SHINSHO CORPORATION

SHINSHO CORPORATION
image

Notice on Processing of Personal Information Collected within the EEA

Shinsho Corporation (the“we”) collect and process your certain personal data to whom those regulations apply in accordance with the applicable EU and EU Member States’ regulations on data protection, in particular the General Data Protection Regulation 2016/679 (the “GDPR”). We explain how we, as the data controller, process your personal data. If you have any questions or troubles, please fe el free to contact us.

1. Name and contact details of the data controller and the contact window of data protection matters

Shinsho Corporation, General Affairs Department
(Tokyo Head Office:7-2, Kyobashi 1-chome, Chuo-ku, Tokyo 104-8389, Japan)
Phone:(+81)3-5579-5201(+81)3-5579-5201 FAX:(+81)3-5524-5703
URL:https://www.shinsho.co.jp/english/

2. Types of personal data to be processed, purpose of data processing, the source of personal data, legal basis for data processing, and storage of personal data

(1)Types of personal data to be processed
We will process the following data if necessary:

●Name ;

●Private Address;

●Phone number (landline and / or mobile);

●E-mail address, if necessary Fax number;

●Employer or Owner of company;

●Name of Department;

●Title;

●Place of business.

(2)Purpose of data processing
The purpose of processing personal data is as follows:

●to confirm if you are our customer or prospective customer;

●to make necessary communications for business, negotiation, contract, etc. with you and / or maintain a relationship with you;

●to cope with your request / order smoothly;

●to enable us to settle any liability claims from you against us;

●to enable us to track and enforce any claims(payment) from us against you;

●for billing to you;

●to provide services such as construction, maintenance, inspection and repair related to products in our business;

●for entry / exit management of our facilities.

(3)The source of personal data
We will acquire your personal data directly from you or indirectly through third parties such as those stated blow for the purpose of (2) above.

●Public information

●Social media

●Other controller

●Other data subject

(4)Legal basis for data processing
The legal bases for the data processing are as follows:

●You have given consent to the processing of your personal data for one or more specific purposes (Art. 6 par.1 S.1 a GDPR);

●In the event the processing is necessary for the performance of a contract to which you are a party or in order to take steps at the request of you prior to entering into a contract(Art. 6 par.1 S.1 b GDPR);

●In the event the processing is necessary for compliance with a legal obligationto which the we are subject (Art. 6 par.1 S.1 c GDPR);

●In the event the processing is necessary in order to protect the vital interests of you or another natural person (Art. 6 par.1 S.1 d GDPR);

●In the event the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us (Art. 6 par.1 S.1 e GDPR);

●In the event the processing is necessary for the purposes of the legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of you which require protection of personal data, in particular where you are a child (Art. 6 par. 1 S.1 f GDPR).

Examples of cases where legitimate interests are a legal basis for processing include:

 ・Marketing to you (direct marketing)

 ・Customer service to you

(5)Storage of personal data
We will store your personal data digitally for as long as necessary to fulfill the aforementioned purposes for obtaining and processing your personal data and then deleted or destroyed. Specific storage periods are decided based on the following considerations: the purpose for obtaining and processing the personal data; the nature of the personal data; and the necessity of storing the personal data for legal or business reasons.

3. Sharing and disclosure of personal data

Personal data is only shared and disclosed with the following third parties to the extent necessary for purpose of the above processing.

・Our group company

・Professionals such as lawyers, tax accountants, certified public accountants

・Current, past and future employees

・Buyer, supplier

As a result of the aforementioned sharing and disclosure, in some cases your personal data will be transferred to the third countries. The transfer of the personal data from Japan within European Economic Area (EEA) is on the basis of“ an adequacy decision for cross border data transfer within EEA and Japan by the Commission”. The transfer of the personal data to third countries other than Japan and EEA (excluding countries and territories where an adequacy decision by the Commission have been obtained) is conducted by taking necessary measures such as the conclusion of Standard Contractual Clauses. If you wish to receive a copy of documentation related to necessary measures, please inquire using the contact details at the end of this Notice.

Those employees of us who process your personal data are, like us, subject to a strict confidentiality obligation, and the compliance of them is under our constant monitoring. Other persons or companies to whom we consign services of processing your personal data are obliged by us to keep confidentiality in writing, monitored by us to be prevented from beaching the said obligations, and will be punished in the event of a violation by them.

4. Your rights as data subject

You have the following rights regarding personal data acquired and processed by us,

(1)Right to withdraw consent
In accordance with Art.7 par.3 GDPR, you have the right to withdraw your consent against us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The withdrawal only has the consequence that we are not allowed to continue the data processing based on your prior consent for the future.

(2)Right of access
In accordance with Art. 15 GDPR, you have the right to obtain from us a confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, you have the right to access to the personal data and the following information:

●the purposes of the processing;

●the categories of your personal data that are or have been processed;

●the recipients or categories of recipients to whom your personal data is or has been disclosed;

●the envisaged period for storage;

●the existence of the right to request us rectification or erasure of your personal data, or restriction of processing of your personal data, or request to object to such processing;

●the existence of the right to lodge a complaint with a supervisory authority;

●the origin of your data, if they were not collected from you;

●the existence of automated decision-making, including profiling and, if exists, meaningful information about the logic involved in it, as well as the significance and the envisaged consequences of such processing to you.

(3)Right to rectification, right to erasure
In accordance with Art. 16 GDPR, you have the right to ask rectification of incorrect personal data concerning you, or completion of your personal data stored by us, if those are incomplete.
In accordance with Art. 17 GDPR, under certain conditions, you have the right to demand without delay the deletion of your personal data stored by us.
Provided, however, that this does not apply to the extent that processing is necessary:

●for exercising the right of freedom of expression and information;

●for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;

●for reasons of public interest in the field of public health;

●for archival purposes in the public interest, scientific or historical research purposes or statistical purposes;

●for the establishment, exercise or defense of legal claims.

(4)Right to restriction of processing
In accordance with Art. 18 GDPR, you have the right to require the restriction of the processing of your personal data. This applies as far as:

●the accuracy of the data is disputed by you;

●the processing is unlawful, but you opposes the ensure of the data and requests the restriction of their use instead;

●we no longer need the data, but you need the data for the establishment, exercise or defense of legal claims.

(5)Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive your personal data provided to us in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller.

(6)Right to lodge a complaint with a supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you can lodge a complaint with the supervisory authority of your usual place of residence, workplace or our company’s office.

(7)Right not to be subject to a decision based on automated processing, including profiling
In accordance with Art.22 GDPR, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

(8)Right of objection
In accordance with Art.21 GDPR, you have the right to make an objection to the processing, if your personal data is processed based on Art. 6 par.S. 1 e or f GDPR, or your personal data is processed for direct marketing purposes.

If you want to exercise your right to make the above objections, please contact below.

Shinsho Corporation, General Affairs Department
(Tokyo Head Office:7-2, Kyobashi 1-Chome, Chuo-ku, Tokyo 104-8389, Japan))
Phone:(+81)3-5579-5201(+81)3-5579-5201 FAX:(+81)3-5524-5703
URL:https://www.shinsho.co.jp/english/

We represent and warrant that, if you exercise aforementioned rights you have, we will not treat you to your disadvantage nor charge you any cost accrued in connection with such exercise.

January 6, 2020 revision

To the top of the page