Information obligations according to Art. 12 ff. EU-GDPR
I. Name and contact details of the controller
Your contact person as the controller within the meaning of the European General Data Protection Regulation ("EU-GDPR") and other national data protection laws of the member states as well as other data protection regulations is
Yamazaki Europe GmbH. Immermannstr. 33, 40210 Düsseldorf, Germany
(hereinafter referred to as "we", "us", "our" or "our company").
II. Contact details of the data protection officer
The protection of your personal data is a high priority for us. To reflect this importance, we have commissioned a law firm specializing in data protection and data security to take on these key issues.
We are advised by: Atsumi & Sakai Europa GmbH – Rechtsanwälte und Steuerberater, Bockenheimer Landstraße 2 - 4, 60306 Frankfurt am Main, Germany, https://www.aplawjapan.com/de/offices/frankfurt
Please contact our Data Protection Officer (DPO) directly if you have any questions about data protection and data security. E-mail: burak.kara@aplaw.de
III. General information on data processing
1. Scope We only process your personal data insofar as this is necessary for the functional provision of our website and our content and services.
2. Legal basis Insofar as we obtain your consent for the processing of your personal data, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. a) EU GDPR. If your personal data is processed to fulfil a contract with you or as part of the initiation of a contractual relationship, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b) EU GDPR. Insofar as the processing of personal data is necessary to fulfil a legal obligation incumbent on us, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. c) EU GDPR. If your personal data is processed to protect the legitimate interests of us or a third party, whereby your interests, fundamental rights and freedoms do not outweigh the former interest, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) EU GDPR.
3. Storage duration Your personal data will be deleted as soon as the purpose for the storage no longer applies or, if you have a right of withdrawal, you declare the withdrawal of your consent. Data may also be stored if this has been stipulated by the European or national legislator in EU regulations, laws or other provisions to which we are subject. In this case, however, your personal data will be blocked.
4. Online shop/external links When you make a purchase via our online shop https://theyamazakihome-europe.com/, we collect your name, email address, shipping and billing address, payment details, company name and telephone number. Our online shop is operated via the "Shopify" platform, so Shopify may collect additional information about you - such as your IP address and information about the device and browser you are using. You can find Shopify's privacy policy here Privacy Policy. We use this information to process your order and deliver our products. In addition, we use the data to provide personalized services - for example, to provide you with suitable product recommendations. If you have consented to this, we also analyze information about your last visits and your use of individual areas of our shop for analysis purposes in order to make our offer more user-friendly. If you make a purchase via the online shop of an external retailer (e.g. Wayfair), we only process the information required for delivery (e.g. delivery address, first and last name, products ordered). This data is used exclusively for the purpose of dispatch processing and is deleted a few days after successful delivery. The privacy policy of home24can be found here: https://www.home24.de/. Please note: If you access external links via our website, this privacy policy does not apply to the linked page. The respective provider is solely responsible for the processing of your personal data. We therefore recommend that you read the respective privacy policies carefully. If a legal basis is required for processing by the external provider, this is provided by your consent in accordance with Art. 6 para. 1 sentence 1 lit. a EU GDPR, which you give by clicking on the link. When you click on an external link, the third-party provider may process the following personal data in particular:
• IP address; • Screen resolution; • Browser used; • Bandwidth; • Language settings.
IV. Data processing on our website
1. Provision of the website and creation of log files
(1) Description and scope As part of the provision of our website, we process your personal data to enable error-free delivery of our website to your PC or mobile device. In some cases, your personal data must be stored for the duration of a session.
We also temporarily store your personal data in log files to ensure the functionality of our website and the security of our IT systems. Your personal data is not processed in log files in any other way.
The following of your personal data is processed for the provision of the website and for the creation of log files:
• IP address; • Access date; • Access time; • Previously visited website, if applicable; • Browser used; • Operating system used.
(3) Purpose The purpose of data processing is to provide the website, to ensure the functionality of the website and the security of the IT systems used for this purpose. This purpose also constitutes our legitimate interest.
(4) Storage duration Your personal data is in log files for a period of 4 to 6 weeks. In addition, your personal data will only be stored for the duration of the session as part of the provision of the website.
(5) Possibility of objection and removal The processing of your personal data and the storage of your personal data in log files is absolutely necessary for the provision of the website, to ensure the functionality of the website and to guarantee the IT systems used. Consequently, you have no option to object.
