Wayve Recruitment Privacy Notice
Date: January 2025
Wayve Technologies Ltd, Wayve Technologies Inc and their affiliates from time to time (together, “Wayve” or “we”) are committed to protecting the privacy and security of your personal data.
This notice applies to potential applicants going through a recruitment process with Wayve (“you”). It is important that you read this notice so that you are aware of how and why we are using your information.
This privacy notice describes how we collect and use your personal data during the recruitment process, in accordance with the UK Data Protection Act 2018, the UK General Data Protection Regulation, the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020, and its implementing regulations (collectively, the “CCPA”), and other applicable laws (“Data Protection Laws”) and applies to all candidates.
If you apply for a position through our website, please note the website terms and conditions shall also apply.
What personal data does Wayve collect?
If you apply for a position with Wayve yourself, we will collect, store, and use personal data that you provide during your application including data that may be considered as sensitive or special category data under certain Data Protection Laws revealing racial or ethnic origin, religious or philosophical beliefs, disability status, and sexual orientation, should you choose to provide such data. Please note that you are not required to provide such sensitive or special category data. If you are hired, we may require certain other forms of sensitive or special category data, such as a social security number for positions based in the United States, and we may ask for other sensitive or special category data as set forth in the section “How and why we use your personal data” below.
If you apply via a recruitment agency or another third party, they will provide us with personal data about you as needed for the application process. This will include your personal details (name, contact details, CV and cover letter), as well as data revealing age, racial or ethnic origin, religious or philosophical beliefs, disability status, and sexual orientation, should you choose to provide such data.
We also require your national identification documentation in order to conduct right to work checks in your respective jurisdiction.
If you visit our premises as part of your recruitment process, we may also capture images of you on our CCTV systems.
If you are applying for a safety-critical role (such as a Vehicle Safety Operator) and you are successful in obtaining a conditional offer, we will also ask you to complete a health questionnaire to assess your suitability for the role.
You are responsible for the personal data you provide or make available to us and all personal data you provide must be truthful, accurate and not misleading in any way. You may not provide information that is obscene, defamatory, infringing, malicious, or that violates any law.
If you provide references or if an individual referred you for a position (including current Wayve personnel), we may receive information about you from such third parties. You are responsible for providing any notices and obtaining any consents necessary for us to collect and use personal data of your references as described in this notice.
How and why we use your personal data
| Data | Purpose | Legal Basis |
|---|---|---|
| Name, contact information, CV, cover letter, education and employment history, salary information, references, publicly available information such as your LinkedIn profile ("Identifiers" and "Professional and employment related information" under the CCPA) | Recruitment process | Taking steps at the request of the data subject (you as the applicant) prior to entering into an employment contract with you |
| CCTV Images of you if you visit our premises ("Visual information" under the CCPA) | Security of our premises | Our legitimate interest to maintain the safety of our colleagues and our property |
| Immigration status and right to work ("Characteristics of protected classifications" information and "Sensitive personal information" under the CCPA) | Checking your eligibility to work and any visa sponsorship requirements | Our legal obligation |
| Information concerning any disability ("Sensitive personal information" under the CCPA) | As required to make adjustments to the application and interview process | Your consent |
| Optional diversity questionnaire data (race, gender, age, ethnicity, disability data, sexual orientation, religion, veteran status - as applicable in your jurisdiction) ("Characteristics of protected classifications" information and "Sensitive personal information" under the CCPA) | Diversity monitoring on an aggregated basis | Your consent |
| Health questionnaire data (information about health conditions that may impact your role) ("Sensitive personal information" under the CCPA) | If applying to a safety-critical role (such as a Vehicle Safety Operator), to assess suitability for role | Taking steps at the request of the data subject (you as the applicant) prior to entering into an employment contract with you. As this data constitutes special category personal data, we process this for the purpose of assessing your working capacity, under the supervision of a medical professional |
Your personal data will be processed internally by our hiring managers, administrators and HR and third-party screening and recruitment platforms and administrators Wayve engages for employment, administrative and management purposes. We may also disclose your personal data to other companies in our group.
For candidates who choose to complete our optional diversity questionnaire, that data will be used only in the aggregate, i.e., it will be grouped with other data and will not indicate any individual person’s responses. Wayve is an equal opportunity employer and this data will be used for opportunity monitoring or legal compliance purposes. There is no requirement for any candidate to answer our demographic questions and this data is not used for decision-making in our recruitment process.
Where you have given your consent to the processing of your personal data, you may subsequently withdraw your consent at any time. You are also entitled to access and seek correction to that data – please see the section entitled ‘Access to your data and other rights’ below for full details on how to do so. You can contact us with any such requests by emailing [email protected].
How long do we keep your personal data?
If you are hired, your data will be kept on your personnel file subject to our Employee Privacy Notice. If you are not hired, your data will normally be retained for 24 months after you have been informed that you were unsuccessful, unless we have another valid reason to retain the data, such as a legal obligation or dispute. Any CCTV images of you at our premises are deleted after a short period in line with our building security policy.
