Koki Holdings Global Privacy Policy
Introduction
As Koki Holdings Co., Ltd. (" Koki Holdings") states in the “Koki Holdings Group Code of Conduct,” one of our important basic policies is to recognize the importance of personal data and the need to observe applicable laws and regulations governing the protection of personal data, in order to respect human rights and to process personal data in a lawful and appropriate manner.
Based on this background, in addition to creating and maintaining local privacy policies at our respective group companies in accordance with applicable local laws and regulations, Koki Holdings has created this Global Privacy Policy (“Global Privacy Policy”) as set forth below, which explains how Koki Holdings and its group companies (“we,” “us,” or “our”) collect, store, use, disclose and transfer your personal data. To ensure the effectiveness of this Global Privacy Policy, Koki Holdings distributes it to the executives and employees of our group.
In the event of any conflict between this Global Privacy Policy and local laws and regulations and/or the local privacy policies of our group companies (collectively, “ Local Laws”), relevant Local Laws shall prevail.
Collection of Personal Data
We collect personal data in a lawful and appropriate manner. We collect the minimum amount and type of personal data necessary to achieve the purpose(s) for which it was collected.
We collect personal data about you in the following ways:
(a) Collection directly from you
This includes information that you give us through inquiry forms on this website, or in communications with us, whether by email, letter, phone, or otherwise. The information you give us is likely to include your contact information, such as your name, address, e-mail address, or phone number.
(b) Collection indirectly through third parties
This includes information that third parties give us through inquiry forms on this website or through/from our business partners, through staffing agencies or through communications with us, whether by e-mail, letter, phone, or otherwise. The information third parties give us is likely to include your contact information such as your name, address, e-mail address, or phone number.
(c) Collection automatically through the website
When you visit this website, the website automatically collects certain types of data related to you. These types of data include access logs, web beacons (also known as pixels), cookies, etc. These types of data may remain in your computer and continue to collect data.
(d) Collection through publicly available media
We collect information through publicly available media, such as the Internet and social media including Twitter, Facebook, and other services.
Legal Bases for Processing Personal Data
We will process your personal data on the following legal bases unless such data processing would conflict with applicable laws and regulations:
(a) Consent: where you have consented to the processing of your personal data for one or more specific purposes. Subject to limitations under applicable laws and regulations, you may withdraw your consent at any time. Withdrawal of consent will not affect the legality of processing performed based on consent and prior to the withdrawal of the consent.
(b) Contract: where the processing is necessary for the performance of a contract or in order to take steps prior to entering a contract.
(c) Legal Obligations: where the processing is necessary for compliance with legal obligations.
(d) Vital Interest: where the processing is necessary to protect your vital interests or the vital interests of another natural person.
(e) Legitimate Interests: where the processing is necessary for the purposes of legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms. Legitimate interests include:
(i) marketing to customers (direct marketing) without intrusive profiling, (ii) customer service, including product repairs,
(iii) applications for recruitment by us, (iv) CCTV cameras for security purposes.
Purpose of Processing Personal Data
We process your personal data only for the following purposes, and only to the extent that necessary to fulfill the purposes described
below.
For Customers
(a) To communicate about our products and services, including for the purpose of providing and improving our products or services
(Legitimate Interests)
(b) To provide information and communications, in connection with questionnaires relating to products, services, events, advertisements, campaigns, and similar matters (Consent, Legitimate Interests)
(c) To enter into a contract, to provide our products or services, or to operate our business. In the event that you do not provide your
personal data, you may experience disadvantages or may be unable to use some of our services (Contract, Legitimate Interests)
(d) To perform analysis, investigations, studies, and research for purposes related to product development, sales, advertising, product
marketing (including obtaining marketing approvals), web analytics, strategic planning, and other related business purposes (Consent,
Legitimate Interests)
(e) To resolve disputes and/or litigations, enforce our contracts and agreements, and to establish, exercise, or defend against legal claims and/or litigation (Legal Obligation, Legitimate Interests)
(f) To respond to any inquiries, concerns or complaints raised by our users, business partners, or retirees (Contract, Legitimate Interests)
For Public Benefit
(g) To ensure compliance with legal obligations, export controls and customs regulations, compliance screening obligations, industry
standards, or our policies (Legal Obligation, Legitimate Interests)
(h) To notify or respond to requests or inquiries to comply with applicable laws and regulations from government authorities or other
public institutions (Legal Obligation)
Sharing of Personal Data
We may share your personal data with the following categories of recipients to the extent necessary to fulfill the relevant purposes of use. The recipients of your personal data may be located outside of the country in which you reside.
(a) Our personnel
We may share your personal data internally with our personnel.
(b) Affiliates
We may share your personal data with our affiliates mainly for internal administrative purposes.
(c) Business partners
We may share your personal data with business partners and their personnel. These business partners include distributors, retailers and
electronic commerce service providers.
(d) Third-party vendors
We may share your personal data with third-party vendors who provide products, services, and/or to take other actions necessary for the
relevant purposes. The third-party vendors include internet service providers, web analytics service providers, and cloud service
providers.
(e) Third parties, in connection with legal obligations
We may share your personal data with courts, arbitration institutes, regulators, government authorities, attorneys, and consultants to
comply with legal obligations.
(f) Other Third Parties, as legally permitted
We may share your personal data with other third parties as permitted under applicable laws and regulations.
Cross-Border Transfers
We may transfer your personal data internationally including to the countries in which our affiliates, service providers or other recipients
are located. If applicable laws and regulations, particularly those of the jurisdiction in which the personal data is located, impose
restrictions on the cross-border transfer of personal data, we will take appropriate measures to comply therewith.
Retention Periods
We will retain your personal data only for the period necessary to achieve the purpose for which the personal data was collected, or otherwise to comply with applicable laws and regulations. The applicable retention period will be determined in consideration of the nature of personal data and the purpose of processing personal data, as well as legal and business needs, always in accordance with applicable
laws and regulations.
Your Rights
You have certain legal rights with respect to your personal data. These rights may vary depending on where you are located and which
data protection laws and regulations apply, but typically include:
(a) the right to be informed, in a transparent manner, as to how your personal data is processed
(b) the right to access your personal data, to know exactly what information is held and how it is processed
(c) the right to rectification if your personal data is inaccurate or incomplete
(d) the right to erasure your personal data (also known as the “right to be forgotten”)
(e) the right to restrict processing of your personal data
(f) the right to data portability to reuse the personal data for another service
(g) the right to object to our processing of your personal data
(h) the right in relation to automated decision-making and profiling, for you not to be subject to automated decision-making and
automated profiling; instead, but can ask for human intervention
(i) the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
(j) the right to lodge a complaint with a data protection supervisory authority.