Vehicle data recording and privacy for Your Peugeot 408 4 Door Second Generation (2022-2026)

Vehicle data recording and privacy  
Information about events which have  
Operating data in the  
vehicle  
Introduction  
damaged the vehicle.  
13  
Electronic control units are installed in your  
vehicle. These control units process data  
received from the vehicle's sensors, for example,  
or data they generate themselves or exchange  
with each other. Some of these control units are  
required for the correct operation of your vehicle,  
some others assist you while driving (driving or  
manoeuvring aids), while others provide comfort  
or infotainment functions.  
For electric and rechargeable hybrid vehicles,  
the traction battery charge level and the  
estimated driving range.  
The control units process the data used for the  
operation of the vehicle.  
This data includes, for example:  
- Exact mileage or timestamp of recorded events  
(detection of internal malfunctions, activation of  
specific systems, etc.), allowing to locate them in  
time.  
Information about the state of the vehicle  
(e.g. speed, travel time, lateral acceleration,  
wheel rotation rate, fastened seat belts  
display).  
- Dynamic data recorded few seconds before  
and after specific driving events, such as  
accidents, collisions or activations of Advanced  
Driver Assistance Systems (ADAS): driving data  
(e.g. speed, acceleration, steering angle, engine  
speed, selected ratio on the gearbox, pedals  
pressure), and potential very low-resolution  
pictures of the sight in front of the vehicle  
(only if ADAS Data Recorder (ADR) system is  
activated).  
The following contains general information about  
how data is processed within the vehicle.  
You will find additional information about the  
specific data which is downloaded, stored and  
transmitted to third parties and what it is  
used for in your vehicle under the keyword  
"Data protection". This information is directly  
associated with the references for the functions  
in question contained in the corresponding  
vehicle handbook. These are also available in  
the general terms of sale of the vehicle, in the  
general terms of sale of connected services, or  
online on brand website.  
Environmental conditions (e.g. temperature,  
rain sensor, distance sensor).  
As a general rule, this data is temporary, is  
not stored for longer than one operating cycle  
and is only used within the vehicle itself. The  
control units often record this data (including the  
vehicle's key). This function allows either the  
temporary or permanent storage of information  
about the state of the vehicle, stresses on  
components, servicing requirements, as well as  
events and technical errors.  
In particular circumstances (e.g. if the vehicle  
has detected a malfunction), it may be  
necessary to record data which would otherwise  
simply not be stored.  
Technical data of the  
vehicle  
Maintenance and repair  
activities  
Personal reference  
Each vehicle is identified by means of a  
unique chassis number. Further options, such as  
thevehicle's number plate, make it possible to  
trace data on the keeper or driver of the vehicle.  
The data generated or processed by control  
units may therefore be personal, or be made  
personal under certain conditions. Depending on  
what vehicle data is available, conclusions may  
be drawn on information such as your driving  
behavior, your location or the route you travel, or  
on your usage behavior.  
When taking your vehicle in for servicing (e.g.  
repairs, maintenance), the stored operating  
data may be read along with the vehicle's  
identification number and used if necessary.  
The personnel working for the servicing network  
(e.g. garages, manufacturers) or third parties  
(e.g. roadside assistance agents) may read  
the vehicle's data. This also applies to work  
carried out under warranty and quality assurance  
measures.  
Depending on the vehicle's equipment level, the  
data stored is as follows:  
Operating state of system components (e.g.  
filling level, tyre pressures, battery charge  
status).  
Faults and malfunctions in important system  
components (e.g. lamps, brakes).  
System reactions in specific driving situations  
(e.g. deployment of an airbag, triggering of  
stability control and braking systems).  
