ODIN AERO®
Svenska
Privacy Notice — Odin Aero sensor network
Odin Aero detects drones in lower airspace by listening to the radio signals drones send out. Some of those signals identify the drone or its operator, which makes them personal data. This notice explains what we collect, why, and what you can do about it.
We cannot inform each drone operator individually, because we do not know who they are. That is why we publish this notice (Article 14(5)(b) GDPR).
Who is responsible
Odin Aero AB, company reg. no. 559564-7784, Rosstigen 9, 169 52 Solna, Sweden. E-mail: info@odinaero.se
Odin Aero is the controller for the sensor networks we operate ourselves. Where a customer or partner operates sensors in its own name, that organisation is the controller for its own deployment and Odin Aero processes data on its behalf.
What we collect and where it comes from
Our sensors only receive. They pick up radio signals that drones broadcast, including Remote ID, which EU rules require most drones to transmit, and manufacturers’ own identification signals such as DJI Drone-ID. From these signals we may record:
- the drone’s identifier (for example serial number) and, where broadcast, the operator registration number
- the drone’s position, altitude, speed and heading
- the position of the pilot or controller, and the take-off point
- time, frequency and signal strength
Sensors can also register that a video link is active on certain frequencies. In networks we operate, we record only that the link exists, its frequency and its signal strength, not what it transmits.
We do not collect names, addresses or contact details from drone signals.
Why we use it
- to detect drone flights and give a picture of the lower airspace
- to alert organisations responsible for a protected area (for example an airport, a port or critical infrastructure) about drones in or near that area
- to support authorities in airspace safety, security and incident investigation
- to produce anonymised statistics
- to operate, secure and improve our system
We do not use the data for marketing or to profile individuals.
Legal basis
Legitimate interest (Article 6(1)(f) GDPR): the interest of Odin Aero, our customers and the public in safe and secure airspace and in protecting people, aircraft and critical sites from unauthorised or dangerous drone flights. We have weighed this interest against the privacy of drone operators. You can ask us for a summary of that assessment.
Who receives it
- customers who subscribe to monitoring of a specific area, for detections in that area
- partners who install or operate sensors for us
- authorities, such as police, armed forces or air traffic services, when they request it or when we are required by law
- our hosting provider, Hetzner Online GmbH, which stores data in data centres in Germany and Finland
We do not sell personal data. Detection data is stored and processed only within the EU/EEA.
How long we keep it
Detection data that can identify a drone or operator is kept for up to 48 months, because investigations, including those concerning national security, can depend on a long history. After 12 months, drone serial numbers, operator registration numbers and similar identifiers are replaced with a one-way code that cannot be turned back into the original number; the code can only be matched against a drone that is already known, for example after a new incident or at the request of an authority. Positions are kept, because investigations and legal proceedings may depend on them. After 48 months the data is deleted or anonymised, unless it is needed for an ongoing investigation or legal claim. Anonymised statistics may be kept without time limit.
Your rights
You have the right to request access to, correction of or deletion of your personal data, to request restriction of processing, and to object to our processing at any time on grounds relating to your situation.
Because we cannot identify you from drone signals alone, we will need your drone’s serial number or operator registration number to find the data that concerns you (Article 11 GDPR).
We make no automated decisions about you that have legal or similarly significant effects.
Contact us at info@odinaero.se. If you are not satisfied, you can complain to the Swedish Authority for Privacy Protection (IMY), www.imy.se.
If you use our platform
If your organisation gives you an account on the Odin Aero platform (saas.odinaero.se), we process your name, e-mail address, login details and a log of your activity in the platform. We use this to provide the service your organisation has ordered, to keep the platform secure and to investigate faults. The legal basis is our legitimate interest in delivering and securing the service under our agreement with your organisation. We keep account data for as long as the account is active, and logs for as long as they are needed for security and troubleshooting. When you use the platform, your browser fetches map images and fonts from Esri, OpenStreetMap and Google Fonts, which receive your IP address. See our Cookie Policy.
If you contact us
If you e-mail us, we use your name, contact details and message to reply and to handle any business that follows. We keep correspondence for as long as needed for that purpose and to meet our accounting obligations.
Changes
We update this notice when our processing changes. The date at the top shows the current version.