The policy on the protection of personal data subject to the GDPR (hereinafter referred to as “This privacy policy”) applies only to the handling of personal data subject to the “REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC〔General Data Protection Regulation” (hereinafter referred to as the “GDPR”)〕.
For personal data subject to the GDPR (including such regulations if there are any applicable EU-laws or EU/EEA member state legislation for personal data protection), the Company treat personal data appropriately in accordance with the GDPR.
IRISO ELECTRONICS EUROPE GmbH
Address: Zettachring 10, 70567 Stuttgart-Fasanenhof, Germany
TEL:49-711-451049-0
FAX:49-711-451049-70
The Company will handle the personal data of customers, shareholders, and employees (including job applicants and retirees, etc.) (hereinafter collectively referred to as the “Customers, etc.”) as required for the purpose stated in “4. Purposes of Use of Personal Data and Legal Evidence of Its Handling” (hereinafter referred to as “Legal Evidence”). This data includes the following personal data:
(1) Basic information
Name, address, telephone number, e-mail address, employee information (your company name, department, position, address, telephone (fax) number, etc.), gender, bank account information, etc.
(2) Transaction information
Records pertaining to transactions with the Customers, etc.
(3) Information collected on websites etc.
Access logs to the website of the Company (IP addresses, Cookie, etc.)
(1) Purposes of Use of Personal Data
The Company will handle the personal data of the Customers etc. appropriately within the scope of the following objectives.
(2) Legal basis for the handling of personal data
The Company treats the personal data of the Customers, etc. based on any of the legal grounds set forth in Articles 6 and 7 of the GDPR. The Company also treats personal data that require special consideration, such as the union membership, religious opinions, and health conditions of the Customers etc., in accordance with the standards stipulated in Articles 9 and 10 of the GDPR.
(3) The Company will identify the personal data of the Customers, etc. for the above purposes, treat such data for clear and legitimate purposes, and notify the Customers, etc. if the Company treats such data in other ways which are not compatible with those purposes.
The Company has legitimate interests in the handling of personal data in order to provide services and products to the Customers, etc. and to manage the businesses and employees of the Customer.
The Company may disclose or share the personal data of the Customers, etc.to the following third parties. Also, if the Company discloses or shares the personal data of the Customers, etc. to data processors, the Company establishes an appropriate legal framework (Articles 26, 28 and 29 of the GDPR).
(1)Corporate affiliates
The Company may share the personal data of the Customers, with all corporate affiliates. (URL:/en/company/office/)
(2) Integration and Abolition of Various Enterprises
In the event of a corporate merger, corporate reorganization or civil rehabilitation, acquisition, joint venture, transfer, sale or disposition (including in connection with any bankruptcy or similar proceedings) of all or any portion of the Company’s business, the Company may transfer any personal data to the relevant third party.
(3) Service provider
The Company may share the personal data of the Customers, etc. with companies that provide the Company with a variety of services including hosting, maintenance, support services, e-mail services, marketing, auditing, handling the orders of the Customers, etc., payment processing, data analyses, providing customer services, conducting customer surveys and satisfaction surveys, etc. The Company may currently share the personal data of the Customers, etc. with service providers.
(4) Compliance
When compliance with the EU law or the laws and regulations of EU/EEA member states is required, the personal data of the Customers, etc. may be disclosed or provided to the parties stipulated by authorities or laws.
In the event that the personal data of the Customers, etc. is transferred to countries or regions outside the EU/EEA, the Company will transfer the personal data of the Customers, etc. upon concluding standard contractual provisions or standard data protection provisions as appropriate protection measures in accordance with the provisions of the GDPR and applicable laws and regulations of EU/EEA member states (Article 44 et seq. of the GDPR).
The Company will store the personal data of the Customers, etc. for the time necessary to comply with our legal obligations or to ensure that appropriate services are provided.
(1) In the event of a request from an individual or an agent with regard to the retained personal data, The Company will respond to the request in the ways as follows according to the GDPR.
By declaring the intention to this privacy policy, the Customers, etc. have agreed to the Customers’ handling of personal data, and the Company will handle the personal data of the Customers, etc. in accordance with the consent of the Customers, etc.’. However, the Customers, etc. may withdraw such consent at any time.
The Customers, etc. may file an objection with supervisory authorities in the event of any objections regarding the Company’s handling of the personal data of the Customers, etc. or in the event of any objections regarding how the Company handles the personal data of the Customers, etc..
The provision of personal data is neither a legal or contractual requirement nor a requirement for the conclusion of a contract, unless a separate contract has been entered into between the Customers, etc. and the Company. The Customers, etc. are not obligated to provide personal data. However, if the Customers are unable to provide personal data, the Company may not be able to respond to inquiries, etc.
The Company may analyze access logs on the Company’s site, but the Company does not use the provided personal data for automated processing (including profiling) to analyze and predict the personal preferences and actions of the data subject, or make decisions that may have a legal impact on the data subject.
The Company may use the cookies and similar technologies for provision of services. These technologies will help the Company understand the usage situations of services and contribute to the improvement of services. Users who wish to invalidate cookies can invalidate the cookies by changing the web-browse setting. However, the invalidation of the cookies may cause you to be unable to use some of the Company’s services.
For inquiries about protecting the personal data of the Customers, etc., please send them to the following address.
Contact: Personal Information Protection Section, Human Resources and General Affairs Department, IRISO ELECTRONICS CO., LTD.
Address: 2-13-8, Shinyokohama, Kohoku-ku, Yokohama, Kanagawa ZIP 222-0033, Japan
Telephone Number: +81-(0)45-478-3111
E-mail: somu@iriso.co.jp
(1) The Company may change the privacy policy. Any changes to the privacy policy will be effective at the same time as the revised version of the privacy policy is posted via this website. In the event of any changes that the Company considers as significant, the Company will inform the data subject to the extent possible through this website and, in some cases, ask for the consent of the data subject.
(2) In the event that any provision of the privacy policy conflicts with any law or regulation, such provision shall be replaced by a provision reflecting such intent of the initial provision to the extent permitted by law. In such case, the other provisions shall continue to be applied without change.
26/04/2019