GDPR Privacy Policy

The Sanki Engineering Group (hereinafter referred to as the "Company Group") attaches importance to the privacy of its customers and endeavors to protect personal information in accordance with the applicable personal information protection legislation. This GDPR Privacy Policy (hereinafter referred to as this "Privacy Policy") describes the collection and use of personal data in the Company Group. The use of this website is covered by this Privacy Policy.

Moreover, personal data covered by this Privacy Policy are limited to those covered by the EU General Data Protection Regulation (GDPR).

Contents

1. Personal Data to Be Collected
2. Purposes and Method of Using Personal Data Collected
3. Legal Bases for Handling Personal Data
4. Sharing Personal Data with Outside Organizations
5. Security Measures to Protect Personal Data
6. Exercise of Rights Connected with Personal Data
7. Inquiries about Privacy Policy and Handling of Personal Data
8. Access
9. Retention Period
10. Cookies
11. Last Update Date
12. Modification to Privacy Policy

1. Personal Data to Be Collected
   The Company Group may occasionally collect the following personal data:
   
   1. (1)data about contact details provided to the Company Group, including names, occupations, age, user names, addresses, phone numbers, e-mail addresses or other addresses to which messages, company information, and registered data are sent by the Company Group;
   2. (2)related data useful to the Company Group, such as interests in products, contact means, taste in products, languages, taste in marketing, and demographic data, including age and sex;
   3. (3)data about transactions, such as purchase data, the details of inquiries, customer account data, order and agreement data, the details of delivery, invoice and financial data, the details of taxes, transaction and contact histories, and exchange of messages on the Company Group's websites; and
   4. (4)data about security and compliance which are for securing the Company Group's interests, including data for fraud prevention and internal verification as well as image records necessary for the security of the Company Group's facilities.
2. Purposes and Method of Using Personal Data Collected
   The Company Group will use personal data for the following purposes:
   
   1. (1)to carry out customer management, including contact with customers and dealing with orders and requests;
   2. (2)to provide information and updated information about advertising materials for products, services, promotion and the like, as necessary, after the Company Group obtains consent from customers;
   3. (3)to make on-line operation easier in the Company Group as well as to understand ease of use regarding and the performance of the Company Group's websites and to maintain and improve services provided on those websites; and
   4. (4)to carry out business control in the Company Group, including payment transactions, account management, product development, agreement management, corporate governance, audits, and compliance.
3. Legal Bases for Handling Personal Data
   The Company Group will collect and use personal data on the following legal bases:
   
   1. (1)consent;
   2. (2)the performance of agreements; and
   3. (3)legitimate interests within the Company Group's business activities.
4. Sharing Personal Data with Outside Organizations
   The Company Group may occasionally share personal data with the following business partners and third parties.
   
   1. (1)Service providers
      The Company Group may occasionally carry out operations by using third parties, such as marketing firms and IT service providers. In that case, sharing personal data may be occasionally needed in order to provide the services mentioned in Section 2. Shared personal data will be used for initial purposes on the Company Group's instructions.
   2. (2)Legal obligations
      

      Pursuant to the provisions of laws and regulations, the Company Group may occasionally disclose personal data to public organizations connected with law enforcement in compliance with the requirements under laws and regulations, court orders, the requests of governmental organizations or law enforcement organizations (including those falling within requests for national security or law enforcement measures) (including the requests of the governmental organizations and courts of countries in which the Company Group conducts its business).

      To the extent permitted by law, the Company Group may occasionally disclose personal data to third parties (including legal advisers) in order to support the functions of proof, lawsuits or defense to legal claims, exercise of rights, protection of the Company Group's property or other persons' rights, property or safety, external audits, compliance or corporate governance, as necessary.

      The Company Group may occasionally transfer personal data to business entities (recipients) that exist in countries outside the EEA, in which personal data are not appropriately protected.

      In such a case, the Company Group will take steps to ensure that personal data will be protected at an appropriate level (e.g. execution of an agreement containing Standard Contractual Clauses (SCCs)).

5. Security Measures to Protect Personal Data
   

   The Company Group will take technical, physical and organizational measures designed to protect personal data against accidental or illegal destruction, loss or alteration, unauthorized disclosure or access or other illegal use.

   Persons who may access personal data will be limited to those who are permitted to do so, on the basis of the principle of necessary minimum. In addition, the Company Group will take approaches to data security in view of the risks involved in using personal data. The Company Group will continue to apply those approaches to protect personal data while it takes industry standards into account.

   The Company Group will assume no responsibility for the safety of personal data to be sent to other companies' websites linked with this website. When you use such websites, you should verify the privacy policies, the terms of use and the like of the websites.

6. Exercise of Rights Connected with Personal Data
   To the extent of applicable laws, you may exercise the following rights in connection with personal data:
   
   1. (1)the right to voice an objection to the Company Group's collecting, processing or using personal data;
   2. (2)the right to be provided with necessary information when the Company Group collects personal data;
   3. (3)the right to access personal data;
   4. (4)the right to request correction to personal data;
   5. (5)the right to request deletion of personal data;
   6. (6)the right to request restriction of processing personal data;
   7. (7)the right to request data portability in connection with personal data; and
   8. (8)the right to withdraw your consent.

   If you wish to exercise any of the rights mentioned above, please contact the inquiry desk shown at the bottom of the page.

7. Inquiries about Privacy Policy and Handling of Personal Data
   

   If you have any questions about this Privacy Policy or protection or processing of personal data, please contact the inquiry desk shown at the bottom of the page.

   When we receive an inquiry about this Privacy Policy or protection or processing of personal data, we will use personal data only for the purpose of responding to that inquiry.

8. Access
   

   When you access this website and use the Company Group's websites, you will be considered to have understood and consented to the collection, processing, international transfer and use of personal data as mentioned in this Privacy Policy.

   You should verify this Privacy Policy periodically as it is subject to modification without notice.

   To the extent required by law, the Company Group will seek your express consent.

   In addition, you may withdraw any prior consent given by you to a specific purpose of use by voicing an objection to the use of personal data.

   If you wish to voice an objection or to withdraw your consent, please contact the inquiry desk shown at the bottom of the page.

9. Retention Period
   The Company Group will not retain personal data beyond the purpose of obtaining them or the requirements under applicable laws and regulations.
10. Cookies
    

    Cookies mean a function to refer to the contents of small file data sent from a Web server to a customer’s browser and hard disk. Using cookies can make your use of websites more useful by storing data about your use of specific websites. Using cookies is an industry standard, and cookies are used in many websites for the purpose of providing useful functions to customers. In addition, cookies are not a function to identify the individual identity of a customer.

    The Company Group may occasionally use a cookie in the following cases:
    1. (1)where the Company Group revises or discontinues the contents of a website to create a more satisfactory one or provides a service customized for individual customers; and
    2. (2)where the Company Group discloses data to affiliated companies, outsourcees or the like to a necessary extent in using cookies to analyze what services customers are interested in or to distribute effective advertisements on websites.
11. Last Update Date
    This Privacy Policy was last updated on October 1, 2018.
12. Modification to Privacy Policy
    The Company Group may modify or update this Privacy Policy without restricting individuals' rights as mentioned in this Privacy Policy. When the Company Group modifies this Privacy Policy, it will state the update date in Section 11.