Recipients of data and transfers of personal data (including outside the European Economic Area (‘EEA’))
We may transfer your personal data within and outside the EEA to our subsidiaries, including our US entity, Wayve Technologies Inc., and other processors who provide us services in connection with the recruitment process. This may involve service providers and Wayve entities situated in the UK and the USA. Where necessary, such transfers are covered by standard data protection clauses, an adequacy decision or an intra-group transfer agreement.
If we extend you a conditional offer of employment for a safety-critical role (such as a Vehicle Safety Operator), you will be asked to complete a health questionnaire, which will be reviewed by our third-party occupational health provider, Everwell, based in the UK.
If you would like to enquire about the relevant safeguard for transfering your data outside the EEA, please contact us at [email protected].
Contact details
The Wayve entity you are applying to will be the data controller of your information. Our contact details are as follows:
We have appointed an external data protection officer (DPO), Mishcon de Reya LLP, who may be contacted at [email protected].
Access to your personal data and other rights
Access: You have a legal right to access the personal data we hold about you, including the specific pieces of personal data we hold. If you exercise this right and we hold personal data about you, we are required to provide you with information, including a description of the personal data, and an explanation of why we are processing it. If you make a subject access request and there is any question about who you are, we may require you to provide information from which we can satisfy ourselves as to your identity.
Other rights: As well as your subject access right, you may have a legal right to have your personal data rectified (corrected) or erased, to object to its processing, to have its processing restricted (including with regard to processing of sensitive data), to have your data transferred to a third party, and the right not to receive discriminatory or retaliatory treatment for your rights.
Withdrawal of consent: Where we process your data based on consent, you may withdraw consent at any time. If you do so that will not affect the lawfulness of our processing before you withdraw consent.
Please note that these rights are not absolute and may be subject to exceptions.
Complaints
If you have complaints relating to our processing of your personal data, you should raise these with our Talent team ([email protected]) in the first instance, as well as with Wayve’s data privacy team by emailing [email protected]. You may also raise complaints with the relevant statutory regulator.
Statutory Regulators
The statutory regulators that enforce and oversee data privacy regulations in the regions in which Wayve operates are as follows:
UK: Information Commissioner’s Office – For contact and other details see: https://ico.org.uk/ICO
Scope
This notice does not form part of any contractual relationship between Wayve and you as a job applicant. This notice can be changed at any time.
Additional Information for California Residents
We may collect (and may have collected during the 12-month period prior to the Date above) the categories of personal data for the purposes set forth above in “How and why we use your personal data.”
To the extent we process deidentified information, we will maintain and use the information in deidentified form and will not attempt to reidentify the information unless permitted by applicable law.
Sources of Personal Information
During the 12-month period prior to the Date above, we may have obtained personal data about you from the categories of sources identified in the section “What personal data does Wayve collect?”
Sale or Sharing of Personal Information
We do not “sell” or “share” your personal data as defined by the CCPA.
Disclosure of Personal Information
During the 12-month period prior to the Date above, we may have disclosed the categories of personal data set forth in “How and why we use your personal data” to recipients as provided in “Recipients of data and transfers of personal data (including outside the European Economic Area (‘EEA’))”.
Your California Privacy Rights
As a resident of California, you have certain rights under the CCPA, namely:
- Right to Access/ Know – You have the right to request any or all the following information relating to your personal data that we have collected and disclosed in the last 12 months, upon verification of your identity:
- The specific pieces of personal data we have collected about you.
- The categories of personal data we have collected about you.
- The categories of sources of the personal data.
- The categories of personal data that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed.
- The categories of personal data we have sold or shared about you (if any), and the categories of third parties to whom the information was sold or shared; and,
- The business or commercial purposes for collecting the personal data.
Exercising your rights
If you wish to exercise your California privacy rights, please contact us at [email protected] or [email protected]. Please specify in your email which right(s) you are seeking to exercise.
If using an authorized agent, we may require written proof of the agent’s permission to make a request on your behalf and verify your identity directly.
Verifying Requests
To help protect your privacy and maintain security, we will take steps to verify your identity before granting you access to your personal data or complying with your deletion or correction request. If you have an account with us, we may verify your identity by requiring you to sign in to your account. If you do not have an account with us and you request access to, correction of or deletion of your personal data, we may require you to verify your email address or phone number in our records and/or provide any of the following information:
- Contact information (such as name, email, phone number, and address); and
- An indication of your prior contact with Wayve.
We cannot respond to your request if we cannot verify your identity or authority to make the request.
In addition, if you ask us to provide you with specific pieces of personal data, we may require you to sign a declaration under penalty of perjury that you are the consumer whose personal data is the subject of the request.
To the extent permitted by applicable law, we may charge a reasonable fee to comply with your request.
Our Response
Once we have verified a request, where required, we will confirm receipt of the request within 10 business days and explain how we will process the request. We will make our best effort to respond to a verifiable consumer request within 45 days of its receipt. We may require an additional 45 days (for a total of 90 days) to process your request, but in those situations, we will provide you a response and explanation for the reason it will take more than 45 days to respond to the request. Our responses will include required information under the CCPA.
