Source: https://www.minebeamitsumi.eu/en/privacy-policy/
Timestamp: 2019-11-15 17:43:45
Document Index: 163115940

Matched Legal Cases: ['Art. 6', 'Art. 9', 'Art. 21', 'Art. 21', 'Art. 8', 'Art. 17', 'Art. 21', 'Art. 6', 'Art. 9', 'Art. 6', 'Art. 20', 'Art. 6', 'Art. 89', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6', 'Art. 6']

Privacy Policy | MinebeaMitsumi Group in Europe
SPS fair in Nuremberg
in hall 1 at booth 350
We are greatly pleased at your interest in our company. Privacy is extremely important to the management of MinebeaMitsumi Europe. In principle, it is possible to make use of the MinebeaMitsumi Europe Internet pages without providing any data. If a data subject would like to use specific company services via our Internet page, however, it may become necessary to process personal data. If it becomes necessary to process personal data and if no legal basis exists for such processing, we generally obtain the consent of the data subject.
The processing of personal data such as a data subject’s name, address, email address or telephone number always occurs in conformity with the General Data Protection Regulation and in observance of the country-specific data protection provisions applicable to MinebeaMitsumi Europe. With this privacy policy, our company seeks to inform the public regarding the nature, scope and purpose of the personal data we collect, use and process. Moreover, data subjects will be made aware of their rights by means of this privacy policy.
As the party responsible for the processing, MinebeaMitsumi Europe has implemented numerous technical and organizational measures to ensure maximally complete protection of the personal data processed via this Internet site. Nevertheless, Internet-based data transmissions can present fundamental security gaps, with the result that it is impossible to guarantee absolute protection. For this reason, every data subject has the option to communicate personal information by alternative means such as the telephone.
The MinebeaMitsumi Europe privacy policy is based on terms used by European lawmakers in guidelines and regulations in the adoption of the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily read and understood by the public as well as our customers and business partners. To ensure this, we wish to clarify in advance the terms used.
Among other terms, we use the following in this privacy policy:
Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be laid down by Union law or by the law of the Member States.
Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. Public authorities that may receive personal data in the context of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients.
Controller in the sense of the General Data Protection Regulation, other data protection laws of European Union Member States and other provisions of a nature involving data protection is:
Phone: 07721-997100
Email: press[at]nmb-minebea.com
Website: www.minebeamitsumi.eu
Phone: +49(0)6103-913-376
Email: ralf.weydt[at]nmb-minebea[dot]com
Website: www.minebea-newsroom.com
Each Data Subject can directly contact our Data Protection Officer at any time with questions and suggestions regarding data protection.
The MinebeaMitsumi Europe Internet pages use cookies. Cookies are text files deposited via an Internet browser onto a computer system and stored there.
Many Internet pages and servers use cookies. Many cookies contain what is called a ‘cookie ID’. A cookie ID is a unique identifier of the cookie. It consists of a string of characters that can be associated by the Internet pages and servers with the specific Internet browser where the cookie has been stored. This makes it possible for the Internet pages and servers being accessed to distinguish the data subject’s individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified through the unique cookie ID.
Through the use of cookies, MinebeaMitsumi Europe can make more user-friendly services available to the users of this Internet site that would not be possible without the use of cookies.
By means of cookies, the information and offers at our Internet site can be optimized in line with the user’s interests. As we have already indicated, cookies make it possible for us to recognize the users of our Internet site. The purpose of this recognition is to make it easier for users to use our Internet pages. For example, the user of an Internet site that employs cookies does not need to enter login data each time the site is visited because this step is taken over by the Internet site and the cookie deposited into the user’s computer system. Another example is the cookie for a shopping cart in an on-line shop. The on-line shop uses the cookie to make note of the article placed into the cart by a customer.
At any time, the data subject can block the placement of cookies by our Internet site through the corresponding setting of the Internet browser being used and can thus permanently prevent the deposit of cookies. Moreover, cookies already deposited by means of an Internet browser or another software program can be deleted. This option is available in all standard Internet browsers. If the data subject deactivates the placement of cookies in the Internet browser being used, not all functions of our Internet page may be fully usable.
