We will process your personal data in compliance with every applicable law and any laws that replace them in the future (including the European Union’s General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”)).
In this notice, we provide information based on such laws related to processing your personal data. This notice sets out the basis on which any personal data that you provide to us, or that we obtain about you from other sources, will be processed by us. Please take the time to read and understand this notice.
For the purpose of data protection law, Cataler Corporation (“we”, “CAC”, “us” and “our”) is a data controller in respect of your personal data. And we are committed to respecting your privacy. （a）Our main office address: 7800 Chihama, Kakegawa City, Shizuoka Prefecture, 437-1492, Japan （b）Our phone number: +81 0537-72-3131 （c）Our website inquiry form: https://www.cataler.co.jp/en/inquiry/?c=02
In this notice: （a）your “personal data” means any data which relates to you and from which you can be identified. It may include contact details, other personal information, photographs, expressions of opinion about you or indications as to our intentions about you; （b）our “affiliates” includes our subsidiaries, our parent companies, and any subsidiaries of our parent companies; and （c）“processing” means any activity or operation that is carried out in respect of your personal data, such as collecting, storing, using, transferring or deleting it.
We will collect and process the following personal data about you:
（a）Information you give us.
This includes information about you that you give us by writing or communicating with us, whether face-to-face, by phone, e-mail or otherwise. The information you give us:
1. Your personal and contact details including your name, address, telephone numbers, and email addresses, family status, nationality, Individual Number (“My Number”), national registration number, photograph, video and hobby
2. Financial information including your bank details, credit card information, health insurance, information for tax return, social security information, bank balance and loan
3. Employment related information including your job title, salary, allowance, job history and academic background
4. Information regarding your residence permit including copies of your passport or visa
5. Particulars of your qualifications and skills including certificates
6. Information regarding your health including sickness notifications, accident or injury reports or disability status
7. Information regarding your religion including baptismal status, religious affiliation, church membership and necessity of prayer room
（b）Information we collect about you.
We will collect the following information about you:
1. Particulars of your employment or performance including your attendance, disciplinary action, working hours and performance evaluation
2. IT usage information including email addresses
3. Copies of letters and communications between us and you
We use the personal data that we hold about you for the following purposes:
HR management, HR development, Compliance, Operational planning and Public Relations
We rely on several bases to process personal data lawfully:
・your consent if your consent is obtained for certain processing operations in accordance with Art.6 (1)(a) GDPR
・performance of a contract with you or preparation to enter into a contract with you in accordance with Art.6 (1)(b) GDPR
・compliance with a legal obligation in accordance with Art.6 (1)(c) GDPR
・pursuance of our or a third party’s legitimate interests, where those legitimate interests are not overridden by your rights and interests, in accordance with Art.6 (1)(f) GDPR
・establishment and performance of the employment relationship with you in accordance with Section 26 (1) German Federal Data Protection Act
Where your personal data includes “sensitive data” (information about your race, ethnic origin, religion, physical or mental health, political opinions, sexual life, any actual or alleged criminal offences, and genetic and biometric data), we will only process it only in the following circumstances:
（a）where we have obtained your explicit consent to do so (pursuant to Art. 9 (2)(a) GDPR), or
（b）as may be necessary for establishment, exercise or defense of legal claims (Art.9 (2)(f) GDPR).
We will only use your personal data to the extent that it is necessary to do so to fulfil the purposes described above.
We may share your personal data with the following recipients in the situations described below: （a）Internal Use for us: We may share your personal data with our administration department and other employees who are authorized and need to access these data. （b）Affiliates: We share your personal data with our affiliates for internal administrative purposes and uses that are consistent with this Notice. （c）Service Providers: We share your personal data with third-party service providers who perform services on our behalf or for your benefit, such as for benefits, payroll, processing employment applications and performing human resources administration. （d）Business Partners: We may share your personal data with business partners, such as customers or suppliers to the extent this is required for conducting and/or acquiring business with these partners (e.g., exchange of contact details). （e）Legal Process and Safety: We may disclose your personal data to legal or government regulatory authorities as required by applicable law. We may also disclose your personal data to third parties as required by applicable law in connection with claims, disputes or litigation, when otherwise required by applicable law, or if we determine its disclosure is necessary to protect the health and safety of you or others, or to enforce our legal rights or contractual commitments that you have made. （f）Business Transfers: Your personal data may be disclosed as part of a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets, and could be transferred to a third party as one of the business assets in such a transaction. It may also be disclosed in the event of insolvency, bankruptcy or receivership.
The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”). It may also be processed by staff operating outside the EEA who work for our affiliates or for one of our suppliers.
Where we transfer your personal data outside the EEA, we will ensure that:
（a）the recipient destination has been subject to a finding from the European Commission that it ensures an adequate level of protection for the rights and freedoms that you possess in respect of your personal data; or
（b）the recipient enters into standard data protection clauses with us that have been approved by the European Commission.
You can obtain more details of the protection given to your personal data when it is transferred outside the EEA (including a copy of the standard data protection clauses which we have entered into with recipients of your personal data) by contacting us in accordance with the information about us above.
We will retain the personal data that we collect about you only for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer period is required under applicable law or is needed to resolve disputes or protect our legal rights, all in accordance with the principles set forth in Article 5(1) of the GDPR.
（a）Access, rectification, erasure, restriction, data portability
Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you have the following rights:
・Request from us access to your personal data pursuant to Art. 15 GDPR.
・Request from us rectification of your personal data pursuant to Art. 16 GDPR.
・Request from us erasure of your personal data pursuant to Art. 17 GDPR.
・Request from us restriction of processing pursuant to Art. 18 GDPR.
・Right to data portability pursuant to Art. 20 GDPR.
（b）Right to object
Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you also have the right to object to the processing of your personal data.
（c）Right to withdraw consent
You also have the right to withdraw your consent to our processing of your personal data at any time, where our processing is based on your consent. Please note that, in certain cases, we may continue to process your personal data after you have withdrawn consent or requested that we delete your personal data, if we have a separate legal basis to do so. For example, we may retain certain information if we need to do so to comply with an independent legal obligation.
（d）Right to lodge a complaint
If you have any complaints regarding our privacy practices in the EEA, you have the right to lodge a complaint with a data protection authority (i.e., supervisory authority).
Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen regulates data protection and privacy matters in Nordrhein-Westfalen, Germany. You can find out more information about your rights by contacting them, or by searching their website (https://www.ldi.nrw.de/index.php).
Questions, comments and requests regarding this privacy notice are welcome. Please contact us using the information about us above.
You can also contact our EU representative using the contact information below.
EU Representative
Address: Immermanstrasse 65B, 40210 Dusseldorf, Germany
E-mail Address: catalar-gdpr@cataler.co.jp
Cataler Corporation7800 Chihama, Kakegawa City, Shizuoka Prefecture, 437-1492, JapanTEL : +81-537-72-3131 FAX : +81-537-72-5647
Copyright © CATALER CORPORATION. All Rights Reserved.
