Privacy policy - Tracking

Scope of application [point 1]

This privacy policy applies to the data collected within the MCube Phase 2 Data collection and processing collected data. Data processing is subject to the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR) and the Bavarian Data Protection Act (BayDSG). Below we inform you about the type, scope and purpose of the collection and use of personal data

Name and contact details of the responsible bodies [point 2]

The following institutions are responsible for the study within the meaning of Art. 4 No. 7 GDPR:

• Technical University of Munich, Chair of Automotive Engineering, Arcisstraße 21 80333 Munich, link to shared e-mail inbox

The following persons are responsible for the sub-studies:

• • ComfficientShare 2.0: Chair of Automotive Engineering, Prof. Dr.-Ing. Markus Lienkamp (PI), responsible employees: Nico Nachtigall, Brian Dietermann, Svetlana Zubareva, Tobias Herbst and Georg Balke.
  • ReFuMoLab: Chair of Traffic Engineering, Prof. Dr. Klaus Bogenberger (PI), responsible employees: Isabella Waldorf and Dr. Anke Ye
  • WiPa: Chair of Settlement Structure and Transport Planning, Prof. Dr.-Ing. Gebhard Wulfhorst (PI), responsible employees: Carolin Zimmer, Matthias Grundei and Simone Aumann
  • MobiPionier: Professorship for Mobility Policy, Prof. Dr. Allister Loder (PI), responsible staff members: Helena Gartmeier
  • MOSAIQ: Professorship for Urban Design, Dr. Stefanie Ruf (PI), responsible employees: Mareike Schmidt, Ana Rivas de Gante

Contact details of the Data Protection Officer Data Protection Officer of the Technical University of Munich (TUM) [point 3]

beauftragter@datenschutz.tum.de
https://www.datenschutz.tum.de/datenschutz/startseite/

Data categories [point 4]

Master data:

• E-mail address
• Cell phone model
• Version of the respective operating system
• Version of the app

Profile data:

• Age
• Gender

Survey data - questions about the person, e.g:

• Role within the consortium partners
• Place of residence
• Age
• Gender
• Income
• Educational level
• Household size and status
• Labor market status
• Driving license possession & mobility tools
• Mobility restrictions
• Frequency of use of transportation modes & purposes
• Mobility, intervention and environmental policy knowledge, attitudes and intentions
• Psychological scales (e.g. on risk aversion)

Smartphone data:

• Pseudonymous user ID (universally unique identifier, UUID),
• Time of localization,
• Geo-coordinates and accuracy (determined by the GPS chip),
• Acceleration values (determined via sensors in the cell phone),
• Gyroscope sensor/gyroscope values (determined via sensors in the cell phone),
• Movement activity from operating system,
• Activities marked as completed by participants in the app
• Analysis data on the user's usage behavior in the app to improve the app

Transaction data:

• Tracking data of the routes (start and end coordinates),
• Trip duration in minutes, trip distance in kilometers,
• the selected route with data points at a frequency of 1Hz) to estimate the selected mode of transportation,

Third app data:

• Category of the estimated means of transportation and derived CO2 consumption, determined from the movement data,
• Individually defined notional CO2 budget and euro budget
• Stadtwerke München MVGO

Purposes and legal bases for processing [point 5]

Unless otherwise stated in this privacy policy, the legal basis for the processing of your data results from Art. 4 para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 para. 1 letter a and Art. 9 para. 2 lit. a GDPR) of the General Data Protection Regulation (GDPR). Accordingly, we are permitted to process the data required to fulfill a task incumbent upon us.