Each time the MinebeaMitsumi Europe Internet site is accessed by a data subject or an automated system, the Internet site collects a series of general data and information. These general data and information are stored in the server’s logfiles. The following data and information can be gathered: (1) browser types and versions, (2) the operating system used by the accessing system, (3) the Internet site from which an accessing system accesses our Internet site (known as the referrer), (4) the sub-websites accessed by an accessing system at our Internet site, (5) the date and time of an access to the Internet site, (6) an Internet protocol (IP) address, (7) The Internet service provider (ISP) of the accessing system and (8) other similar data and information that serve to avert hazards in the event of attacks on our IT systems.
In its use of these general data and information, MinebeaMitsumi Europe draws no conclusions about the data subject. Rather, this information is needed for (1) proper provision of our Internet site, (2) optimization of the contents of our Internet site and the promotion of it, (3) ensuring the permanent functional capacity of our IT systems and the technology of our Internet site and (4) providing criminal prosecution authorities with the information they need to pursue criminal cases in the event of a cyberattack. These anonymously collected data and information are therefore analyzed by MinebeaMitsumi Europe both for statistical purposes and for the ultimate purpose of ensuring an optimal level of data protection and data security at our company for the personal data being processed. The anonymous data relating to the server logfiles are stored separately from all personal data provided by data subjects.
At the MinebeaMitsumi Europe Internet site, users are given the option of subscribing to our company’s newsletter. The personal data transmitted to the Controller in the process of subscribing to the newsletter result from the input screen used for this purpose.
By means of the newsletter, MinebeaMitsumi Europe regularly informs its customers and business partners about company offers. In principle, our company’s newsletter can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers to request the sending of the newsletter. On the first occasion, for legal purposes, a double opt-in confirmation email is sent to the data subject who has registered to receive the newsletter. This confirmation email serves the purpose of verifying whether the holder of the email address is the data subject who has authorized the receipt of the newsletter.
In the newsletter registration process, moreover, we store the ISP-issued address of the computer system used by the data subject at the time of registration as well as the date and time of registration. Collection of these data is required in any subsequent tracking of (possible) improper use of a data subject’s email address and thus serves as legal protection of the Controller.
The personal data collected in the course of registration for the newsletter are used exclusively for the purpose of sending our newsletter. Moreover, subscribers to the newsletter could be informed by email, should this be required for the operation of the newsletter service or a related registration, which can happen in the event of modifications to the newsletter offer or changes in technical circumstances. In the context of the newsletter service, no personal data are shared with third parties. The data subject is free to cancel the newsletter subscription at any time. Consent provided by the data subject for our storage of personal data for the sending of the newsletter can be revoked at any time. Each newsletter contains a link that can be used in revoking consent. There is also an option available at any time directly at the Controller’s Internet site to unsubscribe from the newsletter or to communicate this in another way to the Controller.
The MinebeaMitsumi Europe newsletters contain what are known as ‘pixel tags’. A pixel tag is a miniature block of code embedded in such emails that is sent in HTML format to record and analyze a logfile. This is for the performance of a statistical analysis of the success or failure of on-line marketing campaigns. Through use of the embedded pixel tags, MinebeaMitsumi Europe can detect whether and when an email from a data subject was opened and what (if any) links in the email were clicked by the data subject.
These personal data collected via pixel tags in the newsletters are stored and analyzed by the Controller for the purpose of optimizing the sending of the newsletter and adapting the content of future newsletters to better address the interests of the data subject. These personal data are not shared with third parties. Data subjects may at any time revoke the related consent they provided separately via the double opt-in process. Revocation will result in these personal data being deleted by the Controller. MinebeaMitsumi Europe automatically treats unsubscription from the newsletter as revocation.
8. Contact options via the Internet site
Based on legal regulations, the MinebeaMitsumi Europe Internet site contains information that facilitates easy electronic contact with our company and direct communication with us, which likewise includes a general electronic mail (email) address. If a data subject makes contact via email or a contact form with the Controller, the data subject’s personal data are automatically stored. Such personal data provided voluntarily by a data subject to the Controller are stored for the purpose of processing or for establishing contact with the data subject. These personal data are not shared with third parties.
