TOYOTA MOTOR EUROPE DATA SHARING NOTICE

1.   Purpose of this Notice

This Data Sharing Notice explains how Toyota Motor Europe NV/SA (“TME”) shares product and related service data in accordance with the European Data Act. The regulation aims to ensure fair access to, and use of data generated by connected products and services.

2.   Key Definitions

These definitions aim to make the text easier to read. The official meanings from Regulation (EU) 2023/2854 still apply.

Connected Products: Internet-enabled items that produce data during use, like a Lexus car or home charger.

Related Services: Features linked to these products, such as remote control via the  Lexus Link+ app.

User: The owner or operator of a Connected Product or Service.

Data Holder: The entity (e.g., TME or its providers) that stores and manages the data.

Data Recipient: Third parties (e.g., repair services) who receive data at the User's request.

Metadata: Additional info (like timestamps or measurement units) that explains the data.

3.   What Data May Be Shared

You or a third party you authorise may request access to the following categories of data:

Vehicle Data

• Trip Data: Information from the CAN bus¹, including trip start/end times, distance, and driving behaviour. DCM² summaries cover GPS, speed, duration, and events like harsh braking, speeding, or geofence alerts during trips.
• Vehicle Diagnostic and Monitoring Data: Includes Diagnostic Trouble Codes (DTCs), freeze frame data (engine RPM, speed, temperature at fault), health and emissions monitoring, and activation of warning lights (e.g., check engine, ABS).
• Event Notifications: Alerts for events like crash detection or theft, sent through the eConnect system.
• Collision and Accident Data: Includes time, location, severity, direction, raw sensor or CAN data from collision events, and detailed records such as timestamps, impact forces, and airbag deployment.

Home Charger Data

• Device & Operational Status: Data collected for monitoring charger condition, firmware, and security.
• Charging Sessions & Energy Data: Information used to record charging events and track energy usage.
• User Access & Authorization: Data gathered to handle user identification and access permissions.
• Charging Profiles & Configuration: Data associated with setting, scheduling, and managing charging parameters

Related Service Data

• Use of services like navigation history and remote control.

Metadata

• Timestamps, measurement units, and other contextual data.

Please note that a more detailed data catalogue of data generated by your Connected product can be found in the Toyota data sharing platform (EDA Portal).

¹ CAN bus: Controller Area Network communication system for transfer of information between electronic control units (ECUs) in your vehicle. 

² DCM: Data Communication Module providing connectivity to your vehicle.

4.   General Data Collection and Retention Period Summary

• Connected Vehicles: Typically, between 10-800 MB/month depending on features and frequency. (basic connected services 10mb a month- full package 800mb per month)
• EV Home Chargers: Typically, between 600KB/day (two 1-hour long charging sessions within 24 hours) to 2.8MB/day (charger is active and charging overnight from 23:00 to 07:00, then again from 12:30 to 14:50, and from 16:00 to 18:00).

5.   How to Access Your Data

You can request access to your data through the European Data Access (EDA) portal in your customer portal. The data will be provided:

• Free of charge.
• In a structured, commonly used, machine-readable format.
• As complete and accurate as reasonably possible.

We may require basic verification to confirm your identity or authorisation. See the Terms and Conditions for Third-party Recipient of our European Data Access (EDA) portal for more details.

6.   Sharing Data with Third Parties

You may authorise a third party (e.g. a repair shop or insurance provider) to access your data.

• We will only share data with third parties upon your explicit request.
• Third parties must use the data only for the agreed purpose and protect its confidentiality.
• Trade secrets and personal data will only be shared where legally permitted and with appropriate safeguards.

See the Terms and Conditions for Third-party Recipient of our European Data Access (EDA) portal for more details.

7.   Limitations and Safeguards

• We do not share personal data of others without their consent.
• We may withhold data if sharing would compromise the safety of our Products or of their users or disproportionately compromise our trade secrets.
• We apply technical and organisational measures to protect your data.
• You may not use the data to develop competing products or services.

See the Terms and Conditions for Third-party Recipient and User of our European Data Access (EDA) portal for more details.

8.   Data Retention

Data is retained in accordance with our Connected Services Privacy Notice. Retention periods vary depending on the type of data and applicable legal requirements.

9.   Questions or Complaints

If you have concerns about your data rights or how your data is handled, you may:

• Contact your local dealer or our support team via the  app or website.
• Lodge a complaint with the authority responsible for enforcement of the EU Data Act in your country: Office of the Commissionaire for Personal Data Protection, Kypranoros 15, Nicosia 1061 , Cyprus.