Purpose of the survey [point 5.1]

Innovation and integration projects are being carried out as part of the MCube application cluster - the Munich Cluster for the Future of Mobility in Metropolitan Regions under the leadership of the Technical University of Munich (TUM) - funded by the Federal Ministry of Research, Technology and Space (BMFTR) - formerly the BMBF. The following MCube sub-projects are cooperating on this survey

• ComfficientShare 2.0 - Convenient and efficient vehicle sharing on private property;
  The aim of the project is to test various car sharing concepts at several real-world laboratory locations spread across the city of Munich in order to create a reliable and utilized alternative to the little-used private car; project partners: TUM Chair of Automotive Engineering, ChargeX GmbH, BMW Group, City of Munich; associated partners: UnternehmerTUM, e+k Move GmbH, Stattauto, CityTransformer
• ReFuMoLab_Garching - Reallabor Future Mobility Campus Garching" pursues the goal of making mobility behavior on the TUM research campus in Garching more sustainable through digital and physical interventions. The following are involved in the project: TUM Chair of Traffic Engineering, Chair of Automotive Engineering, SAP, DB Regio, SIEMENS, as well as the City of Garching and the TUM Sustainability Office as associated partners
• MOSAIQ - Mobility and urban climate in the district of the future;
  The core objective of MOSAIQ is to strengthen environmentally friendly forms of mobility, participation, social inclusion, quality of stay and climate resilience in Munich; the following are involved in the project (funded): TU Munich (Chair of Urban Design, Chair of Settlement Structure and Transport Planning, Chair of Vehicle Technology), Climateflux, VePa Vertical Parking, eVehicle, City of Munich (Mobility Department, Department of Urban Planning and Building Regulations, Department of Climate and Environmental Protection) Hans Sauer Foundation. Associated partners are TU Munich (Chair of Landscape Architecture and Public Space, Chair of Innovation Research), Fraunhofer Institute for Industrial Engineering, Bundeswehr University (Institute of Transport and Regional Planning), STATTAUTO, UnternehmerTUM and Green City e.V..
• MobiPionier - Mobility budgets and mobility bundles in the Munich metropolitan region as an alternative to regulation; the aim is to empirically investigate the potential impact of mobility budgets and mobility bundles through real-world laboratories for everyday life and major events in the Munich metropolitan region in order to make the extended environmental network more attractive by improving the convenience of ticket purchase and making it more attractive in terms of price. Project partners: TUM - Chair of Settlement Structure and Transport Planning, TUM - Chair of Mobility Policy, City of Munich - Mobility Department, Deutsche Bahn Connect GmbH, Stadtwerke München GmbH, ADAC Foundation and Münchner Verkehrs- und Tarifverbund GmbH as an associated partner.
• WiPa - Effective participation for mobility innovations.
  The aim of the project is to anchor participation and communication cluster-wide in MCube. WiPa supports the innovation projects in the planning, implementation and follow-up of participation formats - at different levels of intensity and with different target groups in order to ensure effective and sustainable participation processes; Project partners: TUM - Chair of Settlement Structure and Transport Planning, City of Munich - Mobility Department, Munich University of Applied Sciences - Department of Design, USP Projekte GmbH, Hans Sauer Foundation; Associated partners: PB Consult GmbH, Deutsches Museum - Science Communication Lab, Mehr Demokratie e. V.

The purpose of the survey is to scientifically investigate changes in mobility behavior. The participants always explicitly take part in one of the aforementioned sub-studies and are also recruited through these. The primary purpose of the respective survey is the purpose stated by the recruiting project. However, due to the cooperation between the sub-projects, the data collected can also be used by the other projects, e.g. as reference values. Accordingly, the purposes stated for the other projects are corresponding secondary purposes of the survey.

Survey by Study-related surveys [Point 5.2]

The projects mentioned under point 5.1. carry out both cross-sectional and longitudinal surveys in the form of in-study surveys.

Before the start of the survey, each project mentioned under point 5.1 recruits its study participants itself, e.g. through direct mailings, notices or direct contact. As part of this recruitment, the participants are informed whether the survey is an anonymous cross-sectional survey or a pseudonymized longitudinal survey. In the first case, the data is collected exclusively anonymously. If the survey participants decide to become part of the inviting study in the course of this survey, they provide their e-mail address. This identification feature makes it possible to merge the various surveys on the same people and with the research data from the smartphone apps (see points 5.3.-5.4.).

