• Handling of Personal Information
• Privacy Policy
• Handling of Personal Information for Individuals Residing in the EEA (European Economic Association)

Handling of Personal Information for Individuals Residing in the EEA (European Economic Association)

Tadano Infrastructure Solutions Ltd. (hereinafter referred to as "the Company”) processes personal information of EEA residents in accordance with the EU General Data Protection Regulation (GDPR). Because this agreement may be revised due to revisions in laws and regulations or changes in company internal processes, please read this agreement regularly.
“Personal information” refers to information related to an individual person, and includes name, email address, residential address, gender, date of birth, telephone number, and age. Non-personal information is information such as the number of website users.
Personal information is only collected via this website when it is voluntarily provided by an individual through means such as registration procedures, input of various forms, sending email, and uploading employment application data. The Company uses this data for specific purposes in accordance with the following rules.

1. Rules for processing of personal information

The Company shall process personal information as described below, in accordance with Article 1 of the GDPR.

• It shall be processed by methods that are legal, fair, and transparent to the individual.
• Personal information is processed only within the range necessary in order to achieve the purposes of use that were specified in advance.
• Personal information is stored only for the period necessary in order to achieve the purposes of use.
• The contents will be kept accurate and up to date within the range necessary for the purposes of use.
• Information is processed after first constructing appropriate technological and organizational measures.

2. Purposes of personal information use

The purposes of use for the personal information processed by the Company are the following.

• Personal information of ordinary persons and persons affiliated with partner companies
  1. Provision of sales, repair, inspection, and other services for the Company’s products, and acquisition of raw materials and other supplies
  2. Conducting questionnaire surveys and creation of statistical and other materials for products, services, and sales planning based on the surveys
  3. Provision of the requested products, services, and various materials
  4. Responding to inquiries, sending of gifts and other items
  5. Providing information about products, services, events, questionnaire surveys, and other matters of the Company and group companies
  6. In addition, the conduct of operations ancillary to any of the above operations, and operations for which the Company has obtained the consent of the individual customer
• Personal information of the Company’s employees and applicants for employment
  1. Work management, welfare, health and safety
  2. Training
  3. Notifications
  4. Provision to third parties for the purpose of accomplishing any of (1) to (3)

3. Legal compliance of personal information processing

The Company shall process personal information based on one of the legal bases below in accordance with Article 6 of the GDPR.

• When the consent of the individual has been obtained based on laws
• When doing so is necessary in order to execute an agreement with the individual
• When doing so is necessary in order for the Company to fulfill its legal obligations
• When doing so is necessary in order to protect the just interests of the Company

4. Provision of personal information to third parties

• In accordance with Article 13 and Article 14 of the GDPR, when providing personal information to a third party as part of personal information processing based on a legal basis, the Company shall notify the individual concerned of the party to whom the information is provided.
• In accordance with Article 5 of the GDPR, when transferring personal information to a third country within the EU, the Company shall enact the protective measures prescribed in laws and regulations.

5. Acquisition of personal information from third parties

The personal information acquired by the Company from third parties and the sources for acquiring the information are as follows.

• Personal information acquired from third parties
  1. Employees of suppliers and corporate customers with which the Company does business: Basic information, contact information, family information, job and employment history information, other information (face photo)
  2. Employees of service companies with which the Company does business: Basic information, contact information, family information, job and employment history information
  3. Employees of chambers of commerce and certification agencies with which the Company is involved: Basic information, contact information, family information, job and employment history information
  4. Information related to the hiring and income of employees of group companies of the Company or applicants for employment within the EEA region
• Information acquisition sources
  1. Suppliers and corporate customers with which the Company does business
  2. Service companies with which the Company does business
  3. Chambers of commerce and certification agencies with which the Company is involved
  4. Tadano group companies within the EEA region

6. Addressing the rights of the individual

The Company shall appropriately address, in accordance with the GDPR, the following requests regarding the processing of personal information from the individual concerned.

• Withdrawal of consent to processing of personal information (Article 7)
• Access to personal information (Article 15)
• Correction of personal information (Article 16)
• Deletion of personal information (Article 17)
• Restriction of personal information processing (Article 18)
• Data portability of personal information (Article 20)
• Objection to processing of personal information (Article 21)
• Lodging of complaints regarding processing of personal information (Article 77)

Complaints may be lodged with the supervisory authority.

7. Protective measures for personal information

In order to prevent personal information loss, damage, unauthorized modification, leakage, or other issue, the Company shall enact necessary and appropriate measures, including measures to prevent unauthorized access, and anti-virus measures. Furthermore, in order to protect personal information, necessary and appropriate supervision of Company employees, contractors, and others shall be carried out.

8. Contact office

Inquiries related to customer personal information should be directed by email to the following address.
[Email address for inquiries related to personal information]

TIS_Contact@tadano.com