Processing of Personal Data in Relation to GDPR
This section applies only to the processing of personal data covered by the EU’s General Data Protection Regulation (2016/679) (hereinafter referred to as the “GDPR”).
- Purpose of this section
The purpose of this section is to explain how we, as a data controller, process (e.g., collect, use, store, and disclose by transmission) personal data of identified or identifiable natural persons in the EU.
- Contact information
If you have any questions or inquiries regarding this section, please contact our company.
- Legal basis for processing personal data of data subjects
We will use personal data only as permitted by the GDPR and other applicable laws and regulations.
When we process personal data, we do so on the basis of at least one legal basis.
The following is a summary of (a) the purposes for which we use personal data, (b) the types of personal data, and (c) the legal basis for processing personal data.
(a) Purpose of processing personal data
Management of business partners (e.g., communication regarding purchase of products
(b) Type of personal data
Name of the data subject’s business card or email signature, including company name
(c) Legal basis
Consent by the data subject
Transfer of Personal Data
Personal data may be transferred to the following third countries outside the EEA (but with sufficiency certification according to the COMMISSION IMPLEMENTING DECISION (EU) 2019/419)
Duration of storage of personal data
We will retain personal data of data subjects only for as long as is necessary to achieve the purposes for which the personal data is processed. The specific retention period will be determined in consideration of the purpose for which the personal data was obtained and processed, the nature of the personal data, and the legal or business necessity for retaining the personal data.
Rights of Data Subjects
Data subjects have the following rights with respect to their personal data, provided that the requirements of the GDPR and other applicable laws are met
(a) Right to access to personal data: The data subject may receive a copy of the personal data held by the Company and may check the legal status of the personal data.
(b) Right to correct of personal data: Data subjects may correct relevant personal information if it is incomplete or inaccurate. However, we may require proof of the accuracy of the new information that has been corrected.
(c) Right to delete of personal data: If there is no legitimate reason for the Company to continue processing personal data, the data subject may request the deletion of the relevant personal data. However, if there are specific legal grounds for not deleting the data, the data subject’s request may not be complied with.
(d) Right to object to the processing of personal data: Data subjects may object to the processing of the personal data concerned.
(e) Right to restriction of processing of personal data: Data subjects may request that the processing of their personal data be stopped.
(f) Right to data portability of personal data: Data subjects may request that their personal data be received in a structured, commonly used, and machine-readable format or, if technically feasible, that their data be transferred to another controller without hindrance from us.
(g) Withdrawal of the data subject’s consent to the processing of personal data: The data subject’s consent to the processing of personal data may be withdrawn prospectively. If a data subject withdraws his or her consent, this shall not affect the legality of the processing that took place prior to the withdrawal.
The data subject may lodge an objection with the data protection authority of the member state of the data subject’s residence.