What is the purpose of this Privacy Statement?

This Privacy Statement gives you information about the personal data we collect about you in relation to Huawei Technologies Co., Ltd., Huawei Technologies Oy (Finland) Co. Ltd - Research and Development Center, and Huawei Device Co., Ltd. (hereinafter collectively as “Huawei”) and how and for what purposes we process your personal data. Huawei understands and respects the importance of privacy. This Statement describes how Huawei uses and protects your personal data and how we fulfil our obligations under GDPR. It also contains a summary of your rights in relation to your personal data.

Huawei Technologies Oy (Finland) Co. Ltd, (hereinafter as “Huawei Finland”)

Huawei Device Co., Ltd., (hereinafter as “Huawei Device”)

Huawei Technologies Co., Ltd., (hereinafter as “Huawei”)

Registered address:
Läkkisepäntie 23, 00620 Helsinki, Finland

Registered address:
No.2 of Xincheng Road, Songshan Lake Zone, Dongguan, Guangdong, 523808, P.R., China

Registered address:
Bantian Huawei Base, Longgang District, Shenzhen, 518129, China

Data Protection Officer contact information:

Huawei DPO Office
Hansaallee 205, 40549 Düsseldorf Germany
or via electronic contact form: https://www.huawei.com/en/personal-data-request

All of the controllers undertake to protect your personal data and your rights as data subject. You can contact any controller with regards to the processing activities at https://www.huawei.com/en/personal-data-request.

1. How do we use your data?

Data will be:
1) Collected directly from you.
2) Generated by Huawei, partners or suppliers during/or in connection with research and development activities and technology collaboration in particular
3) Collected from public and commercial third-party sources and sources related previous collaboration

No

1. If the processing is based on your consent, providing the data and giving your consent is voluntary.
2. If the processing is necessary to enter into contract or to fulfil contractual obligations, without your personal data, the corresponding contract cannot be concluded, or a performance of concluded contract can be limited.
3. If the processing is necessary to fulfil legal obligation, it is mandatory to provide the data based on applicable legislation.
4. Providing data is voluntary, but necessary in the case of processing based on a legitimate interest indicated below.

Purpose 1: Performing research and publishing research papers in scientific or non-scientific publications, for product development

We process open-source photos, stock photos, and videos available on the internet or images of publishers.

For academic publications we process name, title, the organization you represent, contact information, picture, biography, previous publications and other information related to research.

Processing is necessary for Huawei’s legitimate interest to perform research and publish research papers to better achieve the technological progress needed for its products and improve the visibility of the research and development at Huawei (Art 6 para. 1 letter f) GDPR)

Examples of applications:
- improvement of the camera algorithm, for better quality photos/videos in all weather/light conditions
-face restoration technology, whichserves the purpose of improving the camera technology and the quality of the software of the camera - Art 6 para. 1 letter f) GDPR.

The research and development results in publications also serve a public interest, meaning that other researchers/scientists may have access to the results and this may lead to overall progress in the field which makes the object of the research (in one case, face restoration technology).

Purpose 2: Performing partner evaluation, and selection for product development and other commercial purposes

For collaborating with researchers, we process general information such as name, contact information, title, position, photo, work and education experience, other experience, and name of the organization.

For collaborating with organizational partners, we process general information such as website, information of laboratories and faculties, records of established cooperation projects and other projects, records of Huawei events, and communication exchange.

For partner evaluation, we process information about the research area, field and research director, capabilities, honors, titles, awards, and achievements.

We have a legitimate interest in evaluating our possible collaboration by processing information about the organization you represent. - Art 6 para. 1 letter f) GDPR.

Processing is necessary for the performance of a contract to which you are party or to take steps at your request before entering into a contract. - Art 6 para. 1 letter b) GDPR.

Purpose 3: Technical communication, events, and conference guests

For collaborating with researchers and organizational partners in events and conferences we process their names, contact and profile information, country, titles, positions, and information of affiliates.

For engaging with conference guests and speakers, we process general contact information, photo and authoritative identification information.

For promotional purposes, we post activity photos and videos in social media and disseminate information in our internal channels and other websites provided by Huawei or Huawei Network. The social media providers are independent controllers.

We have a legitimate interest in collaborating in events and conferences by processing information about you or the organization you represent. Also, for events and conferences we rely on legitimate interest to use photos/videos that may contain your image, but are aimed at showcasing the general atmosphere of the event, to promote the event, not your image particularly, - Art 6 para. 1 letter f) GDPR

Processing is necessary for the performance of a contract to which you are party or to take steps at your request before entering into a contract, when you are speaker or a key participant in a panel/event/interview etc. -Article 6 (1) (b) GDPR.

Purpose 4: Managing contract fulfilment and related legal obligations to which the controller is subject to

To ensure compliance to authorities and in business transactions with partners, we will process information for taxation, accounting, export control, and sanctions prevention.

Processing is necessary for complying with legal obligations defined by EU or national law to which the controller is subject to. - Art 6 para. 1 letter c) GDPR.

Huawei Finland is controller for Purposes 1 and 4, while all the controllers are responsible for purposes 2 and 3.

