Privacy Policy
1. Basic Policy
Kurita Water Industries, Ltd. (the “Company”) shall comply with the laws and regulations, guidelines, etc. on personal data protection of each country and region (collectively, the “Personal Data Protection Laws”), and properly obtain and handle the personal data (which shall have the meaning as set forth in the Personal Data Protection Laws) of customers, business partners, shareholders and officers and employees, etc. (collectively, the “Data Subjects”), and make efforts to protect personal data.
2. Collection of Personal Data
The Company may obtain from the Data Subjects, their names, company names, affiliation, telephone numbers, email addresses, positions, and online identifiers; and with respect to employees, personal data necessary for personnel management, labor management, company asset management, etc., and other information necessary to achieve the purpose of use stated in the “Purpose of Use” below. In addition, the Company shall obtain the foregoing from public information on the Internet, social media, and provision from third parties.
3. Purposes of Use
The Company will use obtained personal data for the following purposes:
(1) Customers’ personal data
1) For provision of products and services
2) For appropriate and smooth transactions
3) For responses to various inquiries including consultations on products and services
4) For research and analysis, etc. on products and services such as customer satisfaction surveys and browsing history acquisition
5) For analysis of information such as obtained browsing history, and provision of information by sending catalogues or emails, etc. on products and services regarding which customers’ interests are high
(2) Business partners’ personal data
1) For various communications necessary in the course of business
2) For appropriate and smooth transactions
(3) Shareholders’ personal data
1) For provision of products and services
2) For appropriate and smooth transactions
3) For the management of shareholders such as preparation of shareholder data pursuant to the prescribed standards pursuant to various laws and regulations
4) For research and analysis, etc. on products and services such as customer satisfaction surveys and browsing history acquisition
5) For analysis of information such as obtained browsing history, and provision of information by sending catalogues or emails, etc. on products and services regarding which customers’ interests are high
(4) Personal data of applicants for recruitment, applicants for internship, and retirees
1) For work on provision of information and recruitment
2) For management of recruitment work at the Company
3) For the provision of information, communication, etc. to retirees
(5) Personal data of the Company’s officers, employees, etc.
1) For personnel and labor management, salary-related work, expense settlement work, education and training and human resources management, provision of welfare benefits, and work pursuant to laws and regulations such as social insurance and taxation
2) For health control, ensuring health and safety, crime prevention, asset management, and provision of IT services
3) For business communications and for other work incidental to the purpose above
4. Disclosure and Provision of Personal Data
The Company shall comply with laws and regulations, and may disclose and/or provide acquired personal data to recipients in the following category:
(1) Related company, etc.
The Company may disclose and/or provide personal data to companies belonging to the Company group.
(2) Officers and employees
The Company may disclose and/or provide personal data to the Company’s officers and employees who are authorized to access and have the need to access personal data.
(3) Service providers
The Company may disclose and/or provide personal data to service providers who are third parties to perform certain services, such as IT service providers (including data servers and cloud service providers), legal advisors, and insurance companies.
5. Joint Use
Under Japanese law, the Company may share acquired personal data to the extent necessary to achieve the “3. Purpose of Use” above, using the framework for joint use under the Personal Information Protection Laws with companies belonging to the Company group. Items, the scope of use, and the person responsible for management of personal data for joint use shall be as follows:
(1) Item of personal data for joint use
Items necessary to achieve the purpose of use above such as contact address, including names, company names, affiliation, telephone number, and email address.
(2) Scope of the person for joint use
Company group
(3) Person responsible for management
Kurita Water Industries, Ltd.
6. Provision to Persons Overseas
In the case of provision of personal data to third parties or overseas group companies beyond national boundaries, the Company shall comply with the provisions on cross-border transfer of the Personal Data Protection Laws.
7. Security Control Measures
In order to properly handle personal data, the Company shall strive to strengthen and improve internal systems by appointing a personal information protection officer, developing and implementing internal rules, conducting audits, training officers and employees, other supervision of handling personal data, etc.
The Company implements the measures set forth below for security control.
1) Formulation of basic policy
To ensure proper handling of personal data, Kurita Group personal information management policy is formulated.
2)Development of rules regarding the handling of personal data
Personal data handling rules are formulated regarding handling methods, responsible person, person in charge and their duties, etc. for each stage such as acquisition, use, storage, provision, deletion, and destruction of personal data.