2. Technically necessary cookies
(1) Description and scope We process your personal data in the context of technically necessary cookies because many functions and services of our website, which make it easier for you to use our website or enable you to use it in the first place, do not function properly without cookies (so-called "technically necessary cookies").
We use these technically necessary cookies to store some of your personal data, which is only used to utilize these functions and services. Your personal data is not processed in any other way.
A list of the technically necessary cookies we use, their purpose, storage duration and further information can be found at the end of this privacy policy.
The following personal data is processed as part of the use of technically necessary cookies:
• IP address; • Language settings of your browser; • Browser used.
(3) Purpose The purpose of data processing is to provide the functions and services of our website.
This purpose also constitutes our legitimate interest.
(4) Storage duration As a rule, for the duration of the respective session, unless otherwise stated in the detailed information in the list of technically necessary cookies used by us.
(5) Possibility of objection and removal Technically necessary cookies are stored on your PC or mobile device and transmitted from there to our website. You therefore have full control over the use of technically necessary cookies.
You can deactivate or restrict the transmission of cookies by changing the settings in your browser. You can delete cookies that have already been saved at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent For more information, please read our cookie policy
3. E-mail contact
(1) Description and scope The following personal data is processed when you contact us by e-mail:
• First name; • Surname; • E-mail address; • Content of the message.
(3) Purpose The purpose of data processing is to process your enquiry.
(4) Storage duration Your personal data will be stored until it is no longer required. This usually occurs when your enquiry is processed, unless longer retention periods apply.
(5) Possibility of objection and removal You have the option at any time to object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will no longer be able to process your enquiry. All personal data stored in the course of contacting us will be deleted in this case, unless statutory retention periods prevent deletion. Your personal data will then be blocked until the end of the statutory retention periods.
4. Direct marketing
(1) Description and scope As part of direct marketing campaigns, we process your personal data if the narrow scope of application of special laws allows us to contact you for advertising purposes without your consent. We also process your personal data if you have consented to being contacted for advertising purposes.
The following personal data is processed as part of direct marketing:
• Title; • First name; • Surname; • Postal address, if applicable; • E-mail address, if applicable; • Telephone number, if applicable.
Consent, Art. 6 para. 1 sentence 1 lit. a) EU GDPR (post, e-mail, telephone).
Legitimate interest, Section 7 (3) UWG (e-mail).
(3) Purpose The purpose of data processing is to carry out direct marketing campaigns and to send offers and additional information.
(4) Storage duration Your personal data will be stored until you object to the processing. You will find information on this in the respective advertising approach.
(5) Possibility of objection and removal You can object to the processing of your personal data in the context of direct marketing campaigns at any time for the future.
5. Data protection and law
a. Exercising your rights as a data subject in accordance with Art. 12 ff. EU-GDPR
(1) Description and scope We process your personal data as part of the processing of data subject rights. We process the contact data you provide in this context exclusively for the purpose of processing and responding to your message and the subsequent documentation of processing in compliance with the law as part of our accountability.
The following personal data is processed as part of the processing of data subject rights:
• First name; • Surname; • Postal address; • E-mail address; • Telephone number.
(2) Legal basis Legal obligation, Art. 6 para. 1 sentence 1 lit. c) in conjunction with. Art. 12 ff. EU-GDPR.
Legitimate interest for the subsequent documentation, Art. 6 para. 1 sentence 1 lit. f) EU GDPR.
(3) Purpose Legally compliant processing of your data protection rights as a data subject.
(4) Storage duration 3 years after completion of the processing of the respective case, § 41 BDSG in conjunction with § 31 para. § Section 31 para. 2 no. 1 OWiG (Administrative Offences Act).
(5) Possibility of objection and removal You have the option at any time to object to the processing of your personal data in the context of the processing of your data subject rights for the future. In this case, however, we will no longer be able to process your data subject rights under data protection law.
The documentation of the legally compliant processing of the respective processing of your data subject rights is mandatory. Consequently, there is no possibility for you to object.
b. Legal defense and enforcement
(1) Description and scope Your personal data will be processed by us if you assert legal claims against us or if we assert claims and rights against you.
(3) Purpose The purpose of data processing is the defense against unauthorized claims and the legal enforcement and assertion of claims and rights.
This is also our legitimate interest.