The controller processes and stores the data subject’s personal data only for the period of time during which they are required for the purpose of achieving the goal of the storage or to the extent this is provided by European lawmakers in guidelines and regulations or by another lawmaker in laws or regulations governing the controller.
If this purpose lapses or if the storage period stipulated by European guideline issuers and regulators or by another responsible lawmaker lapses, the personal data will be routinely blocked or deleted in accordance with legal regulations.
Every data subject has the right as granted by European guideline issuers and regulators to demand that the controller confirm whether it is processing the data subject’s personal data. If a data subject elects to claim this right to confirmation, it is possible to approach an employee of the controller at any time for this purpose.
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to receive from the controller at any time and at no cost information regarding the storage of his or her personal information including a copy of this information. Moreover, the European guideline issuers and regulators have allowed the data subject to receive information on the following matters:
Categories of personal data that are processed;
Recipients or categories of recipients to whom personal data are divulged or may still be divulged, especially recipients in third countries or international organizations;
If possible, the planned duration over which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
Existence of a right to rectification or deletion of the personal information concerning the data subject or to restriction of processing by the controller or a right of objection to this processing;
Existence of a right to appeal to a supervisory authority;
if personal information is not obtained from the data subject: All available information regarding the source of the data;
Existence of automated decision-making including profiling in accordance with GDPR Article 22 Pars. 1 and 4 and — at least in these cases — meaningful information regarding the rationale involved as well as the scope and intended effect of such processing on the data subject.
Moreover, the data subject has a right to information as to whether personal information has been transmitted to a third country or an international organization. In such a case, the data subject also has the right to receive information regarding appropriate guarantees in connection with the transmission.
If a data subject elects to claim this right to information, it is possible to approach an employee of the controller at any time for this purpose.
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to demand immediate rectification of incorrect personal information concerning the data subject. In addition, the data subject has the right in consideration of the purposes of the processing to demand the completion of incomplete personal data — including by means of a supplementary statement.
If a data subject elects to claim this right to rectification, it is possible to approach an employee of the controller at any time for this purpose.
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to demand that the controller immediately delete the personal information concerning the data subject if any of the following reasons apply and to the extent that the processing is not required:
The personal data were collected otherwise processed for purposes that no longer require them.
The data subject revokes his or her consent on which the processing is based in accordance with Art. 6 Par. 1 letter a GDPR or Art. 9 Par. 2 letter a GDPR and no other legal basis for the processing exists.
The data subject files an objection to the processing in accordance with GDPR Art. 21 Par. 1 and no overriding legal grounds for the processing exist or the data subject files an objection to the processing in accordance with Art. 21 Par. 2 GDPR.
Deletion of the personal data is required to fulfill a legal obligation in accordance with Union or Member State law to which the controller is subject.
The personal data are collected in relation to the offered services of the information society in accordance with Art. 8 Par. 1 GDPR.
If any of the reasons outlined above applies and a data subject wishes to arrange for the deletion of personal information stored by MinebeaMitsumi Europe, it is possible to approach an employee of the controller at any time for this purpose. The MinebeaMitsumi Europe employee will arrange for the demand for deletion to be immediately fulfilled.
If the personal data were divulged by MinebeaMitsumi Europe and our company is obligated to delete personal information as the controller in accordance with Art. 17 Par. 1 GDPR, MinebeaMitsumi Europe will take all reasonable measures, including those of a technical nature, consistent with available technology and the costs of implementation to make other controllers engaged in the processing of the divulged personal data aware that the data subject has demanded of these other controllers the deletion of all links to these personal data or of all copies or replicas of these personal data to the extent that the processing of the data is not required. The MinebeaMitsumi Europe employee will take the necessary steps in the individual case
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to demand that the controller restrict this processing if any of the following conditions apply:
The accuracy of the personal information is contested by the data subject, with the restriction applying to the time period necessary for the controller to examine the accuracy of the personal information.
The processing is unlawful, the data subject declines deletion of the personal data and instead requires the restriction of the use of the personal information.
The controller no longer requires the personal data for the purposes of processing but the data subject requires the data to assert, exercise or defend against legal claims.
