Data processed by the RouDem
This page describes the data a RouDem unit processes and sends to MiWire in the course of providing the service. It complements Communications, which lists the connections.
Data categories
Section titled “Data categories”| Category | Examples | Why it is processed | Sent to |
|---|---|---|---|
| Unit identity | IMEI, serial number, hardware type, firmware version, device certificate | To identify the unit to MiWire’s services and to manage its firmware and subscription | All MiWire services |
| Position | GPS coordinates, heading of the antenna, position of the serving cell tower | To point the antenna, to show the unit’s position and coverage in MiWire’s management system, and to support the customer | MiWire data collector, status channel; TrackWire if ordered |
| Connection quality | Signal strength and quality, serving cell and neighbouring cells, operator, technology (4G/5G), link state of the LAN port | To operate and support the connection and to choose the best tower | MiWire data collector, status channel |
| Data usage | Bytes sent and received per day and per month | To administer the data plan and to inform the customer of usage | MiWire data collector |
| SIM and subscription | ICCID, IMSI, selected SIM slot or eSIM profile, APN and its credentials | To administer the subscription with the mobile operator and to restore the configuration when supporting the unit | MiWire data collector (credentials in a vault with restricted access) |
| Security events | Logins to the web interface and over SSH (user name, source, success or failure, and for MiWire staff the name on their access certificate), configuration changes, firmware updates, service switches, certificate renewals, support tunnel state | To detect misuse of the unit and to give an account of MiWire’s own support access (CRA Annex I 3(k)) | MiWire data collector |
| Local network | The names of devices with a DHCP lease are used on the unit only; one specific device name (the MiWire control unit on vessel installations) is reported so that MiWire can confirm the installation is complete | To operate the local network and the installation | Only the control-unit name is sent |
The unit does not inspect, record or send the content of the traffic of the devices on the LAN. Packet capture tools are not present in the production firmware.
The web interface password set by the customer is stored on the unit in hashed form. A copy of the initial password printed on the label is held in MiWire’s credential vault so that support can help a customer who has lost the label; a password changed by the customer is reported to the vault in the same way. Legal review pending on the wording of this paragraph.
Retention
Section titled “Retention”| Data | Kept on the unit | Kept by MiWire |
|---|---|---|
| Statistics, position, connection quality, data usage | Rolling counters; usage history for the current and previous period | pending: retention period to be confirmed |
| Security events | In memory only until uploaded (at most one upload interval); lost at power loss, flushed before a planned restart | 12 months, then deleted |
| SIM and subscription data, credentials | For the life of the configuration | For the duration of the subscription |
| Device certificate and keys | On the unit, until replaced or the unit is reset | Certificate records for the life of the unit |
What the customer can switch off
Section titled “What the customer can switch off”- Security event upload: on the Services page in the web interface. When off, the unit stops uploading security events; MiWire then cannot provide the account of support access described above.
- SNMP agent: can be switched off there as well (it is off unless MiWire enabled it for you).
- Statistics upload and device management cannot be switched off by the customer, because MiWire needs them to administer the subscription, deliver security updates and support the unit. The data sent is listed above.
Deleting the data on the unit
Section titled “Deleting the data on the unit”See Factory reset and decommissioning.
Contact
Section titled “Contact”Questions about personal data processed by MiWire: pending: data protection contact to be filled in.