GDPR Privacy Policy
Exhibit - UK and EEA Privacy Addendum
1.Applicability
This Exhibit applies to Data Subjects located in the EEA or UK (or if EEA or UK data protection law applies).
2.Purposes of processing and legal basis for processing
Suzumo Machinery Group Companies have to have a legal basis to process the data of Data Subjects. For the categories of data listed in section “1.” of the main body of the Global Privacy Policy, we process the data on the following bases to meet the purposes listed in section “2.” of the main body of the Global Privacy Policy:
(1)Personal information relating to customers and trading partners
Purpose of the processing | Lawful basis of the processing |
(a) To provide the products and services (including websites) of Suzumo Machinery Group Companies and perform executive agreements with regard to products and services of Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR) for service provision |
(g) To conduct direct marketing activities, including the distribution of e-mail newsletters and e-mail advertisements |
- Legitimate interest (Art. 6.1 (f) GDPR) |
(d) To develop and improve the products and services (including websites) of Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR) |
(k) To carry out audits, operate the internal reporting system, and to otherwise prevent and deal with unjust acts |
- Legitimate interest (Art. 6.1 (f) GDPR) for appropriate business operations |
(j) To make reports to, make filings with, cooperate with, and carry out procedures for, government agencies, various industry associations, etc. |
- Legal obligation (Art. 6.1 (c) GDPR) for compliance with EEA, EEA member state, and UK laws |
(m) To respond to urgent needs to process personal information to protect important rights and interests, such as human life and human rights, within the scope of applicable laws and regulations |
- Legitimate interest (Art. 6.1 (f) GDPR) for compliance with other laws, including Japanese laws |
(o) For any other purposes necessary in the course of business operations by Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR); however, if another legal basis under Article 6 of the GDPR is communicated, then such legal basis |
(2)Personal information relating to shareholders
Purpose of the processing | Lawful basis of the processing |
(a) To perform tasks related to shares |
- Legal obligation (Art. 6.1 (c) GDPR) for compliance with EEA, EEA member state, and UK laws |
(d) To conduct communication as necessary |
- Legitimate interest (Art. 6.1 (f) GDPR) |
(e) For any other purposes necessary in the course of business operations at Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR); however, if another legal basis under Article 6 of the GDPR is communicated, then such legal basis |
(3)Personal information relating to applicants for employment by Suzumo Machinery Group Companies
Purpose of the processing | Lawful basis of the processing |
(a) For recruitment and screening of applicants for employment by Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR) |
(b) To conclude an employment contract in the event of a job applicant being hired |
- Contractual performance (Art. 6.1 (b)) |
(c) To perform obligations and exercise rights under applicable laws |
- Legal obligation (Art. 6.1 (c) GDPR) for compliance with EEA, EEA member state, and UK laws |
(e) For any other purposes necessary in the course of business operations at Suzumo Machinery Group Companies |
- Legitimate interest (Art. 6.1 (f) GDPR); however, if another legal basis under Article 6 of the GDPR is communicated, then such legal basis |
*List of legal bases
- Contractual performance – we have obligations under our service agreement with customers who are individuals, depending on the nature of the agreement. To fulfil these obligations we have to use the data of Data Subjects.
- Consent – in certain limited cases, we ask for the consent of Data Subjects to use their data.
- Legitimate interest – we process the data of Data Subjects when it is necessary for us to achieve a legitimate business purpose, or where this is necessary for someone else to achieve their legitimate purpose. For information regarding balancing tests for legitimate interests, please refer to the contact details in section “11.” of the main body of the Global Privacy Policy.
- Legal obligation – as an organisation, we have obligations to comply with legal, regulatory and other requirements under EEA or UK laws. In certain cases we will have to use the data of Data Subjects to meet these obligations.
3.Overseas transfer of personal information
If we transfer personal information to a country or region outside of the EEA or UK, then the following applies for that transfer. (1) If it is to a country that offers an adequate level of data protection, such as Japan, an adequacy decision will be used as the basis for the transfer (click here for information regarding adequacy decisions for transfers to Japan, and click here for information regarding adequacy decisions for transfers to the UK). Additionally, transfers from the UK to the EEA are permitted (click here for details). (2) If it is to a country that does not offer an adequate level of data protection, we will establish appropriate safeguards through entry into standard contractual clauses approved by the country that the personal data will be delivered to and by the European Commission (Art. 46. 2 (c) and Art. 46.5) and UK addendums to those clauses approved by the UK government. However, as an exception, (3) the basis might also fall under a specific situation described in Article 49 of the GDPR. For further details regarding our justification of the transfer of personal information of Data Subjects, or for copies of relevant documents, please contact us using the contact details in section “11. Contact details)” of the main body of the Global Privacy Policy.