(4) Storage duration Your personal data will be stored until the purpose for which it was collected no longer applies. This is usually the case when the respective decision becomes legally binding.
(5) Possibility of objection and removal The processing of your personal data in the context of legal defense and enforcement is absolutely necessary for legal defense and enforcement. Consequently, you do not have the right to object.
V. Further data processing in addition to our website
Business cards
(1) Description and scope We collect your business card data in order to offer you our services.
(2) Legal basis Consent, Art. 6 para. 1 sentence 1 lit. a) EU GDPR and legitimate interest, Art. 6 para. 1 sentence 1 lit. f) EU GDPR.
(3) Purpose To contact you for advertising and marketing, to let you know which exhibition we will be attending next and to invoice you. This also constitutes our legitimate interest. Consent is given by providing your business card.
(4) Storage duration We store your data for as long as you have a business relationship with us.
(5) Objection and removal options You have the option at any time to object to the processing of your personal data in the context of contacting us for the future. In this case, however, we will no longer be able to process your enquiry. All personal data stored in the course of contacting us will be deleted in this case, unless statutory retention periods prevent deletion. Your personal data will then be blocked until the end of the statutory retention periods.
VI.Recipient categories
Within our company, those offices and departments receive personal data that need it to fulfil the aforementioned purposes. In addition, we sometimes use different service providers and transfer your personal data to other trustworthy recipients. These can be, for example
• Banks; • Scan service; • Print shops;
• Lettershops; • IT service provider; • Co-operation partner such as, but not limited to, warehouses, forwarders and advertising agencies;
• Lawyers and courts.
VII. Third country transfer
In the course of processing your personal data, we may transfer your personal data to trusted service providers in third countries. Third countries are countries outside the European Union (EU) or the European Economic Area (EEA).
We only work with service providers who can provide us with suitable guarantees for the security of your personal data and who can guarantee that your personal data will be processed in accordance with strict European data protection standards. A copy of these suitable guarantees can be viewed at our premises.
If we transfer personal data to third countries, this is done on the basis of a so-called adequacy decision of the European Commission or, if such a decision does not exist, on the basis of so-called standard data protection clauses, which have also been issued by the European Commission.
VIII.Your rights
You have the following rights vis-à-vis us:
1. Right to information You have a right to information about whether and which of your personal data is processed by us. In this case, we will also inform you about
(1) the purpose of processing; (2) the data categories; (3) the recipients of your personal data; (4) the planned storage period or the criteria for the planned storage period; (5) your further rights; (6) unless you have provided us with your personal data: All available information about its origin; (7) if available: the existence of automated decision-making and information about the logic involved, the scope and the intended effects of the processing.
2. Right to rectification You have a right to rectification and/or completion if your personal data processed by us is incorrect or incomplete.
3. Right to restriction of processing You have a right to restriction of processing if
(1) we verify the accuracy of your personal data processed by us; (2) the processing of your personal data is unlawful; (3) you need your personal data processed by us for legal prosecution after the purpose has ceased to exist; (4) you have objected to the processing of your personal data and we are examining this objection.
4. Right to cancellation You have a right to erasure if
(1) we no longer need your personal data for its original purpose; (2) you withdraw your consent and there is no other legal basis for the processing of your personal data; (3) you object to the processing of your personal data and - provided it is not direct marketing - there are no overriding grounds for further processing; (4) the processing of your personal data is unlawful; (5) the deletion of your personal data is required by law; (6) your personal data was collected as a minor for information society services.
5. Right to information If you have exercised your right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of this rectification, erasure or restriction of processing.
6. Right to data portability You have the right to receive your personal data processed by us on the basis of consent or for the performance of a contract in a structured, commonly used and machine-readable format and to transmit those data to another controller. If this is technically feasible, you have the right to have us transfer this data directly to another controller.
7. Right of objection You have the right to object to the processing of your personal data on special grounds. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time.
8. Right of cancellation You have the right to revoke any consent given to us at any time. Withdrawal of consent does not affect the lawfulness of previous processing based on consent.
9. Right to lodge a complaint with a supervisory authority Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that the processing of your personal data by us violates the EU GDPR.
The competent supervisory authority for us is
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia Kavalleriestr. 2 40213 Düsseldorf Tel: +49 211 38424-0 e-mail: poststelle@ldi.nrw.de Homepage: https://www.ldi.nrw.de
