With “IAV lumits”, you can check the standards and specification compliance of your V2X messages. You can upload the messages to be evaluated as a PCAP or BLF file formatted as described here. Within a few minutes, you will receive an email with a download link to the evaluation results. This gives you a complete overview in just a few minutes of whether your V2X implementations comply with the relevant message standards.
This privacy notice provides you with an overview of which personal data (“data”) is processed when you use “IAV lumits” and what rights you have in connection with the processing of your data. For more information, please refer to our privacy notice for business partners.
This privacy notice does not apply to data processing carried out by AWS on its own responsibility. For more information on data processing by AWS, please refer to the AWS privacy notice.
We, IAV GmbH Ingenieurgesellschaft Auto und Verkehr („IAV“), Carnotstr. 1, 10587 Berlin, are responsible for the protection of your data.
If you have any questions about data protection, your rights, or this privacy notice, please feel free to contact our data protection officer. You can reach him by email at datenschutzbeauftragter@iav.de.
A. User data
Description and scope of data processing:
Your user profile contains the following data:
- First name and last name
- Email
- Name of the company you work for
- Address of the company you work for
- If applicable (i.e., for users who are not registering via the AWS Marketplace): Coupon code and use of the coupon.
When registering, you provide your name, email address, and the name and address of your company.
When using “IAV lumits”, we also process your user ID, rights/role, login data, and service request data.
Purposes of data processing:
The processing of this data is necessary to enable and manage your use of „IAV lumits“ and to inform you of the results of the evaluation of our service.
Legal basis:
We store the data for the performance of a contract (Art. 6 I b GDPR) and on the basis of legitimate interests (Art. 6 I f GDPR). Our legitimate interest is to achieve the purpose described above. We also process the data to fulfill a legal obligation (Art. 6 I c GDPR).
B. PCAP/BLF data and evaluation results
Description and scope of data processing:
When using “IAV lumits”, the following content data is processed:
- The entire content of the PCAP/BLF file you provide
- The evaluation results
The content of the PCAP/BLF file and the evaluation results do not usually contain any personal data.
Purposes of data processing:
The temporary storage of this data is necessary in order to evaluate the file with our service.
Anonymized, extracted data from your PCAP/BLF file and the evaluation results are used for internal analysis. This analysis serves the purpose of improving our service and better adapting it to your needs. It is not possible to draw conclusions about individual users from whom the V2X messages originate from this anonymized data.
We also use anonymized data and statistical evaluations for marketing and presentation purposes. The data is anonymized in such a way that no conclusions can be drawn about individual users, organizations, or ITS stations.
C. User feedback
Description and scope of data processing:
After the free trial period, we may ask you to voluntarily provide further information and feedback. This information and feedback includes:
- Location and size of your organization
- Business area of your organization
- Type of your V2X / C‑ITS deployment (test field, funding project, series rollout, etc.)
- Number of C‑ITS stations in operation
- C‑ITS services that you operate or develop
- User role (developer, operator, traffic engineer, test engineer, etc.)
- Functionality requests for our service
- Evaluation of our service (in terms of user-friendliness, helpfulness, quality, speed, support, etc.)
- Typical problems you encounter when developing or operating your C-ITS services
Before internal use, the data is anonymized so that no conclusions can be drawn about individual users. The evaluation is carried out in the context of role, organization, or market. For external purposes, the data is further anonymized so that no conclusions can be drawn about individual organizations.
Purposes of data processing:
Anonymized user feedback data will be used for internal analysis. This analysis serves the purpose of improving our service and better adapting it to your needs. From this anonymized data, it will not be possible to draw conclusions to individual users.
We may use the anonymized data for marketing and presentation purposes through further anonymization and statistical evaluation.
Legal basis:
We process this data based on legitimate interests (Art. 6 1 f GDPR) to be able to achieve the purposes described above.
D. AI chatbot
Description and scope of data processing:
When using the AI chatbot, the conversation histories are stored with a timestamp and the associated user IDs.
Purpose of data processing:
The conversation histories with timestamps are stored for debugging purposes. In the event of a user query about a chat, this enables us to trace the inputs and outputs.
The user ID collected is used to clearly allocate and track the costs incurred when using the chatbot (usage volumes). This serves the purpose of correct billing and internal cost control.
Legal basis:
We store the data for the performance of a contract (Art. 6 I b GDPR) and based on legitimate interests (Art. 6 I f GDPR). Our legitimate interest is to achieve the purpose described above.
We store your data for the following period:
A. User data
Retention period:
Indefinite as long as the profile exists
Control option:
Deletion request for the profile via customer support
B. PCAP/BLF files
Retention period:
Indefinite
Control option:
Deletion request via customer support
B. Evaluation result
Retention period:
100 days after creation of the evaluation result
Control option:
Deletion request via customer support
C. Anonymized user feedback
Retention period:
Indefinite
Control option:
Deletion request via customer support
D. AI chatbot conversation histories with timestamp per user ID
Retention period:
14 days
Control option:
Deletion request via customer support
D. Usage volumes per user ID
Retention period:
3 years from the end of the year in which the usage occurred
IAV:
Within IAV, your data is processed according to the need-to-know principle by persons who need the data for the purposes described.
Third parties: “IAV lumits” runs on AWS and therefore your data is stored with AWS. Where necessary, we also transfer your data to other service providers, e.g., in the areas of IT services and applications, consulting, compliance, and legal services. These service providers are contractually obliged to maintain confidentiality and to comply with data protection requirements. Both AWS and other service providers who are processors have contractually agreed to process the data strictly in accordance with our instructions.
What rights do you have and how can you exercise them?
In accordance with Articles 15 to 21 and 77 of the General Data Protection Regulation, you have the following rights as a data subject if the legal requirements are met.
- Right of access, Art. 15 GDPR,
- Rectification, Art. 16 GDPR,
- Erasure, Art. 17 GDPR,
- Restriction of processing, Art. 18 GDPR,
- Objection, Art. 21 GDPR,
- Data portability, Art. 20 GDPR.
You can exercise your rights via the above-mentioned contact channels.
For example, if you believe that our data processing is unlawful or that we have not granted the rights described above to the extent required, you have the right to lodge a complaint with the competent data protection supervisory authority in accordance with Article 77 GDPR.
Last updated: March 2026
