OUR POLICY ON USING PERSONAL DATA OF OUR CUSTOMERS

We, TOTO LTD., take your privacy seriously. As we receive and respond to your inquiries or we have other business communication with you, we collect and use your personal data. When we do so, we undertake to comply with applicable data protection laws including Japan’s Act on the Protection of Personal Information and EU General Data Protection Regulation (the “GDPR”). Below is our policy on how we collect, use and protect your personal data. We may modify, add to, or delete part of this policy from time to time. You can obtain the latest version at the following link: [URL]

PERSON IN CHARGE

This Privacy notice is issued by TOTO LTD. When we collect and use your personal data, we, TOTO LTD. are the data controller in the meaning of GDPR and are responsible for protecting your rights with personal data.

HOW WE USE YOUR PERSONAL DATA AND ON WHAT GROUND

1. Your Inquiry
   As we receive and respond to your inquiry regarding our products, we collect and use your personal data including your name, company, position, country, postal address, email address, phone number, our products you are interested in and other content of your inquiry. We use these personal data solely in order to respond to your inquiry on the lawful basis that it is necessary for the purpose of our legitimate interest, namely providing you on your request with useful and necessary information regarding our products and recognizing what our customers wish or need with our product.
2. Business Communication
   As we have business talk (face to face, via email, over the phone, etc.) with you on current and/or prospective deals, we collect and use your personal data including your name, company, position, country, postal address, email address, phone number and other content of our communication. We use these personal data solely in order to facilitate our future business communication with you on subject matters reasonably related to those in our prior communication, on the lawful basis that it is necessary for the purpose of our legitimate interest, namely serving our current and prospective customers.
   We will not use your personal data for any other purposes without your prior consent.

SENSITIVE PERSONAL DATA

Where we collect and use sensitive categories of your personal data as defined in Articles 9 and 10 of GDPR, we will obtain your prior and explicit consent thereto, unless we are required to do so in order to perform our statutory obligations or to protect vital interest of you or other person in emergency.

HOW LONG WE KEEP YOUR PERSONAL DATA

1. Your Inquiry
   We keep your personal data regarding your inquiry as long as may be necessary in order to appropriately respond to possible future orfurther inquiries from you.
   On receiving your objection to our retention of your personal data as described above, we will immediately delete or anonymize them.
2. Business Communication
   We will keep your personal data as long as may be necessary to keep in contact with you.
   Thereafter we will not keep your personal data for any purpose other than keeping records of our business operation in the forms of mail logs, meeting logs, etc.

WHO WE SHARE YOUR PERSONAL DATA WITH

We may share your personal data with our service providers, which help us operating our business, including cloud computing service providers, CRM and other IT service vendors, couriers, etc. We protect your rights with personal data by virtue of data processing agreements in compliance with Article 28 of GDPR, signed between such service providers and us, which impose certain data protection and data security obligations on them.
We will not disclose your personal data to anybody else without your prior consent, unless we are required to disclose them to competent public authorities by any legal obligations we are subject to.

TRANSFERS TO NON-EU COUNTRIES

As we use third-party cloud computing services like a CRM web service, we may transfer your personal data to such third-parties located outside the European Economic Area, where the GDPR is not in force. In such cases we protect your rights with personal data by virtue of Data Transfer Agreements (the “DTAs”) in accordance with Article 46 of GDPR signed between such third parties and us. These DTAs impose contractual obligation on such third parties to protect your rights with personal data, obligation which is equivalent to mandatory data protection requirement laid down in GDPR. For further information, please contact us.

YOUR LEGAL RIGHTS

• Access to your personal data and to certain supplementary information covered by this notice;
• Correction of your personal data if inaccurate or incomplete;
• Erasure of your personal data in certain circumstances;
• Suspension of using your personal data in certain circumstances;
• Stopping processing your personal data in certain circumstances; and
• Obtaining your personal data in a structured, commonly used, and computer-readable format.

If you wish to exercise your right, please contact us.

COMPLAINT

You can lodge complaints about our way of processing your personal data with data protection supervisory authorities.

INQUIRY

For further information and inquiry, conta

Privacy Inquiry Desk : advanced_ceramics@jp.toto.com