Privacy Statement for IDI Forum 2024

Innovative Data Infrastructure Forum 2024 (hereinafter referred to as “IDI Forum”) is an event operated by Huawei Technologies Duesseldorf GmbH, a company duly incorporated and existed under the laws of Germany, and its registered office located at Hansaallee 205, 40549 Düsseldorf (hereinafter referred to as "Huawei" "we", "us" or "our").

This Privacy Statement gives you information about the personal data we collect about you in relation to Huawei Innovative Data Infrastructure Forum 2024 (hereinafter referred to as "IDI") and how and for what purposes we process your personal data. In Huawei we understand and respect the importance of privacy. This Statement describes how Huawei uses and protects your personal data and how we fulfil our obligations under the General Data Protection Regulation (hereinafter ‘GDPR’) of the European Union. It also contains a summary of your rights in relation to your personal data.

Table of Contents

I． How do we process your personal data and what is the legal basis?

II． How do we retain your personal data?

III． How do we share your personal data?

IV． What are your rights and choices?

V． How to contact us?

VI． Update to this statement

I． How do we process your personal data and what is the legal basis?

1) Event Registration and notification: You can choose to join the IDI Forum and register online. In order to generate a personal account and approve the registration through email for the Participants we need to process the below personal data, without which we can’t properly register you for either the online or offline events:

• register as a business participants for the IDI Forum: after your choice of online or offline participation your Email, Telephone (optional), First Name, Last Name, Country/Region, Company, Job Title, Industry, and relationship with Huawei will be processed. As online participant, you are welcomed to watch the IDI Forum keynote.

This processing is based on performance of contract of providing you the session in the IDI Forum at your choice of participation (Art 6 (1) b) GDPR).

2) Viewing of Livestream or replay: In order to enable you to watch the livestream or replay, we will process your personal data as below:

a) If you just watch livestream without login and interaction, we won’t process your personal data.

b) If you login to watch the livestream or replay, your account personal data including your email, telephone (optional), first name, last name, country/region, company, job title, Industry and relationship with Huawei will be processed.

This processing is based on the performance of contract (Art 6 (1) b) GDPR).

3)Improvement of the Event: in order to better infer the preference of Viewers, verify and improve the quality of webcast contents accordingly, we will analyze the following data of online Viewers:

• If you login to watch the livestream, your personal accounts information accompanied with the field of industry will be processed. We will additionally analyze your session duration, entering and leaving time, IP address, country/ region and device type for the recordings.

This processing is based on our legitimate interest to improve the services provided to our clients, better organization of the current and future marketing events, and promotion of Huawei’s business products and services (Art 6 (1) f) GDPR).

3) Survey: when participating the IDI Forum online or in the offline venue, the viewers will receive pop-up requests of survey or be disseminated the hardcopy of survey relevant to the topics, either about the technologies or about your career planning. If you choose to conduct the survey, your personal account and the registration data connected, including your email, first name, last name, country/region, company, industry, job title, relationship with Huawei and your interested session will be processed with your valued opinions and comments submitted. This processing is applicable for both online and offline participants and based on our legitimate interest to assess the opinions of our customers in order to evaluate the impact of our events, products, technologies or services, with the ultimate goal of developing improved versions of products or assessing the necessity of new products (Art 6 (1) f) GDPR).

5) Marketing Lead based on consent in survey: based on your Survey feedback and your consent therein, we would further contact business participants for workshop, POC or ordering requests. In such cases, your requests connected to your personal account will be needed. This processing is applicable for both online and offline participants and based on your consent (Art 6 (1) a) GDPR).

You can exercise your right of withdrawal through the same contact channel when we contact you or according to section 4 of this statement. Please note this will not affect the personal data that was processed before your withdrawrequest.

6) Electronic Direct Marketing/EDM: after obtaining your consent during the online registration, we will email the promotion contents according to your preferences.

• For business participants, we will process the Email, First Name, Last Name, Country/Region, Company, Job Title, Industry, and relationship with Huawei in order to send you the preferred session links, latest information of products, solutions and services available for your region.

This processing is applicable for both online and offline participants, and is based on your consent (Art 6 (1) a) GDPR).

You can withdraw your consent through the “Unsubscribe” option in any of EDM Email or according to section 4 of this statement. Please note this will not affect the personal data that was processed before your withdrawrequest.

For more details about the EDM activity, please refer to the specific Statement for EDM, where Huawei EU subsidiaries and Huawei Technologies Duesseldorf are joint controllers: https://e.huawei.com/eu/about/privacy/eu-edm/privacy-statement.

7) Onsite management/Access and authentication

In order to ensure safety of the personnel and security of the premises of the IDI Forum, to allow participants to authenticate on-site and to enhance the brand event experience, we will process your registration data based on our legitimate interest (Art 6 (1) f) GDPR).

8) Promotion of the event

Video and photographs of the speakers will be disseminated to channels as specified in the Authorization letter confirmed by you. Legal basis will be your consent (Art 6 (1) a) GDPR). Video shooting or photographs in general about the event / venue will be disseminated globally on our social media channels, presentation, brochures. Summit and Forum video replay clips will be completed in China by our authorized supplier.

The processing activities above do not use any automated decision-making system that may have legal effects on you or similarly affect you.

You have the right to withdraw your consent at any time. Please note this will not affect the personal data that was processed before your withdraw request.

II．How do we retain your personal data?

The security of your personal data is important to us. We use appropriate physical, management, and technical measures to protect your personal data from unauthorized access, disclosure, use, modification, damage, or loss. We are committed to protecting your personal data; however, please note that no security measure is perfect.

The data retain period may vary with scenario and service. After the retention period expires, we will erase or anonymize your personal data, unless otherwise agreed in this Statement or required by laws and regulations.

Scenarios / purposes as described at Section I	Retention period
Event Registration and notification	After 2 years of inactivity
Viewing of Livestream or replay
Improvement of the Event
Survey
Electronic Direct Marketing	Until you withdraw consent, or after 2 years of inactivity
Onsite management/Access and authentication	2 weeks after the event
Marketing Lead based on consent in survey	Until you withdraw consent, or after 2 years of inactivity

Unless otherwise stated hereunder, your personal data will be stored in China, France, Ireland and Germany.

III． How do we share your personal data?

(1) Disclosure out of the EU/EEA.

Scenarios / purposes	Data Disclosure Purpose	Mechanism for cross-border transfer
Marketing Lead based on consent in Survey	The personal data agreed to be processed will be uploaded to our marketing lead platform and the application layer is deployed in France, remotely process your relevant data in China, to have our local affiliates outside of the EU/EEA to coordinate participants on our behalf, we will disclose your data provided for registration.	As a global company, your personal data collected by Huawei may be processed or accessed in EU or in other countries/regions outside EU. Huawei complies with GDPR applicable legal requirements for providing adequate safeguards by incorporating the Standard Contractual Clauses with relevant supplementary measures in such transfer. You can obtain a copy of them here: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en
Promotion of the event	Video and photographs of the speakers will be disseminated to promoting channels as specified in the Authorization letter confirmed by you. Video shooting or photograph in general about the event / venue, will be disseminated globally on our social media channels, presentation, brochures. Summit and Forum video replay clips will be completed in China by our authorized supplier.
Electronic Direct Marketing	While your data is stored in the European Union, the system administrator has access to data stored in Ireland and France for purposes of system administration.

(2) Disclosure within the EU/EEA.