Data protection information for the prob tyre pool

The German Aerospace Centre (DLR) takes the protection of personal data very seriously.

With this data protection notice, we would like to inform you about the processing of your personal data by the German Aerospace Center and the rights to which you are entitled as a data subject under the new EU General Data Protection Regulation (GDPR) and the new German Federal Data Protection Act (BDSG) from 25 May 2018.

1. Body responsible for the processing of your personal data

German Aerospace Centre e. V.
Institute of Transportation Systems
Lilienthalplatz 7, 38108 Braunschweig
Telefon: +49 531 295 -0
E-Mail: verkehrssystemtechnik[at]dlr.de

2. Data Protection Officer

You can reach our data protection officer at

German Aerospace Centre (DLR)
The DLR Data Protection Officer
Linder Höhe
51147 Köln
E-Mail: datenschutz[at]dlr.de

3. Purposes and legal basis of data processing

We process your personal data exclusively in accordance with the legal requirements of the EU General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG) and any relevant sector-specific laws. We therefore only process your data if there is a contractual basis for this, if you have given us your consent to process the data or if a law permits or obliges us to process your data.

Data processing for the purpose of fulfilling a contract or implementing pre-contractual measures

The legal basis for data processing for the fulfilment of a contract and the implementation of pre-contractual measures is generally Art. 6 para. 1 lit. a in conjunction with Art. 9 para. 2 lit. a) GDPR. Art. 9 para. 2 lit. a) GDPR.

Data processing for research purposes by the controller or a third party

We also process your data if this is necessary to fulfil our research purposes or the research purposes of a third party. The processing carried out by us for research purposes regularly includes the compilation of internal statistics, the evaluation of the data collected as part of the research project and the presentation of the research results.

The legal basis for data processing to fulfil the research purposes of the controller or a third party is Art. 6 para. 1 lit. f in conjunction with Art. 9 para. 2 lit. j), 89 GDPR; Section 27 BDSG. Art. 9 para. 2 lit. j), 89 GDPR; § 27 BDSG.

Data processing on the basis of consent and for other purposes

We may also process your personal data if you have given your express consent for this (see Art. 6 para. 1 lit. a GDPR). You can revoke your consent at any time with effect for the future using the contact details above.

Should your personal data be published in the presentation of the research results, we will obtain your consent for this.

Data processing of data relating to your health (if necessary)

Data relating to your health are processed on the basis of a corresponding consent or on the basis of a legitimate interest of the research organisation pursuant to Art. 9 para. 2 lit. a GDPR, Art. 89 GDPR in conjunction with. § 27 para. 1 BDSG processed. You can also withdraw your consent at any time using the contact details above.

The data we process about your health includes data about your state of health or data about any pre-existing conditions.

4. Categories of recipients of the personal data

The data is processed on our behalf by the external service provider Sona Systems Ltd. The data does not leave the scope of the GDPR.

5. Duration of data storage

We only store your personal data for the period required for the above-mentioned purposes.

6. Rights of the data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you are entitled to the following rights vis-à-vis the controller in accordance with the provisions set out below. To exercise these rights, please contact the office specified in section 1 or 2.

Important note: If personal data are processed for scientific or historical research purposes or for statistical purposes, exceptions to the rights under Articles 15, 16, 18 and 21 GDPR may be provided for in Union or Member State law, subject to the conditions and safeguards laid down in Article 89(1) GDPR, insofar as these rights are likely to render impossible or seriously impair the achievement of the specific purposes and such exceptions are necessary for the fulfilment of those purposes.

Right to information

You have the right to request information from us as to whether we process personal data concerning you. If this is the case, you have the right to request information from us about this personal data. This right does not exist if the realisation of the right impairs or makes impossible the research purposes and the processing is necessary for the fulfilment of the purpose.

Right to rectification

You have the right to obtain from us the rectification of inaccurate personal data concerning you. This right does not exist if the realisation of the right impairs or makes impossible the research purposes and the processing is necessary for the fulfilment of the purpose.

Right to cancellation

In certain cases, you have the right to demand that we erase personal data concerning you without undue delay. This right does not apply if the processing of your personal data is necessary to fulfil the purpose of the research.

Right to restriction of processing

In certain cases, you have the right to obtain from the controller restriction of processing. This right does not exist if the realisation of the right impairs or makes impossible the research purposes and the processing is necessary for the fulfilment of the purpose.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.

Right of cancellation

If you have given us your consent to use your personal data, you can revoke this at any time. This right does not exist if the realisation of the right impairs or makes impossible the research purposes and the processing is necessary for the fulfilment of the purpose.

Data protection supervisory authority

You also have the option of complaining to the data protection supervisory authority about our processing of your personal data. The competent data protection supervisory authority is the Federal Commissioner for Data Protection and Freedom of Information.

If you have any further questions or comments, please feel free to contact us or our data protection officer at any time.

7. Right to object to the processing

If personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation, unless the processing is necessary for the performance of a task carried out in the public interest, Art. 21 para. 6 GDPR.

8. Provision of personal data

There is no obligation to provide personal data.

9. Automated decision making