This data is generally read via the OBD (On-  
Board Diagnostics) port fitted by law to the  
217  
Vehicle data recording and privacy  
vehicle. It is used to report on the technical  
state of the vehicle or its components and  
facilitates the diagnosis of malfunctions, in  
compliance with warranty obligations and for  
quality improvement. This data, in particular the  
information relating to stress on components,  
technical events, operator errors and other  
malfunctions, is sent to the Manufacturer, if  
necessary, along with the vehicle's identification  
number. The Manufacturer's liability may also be  
engaged. The Manufacturer may also use the  
operating data taken from the vehicle for product  
recalls. This data may also be used to check the  
customer's warranty and any claims made under  
warranty.  
are also recorded. Resolution of stored pictures  
is too low to allow recognition of faces, to read  
license plates, or to interpret panels on the  
roadside.  
exceptional cases, repairers do not own this  
equipment.  
For more information on the Event Data  
Recording system, please refer to the "Safety"  
section of this document  
All this stored information can only be extracted  
from your vehicle near a PEUGEOT-approved  
repairer workshop, via a special equipment  
connected by wire to the OBD port. This  
can be done upon a request on your side  
for ADAS explanation, or in the context of a  
legal investigation concerning your vehicle. This  
system only aims to provide explanatory context  
of ADAS activations. Only activation of specific  
ADAS systems can trigger it ; this system is  
never directly triggered by detection of accidents  
or collisions without ADAS activation. In case  
where ADAS are deactivated, ADR system will  
not record any data.  
Comfort and infotainment  
functions  
Comfort settings and personalised settings may  
be saved in the vehicle and modified or  
reinitialised at any time.  
Depending on the vehicle's equipment level, this  
may include:  
Any malfunctions stored in the vehicle may be  
reset by an after-sales service company during  
servicing or repair work, or at your request.  
Seat and steering wheel position settings.  
Chassis and air conditioning settings.  
Personalised settings such as the interior  
lighting.  
ADAS Data Recorder (ADR)  
system  
Event Data Recorder (EDR)  
system  
You can enter your own data into the functions  
of your vehicle's audio and telematic system, as  
part of the selected functionalities.  
Depending on the vehicle's equipment level, this  
may include:  
Depending on its level of equipment, your  
vehicle may be equipped with an ADAS Data  
Recorder system that continuously process  
pictures and driving data, and record them  
inside your vehicle when specific Advanced  
Driver Assistance Systems (ADAS) are triggered  
(e.g. Intelligent emergency braking assistance,  
interruption of a Semi-automatic lane changing,  
where applicable). This system aims to provide  
pieces of understanding for ADAS behaviour, by  
collecting data every time ADAS are triggered.  
Concerned data is greyed low-resolution pictures  
of the sight in front of the vehicle and dynamic  
driving data (e.g. speed, acceleration, steering  
angle, brake pressure pedal, blinker status,  
accelerator pedal position), both sampled every  
seconds just before and just after the event.  
Exact mileage and timestamping of the event  
In addition, depending on country of sale and  
upon legal obligations, your vehicle may also  
be equipped with an Event Data Recorder  
system that records data in case of accident  
or collision, whatever the activation status of  
your ADAS systems. Pursuant to the Regulation  
(EU) 2022/545, EDR system is a legal obligation  
inside Europe Market, and in other countries  
bent to UN Regulation No 160 ; its purpose is to  
freeze driving data when accidents or collisions  
occur.  
Contrary to the ADR system above described,  
pictures of the scene are never recorded by EDR  
system. Data can only be read through OBD port  
via a special equipment that law enforcement  
agencies may use to analyse the context of  
an accident involving your vehicle. Except in  
Multimedia data such as music, videos  
or photos to be read by an integrated  
multimedia system.  
Address book data to be used with an  
integrated hands-free system or with an  
integrated navigation system.  
Entered destinations.  
Data regarding the use of online services.  
This data for the comfort and infotainment  
functions may be stored locally in the vehicle  
or saved to a device that you have connected  
to the vehicle (e.g. smartphone, USB memory  
218  
Vehicle data recording and privacy  
stick or MP3 player). Data that you have entered  
yourself may be deleted at any time.  