4.Rights of Data Subjects
Each Data Subject has the right to do the following: ask us for a copy of the Data Subject’s personal information; ask us to correct, delete, or restrict processing of the Data Subject’s personal information; and request to acquire from us the personal information the Data Subject provides in a structured, machine-readable format. Each Data Subject also has the right to object where we are processing the Data Subject’s data for direct marketing.
In addition, a Data Subject can object to the processing of the Data Subject’s personal information in some circumstances (in particular, where we don’t have to process the information to meet a contractual or other legal requirement). Where we have asked for the consent of a Data Subject, the Data Subject may withdraw consent at any time. If a Data Subject asks to withdraw the Data Subject’s consent to our processing of the Data Subject’s information, this will not affect any processing which has already taken place at that time. When a Data Subject exercises the Data Subject’s rights, we will ask for information to check the Data Subject’s identity; this will only involve official ID documents if this is necessary given the risk posed by the data processed.
These rights may be limited, for example if fulfilling a Data Subject’s request would reveal personal information about another Data Subject, or if a Data Subject asks us to delete information which we are required by law or have compelling legitimate interests to keep. If a Data Subject has unresolved concerns, that Data Subject has the right to complain to a data protection authority. In the UK, this will be the Information Commissioner. In the EEA, this will be the Data Subject’s Data Protection Authority which can be found here.
Last Updated: February 26, 2025
3.個人情報の取得と利用目的
当社による個人情報の取得、利用等については以下の通りです。
(1)個人情報の取得
当社は事業の運営に必要な範囲で、お客様や応募者等に係る個人情報を本サイトから取得することがあります。
(2)個人情報の利用目的
当社は当社が取得した個人情報について、法令で定める場合又は本人の同意を得た場合を除き、以下に定める利用目的の範囲を超えて利用することはありません。
- 営業活動およびマーケティング活動
- 製品、メンテナンス、展示会、セミナー、イベント、キャンペーン等の情報提供
- 採用活動
- その他事業に付帯関連する業務
(3)個人情報の提供等
当社は、法令で定める場合を除き、本人の同意に基づき取得した個人情報を、本人の事前の同意なく第三者に提供することはありません。なお、本人の求めによる個人情報の開示、訂正、追加若しくは削除又は利用目的の通知については、法令に従いこれを行うとともに適切な対応を致します。
4.個人情報の取扱いの改善・見直し
当社は、個人情報の取扱い及び管理体制に関する点検を実施し、継続的に改善、見直しを行います。
5.個人情報の廃棄
当社は、利用目的や必要性が失われた個人情報を消去又は廃棄するものとし、外部流失等の危険を防止するために必要かつ適切な方法で行います。
6.お問い合わせ先
本サイトまたは個人情報の取扱いに関するご相談は、以下までお問い合わせください。
〒164-0001 東京都中野区中野4-10-1(中野セントラルパークイースト6階)
鈴茂器工株式会社 経営企画部
TEL 03-3993-1396
タブレット用アプリケーションプライバシーポリシー
1.定義
当社は、当社の提供する「タブレット用アプリケーション」(以下「本アプリという」)の利用者に関する個人情報を含んだ情報(以下「利用者情報」という)の取扱いについて、以下のとおりプライバシーポリシーを定めます。
2.個人情報保護方針
当社は、当社が取得した個人情報の取扱いに関し、個人情報保護法(正式名「個人情報の保護に関する法律」)、個人情報保護に関するガイドライン等の指針、その他個人情報の保護に関する関係法令を遵守致します。
3.個人情報の安全管理
当社は、個人情報の保護に関して、組織的、物理的、人的、技術的に適切な対策を実施し、当社の取り扱う個人情報の漏えい、滅失又はき損の防止その他個人情報の安全管理のために必要かつ適切な措置を講ずるものとします。
4.収集する利用者情報、利用目的
本アプリのご利用に際して、当社が利用者情報を取得することはありません。
5.利用者情報の開示、提供
当社が利用者情報を第三者へ開示、提供することはありません。
6.制定
本プライバシーポリシーは改定されることがあります。
本アプリのバージョンアップに伴って、利用者情報の取得項目の変更や追加、利用目的の変更、第三者提供等について変更がある場合には、ダウンロード前に通知し、重要なものについてはインストール前もしくはインストール時にあらためて同意を取得させていただきます。
7.お問い合わせ
本アプリにおける利用者情報の取扱いに関するご相談は、以下までお問い合わせください。
鈴茂器工株式会社 経営企画部
TEL 03-3993-1396
8.制定日・改定日
2022年4月1日制定