Huawei Recruitment Privacy Statement

Teamtailor

Dear User,

Personal data you provide in the application form, including those contained within the resume/CV you upload, or that is otherwise collected as part of recruitment, will be processed by Huawei Technologies Research & Development (UK) Limited, a company whose registered office is at 302 Cambridge Science Park, Cambridge CB4 0WG, United Kingdom.

Huawei understands the importance of privacy and is fully committed to protecting your personal data in accordance with all applicable data protection laws and regulations.

Please read carefully the Huawei Recruitment Privacy Statement Teamtailor (the “Statement”) prior submitting any personal data to us.

By applying for a vacancy or submitting your job application, you acknowledge that you have read and understood the following terms and conditions. The Statement explains:

• How we use your personal data

• Legal basis for processing of your personal data

• How we disclose your personal data

• How to access or modify your personal data

• Retention of your personal data

• How we protect your personal data

• How your data is transferred internationally

• How the Statement is updated

• How to contact us

The Statement describes how we process your personal data and confirms our commitment to protecting your privacy, however it may not address all possible data processing scenarios. We encourage you to read the Statement and any related supplementary information.

1 How we use your personal data

Personal data refers to any information that can be used to identify an individual (data subject), either on its own or when combined with other pieces of information.

With regard to the processing of personal data in connection with recruitment, the applicant usually has interest in being able to apply and be eligible for the specific vacancy.

The provision of your personal data is voluntary. Failure to provide your personal data may prevent the invitation of the candidate to the further stage of the recruitment process or it may have impact on the job application processing and the candidate verification result in terms of meeting formal conditions for the recruited position.

Primarily, personal data is collected directly from you. Depending on the nature of the vacancy within Huawei for which you applied, some personal data may be collected from publicly available external or other sources to the extent permitted by applicable legislation.

1.1 Sources and Personal data we collect

1.1.1 Data you provide us with

To submit your application for a specific or prospective vacancy through our dedicated recruitment website and participate in the recruitment process, you need to create a Huawei account or profile. When doing so, you will be asked to provide account information, such as your email address and telephone number.

After setting-up your account, you may apply for the specific vacancy. The data you provide us directly as part of your application includes all data provided in your CV or resume and other personal data that we collect for the purpose of and during recruitment procedure. This data can include:

• Your name and surname, address, postal code, contact information;

• Work experience or other experience, education, qualifications, certificates, transcripts;

• Academic degree, professional titles, and other information required for a specific vacancy and provided by you;

• Background check information, only in cases where we have a legal obligation or a grounded reason for this data processing;

• Information from interviews and phone-screenings, if any;

• Details of the type of career prospective and employment you are or may be looking for, current and/or desired salary and other terms relating to compensation and benefits packages, willingness to relocate, or other job preferences;

• Details of how you heard about the position you are applying for; and

• Any other information you provide to us in support of your application and/or recruitment process (e.g., hobbies, personal interests, driving license).

• Identifying and contacting potential candidates;

• Evaluating candidates for potential employment and making hiring decisions;

• Keeping records relating to recruitment;

• Providing you with more suitable career opportunities at Huawei;

• Identifying candidates for future positions that may become available;

• Making improvements to Huawei’s recruitment process including improving diversity in recruitment practices as well as its recruitment platform;

• Complying with applicable laws, regulations, legal processes or enforceable governmental requests.

If, in addition to the personal data listed above, you choose to provide us with further information and personal data, we will process such information and personal data only to the extent they are relevant for the recruitment process. Providing such additional personal data is voluntary and lack thereof will not affect the recruitment process.

In case you choose to submit your application for a specific or prospective vacancy through a social media platform (e.g., LinkedIn) or other local recruitment websites, you are not generally required to create a Huawei account or profile on Huawei’s recruitment website. In this case, the provisions regarding the Huawei account or profile included in this Statement shall not be applicable to you.

1.1.2 Data we get from your use of our services

When you apply through our dedicated recruitment website, we may collect system and application data from your devices, including the device name, system and application versions, regional and language settings, device version. We may also log your service access time, search query terms and the data stored in cookies on your devices.

