CBC will use the personal information it has collected for the following purposes. CBC will use your personal information only to the extent necessary to achieve these purposes.
CBC will not disclose personal information you provide CBC to any third party, except for the following circumstances:
Personal information may be shared and jointly used as indicated below. CBC will take reasonable safety management measures among the companies by which personal information is shared and jointly used to properly protect the personal information.
Personal information may be disclosed and offered to sub-contractors within the limited scope to the extent it is necessary to achieve the purpose listed in preceding Article 1. In such case, a confidentiality agreement shall be made and entered between the third party and CBC, and CBC shall monitor and supervise the handling of the personal information by the third party as it is necessary and appropriate.
If CBC provides personal information to third party outside of Japan, including business entrusted companies and data sharing companies, CBC will take necessary and appropriate measures in accordance with applicable laws and regulations.
CBC has in place appropriate internal procedures to ensure the management of the personal information in accordance with relevant laws and regulations. CBC also has in place appropriate security measures against potential risks concerning the protection of the personal information.
CBC retains personal information for the period necessary to achieve the purpose of obtaining the personal information. However, in cases you make a claim against CBC or CBC determines the possibility of litigation, CBC may retain personal information for a longer period. If the laws require differently, such a period will be set in accordance with the laws. In determining the adequate period of retention, CBC shall consider multiple elements including but not limited to the volume, nature, confidentiality, potential risk of damage by the unlawful use or disclosure of the information. purpose of use, processing,
possibility of achieving the same purpose of use by alternative methods, applicable laws, taxation issues.
You have data protection rights in accordance with the laws and regulations related to personal information of each country. CBC shall strictly abide by any and all applicable laws and regulations regarding protection of personal information.
If you are a resident of the European Economic Area (“EEA”) or U.K., CBC processes your personal data in accordance with the General Data Protection Regulation No. 2016/679 (“GDPR”) and the Data Protection Act in the U.K. (“DPA”). Please see the addendum set forth in the APPENDIX (GDPR) below.
CBC responds, in compliance with the laws and regulations, to customer's requests to confirm or revise his or her personal information, withdraw consent or lodge a complaint in relation to personal information. Please contact us via Inquiries below.
CBC cannot control your personal information located in an outside website created by third parties, which is not under the control of CBC and to which CBC Website links. When you link to an outside website, you are leaving the CBC Website and are subject to the privacy and security policies of the owners of the outside website, which may collect your personal information. CBC recommends that you take care of the handling of your personal information and review the privacy and security policy of such websites.
CBC Co., Ltd.
2-15-13 Tsukishima, Chuo-ku, Tokyo 104-0052, Japan
Representative Director, President & Chief Executive Officer
Additional terms and conditions in this Appendix will be applied to all of our processing of your personal data when you are subject to GDPR or DPA. With regard to the additional terms and conditions in this Appendix, e.g. “personal data” or “processing”, CBC refers to the definitions in Article 4 of the GDPR.
The following are examples of those for which CBC may require customers to provide personal data:
CBC process your personal data based on the legal bases provided for in the GDPR (Articles 6 and 7) as below.
When the transfer of personal data is necessary for the performance of a contract between you and CBC or the implementation of pre-contractual measures taken at your request, CBC may transfer personal data obtained within the EU to countries other than Japan. In case of transfer to a country which lacks an adequacy decision by the European Commission, CBC will take measures of the standard data protection to lawfully transfer your personal data.
You have the following rights regarding personal data obtained and processed by CBC. These rights may be limited under certain circumstances such as where fulfilling your request would reveal personal data of another person, where it would infringe the rights of a third party (including our rights) or where you ask CBC to delete information which CBC is required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in both the GDPR and in the local data protection laws.
You can lodge a complaint in relation to CBC’s processing of your personal data with the Data Protection Supervisory Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.