fleet operator is responsible for deciding on the transmission and processing of the data. For information on data processing, please contact the fleet operator.

Please note that the fleet operator can exclude the services it requires for data extraction from deactivation via Privacy Mode (see section C.II.).