1.1.3 Data from third parties

We may obtain data about you from publicly and commercially available sources as permitted by law. We may also collect data about you through third-party social networking services when you do things such as logging in to our websites using your Facebook, LinkedIn or Twitter account, as well us from recruitment agencies that we cooperate with.

Huawei may also use service providers to perform some of the services described above, including for the purposes of the verification and running background/screening checks, as and when applicable.

Social Authentication - Apply with LinkedIn feature

Please note that the recruitment platform allows you to use Social Authentication feature labelled as “Apply with LinkedIn”. This is a form of single sign-on which uses existing information from a social networking service such as LinkedIn with the sole purpose of pre-filling contact information section when you make an application to Huawei. The feature is designed to simplify the procedure for the User and is based on basic information from your social media account such as profile picture, name and surname, email address and mobile phone. In case you use Social Authentication feature, you will be forwarded to the LinkedIn website where you will be asked for explicit authorization to share this limited contact information with Huawei or Teamtailor (the provider of the recruitment platform acting as a data processor on behalf of Huawei). Huawei does not receive any other data from LinkedIn. All data disclosed by LinkedIn on your request is executed via so-called authentication token which is encrypted and Huawei does not receive access to your account nor obtain other information than those mentioned above.

Usage of this function is fully optional. You may use this function if you do not wish to input the contact information yourself. If you decide to use Social Authentication function, please make sure that the contact information pre-filled based on your social media profile is accurate and up-to-date prior sending your application to Huawei. If you use Social Authentication but decide to turn it off prior submitting your application, please close the webpage where you make your application and restart the process – the settings will reset.

1.1.4 Data from internal sources

In some cases, if it is identified that you have shared the same previous employer during the same period as a current Huawei employee, or attended the same university/school, we may request that employee to provide feedback on you.

1.2 Use of your personal data

We collect and use your personal data for the purpose of recruitment, including:

We also process your personal data based on our legitimate interest in connection to our internal statistical analysis on recruitment. It is in Huawei’s interest to develop our recruitment processes and related services to make improvements to Huawei’s application and/or recruitment process including improving diversity in recruitment practice and ensuring that only appropriately qualified staff is offered with career opportunity at Huawei. To the extent possible, we will anonymize your personal data to execute analysis activities.

In case you are offered and accept employment with Huawei, the information collected during the recruitment process will become part of your employment record.

1.3 Collection and use of non-identifiable data

Non-identifiable data refers to data that cannot be used to identify an individual. For example, we may collect aggregated statistics, such as the number of visits to our websites (including the Teamtailor sub-site through which we run recruitment programmes). The aim of collecting such data is to understand how users use our website and job roles. This will allow us to improve our recruitment process and platforms and better satisfy candidate needs. We may, at our own discretion, collect, use, process, transfer or disclose non-identifiable data for other purposes.

We endeavour to keep your personal data and non-identifiable data separate, and use each independently. If personal data is combined with non-identifiable data, it will be treated as personal data.

2 Legal basis for processing of your personal data

We process the Personal Data of candidates for the purposes of the employment relationship, in particular for the decision on the establishment of the employment relationship. It is also in Huawei's legitimate interests to process the Personal Data in order to ensure that the best suited candidate with the required skills, qualifications and experience is offered employment and to fulfill precontractual obligations.

In order to verify the work history of the candidate and assess their suitability for employment, we conduct referencing and, in particular cases, other background checks. In some cases, we may ask the candidate's consent before conducting such background checks; however, we reserve to rely on additional legal grounds for the processing within the context of such background checks even if the Candidate refuses or revokes their consent. The information is collected directly from the Candidate and from third parties such as former employers. We use a third party supplier who provides us with the outcome of the Background Checks (not the underlying data they have collected in the course of the checks). The outcome report is strictly limited to those individuals within Huawei who are involved in the recruitment and selection process and other individuals.

Where we process Personal Data for the purpose of complying with legal or statutory requirements.

The processing for scientific research and statistical purposes in connection with the specific safeguards and derogations in accordance with the UK GDPR.

Processing candidates’ personal data in Huawei's talent pool with regard to future job openings even if an actual application was unsuccessful will be based on the candidate's separate consent.