The data subject has filed an objection to the processing in accordance with Art. 21 Par. 1 GDPR and it has not yet been determined whether the controller’s legal grounds outweigh those of the data subject.
If any of the requirements outlined above exists and a data subject wishes to arrange for the restriction of personal information stored by MinebeaMitsumi Europe, it is possible to approach an employee of the controller at any time for this purpose. The MinebeaMitsumi Europe employee will arrange for the restriction of the data processing.
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to receive the personal data concerning the data subject made available by the controller in a structured, standard and machine-readable form. The data subject also has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent pursuant to Art. 6 Par. 1 letter a GDPR or Art. 9 Par. 2 letter a GDPR or on a contract pursuant to Art. 6 Par. 1 letter b GDPR and the processing is carried out by automated means, to the extent that the processing is not required for the performance of a task lying in the public interest or in the exercise of official authority to which the controller is subject.
Moreover, the data subject, in exercising his or her right to data portability in accordance with Art. 20 Par. 1 GDPR, must grant the right for the personal data to be transmitted directly from one controller to another controller to the extent that this is technically feasible and that no other person’s rights and freedoms are negatively affected.
To claim this right to data portability, it is possible for the data subject to approach an employee of MinebeaMitsumi Europe at any time.
For reasons arising from the data subject’s particular situation, every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to file an objection against the processing of the personal data based on GDPR Art. 6 Par. 1 letter e or f. This shall also apply to profiling supported by these provisions.
MinebeaMitsumi Europe will no longer process the personal data in a case of objection unless we can establish compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or to assert, exercise or defend against legal claims.
Where MinebeaMitsumi Europe processes personal data for direct marketing purposes, the data subject has the right at any time to raise objection to the processing of the personal data for such marketing purposes. This shall also apply to profiling where it is connected to such direct marketing. Should the data subject object to data processing by MinebeaMitsumi Europe for direct marketing purposes, MinebeaMitsumi Europe will no longer process the personal data for these purposes.
In addition, the data subject has the right arising from his or her particular situation to raise objection to the processing of personal data related to him or her that occurs at MinebeaMitsumi Europe for scientific or historical research purposes or statistical purposes in accordance with Art. 89 Par. 1 GDPR unless such processing is required for the fulfillment of a function lying in the public interest.
In exercising the right to objection, the data subject can directly approach any employee of MinebeaMitsumi Europe or another employee. In the context of the use of information society services and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators not to be subject to a decision based exclusively on automatic processing — including profiling — that would have a legal effect on the data subject or would have a substantial negative effect in a similar way unless the decision (1) is required for the conclusion or fulfillment of a contract between the data subject and the controller or (2) is permissible based on the legislation of the European Union or its Member States to which the controller is subject and this legislation contains reasonable measures to safeguard the rights, freedoms and justified interests of the data subject or (3) occurs with the express consent of the data subject.
Where the decision (1) is required for the conclusion or fulfillment of a contract between the data subject and the controller or (2) takes place with the express consent of the data subject, MinebeaMitsumi Europe will take appropriate measures to safeguard the rights and freedoms and justified interests of the data subject, at the least including the right for a person to intervene on behalf of the controller to present the controller’s own views and to defend the decision.
If a data subject elects to claim this right with respect to automated decisions, it is possible to approach an employee of the controller at any time for this purpose
i) Right to revoke consent granted under data protection law
Every data subject affected by the processing of personal data has the right as granted by European guideline issuers and regulators to revoke consent to the processing of personal information at any time.
If a data subject elects to claim this right to revoke consent, it is possible to approach an employee of the controller at any time for this purpose.
11. Data protection rules on the use and application of Facebook
The controller has incorporated components from the Facebook Company into this Internet site. Facebook is a social network.
A social network is a social meeting place operated on the Internet, an on-line community that generally enables uses to communicate with one another and to interact in virtual space. A social network can serve as a platform to exchange views and experiences or to enable the Internet community to provide personal or company-related information. Among other features, Facebook enables users of the social network to create private profiles, upload photos and network via friend requests.