All communication regarding the study-related surveys in the case of longitudinal surveys takes place via the TUM e-mail address tracking@mcube-cluster.de.

Use of the TUM Mobility App [Point 5.3]

The projects mentioned under point 5.1. can also carry out a longitudinal survey of the movement profiles during the study period with the TUM Mobility App in addition to surveys accompanying the studies. The movement profiles are merged with the data from the study-related surveys using an identification feature. During recruitment, participants will be informed of this and must consent to participation and data processing.

After successful recruitment, participants will receive a download link to the app store and a key to synchronize their smartphone with the research database in order to use the TUM Mobility App.

Further information on data processing in the corresponding app can be found in section 7 "Further data processing in the app".

Using the MobilityCoins app [Point 5.4]

In the MCube project ReFuMoLab, some of the participants are selected and asked to also download the Mobilitycoins app. Participants can use this to trade an allocated CO2 budget with other participants during the test period. The aim is to test innovative digital operational management measures under real-life conditions. The Chair of Automotive Engineering transmits the e-mail address to the external app developer and receives a pseudonymous user ID in return, which is used for login. In addition, CO2 emissions per means of transportation for the standard commute per user are transmitted to the app.

From the TUM side, we only receive information about behavior within the app - e.g. whether a person has traded, bought or sold MobilityCoins, as well as information about login behavior. In addition, we also receive information about the means of transportation that participants have registered in the app.

Further information on data processing in the corresponding app can be found in section 7 "Further data processing in the app".

Use of the Stadtwerke München and Deutsche Bahn ticketing apps [Point 5.5]

In the MCube project MobiPionier, smartphone apps of the consortium partners Stadtwerke München and Deutsche Bahn AG are used in the study for the sale of tickets and services of the extended environmental network. By agreeing to participate in the MobiPionier project, participants consent to their usage data (purchase activities) of the ticketing apps from the study period being merged with the survey data from points 5.2. and 5.3. in the MobiPionier project and jointly processed and used within the project.

If the participants already have a user account in the app in question, they can decide whether they want to continue using their existing account for the study period or whether they want to have a separate account explicitly for the study period. If the participants do not yet have a user account in the app in question, an account will be created for the study period.

Further information on data processing in the corresponding app can be found in section 7 "Further data processing in the app".

Data processing and data use within the MCube consortium [point 5.6]

The raw data collected under points 5.2. and 5.3. are stored at the Chair of Automotive Engineering and prepared for forwarding to the MCube sub-projects under point 5.1. Data collection and processing at the Chair of Automotive Engineering is pseudonymized. The data from points 5.4. and 5.5. are transferred to the respective projects pseudonymized (UUID).

The organizational measures for data protection and the transfer of processed data to the MCube sub-projects ensure that the data is de facto used anonymously in the MCube sub-projects. After deletion of the identification feature after the end of the project, see point 5.9, the data is fully anonymized accordingly.

Consortium partners of the MCube subprojects who are not members of TUM must sign a data usage declaration before using the data.

After completion of all MCube sub-projects, the data is completely anonymized by deleting the raw data and identification features and archived as research data (see point 8).

Compensation for participation [Point 5.7]

Participants in the survey may be paid a participation fee. Details are regulated at project level and are communicated during recruitment and in the study-related declaration of consent and can be found on the FAQ page.

Legal basis [Point 5.8]

Art. 4 para. 1 of the Bavarian Data Protection Act (BayDSG) in conjunction with Art. 6 para. 1 lit. a and Art. 9 para. 2 lit. a GDPR) of the General Data Protection Regulation (GDPR).

With their consent to participate in an MCube sub-study, participants also agree that the MCube sub-projects from point 5.1. may also use the processed data mentioned in point 5.6.

