World WideZojirushi Corporation (the “Company”) recognizes its important responsibility as a data controller to appropriately handle personal data of the Company’s customers (“you”) who are located in the EU (including the European Economic Area; the same applies hereinafter) or the UK, and will handle such personal data as follows based on the Privacy Policy and the Personal Information Handling Policy.
This “Personal Data Handling Policy (For Customers Located in the EU or UK)” (this “Policy”) applies to the processing of your personal data. If there is any discrepancy between this Policy and any other rules or policies, etc. of the Company, the provisions of this Policy shall prevail with respect to the handling of your personal data.
1. Obtaining Personal Data
The Company may obtain your personal data as stated below:
(1) Information You Provided to the Company.
For example, this may include the following information:
- Contact information, such as name, email address, telephone number, address, post code;
- Payment information, such as credit card information; and
- Inquiries.
(2) Information Collected by Technical Means.
For example, this may include the following information:
- Device information and information regarding terminals, such as cookies and IP address; and
- Information on action history and analytical / speculative information (e.g., country of location).
(3) Information Obtained by the Company from Other Sources.
For example, the Company may collect your personal data from service providers, agents or other generally available sources.
Although you may refuse to provide personal data to the Company, please note that if you do not provide your personal data, there may be cases where the Company is unable to provide you with its products and services, and your use of the Company's website may also be affected.
2. The Company's Service Providers
The Company’s purposes of processing your personal data and the legal basis therefor are as follows:
Privacy Policy Table| Purposes | Legal Basis |
|---|---|
|
|
|
|
|
|
3. Provision of Personal Data
The Company may provide your personal data to the business operators listed below:
(1) The Group Companies
The Company may share your personal data among the Group Companies for the operation of the Company’s business.
(2) The Company's Service Providers
The Company may share your personal data with the following service providers in order for them to perform services on behalf of the Company or to support the Company in providing its products and services to you:
- Infrastructure / IT service providers;
- Payment service providers;
- Professional advisors such as attorneys and accountants; and
- Sales agents
(3) Third Parties Permitted by Applicable Laws and Regulations
The Company may be required to disclose or share your personal data in order to comply with its obligations under applicable laws and regulations (for example, the Company may be required to disclose your personal data to the police, regulatory authorities, governmental organizations, or judicial or administrative authorities).
The Company may disclose your personal data to any third party: (i) if such disclosure is permitted by law and necessary to protect the Company's rights; or (ii) for national security, execution of law, enforcement of the Company's agreements, or protection of your rights or public rights.
(4) Third Parties Related to Organizational Restructuring
The Company may provide your personal data to any third party in relation to organizational restructuring, etc.; provided, however, that such third party shall process your personal data in accordance with this Policy.
4. Transfer of Personal Data Outside of the EU and/or UK
The Company may transfer your personal data to countries or regions outside of the EU and/or UK. Such countries or regions may include, without limitation, Japan and the U.S.
The Company will transfer personal data to third countries only when it takes appropriate safeguards such as using the standard data protection clauses prescribed in Article 46, Paragraph 2 of both the EU General Data Protection Regulations and the UK General Data Protection Regulations (collectively, the "GDPR").
Please contact the Company through the method specified in "8. Contact Information for Inquiries Regarding Personal Data" below when obtaining detailed information such as a copy of any document that is used to protect your information.
5. Management of Personal Data
The Company will strictly comply with the rules concerning the handling of personal data, will handle personal data according to its confidentiality, and will take technical, physical, human and organizational security measures for protecting personal data retained by the Company from unauthorized access, disclosure, alteration or destruction.
6. Exercise of Rights Concerning Personal Data
You have the following rights in accordance with the applicable laws and regulations:
(1) Right of Access
You have the right to obtain confirmation from the Company as to whether or not your personal data is being processed, and, if so, you have the right to request access to such personal data. You also have the right to obtain any copy of your personal data that is being processed.
(2) Right to Request Rectification
You have the right to rectify any incomplete or inaccurate personal data of yours that is processed by the Company.
(3) Right to Request Erasure
You have the right to request the erasure of your personal data that is processed by the Company; provided, however, that this shall not apply if the Company needs to retain such data to comply with its legal obligations, or for the establishment, exercise or defense of legal claims.
(4) Right to Restrict Handling of Personal Data
You have the right to restrict the processing of your personal data if you think that such personal data is inaccurate, the processing of such personal data by the Company is illegal or the Company no longer needs to process such personal data for a specific purpose; provided, however, that this shall not apply if the Company is unable to erase such personal data due to its legal or any other obligations, or the Company otherwise does not wish to erase such personal data.
(5) Right to Data Portability
You have the right to receive, in a structured, machine-readable format, your personal data that you provided to the Company for executing an agreement or based on your consent, and the right to send such personal data to another data controller.
(6) Right to Lodge a Complaint
If the Company's legitimate interest is the legal basis for the Company to process your personal data, you have the right to lodge a complaint regarding such processing based on the grounds related to your specific situation. The Company will comply with your request unless there is an unavoidable just cause that overrides your interests and rights, or there is a need to continue such processing of your data for the establishment, exercise or defense of legal claims.
(7) Right to Withdraw Consent
If you give your consent to the processing of your personal data by the Company, you will have the right to withdraw your consent at any time, free of charge. This will also apply if you do not wish to receive any marketing messages.
In addition, you have the right to make complaints to the supervisory authorities. The supervisory authorities to which you may make a complaint include those in a member state of the EU or the UK where you have your habitual residence or place of work, or in which a GDPR infringement claim may be filed.
If you wish to exercise any of the abovementioned rights, please make contact through the method specified in "8. Contact Information for Inquiries Regarding Personal Data" below. The Company may ask you to present your identification information in order to secure your privacy and safety, and may also ask you to provide additional information if the information retained by the Company is insufficient to comply with your request.
7. Personal Data Retention Period
The Company will retain your personal data for the period necessary to achieve the purposes of use prescribed in this Policy.
When determining the retention period of your personal data, the Company bases its decision on: (i) the length of time during which the Company has had a continuous relationship with you; (ii) whether or not the Company has any legal obligation that must be complied with; and (iii) whether or not there is a need to perform any agreement to which you are a party.
8. Contact Information for Inquiries Regarding Personal Data
If you have any questions or if there is anything unclear regarding personal data, please make contact to the data controller, Zojirushi Corporation (address: 1-20-5, Tenma, Kita-ku, Osaka), using the following or email address:
Please use the "Inquiries form". Please be aware that it may take some time to respond to any inquiry you make during weekends, at the beginning of a week, or during summer holidays or year-end and new year holidays, etc.
9. Cookies
Please see the Handling of Cookies and Other Externally Transmitted Information for the details regarding the use of cookies and similar technologies.
10. Revisions
The Company may revise this Policy as necessary. When using the Company's products or services, please make sure to see the latest version of this Policy.