Facebook’s operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For data subjects residing outside the USA or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.Facebook’s operating company is Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. For data subjects residing outside the USA or Canada, the controller responsible for the processing of personal data is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
With each accession to an individual page of this controller-operated Internet site into which a Facebook component (Facebook plug-in) has been incorporated,the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Facebook component to download a representation of the respective Facebook component from Facebook. A general overview of all Facebook plug-ins can be accessed at developers.facebook.com/docs/plugins/. In the course of this technical process, Facebook gains awareness of which of our specific sub-pages are visited by the data subject.
If the data subject is simultaneously logged into Facebook, Facebook detects every access to our Internet site by the data subject and, for the entire duration of the visit to our Internet site, which specific sub-pages of our Internet site are visited by the data subject. This information is collected by the Facebook component and allocated to the data subject’s Facebook account. If the data subject presses one of the Facebook buttons incorporated into our Internet site -- such as the “like” button -- or if the data subject leaves a comment, Facebook allocates this information to the data subject’s personal Facebook user account and stores this personal information.
Facebook receives information through the Facebook component that the individual concerned has visited our website whenever the individual concerned is logged into Facebook at the same time as accessing our website, regardless of whether the individual concerned clicks on the Facebook component or not. If such transmission of this information to Facebook is not desired by the data subject, the transmission can be prevented by logging out of the data subject’s Facebook account prior to accessing our Internet site.
The data guidelines published by Facebook and available at de-de.facebook.com/about/privacy/ provide insight into the collection, processing and use of personal data by Facebook. In addition, explanations are provided there that describe the available Facebook setting options for protection of the data subject’s privacy. Furthermore, various applications can be obtained that make it possible to prevent data transmission to Facebook. Such applications can be used by the data subject to prevent data transmission to Facebook.
12. Data protection rules on the use and application of Google+
The controller has incorporated the Google+ interface into this Internet site as a component. Google+ is referred to as a social network. A social network is a social meeting place operated on the Internet, an on-line community that generally enables uses to communicate with one another and to interact in virtual space. A social network can serve as a platform to exchange views and experiences or to enable the Internet community to provide personal or company-related information. Among other features, Google+ enables users of the social network to create private profiles, upload photos and network via friend requests.
The Google+ operating company is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.
With each accession to an individual page of this controller-operated Internet site into which a Google+ interface has been incorporated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective Google+ interface to download a representation of the corresponding Google+ interface from Google. In the course of this technical process, Google+ gains awareness of which of our specific sub-pages are visited by the data subject. More detailed information on Google+ is available at developers.google.com/+/.
If the data subject is simultaneously logged into Google+, Google detects every access to our Internet site by the data subject and, for the entire duration of the visit to our Internet site, which specific sub-pages of our Internet site are visited by the data subject. This information is collected by the Google+ interface and allocated to the data subject’s Google+ account.
If the data subject presses one of the Google+ buttons incorporated into our Internet site and therefore submits a Google+1 recommendation, Google+ allocates this information to the data subject’s personal Google+ user account and stores this personal information. Google stores the data subject’s Google+1 recommendation and disseminates it to the public in accordance with the related conditions accepted by the data subject. A Google+1 recommendation submitted on this Internet site by the data subject is subsequently stored and processed together with other personal data such as the name of the Google+1 account used by the data subject and the photo downloaded into this account in other Google services such as search results from the data subject’s Google search engine or other locations such as Internet sites or in connection with promotional displays. Moreover, Google is able to link the visit to this Internet site to other personal data stored at Google. Google records this personal information, moreover, for the purpose of improving or optimizing the various Google services.
Google receives information from the Google+ button that the individual concerned has visited our site whenever the individual concerned is logged into Google+ at the same time as they visit our site, whether the individual clicks the Google+ button or not.
If such transmission of this information to Google+ is not desired by the data subject, the transmission can be prevented by logging out of the data subject’s Google+ account prior to accessing our Internet site.
Further information and data protection rules in force at Google can be accessed at www.google.de/intl/de/policies/privacy/. Further tips from Google regarding the Google+1 interface can be accessed at https://developers.google.com/+/web/buttons-policy.