2. How long and where do we store your data?

We will process your personal data for the validity period of the contract concluded with Huawei and you or organisation you represent as well as for the time required to retain personal data to fulfil business purposes.

For the improvement of the camera algorithms, the data will be retained until the research project is over, then it will be permanently deleted.

The research papers containing personal data available on the internet will also be stored by the publishing company/companies, which are data controllers independent from Huawei. Huawei is not responsible for the processing performed by those third parties.

For technology partner selection and technology cooperation management, the retention period is six (6) years after the event.

For managing technology cooperation resources, the retention period is two (2) years after no contact with the partner.

For managing event resources for conference guests, the retention period is five (5) years after the event.

For managing event guest information on the conference website and communicating technology collaboration achievements in public the retention period is five (5) years after the event.

Event-related activity pictures and videos shared on social media platforms may be stored by a third party, which are data controller independent from Huawei. Huawei is not responsible for the processing performed by those third parties.

Transaction information is retained for at least six (6) years after the end of the year when the transaction was last made.

For communicating with customers, auditors, suppliers, banks, and tax authorities, the retention period is ten (10) years after the data collection or generation.

We can also store the data longer period if we have a legal obligation to store the data or if the storage is necessary to prepare, present, or defend a legal claim in legal proceedings.

3. How do we share your data?

Reason for Disclosure and details on the data recipients and countries of transfer

Mechanism for cross-border transfer

1. IT system providers
2. IT support service providers
3. Storage, hosting, and archiving service providers
4. Communicating technology collaboration achievements in public
5. Other service providers or contractual partners of Huawei.

We disclose this information for Huawei's parent company located in China and its respective subsidiaries and affiliates outside the EU/EEA.

We disclose this information for service providers to process personal data on behalf of us or act as an independent controller, if applicable. Processors may only use your personal data to provide services on behalf of us. If any further processing occurs on their side, it is subject to their own privacy statement and they will be qualified as controllers independent from Huawei

Mechanism 1: When the data are transferred to a third country that does not ensure an adequate level of protection of personal data, Huawei complies with applicable legal requirements for providing adequate safeguards by incorporating the Standard Contractual Clauses with relevant supplementary measures in such transfer. You can obtain a copy of them here: [link for EU Commission standard data protection model clauses]

1. Communicating research achievements in public
2. Publishing and academic platform providers

We disclose this information for Huawei's parent company located in China and its respective subsidiaries and affiliates outside the EU/EEA.

We disclose this information for service providers to process personal data on behalf of us or act as an independent controller, if applicable. Processors may only use your personal data to provide services on behalf of us. If any further processing occurs on their side, it is subject to their own privacy statement and they will be qualified as controllers independent from Huawei

Mechanism 1: When the data are transferred to a third country that does not ensure an adequate level of protection of personal data, Huawei complies with applicable legal requirements for providing adequate safeguards by incorporating the Standard Contractual Clauses with relevant supplementary measures in such transfer. You can obtain a copy of them here: [link for EU Commission standard data protection model clauses]

Reason for Disclosure and details on the data recipients

1. IT system providers
2. IT support service providers
3. Storage, hosting, and archiving service providers
4. Postal operators, courier service providers
5. Central/local public authorities
6. Banks, insurers, and financial institutions
7. Auditors
8. Legal service providers
9. Event organizing agencies
10. Other service providers or contractual partners of Huawei

We disclose this information for Huawei's subsidiaries and affiliates within the EU/EEA.

We disclose this information for service providers to process personal data on behalf of us or act as an independent controller, if applicable. Processors may only use your personal data to provide services on behalf of us. If any further processing occurs on their side, it is subject to their own privacy statement and they will be qualified as controllers independent from Huawei.

4. What are your rights and choices?

You have the right to obtain from Huawei confirmation as to whether or not Personal Data concerning you is being processed and, where that is the case, access to a copy of the Personal Data and specific information about how Huawei processes your Personal Data.

You have the right to obtain from Huawei the correction of inaccurate Personal Data concerning you and also the right to have incomplete Personal Data completed.

You have the right to obtain from Huawei the erasure (deletion) of your Personal Data in particular circumstances.

You have the right to obtain from Huawei restriction of processing in particular circumstances.

You have the right to object to the processing of your Personal Data in particular circumstances, when the processing is based on legitimate interest.

In certain circumstances, you have the right to receive your Personal Data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller. Please bear in mind that the right of portability does not apply in the case of processing personal data on legal obligation or legitimate interests' basis.

Where the legal basis of processing Personal Data is based on consent, you have the right to withdraw your consent at any time by providing a withdrawal notice to Huawei. Please note, however, that the withdrawal of your consent will not affect any use of the Personal Data made before you withdrew your consent.

If you consider your Personal Data is not being processed in compliance with the applicable laws, you have the right to lodge a complaint with any relevant supervisory authority. List of Supervisory Authorities: http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

We encourage you to regularly check for the latest version of this Statement as we may change it from time to time. If we make changes to this Statement, we will notify you by an appropriate method.
Latest update: May 28^th 2025

Version

Publish date/Revised Date

Reason & Remark

V1.0

February 20^th 2024

Initial version

V2.0

May 5^th 2024

Detailed purpose about camera algorithm

V3.0

May 28^th 2025

Small changes to wording.