4. WHAT CATEGORIES OF PERSONAL DATA ARE PROCESSED, FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS?
4.1. OUR PROCESSING OF YOUR PERSONAL DATA
4.1.1. PROVISION OF THE BLUELINK SERVICES AND LEGAL BASIS FOR PROCESSING OF YOUR PERSONAL DATA
We collect and process your personal data in connection with the Services only insofar as the collection and processing is:
– necessary for the conclusion or performance of contractual requirements. We need to use your personal data to fulfil a transaction that you have entered into or expressed interest in entering into (including the Bluelink contract). This includes accepting applicable terms and conditions or specific terms related to our Services. If you do not provide your personal data for these purposes, we may not be able to deliver our Services or enter into a contract with you, which could lead to the cancellation of a Service.,
– where required by law or regulatory. We may collect your personal data to comply with any applicable laws and/or regulations,
– where based on consent. Where we use your personal data obtained directly from you and your registration to our Services for marketing of our own similar products and/or services (e.g. to notify you about new Services or other similar Hyundai services), we rely on consent, or
– where it is necessary for the purposes of legitimate interests of us or third parties. We may process your personal data based on our legitimate business interests when we improve and operate our Services, when we detect and prevent fraud and abuse in order to protect the security of our customers, ourselves, or others.
For details on individual Services, please refer to the respective service description in the Bluelink Terms of Use.
All (personal) data described in Sections 4.2, 4.3, 4.4, 4.5 and their subsections below is collected directly from your vehicle (e.g. its sensors and related applications as made accessible through the infotainment system), or was made available by you through the App (e.g. by entering certain personal data via the App) and is processed in connection with the Services.
The data described in Sections 4.2, 4.3, and 4.4 and their subsections below is required to provide the Services pursuant to the conclusion or performance of contractual requirements, unless stated otherwise below. Without this information, the Services cannot be performed.
Furthermore, we will additionally process your Vehicle Identification number (VIN), the categories of Services that you have activated and the initial activation date. The legal basis is entering into a contract and performing our Services.
4.1.2. PROCESSING FOR OTHER PURPOSES
Apart from the provision of the Services, we will also process your personal data for other purposes as described below.
– Product improvement / development: We will analyse and further improve the Services in order to develop new mobility-related products and/or services, to make our products more secure and/or to improve our Services.
• For these purposes, we automatically analyse the data collected when providing Services based on statistical and mathematical models to identify potential for improvements if you have either activated all Services or selected the “Product/Service Improvement” service category in the privacy settings of your App. More details are provided in Section 4.5.
• The legal basis for any such processing is for legitimate interests of Hyundai to process your personal data in order to develop and improve our Services.
– Monitoring of products / product liability: In this context, we process your personal data in order to monitor our products, ensure sufficient IT security standards or to defend ourselves or third parties against product liability and other legal claims made with regard to our products and Services.
• Insofar as such processing is not required by law, the legal basis for any such processing is for the legitimate interests of Hyundai to process your personal data for the purposes as indicated above.
– Fulfilling legal obligations: We process your personal data in order to fulfil various legal obligations, in particular laws applicable to car manufacturers. Examples of such obligations include:
• provision of certain functionalities in the car such as the “eCall”, to the extent available ,
• reporting of certain information (i.e. VIN – ICCID matching information) to the relevant national authorities to fulfil various legal obligation;
• provision of information to courts or criminal prosecution authorities based on applicable criminal or administrative laws.
– Other purposes: We process your personal data for other purposes only if we are obliged to do so on the basis of legal requirements, if you have consented to the respective processing or if the processing is otherwise lawful under applicable law.
– If processing for another purpose takes place, Hyundai will provide you with additional information where appropriate.
4.1.3. NO AUTOMATED DECISION-MAKING
Hyundai does not engage in automated decision-making including profiling in connection with the Services unless you have been expressly notified otherwise by other means.
4.2. HYUNDAI ACCOUNT
To use our Bluelink Services it is necessary to create a Hyundai Account or to log in with an existing Hyundai Account. Hyundai Account will require your first and last name, phone number, email address, your country and date of birth.
For more information, please refer to the separate Privacy Notice for the Hyundai Account which can be accessed here: [web page link to Hyundai Account Privacy Notice]
4.3. PROVISION OF BLUELINK SERVICES – VEHICLE INFOTAINMENT SYSTEM
4.3.1. Live traffic: Live traffic information for calculating routes, including precise arrival times and displaying the traffic situation based on your current location (Service may not be available in certain countries)
4.3.2. Weather: Local weather information based on your current location
4.3.3. Live POI: Information on nearby POIs based on your current location
4.3.4. Camera / danger zone alerts (if legally permissible in your country): The system provides alerts in areas where accidents are particularly common and warns you about accident black spots or speed cameras.
The provision of the above Services requires the collection and processing of your Vehicle Identification number (VIN), geolocation data (e.g. GPS coordinates for live traffic information), the Integrated Circuit Card Identifier of your vehicle’s SIM card (ICCID) and a unique request ID for any transaction.
4.3.5. VOICE RECOGNITION
Voice recognition enables you to use spoken commands to access and control the infotainment system and to draft and send text messages via a connected mobile device.
For this function, the following categories of personal data are processed and sent to our Bluelink cloud environment: voice recording, geolocation data (GPS coordinates), point of interest (POI) and the Cerence user ID.
The latter is a unique ID for registration on the server of Cerence GmbH, Aachen, Germany, our data processor for these specific services.
There is no link between the Cerence user ID and the Vehicle Identification number (VIN) or any other identifiers, which means that Cerence GmbH cannot identify a natural person from the data transmitted to it.
Once you start your vehicle, voice recognition is activated as a presetting in its online mode. We process your personal data for the purpose of performing our Services.
When using online voice recognition, we process your personal data in our Bluelink cloud environment.
In addition, we collect voice samples and GPS coordinates and store them for up to 90 days in order to perform and improve the voice recognition service.
We process your personal data for the purpose of performing our Services and where related to the improvement of the Services, based on our respective legitimate interests.
When you use the online voice recognition function, your voice samples and GPS coordinates are processed by our service provider Cerence GmbH, Aachen, Germany (data processor) and its sub-processors, which may be located in countries outside the jurisdiction in which you reside.
You can deactivate online voice recognition and use the voice recognition services in an offline mode where no data is transmitted outside of your vehicle.
If you do not want us to process your voice samples and GPS coordinates, you can use offline voice recognition, which does not use your voice samples and GPS coordinates to improve the voice recognition service.