3 How we disclose your personal data

3.1 Disclosures to authorized partners ("our partners"):

Some of our activities are provided by recruitment, administrative and technological partners acting as data processors. We may share some of your personal data with our processor partners for the purposes of, among other things:

• Delivering better recruitment services and an improved user experience;

• Prevention and remedy of any technical problems, prevention and suppression of activities that are intentionally illegal, contrary to the public order or that are wilfully damaging to any third party's rights and dignity, prevention and suppression of any violation of intellectual property rights as well as confidentiality and integrity of Huawei's data, the security and good technical functioning of its systems and the costs relative thereto, as well as the material protection of all Huawei's resources.

• Where Huawei is required to disclose your personal data in accordance with legal procedures of legitimate government authorities. These authorities include, amongst others, tax, labour and the courts or regulatory authorities.

• Managing issues where your personal data is leaked due to your actions. For example, if you share your username and password with others.

• Managing issues where your personal information is leaked, lost, stolen, or tampered with due to events outside of the normal operation of the recruitment platform. Such events could be caused by things such as data breaches by sub-processors, bugs, hackers, computer viruses, or temporary closure due to government regulations.

Your personal data will be processed on our behalf by, among others, Teamtailor AB, a company incorporated under the laws of Sweden, with its registered address at Östgötagatan 16, 116 21 Stockholm, which is the provider of the recruitment platform.

Your personal data may only be processed for specified, explicit, and legitimate purposes. Our subsidiaries or partners are not authorized to use shared personal data for any other purpose. The processing of personal data in relation to our suppliers is always commissioned by us and the parties will act only on our behalf as data processors. Such processing is always protected with contractual arrangements to ensure that your personal data is processed in accordance with the laws and good data processing practices.

Huawei and its data processors shall establish technological, physical, administrative and procedural safeguards all in line with the industry accepted standards in order to ensure the confidentiality, integrity and accessibility of the personal data processed; prevent the unauthorized use of or unauthorized access to the personal data or prevent a personal data breach.

3.2 Disclosures to affiliates and/or subsidiaries

Huawei is a global company, with presence in numerous jurisdictions. Your personal data may be shared with our affiliates and/or subsidiaries in other jurisdictions, in relation to the purposes described above. For more details about such disclosures, please refer to Section 7 below.

3.3 Disclosures on legal or reasonable grounds

We may disclose your personal data if required by law, legal proceedings, litigation or public and governmental authorities, for example, to government agencies responsible for employment activities. In relation to our statutory obligations the legal basis of processing your personal data is our legal obligation.

In some jurisdictions, your personal data may also be disclosed to transaction parties if we are involved in a reorganization, merger, or insolvency and liquidation proceedings. We may also disclose your data if a reasonable need for this can be demonstrated. For example, to enforce our terms and conditions and to protect our customers.

3.4 Disclosures with explicit consent

In limited scenarios we may share your personal data with other parties after obtaining your explicit approval.

4 How to access or modify your personal data

Under Huawei's terms and conditions, you can manage your personal data, such as your account information, at any time. You should ensure that all personal data you submit is accurate and complete. If you are unable to provide accurate and complete information for any reason or are unwilling to submit the personal data required for a specific position, our recruitment department may be unable to deem you fit for a specific job. This may impede you from concluding an employment/collaboration agreement with us.

As a data subject, you may contact us at any time at www.huawei.com/uk/personal-data-request to exercise your privacy rights or send us a written notice. These rights may be subject to certain conditions, limitations and legal exceptions:

• receive information about the data processing and a copy of the processed data (right to access, Art. 15 UK GDPR);

• demand the rectification of inaccurate data or the completion of incomplete data (right to rectification, Art. 16 UK GDPR);

• demand the erasure of personal data and, in case the personal data has been made public, the information towards other controllers about the request of erasure (right to erasure, Art. 17 UK GDPR);

• demand the restriction of the data processing (right to restriction of processing, Art. 18 UK GDPR);

• receive the personal data concerning the data subject in a structured, commonly used and machine-readable format and to request the transmittance of these data to another controller (right to data portability, Art. 20 UK GDPR);

• object the data processing in order to stop it (right to object, Art. 21 UK GDPR);

• withdraw a given consent at any time to stop a data processing that is based on your consent. The withdrawal will not affect the lawfulness of the processing based on the consent before the withdrawal (right to withdraw consent, Art. 7 UK GDPR);

• lodge a complaint with the UK’s Information Commissioner’s Office if you consider the data processing to be an infringement of the data protection rules. Contact details of the Commissioner can be found here: https://ico.org.uk/make-a-complaint/.