This data may also be transmitted outside the  
vehicle at your request, particularly when using  
online services in line with the settings that you  
have selected.  
to the responsibility, the data protection and  
the terms and conditions of use of the supplier  
in question. The Manufacturer often has no  
influence over the content exchanged in this  
regard.  
Please therefore ensure that you are aware of  
the nature, extent and purpose of the collection  
and use of personal data as part of the third-  
party services provided by the service provider in  
question.  
Online services - "Over  
The Air" connectivity  
If your vehicle is connected to a wireless  
network, data can be exchanged between your  
vehicle and other systems.  
Connection to a wireless network is made  
possible via a transmitter located in your vehicle  
or a mobile device that you have provided  
(e.g. smartphone). The online services can be  
used via this wireless connection. These include  
online services and applications (apps) provided  
to you by the Manufacturer or other suppliers.  
13  
Smartphone integration  
(e.g. Android Auto® or  
Apple® CarPlay®)  
If your vehicle is equipped accordingly, you  
can connect your smartphone or another mobile  
device to the vehicle in order to operate it using  
the vehicle's integrated controls. Images and  
sounds from the smartphone can be transmitted  
through the audio and telematics system.  
Specific information is simultaneously sent to  
your smartphone. Depending on the type of  
integration, this includes data such as location,  
day/night mode and other general information  
about the vehicle. For more information, please  
refer to the user instructions for the vehicle or  
the audio and telematics system.  
Integrating a smartphone allows you to use  
its applications, such as a navigation app or  
music player. No other integration between the  
smartphone and the vehicle is possible, in  
particular active access to vehicle data. How the  
data is processed subsequently is determined  
by the supplier of the application being used.  
The ability the change settings depends on the  
application in question and on the operating  
system installed on your smartphone.  
Online services based on  
contractual agreements  
Proprietary services  
Your vehicle may disclose and receive data by  
“over the air“ connectivity to perform services  
explicitly requested by a service subscriber.  
During the subscription process, we check by  
different means the legitimacy of the requestor  
considered as vehicle’s owner to activate se  
rvices on the vehicle.  
For more details on those services, please ask  
the service subscriber to provide the relative  
Terms and Conditions accepted. You can find  
them from the Brand Mobile app or the Brand  
website, after being connected with a Stellantis  
account.  
As regards the Manufacturer's online services,  
the corresponding functions are described by  
the Manufacturer in an appropriate medium  
(e.g. handbook, Manufacturer's website) and the  
information about data protection is provided.  
Personal data may be used for online services.  
The exchange of data for this purpose takes  
place over a secure connection, using for  
example the Manufacturer's dedicated computer  
systems. The collection, processing and use of  
personal data for the development of services  
are carried out solely on the basis of a legal  
authorisation, for example in the case of a  
legal emergency call system or a contractual  
agreement or else under a consent agreement.  
You can activate or deactivate the services and  
functions (some may be chargeable) and, in  
some cases, the vehicle's entire connection to  
the wireless network. This does not include  
legally required functions and services such as  
an emergency communication system.  
Protecting measures  
against cyber attacks  
Depending to the model, your vehicle may be  
equipped with a system that detects cyber attack  
attempts or unexpected events for cybersecurity  
point of view . This system, when fitted inside the  
vehicle, is working for the entire life cycle of the  
vehicle.  
Third-party services  
When cybersecurity events are detected  
(e.g. unexpected established connections with  
If you use online services provided by other  
(third-party) suppliers, these services are subject  
219  
Vehicle data recording and privacy  
unknown systems, unexpected reboots, and any  
abn ormal system configurations), log files are  
generated, temporally stored inside your vehicle  
and then sent to the Manufacturer’s in fra  
structures by "over the air“ connectivity. Those  
log files are analysed by the Manufacturer’s  
Security Operational Center (SOC) to define  
appropriate measures protecting vehicles  
from malicious interactions with electronical  
components. Such measures could be the  
deployment of software and firmware updates.  
