WeRide | Privacy Notice for Autonomous Driving Commercial Operation

Privacy Notice for Autonomous Driving Operations in EU/EEA

The protection of personal data is our top priority and is integrated into all our business processes. We treat the protection of your personal data seriously and strive to ensure that you feel secure and comfortable during autonomous driving operations.

Autonomous driving operations mean that vehicles equipped with our autonomous driving systems operate on public roads in the European Union (EU) and European Economic Area (EEA) to provide autonomous driving services, and collect and store road video, image and sensor data from the surroundings of the vehicles. In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing by WeRide Mobility, S.L. of your personal data in connection with these autonomous driving operations and your rights in this regard. To ensure that you are fully informed about the processing of your personal data, please take note of the following information:

1. Name and contact data of the Controller

WeRide Mobility, S.L. (Spain)

Address: AVENIDA DOCTOR ARCE 14, 28002, MADRID

E-Mail: privacy@weride.ai

Website: www.weride.ai

2. Purpose of processing

We collect video, image and sensor data during autonomous driving operations to ensure the safe, stable and reliable operation of vehicles equipped with our autonomous driving systems and to continuously develop, test, validate and improve the algorithms and accuracy of these systems. Principally, the video and image data collected are processed to compare whether the autonomous driving systems correctly recognize road information, such as traffic signs, and whether there are vehicles driving or pedestrians passing next to or in front of the vehicle, and to support safe vehicle operation, troubleshooting and incident analysis. In addition, we do not further process the video and image data collected to identify the data subjects.

Important note if you are a passenger

If you have accessed this Privacy Notice in connection with a ride requested through a mobility service or operating platform, the applicable privacy notice of that platform shall explain how the platform processes your personal information. The platform shares with WeRide only limited trip information necessary for WeRide to support the autonomous driving technology used for your ride, such as your pickup and drop-off addresses. WeRide does not otherwise have access to personal information collected or processed by the platform in connection with your ride, including any in-cabin audio and video recordings.

Except for the limited trip information described above, this Privacy Notice covers only the external, road-facing sensor data that WeRide collects from outside the vehicle.

3. Personal data processed

The external sensor data collected by the vehicle during autonomous driving operations may involve the following categories of personal data:

Facial images and movements of pedestrians and other road users within the perception range of the vehicle's external cameras;
License plate numbers and distinctive characteristics of vehicles in the vicinity;
The geographic route travelled by the vehicle;
3D point-cloud data of the surrounding environment captured by LiDAR sensors;
Short acoustic snapshots are used only for road-event detection.

It should be noted that the external sensors may inevitably capture other types and categories of personal data from outside the vehicle during autonomous driving operations. However, please note that we have no intention, nor the technical capability within our system, to identify specific natural persons. Our systems are not equipped with facial recognition or identity tracking functions. The vehicle's sensors are designed to perceive and model the driving environment for the safe operation of the autonomous driving system, not to track or identify individuals.

On-board de-identification: In accordance with the principle of Privacy by Design, we employ state-of-the-art, industry-leading in-vehicle masking technology. Faces and license plates detected in the raw images and video collected during operations are automatically and irreversibly masked in real time within the vehicle before the data is stored or transmitted outside the vehicle. Consequently, the data retained and subsequently used for operational safety, troubleshooting and incident analysis, and for the training, validation and further development of our autonomous driving algorithms is subject to automated and irreversible masking and de-identification measures designed to reduce the identifiability of individuals. While these measures significantly reduce the likelihood of identifying individuals, complete anonymization may not always be technically possible at present. As a result, residual identifiable elements, such as facial images or vehicle license plate information that have not been detected by the automated masking process, may remain present in limited circumstances. We do not use the collected data to identify individuals and continuously review and enhance our masking technology in line with the evolving state of the art to ensure an appropriately high level of data protection.

4. Legal basis of the processing

The legal basis in this case is the legitimate interest as defined in Art. 6(1)(f) GDPR. Our legitimate interests are to support safe, stable and reliable autonomous driving operations, troubleshoot and analyse incidents, and continuously improve our autonomous driving systems. Prior to the processing, we carry out a balancing test to ensure that our legitimate interests are not overridden by the interests or fundamental rights and freedoms of the data subjects.

5. Source of data

The data are collected by external cameras and microphones, LiDAR sensors and other sensors integrated in the vehicles. The limited trip information is provided to WeRide by the mobility service or operating platform through which your ride is requested.

6. Data recipients or categories of recipients

We only transfer masked or pseudonymized data to the following categories of recipients:

WeRide group companies (in EU, EEA, China), on a strict need-to-know basis, for operational safety, troubleshooting, incident analysis and R&D purposes;
Our processors, including entities supporting autonomous vehicle operations or responsible for uploading the data, and providers of cloud storage and data transmission services;
Our cooperation partner in EU and/or EEA and/or China, which receives masked or pseudonymized data for the purposes of supporting operational safety, troubleshooting and incident analysis, and developing, testing, validating, evaluating performance and improving autonomous driving technologies; and
Other recipients, where disclosure is required by law.

The transfer or disclosure of personal data is based, where applicable, on Article 6(1)(f) GDPR.