You can also contact our European regional Data Protection Officer (DPO) at:

Huawei DPO Office Hansaallee 205 40549 Düsseldorf Germany or via www.huawei.com/uk/personal-data-request

5 Retention of your personal data

Unless otherwise required or permitted by laws and regulations, we endeavour not to retain your personal data for longer than it takes to complete the recruitment process. If you are hired, your personal data will be stored in our human resource system. Such data may be used for your career development and business purposes. If you are not hired, your personal data will be deleted after a reasonable retention period. For more detailed information about the retention periods applicable, please see the table below:

5.1 Successful candidates:

If your application is successful, your personal data will be retained by Huawei as part of your employee file for the duration of your employment and 7 years after the end of your employment

5.2 Unsuccessful candidates:

If your application is unsuccessful, your personal data will be retained for 6 months after the end of the recruitment process

If your application is unsuccessful for the position you have applied, we may ask if you consent to retain your details in our talent pool. This means we will proactively contact you if suitable vacancies arise. If you decide to withdraw your consent, we will erase your personal data without undue delay, unless there is other legal grounds for the processing. You may grant us with such consent for a period of 2 years after granting us with the consent

5.3 If a dispute would arise between you and Huawei within these time periods, your personal data will be retained until the dispute has been settled or other-wise solved. In such cases, we might disclose your personal data to our legal advisors.

6 How we protect your personal data

We aim to take all reasonable organizational and technical measures to protect your personal data from unauthorized access, disclosure, use, modification, damage or loss. We will continue improving these measures to protect the security of your personal data. For example, we use encryptions to ensure data confidentiality; we use trusted protection mechanisms to protect data from malicious attacks; we deploy access control mechanisms to ensure only authorized personnel can access personal data; and we raise awareness among employees about the importance of protecting personal data through security and privacy protection training sessions. Although we take the utmost care to protect your personal data, please note that no security measures are completely infallible. Huawei will not be legally liable for any unauthorized access, disclosure, use, modification, damage, or loss related to your personal data if Huawei was not at fault. You shall understand and agree that we assume no liability in the following situations:

7 How your data is transferred internationally

Huawei is a company operating worldwide. This means that your personal data may be transferred to or accessed from People’s Republic of China and other jurisdictions outside of the country or region where it was originally collected in relation to the purposes described in this Statement. For any such transfer, Huawei will ensure that your data is adequately protected by all applicable legal and regulatory requirements and will take action to ensure that the data we have collected will be processed in compliance with this Statement and local law. In case the recipient of your personal data is located in People’s Republic of China or other country outside the UK or the European Economic Area (EEA), we ensure the adequate level of protection of your personal data with appropriate safeguards by using standard contractual model clauses approved by the UK’s Information Commissioner.

We may share your data with the recruitment departments of our affiliates or our human resource consultants, who will contact you regarding recruitment.

For selected cases we may also ask for your explicit authorization to transfer personal data across borders, or implement security measures like data pseudonymization and anonymization prior to cross-border data transfers.

8 How the Statement is updated

Huawei reserves its right to update or amend the Statement as required. We will notify you of any changes through various channels. When changes are made to our Statement, we will post the updated Statement on our website. We may also issue you with a separate notice (e.g., email notice) to inform you of any changes to our Statement.

9 How to contact us

You can contact us at www.huawei.com/uk/personal-data-request to get information about Huawei, contact Huawei’s DPO, submit any requests regarding your personal data, exercise your privacy rights, or submit any questions, comments, or suggestions related to the Statement.

We may occasionally update this Statement. When we do, we will revise the "Last updated" date of the Statement. If there are material changes to this Statement or in how Huawei will use your personal data, we will use reasonable efforts to notify you either by prominently posting a Statement of such changes before they take effect or by directly sending you a notification. We encourage you to periodically review this Statement to learn how Huawei is protecting your personal data.