The purpose of this system is thus to enhance  
cybersecurity measures settled inside vehicles.  
It also directly participates to the securitization  
of your vehicle’s connectivity and allows the  
correct performance of online services activated  
on your vehicle . Ways to exercise your Privacy  
rights to this processing are described within the  
European Connected Vehicles Privacy Policy of  
Stellantis (see below).  
country where you are driving. It doesn't matter  
where you bought your vehicle or where it is  
registered.  
In accordance to Article 9 of Implementing  
Regulation (EU) 2021/392 (“OBFCM”), this  
regulatory service allows the European  
Environment Agency (EEA) to collect vehicle  
data related to usage (such as VIN, total  
distance travelled, total fuel consumed, total grid  
energy into battery when applicable).  
These data are used by EEA to monitor in real  
usage the fuel and energy consumption and  
the CO2 emission of the new vehicles, in an  
anonymized and aggregated way.  
As mentioned in OBFCM regulation, the  
CUSTOMER can refuse the collection and  
transmission of vehicle’s data for regulatory  
OBFCM purpose. This can be done by  
contacting Customer Care Center (contact  
information available on the brand website  
available for your country).  
In the event of a significant impact or a  
serious accident recorded by the DEVICE on  
the VEHICLE, with consequent shutdown of the  
VEHICLE itself, a phone-call is automatically  
forwarded from the VEHICLE to the respective  
Public Emergency number (call to ‘112’ inside  
Europe), together with the transmission of  
the minimum data needed for identification  
and location of the VEHICLE (i.e. your exact  
location, the time of the accident, your vehicle's  
identification number and direction of travel).  
This information is only transmitted from your  
vehicle in the event of a serious accident ;  
it allows the Public Emergency Services to  
assess and manage your situation. The Public  
Emergency Services will act according to local  
legislation and its own operating procedures.  
Inside Europe, the 112- based eCall service is  
a public service of general interest and should  
therefore be accessible free of charge to all  
consumers.  
According to Regulation (EU) 2015/758, this  
system is mandatory for all new types of vehicle  
approved for manufacture after 31 March 2018.  
The eCall system is only activated if your  
vehicle is involved in a serious accident. The  
rest of the time the system remains inactive.  
This means that when you are simply driving  
your vehicle, no permanent tracking (registering  
your car's position or monitoring your driving) or  
transmission of data takes place on behalf of this  
regulatory service.  
SLI - Speed Limit Information  
This function will be provided for the entire life  
cycle of the VEHICLE, only for vehicles sold  
inside the Europe Market.  
Applying legal Obligations  
and respective  
requirements  
Pursuant to the Regulation (EU) 2018/858  
on the approval and market surveillance of  
motor vehicles and their trailers, and of  
systems, components and separate technical  
units intended for such vehicles dated 30  
May 2018, as amended by the Regulation  
(EU) 2019/2144 dated 27 November 2019 and  
the Commission Delegated Regulation (EU)  
2021/1958 dated 23 June 2021 (together the  
"GSR V2 Regulations"), car manufacturers are  
required to equip new vehicles sold in Europe  
with various systems aiming at guaranteeing the  
overall safety of such vehicles.  
This list can change according to European  
regulations. Please consult online this document  
to be sure to have the up-to-date list of applying  
regulations in EU. Depending of the date of the  
Type Approval of the vehicle, some regulations  
cannot apply.  
Generally, these legal obligations can disclose  
data independtly of the in-vehicle privacy  
settings.  
OBFCM - On-Board Fuel Consumption  
Meter  
eCall - Emergency Call  
As per Article 6 of the Regulation (EU)  
2019/2144, such systems must include  
an "intelligent speed assistance" system  
(hereinafter "ISA") that provides the applicable  
speed limit to the driver for at least 90% of  
This function will be provided for the entire life  
cycle of the VEHICLE.  