13. Data protection rules on the use and application of YouTube
The controller has incorporated components from YouTube into this Internet site. YouTube is an Internet video portal that provides video publishers a cost-free opportunity to configure video clips and provides other users with similarly cost-free opportunity to view, evaluate and comment on these. YouTube permits the publication of all types of videos, providing complete movies and television programs but also music videos, trailers or user-produced videos on the Internet portal.
With each access to an individual page of this controller-operated Internet site into which a YouTube component (YouTube video) has been incorporated, the Internet browser on the information technology system of the person concerned is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Additional information on YouTube can be accessed at www.youtube.com/yt/about/de/. In the course of this technical process, YouTube and Google gain awareness of which specific sub-pages of our Internet site are visited by the data subject.
If the data subject is simultaneously logged into YouTube, access of a sub-page containing a YouTube video provides YouTube with an awareness of which specific sub-pages of our Internet site are visited by the data subject. This information is collected by YouTube and Google and allocated to the data subject’s YouTube account.
YouTube and Google will receive information through the YouTube component that the person concerned has visited our website whenever that person is logged into YouTube at the same time as accessing our website, regardless of whether that person clicks on a YouTube video or not. If such transmission of this information to YouTube is not desired by the data subject, the transmission can be prevented by logging out of the data subject’s YouTube account prior to accessing our Internet site.
The data protection rules published by YouTube can be accessed at www.google.de/intl/de/policies/privacy/ and provide insight into the collection, processing and use of personal data by YouTube and Google.
17. Legal basis of data processing
Art. 6 I letter a GDPR serves as the legal basis for our company’s processing operations in which we obtain consent for a specific purpose related to processing. If the processing of personal data is for the purpose of fulfilling a contract where the data subject is a party to the contract, as is the case with processing operations necessary for delivery of goods or rendering of another service or counter-service, the legal basis for such processing is Art. 6 I letter b GDPR. The same applies to processing operations required for the execution of precontractual measures such as in cases of requests for our products or services. Should our company be subject to a legal obligation under which processing of personal data is required, such as fulfillment of tax duties, this processing is based on Art. 6 l letter c GDPR. In rare cases, the processing of personal data can be required in the protection of vital interests of the data subject or another natural person. This would be the case, for example, if a visitor to our operations were to become injured and the visitor’s name, age, health insurance data or other vital information would need to be provided to a doctor, hospital or other third party. In such a case, the processing would be based on Art. 6 I letter d GDPR. Finally, processing operations could be based on Art. 6 I letter f GDPR. Based on this legal foundation are processing operations not covered by any of the previous legal bases where the processing is required to safeguard a justified interest of our company or a third party to the extent that the data subject’s interests, basic rights and basic freedoms do not outweigh our own. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. It took the view that a justified interest could be assumed if the data subject is a customer of the controller (Recital 47, second sentence, GDPR).
18. Justified interests in processing pursued by the controller or a third party
Where the processing of personal data is based on Art. 6 I letter f GDPR, our justified interest is the carrying out of our business activities for the benefit of all our employees and shareholders.
19. Duration for which personal data are stored
The criterion for the duration of storage of personal data is the respective legal retention period. Once this period lapses, the corresponding data are routinely deleted unless they are still required for the fulfillment or initiation of a contract.
20. Legal or contractual stipulations to make personal data available; requirement for conclusion of a contract; obligation by the data subject to make available personal data; possible consequences of failure to make data available
We clarify for you that legal regulations (as in the case of tax regulation) or contractual obligations (for example, to the contractual partner) may sometimes require personal data to be made available. It can sometimes be required for the conclusion of a contract that a data subject make personal data available to us that will subsequently need to be processed by us. For example, the data subject is obligated to make personal data available to us if our company is concluding a contract with the data subject. Failure to provide the personal data would lead to a situation where the contract could not be concluded with the data subject. Prior to making personal information available, the data subject must contact one of our employees. Our employee will clarify to the data subject on a case-by-case basis whether provision of the personal data is legally or contractually mandatory or required for the conclusion of the contract, whether an obligation exists to make available the personal data, and what the consequences of failure to provide the personal data would be.
As a company conscious of our responsibility, we refrain from automatic decision-making or profiling.
22. Local Data Protection Officers of Minebea Mitsumi Europe