Why data protection matters for 3D models from building photos
Voxelia processes supplied imagery into 3D models, CAD files, BIM inputs, orthophotos and viewer data. Privacy is therefore not only a capture issue. It also affects upload, processing, storage, sharing and delivery.
The European Commission defines personal data as information relating to an identified or identifiable living person. Processing includes collection, storage, organisation, alteration, use, disclosure and erasure. For imagery, upload and photogrammetric reconstruction can therefore be relevant processing steps.
When building photos can contain personal data
A photo of a roof or facade is not automatically personal data. It becomes sensitive when people are visible or when context makes a person identifiable, for example faces, licence plates, name plates, doorbells, private interiors, exact location metadata or time stamps.
The European Commission also notes that pseudonymised or encrypted data can remain personal data if re-identification is possible. Blurring, cropping or stripping metadata can reduce risk, but is not automatically irreversible anonymisation.
| System / dataset | Suitability | Best for | Practical note |
|---|---|---|---|
| Roof surface without people or sensitive surroundings | usually suitable | 3D roof model, PV planning, roof areas, CAD trace | Geometry remains usable while irrelevant edge areas can be reduced for delivery. |
| Facade with passers-by, windows or plates | requires review and masking | orthoplane, facade CAD, damage mapping | Identifiable people, vehicles and private interiors should be masked before broad sharing. |
| EXIF/XMP with GNSS, timestamp and camera data | technically useful, privacy-relevant | photogrammetry, georeferencing, quality review | Keep metadata for reconstruction when needed; reduce it for external delivery. |
Image details to review before upload
Privacy risks usually come from incidental information: a car near the facade, a person on a balcony, a name plate at the entrance or a visible private interior. These details may be irrelevant for geometry but still travel through the project folder.
| Risk scenario | Why it matters | Typical symptom | Countermeasure |
|---|---|---|---|
| Identifiable people | Faces or body features can identify a person | People remain visible in textures, orthophotos or viewers | mask before public or broad sharing; use internally only for the defined purpose |
| Licence plates and name plates | They can become identifying in combination with project context | Plates remain readable in high-resolution imagery | make plates, doorbells and names unreadable before delivery |
| Private areas | Balconies, gardens and windows may reveal private circumstances | Irrelevant edge areas remain in viewer or textures | limit crop, reduce edge areas and review textures before release |
Data minimisation without losing geometry
GDPR principles summarised by the European Commission include purpose limitation, data minimisation, storage limitation, integrity and confidentiality. In photogrammetry, this means preserving the information needed for the technical purpose while avoiding unnecessary personal detail.
Original photos can be important during reconstruction because sharpness, overlap, EXIF/XMP and camera parameters affect model quality. After reconstruction, delivery can often be leaner: CAD lines instead of full texture, an orthophoto crop instead of the full surroundings, or BIM elements instead of raw imagery.
Practical workflow for clients before upload
A good privacy workflow is short, repeatable and tied to the intended planning output.
Define output
Clarify whether you need mesh, CAD trace, orthophoto, BIM, PV model or viewer.
Review imagery
Check people, plates, interiors, names, neighbouring properties and sensitive edges.
Treat metadata deliberately
Keep EXIF/XMP when needed for reconstruction; minimise it for external delivery.
Define masking and crop
Decide what should be masked, cropped or delivered at lower detail.
Document the delivery
Record which raw data was processed and which exports are delivered.
What should remain in a CAD, BIM or viewer delivery
Planning teams do not always need all source images. Derived geometry, point clouds, cropped orthophotos, CAD lines, IFC elements, roof areas or a protected viewer are often enough.
For PV, roof areas, pitch, azimuth, obstructions and shading context matter. For facades, planes, openings, damage zones and scale matter. Personal image details are rarely needed for those outputs.