Storage duration [Point 5.9]

The identification features collected as part of the project will be completely deleted no later than 3 months after the end of the project (planned: February 2028).

Recipients of personal data [Point 5.10]

As part of the research project, personal data is processed by the third-party provider of the tracking app and then transmitted to us. This includes, in particular, movement data of the participating test subjects and their e-mail address for registration. The third-party provider acts as a processor in accordance with the applicable data protection regulations. Personal data is not passed on to uninvolved third parties.

Automated decision-making [point 6]

We do not use automated decision-making in accordance with Art. 22 GDPR for the aforementioned data processing operations.

Further data processing in the app [point 7]

Tbc.

Disclosure of data to third parties [Point 8]

The raw data collected in the study will not be passed on to third parties within the meaning of the GDPR and will only be used for the stated research purposes. All data collected during the study may also be used in anonymized form for research purposes by the participating institutions after the end of the study in accordance with Art. 89 GDPR. This may include anonymized evaluations of your data in final theses. The participating institutions also reserve the right to use your data in anonymized and evaluated form (i.e. aggregated) in publications.

If we disclose data to other persons and companies (processors or third parties) as part of our processing, transfer it to them or otherwise grant them access to the data, this will only be done on the basis of legal permission (e.g. if the transfer of data to third parties is necessary for the performance of the contract in accordance with Art. 6 (1) (b) GDPR), if you have consented, if a legal obligation provides for this or on the basis of our legitimate interests (e.g. when using agents, web hosts, etc.).
If we commission third parties with the processing of data on the basis of a so-called "order processing contract", this is done in accordance with Art. 28 GDPR.

Rights of data subjects [Point 9]

If we process your personal data, you have the following rights as a data subject:

• You have the right to information about the personal data stored about you (Art. 15 GDPR).
• If incorrect personal data is processed, you have the right to rectification (Art. 16 GDPR).
• If the legal requirements are met, you can request the erasure or restriction of processing (Art. 17 and 18 GDPR).
• If you have consented to the processing or a contract for data processing exists and the data processing is carried out using automated procedures, you may have a right to data portability (Art. 20 GDPR).
• If you have consented to the processing and the processing is based on this consent, you can revoke your consent at any time for the future. This does not affect the lawfulness of the data processing carried out on the basis of the consent until the withdrawal. You have the right to object to the processing of your data at any time for reasons arising from your particular situation if the processing is carried out exclusively on the basis of Art. 6 para. 1 letter e) or f) GDPR (Art. 21 para. 1 sentence 1 GDPR).
• In the event of revocation for technical reasons, you can only request the deletion of the raw data. Due to the technical steps taken to make re-identification more difficult when using data in the sub-projects, no deletion, blocking or restriction can be requested. After deletion of the primary identification feature (3 months after the end of the study), deletion of the data is no longer possible.

Alternatively, you can also send your application in writing to the postal address given above.
Please note that your personal data will be deleted at the end of the study. After that, it is no longer possible to assign the anonymized data and we can no longer provide information or restrict the processing of your data.

Erasure of data and right to object (Art. 21 GDPR) [Point 10]

You have the right at any time to request the deletion or blocking of your raw data and the primary identification marker or to object to the processing of your personal data based on Art. 6 (1) a) and Art. 9 (2) a) GDPR. Please note that these rights and the possibilities for revocation do not apply to the data processed and passed on to the MCube sub-projects, as deletion, blocking or restriction can no longer be requested due to the technical steps taken to make it more difficult to re-identify individual participants when using data in the sub-projects. Consequently, in the event of a revocation, the data will continue to be used anonymously (without assignment to a person). Once the primary identification feature has been deleted, it is no longer possible to delete the data.

Simply send us an e-mail with the subject "Data deletion MCube" to tracking@mcube-cluster.com If you have any further questions about data protection, please also contact tracking@mcube-cluster.com. If you have any questions about the course of your sub-study, please contact the respective study director named above.