3) Institutional security control measures
As well as appointment of the person responsible for the handling of personal data, employees engaged in the handling of personal data, and the scope of personal data to be handled by such employees are clarified, and the system has been developed for reports and communications to the person responsible where the facts or indicators are recognized as being in breach of the laws and handling rules.
4) Personnel security control measures
Periodic training is conducted with employees engaged in the handling of personal data for matters to be noted regarding the handling of personal data.
5) Physical security control measures
In the area handling personal data, as well as control of the entry and exit of employees engaged in the handling of personal data and restricting equipment to be brought in, measures to prevent inspection of personal data by persons not authorized to do so are taken.
As well as taking measures to prevent theft, loss, etc. of equipment, electronic media, documents, etc. when handling personal data, including movement within the place of business, in the case of carrying such equipment, electronic media, etc., measures are taken so that personal data are not easily identified.
6) Technological security control measures
Access control is implemented, and the persons in charge, the scope of personal information database, etc. to handle are limited.
A mechanism to protect the information system to handle personal data from external unauthorized access or unauthorized software is introduced.
7) Ascertaining the external environment
Security control measures are implemented after ascertaining the legal systems on protection of personal data of foreign countries where personal data is stored. In other cases where personal data is stored on servers established in foreign countries, security control measures are taken after ascertaining the legal systems on the protection of personal data of each country.
8) Management of contractors
Upon entrustment, contractors properly handling personal data are selected, and arrangements are made concerning the necessary matters so that contractors may conduct proper management.
8. Rights of Data Subjects
Data Subjects hold multiple legal rights to personal data stored by the Company. These rights may change depending on the Personal Data Protection Laws applied to the Data Subjects’ locations and the relationship with the Company, and may typically include the following:
(1)Right to obtain information on the processing of related personal data, and the right to access related personal data held by the Company;
(2) Right to demand that the Company make corrections where related personal data are inaccurate or incomplete;
(3) Right to demand that the Company erase related personal data under certain circumstances;
(4) Right to demand that the Company restrict the processing of personal data by the Company under certain circumstances;
(5) Right to object to the Company regarding the processing of related personal data;
(6) Right to demand that personal data be received in structured, generally used, and machine-readable form, and/or to demand that the Company directly transfer to the recipients their personal data within a scope that is technically feasible (so-called data portability rights); and
(7) Right to withdraw consent to the processing of related personal data at any time.
Data Subjects may exercise their rights by contacting the Company at the contact address stated in the Point of Contact for Personal Information Protection Consultation Contact provided below. In the case where it is considered that the Company has infringed any Data Subjects’ rights, a complaint may be lodged with the competent data protection authorities.
Also, under Japanese law, the Company shall promptly handle inquiries on personal data disclosure, correction, suspension of use, erasure and other handling of personal data pursuant to the Personal Information Protection Laws.
Upon confirmation of being the Data Subjects, the Company may inquire about the contact address and other particulars.
(1) See here for the form for written request for disclosure, etc.
(2) For inquiries regarding the Privacy Policy, please contact us here.
【 Point of Contact for Personal Information Protection Consultation 】
Address: Address: 10-1, Nakano 4-chome, Nakano-ku, Tokyo
Nakano Central Park East
Kurita Water Industries Ltd.
Personal Information Protection Office
Email: privacy@kurita-water.com
Cookies function to store information about the Data Subjects having accessed websites on devices that may be connected to the Internet such as computers, tablets, and smartphones.
The Company may use Cookies to improve the content of services such as those for the website and emails. Information collected through cookies does not include emails and names that may identify individuals, etc.
Users may refuse the Company’s use of Cookies by refusing to receive Cookies by altering the settings of the Internet browser software. However, there may be incidences of restrictions such as not being able to use some functions such as customized functions. In such cases, please consult with the Point of Contact for Personal Information Protection Consultation stated in preceding clause 8.
10. Personal Data Retention Period
The retention period of personal data shall be each country’s statutory retention period or the period necessary to achieve the purpose of use above, where there is no statutory retention period. After such retention period, personal data shall be deleted promptly and securely, unless required in connection with the purpose of the agreement or other processing.
11. Change in Privacy Policy
The Company may revise all or part of this privacy policy.
Date of enactment: July 1, 2007
Date of last revision: November 27, 2024
If you are in the EU/EEA, click here