7. Data Transfer outside the EU/EEA

The data described in this Privacy Notice are stored on Amazon Web Services (AWS) cloud infrastructure in Spain and Germany. In connection with the operational activities described in this Privacy Notice, masked or pseudonymized personal data may be transferred by our processors in the EEA to us in China, where such transfer is necessary for operational safety, troubleshooting and incident analysis, and the development, testing, validation and improvement of autonomous driving systems.

These transfers are carried out in accordance with Articles 44 et seq. GDPR. In particular, the applicable EU Standard Contractual Clauses have been entered into between the relevant data exporter in the EEA and us as the data importer in China. Where necessary, supplementary technical and organisational measures are also implemented to ensure an appropriate level of protection for the transferred personal data.

8. Storage duration

During autonomous driving operations, raw video, image and sensor data are processed and masked in real time within the vehicle and are not retained in their original form. Only the resulting masked or pseudonymized data are stored on the vehicle's hard drives. Once these data have been successfully uploaded to the designated cloud platform, they are deleted from the hard drives without undue delay and, in any event, within one week of the upload.

The masked or pseudonymized data are stored on the European cloud platform for no longer than two years before being deleted, and are deleted earlier once they are no longer required for the purposes described in Section 2. Where transferred to China in accordance with Section 7, they are securely transferred for operational safety, troubleshooting and incident analysis, and the development, testing, validation and improvement of autonomous driving algorithms. The transferred masked or pseudonymized data are retained in China for no longer than two years and are deleted once they are no longer required for these purposes. The retention period in China reflects the long development and iteration cycles of autonomous driving algorithms, the need to maintain historical datasets for safety regression testing, the investigation of rare edge cases and system anomalies, long-term system stability validation, and compliance with potential safety and regulatory audit requirements.

9. Automated decision-making

Automated decision-making within the meaning of Art. 22 GDPR, which has a legal effect on you, does not take place.

10. Your rights as data subject

As a data subject, you have certain rights under the GDPR (Articles 15–22). However, please note that in this case we are not in a position to identify the data subject, and for the purpose of data processing we do not require the identification of a data subject. Therefore, according to the Art. 11 p. 2 GDPR, if you want to exercise your rights as a data subject, please provide us with more additional information to help us fulfill your request. For external sensor data, this may include the date, time, and location where you encountered a vehicle equipped with our autonomous driving systems, as well as your clothing at the time, or other information that would help us locate the relevant data. We use this additional information only to handle your request.

Right to withdraw consent: Since the processing of your personal data described in this Privacy Notice is based on our legitimate interest pursuant to Article 6(1)(f) GDPR and not on your consent, there is no right to withdraw consent under Article 7 GDPR. However, you have the right to object to the processing on grounds relating to your particular situation, as described under "Right to object" below.

Right of access: As the data subject, you have a right to access under the conditions set forth in Art. 15 GDPR. This primarily means that you are entitled to obtain confirmation from us as to whether we process your personal data. If this is the case, you are also entitled to information about these personal data and the information listed in Art. 15 p.1 GDPR. This includes, for example, information about the purpose of processing, the categories of the processed personal data concerned, and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Art. 15 p.1 lit. a, b and c GDPR).

Right to rectification of inaccurate data: As the data subject, you have a right to rectification under the conditions set forth in Art. 16 GDPR. Since video and image recordings are a factual representation of reality at a specific moment, they are by nature "accurate." As we do not process these recordings to create a profile or a biography, rectification typically does not apply to the visual content itself.

Right to erasure: As the data subject, you have the right to erasure ("right to be forgotten") under the conditions set forth in Art. 17 GDPR. This means that you have the fundamental right to obtain from us the erasure of the personal data concerning you without undue delay and that we have the obligation to erase personal data without undue delay where one of the grounds listed in Art. 17 p. 1 GDPR applies. This can be the case, for example, if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. By way of exception, the right to erasure ("right to be forgotten") shall not apply to the extent that processing is necessary on the grounds listed in Art. 17 p. 3 of the GDPR.

Right to restriction of processing: As the data subject, you have a right to restriction of processing under the conditions set forth in Art. 18 GDPR. This means that you are entitled to obtain from us the restriction of processing where one of the conditions listed in Art. 18 p.1 GDPR applies.

Right to object: As the data subject, you have a right to object provided the conditions set forth in Art. 21 GDPR apply. As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art 6 p.1 lit. e or f GDPR.

Right to complain to a supervisory authority: As the data subject, you have a right to lodge a complaint with a supervisory authority on the grounds set forth in Art. 77 GDPR. If you as the data subject believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

To assert your above rights, please send your request to privacy@weride.ai, the E-Mail address given under "1. Name and contact data of the Controller".

11. Changes to this notice

Vehicles equipped with our autonomous driving systems and used in autonomous driving operations display clearly visible markings, including a QR code and/or a shortened URL linking to this Privacy Notice, so that pedestrians and other road users who may come into contact with these vehicles can readily access information about the processing of their personal data.

We may update this notice from time to time. The version and date at the foot of the page indicate when the notice was last changed. Material changes will be highlighted on the vehicle sticker and QR-code landing page for a reasonable period before they take effect.

Version: 1.0

Status: November 2026