July 2022
Privacy NOTICE
This Notice (“Notice”) of Chubu Electric Power Company Netherlands B.V. (the “Company”) provides information on the processing of personal data of natural persons (“Data Subjects”) residing in the European Economic Area (the “EEA”), for the purpose of complying with the EU General Data Protection Regulation (the “GDPR”), the GDPR guidelines, the applicable national laws and regulations (“Applicable Laws”).
This Notice applies to all personal data processed by the Company, acting as controller, concerning all its Data Subjects (including (potential, current and former) contact persons of contractors, of (prospective) customers and of (other) business partners), with which a natural person may be identified or become identifiable (“Personal Data”).
Please find below an overview of the subjects which will be discussed in this Notice.
(ⅰ) Definitions
(ⅱ) Types of Personal Data to be collected
(ⅲ) Purposes of use of Personal Data
(ⅳ) Retention period
(ⅴ) Third party transfer
(ⅵ) Data subject rights
4. Contact
1. Processing Personal Data
(i) Definitions
“Personal Data” means any data relating to an identified or identifiable natural person (“Data Subjects”), including, without limitation, name, address, date of birth, telephone number, e-mail address and user IDs.
“Processing” means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
“Controller” means a legal person, etc. which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data.
“Processor” means a legal person, etc. which Processes Personal Data on behalf of the Controller.
(ii) Types of Personal Data to be collected
The Company will collect, including but not limited to, the following types of Personal Data concerning Data Subjects ((being potential, current and former) contact persons of contractors, of (prospective) customers and of (other) business partners):
(a) Name
(b) Organization/Company name
(c) Title
(d) Gender
(e) Telephone number
(f) E-mail address
(g) Company address
(h) Company bank account (only for sole proprietor)
(iii) Purposes of use of Personal Data
The Company will process the Data Subjects’ Personal Data for the following purposes:
(a) to deliver a contractual service to the Data Subjects;
(b) to contact and respond to inquiries and requests from Data Subjects with respect to the performance of their contractual services or before entering into a contract with the Company.
(c) to inform to our shareholders and investment partners
If the Company is to process the Data Subjects’ Personal Data for purposes other than the above, the Company will notify Data Subjects in advance such new purposes of use and other matters as required by applicable laws.
(iv) Retention Period
The Company will retain the Data Subjects’ Personal Data to the extent the Company requires such data for achieving the purposes of use specified in 1. (iii) above. The retention period for the purposes as described in 1. (iii) above is 7 years after the termination of the contract.
(v) Third Party Transfer
The Company transfers the categories of Personal Data specified in 1. (ii)/certain categories of Personal Data to the following recipients:
To achieve the data processing purposes as established in section (iii), the Company may provide the Users’ personal data to third parties such as Chubu Electric Power Co., Inc., the subsidiaries, affiliates, investment partners of Chubu Electric Power Co., Inc. and uses the services of cloud vendors. The aforementioned parties are located in a country outside the EEA, namely Japan.
(vi) Data subject rights
The Data Subjects are entitled with the rights to access to, request for correction, request for deletion, request to limit the processing, object to the processing, and request for data portability, with regards to the Personal Data retained by the Company pursuant to the provisions of relevant laws and regulations. Such requests shall be attended to the contact point set forth in “4. Contact” as per below.
If Personal Data is processed based on consent, the Data Subject could withdraw its consent.
The Company may refuse the Data Subjects’ request if the Company deems that there is no basis for such request or if the request is deemed excessive.
The Data Subjects may lodge a complaint with the data protection authorities having jurisdiction over the location of the Data Subjects’ domicile with regards to the processing of their Personal Data by the Company.
2. Safety Management Measures
In order to protect the Personal Data from unauthorized access and loss etc., taking into account the type of Personal Data, the degree of sensitivity and the degree of affect to the Data Subjects including economic influence and mental harm in case the Personal Data is unlawfully infringed, the Company has comprehensively evaluated and judged the risks of Personal Data infringement, and has implemented necessary and appropriate personal, organizational and technical safety management measures in accordance with such the risk of Personal Data infringement, and further, will review such safety management measures as necessary, set up the process for taking corrective actions, and constantly make effort to improve its security.
If the Company, in its role as a Controller, contracts a Processor, the Company shall select a Processor which is capable of implementing appropriate technical and organizational measures and shall manage such Processor in an appropriate manner.
Pursuant to the GDPR, the Company shall prepare records of the processing activities.
3. Amendment to this Notice
The Company reserves the right to review and/or alter the Notice periodically, in order to comply with (local and/or European) legislation, and for any other purpose deemed reasonably necessary by the Company.
4. Contact
The Company’s contact point regarding this Notice is as shown below. Any questions or concerns regarding this Notice or the processing of Personal Data by the Company, or any requests concerning data subject rights shall be attended to this contact point:
Chubu Electric Power Company Netherlands B.V.
World Trade Center Amsterdam
Tower Ten Level 4, Strawinskylaan 457, 1077 XX Amsterdam
The Netherlands
Telephone number: +31-(0)20-3034537
Email address: info@cepco-nl.com