This function, where operational, is provided  
through the Public Emergency service of each  
This SERVICE is provided for 15 years after the  
vehicule is fisrtly put into circulation.  
220  
Vehicle data recording and privacy  
the total distance and for at least 80% of the  
distance driven on each of the three road types  
(urban roads and streets, non-urban roads, and  
motorways/expressways/dual carriageways).  
SLI function provides the driver with the  
This disclosure is active in Belgium only, as an  
answer to a Belgium law in order to prevent  
vehicle mileage fraud (Belgium law of 28th  
november 2018, applicable from 01/01/2020).  
It is provided lifetime, as long as Car-Pass  
association requests the data.  
It consists in providing 4 times a year the  
mileage of any vehicle registered in Belgium to  
Car-Pass, an association delegated by belgian  
authorities to collect and control this data.  
This mileage is collected over-the-air by  
Stellantis if another connected service already  
uses it. This data is transmitted to Car-Pass  
association, upon request of this organism.  
For more information, please refer to the Car-  
privacy-policy).  
European Connected  
Vehicles Privacy Policy of  
Stellantis  
13  
applicable speed limit on the road where driver  
travels. SLI function aims to improve the safety  
by allowing the vehicle to display in real time  
applicable speed limit, even when external  
conditions doesn’t not permit it (e.g. weather,  
sign hidden by another vehicle). The applicable  
speed limit is retrieved from the front camera of  
the vehicle and maybe completed through Over-  
The-Air communication system to improve the  
reliability of information according to the vehicle  
definition. To get valid speed limit information,  
the vehicle's current position is sent via the  
telematics unit and is immediately deleted after  
processing. Tracking of the vehicle position is  
not possible at any time. This is not impacted by  
the privacy settings of the vehicle.  
As required by the “GSR V2 Regulations”, this  
SLI feature is activated by default at key on, but  
can be partially deactivated at every time by the  
user of the vehicle, given that the driver may cut  
the audible warning function from the vehicle’s  
settings available from the central touch screen.  
This will not impact the visual warning function  
that will stay active and may still require Over-  
The-Air data transmission of current vehicle’s  
position for accurate speed limit detection.  
Depending on the model of your vehicle, it may  
be possible to also fully cut the SLI function  
(i.e. to stop speed limit detection and speed  
limit warning function) from the central touch  
screen, and thus cut the data transmission for  
the current trip.  
This Privacy Policy for Connected Vehicles  
(“Privacy Policy”) applies to the Personal Data  
we process about users of the connected  
services through our Vehicle, our Websites  
or Application who have signed the General  
Conditions as a Customer or who are authorized  
by a Customer to access and use the connected  
services.  
This Privacy Policy is drafted pursuant Article  
13 of the EU Regulation 679/2016 and will  
help you understand better how we handle your  
information.  
In this document, you will find some examples of  
how we process Personal Data, and Definitions  
referring to more detailed explanations (at the  
end this Privacy Policy). If you would like any  
clarifications regarding this Privacy Policy or  
how your data are processed, please send your  
request to:  
This document is available on brand websites, in  
the section dedicated to connected services.  
Data Use - Product Quality  
Improvement  
You acknowledge and agree that to improve  
the quality of the products produced by  
STELLANTIS AUTO SAS as a car maker, your  
Vehicle Data (as defined in the Stellantis Privacy  
Policy for connected services, see below) –  
excluding the geolocation of the vehicle – are  
transferred to the car maker for the purpose of  
anomalies avoidance, aggregated data analysis  
for product improvement or creation of new  
products.  
Further information on this, and ways to exercise  
your Privacy rights to this processing, are  
described in the Stellantis Privacy Policy for  
connected services (see below).  
Mileage disclosure to Car-Pass association  
(Only for vehicles registered in Belgium)  
221