Privacy Policy (GDPR)

1. Privacy Policy (GDPR)
HighChem Company Limited (Below, referred to as "our company") considers the protection of the personal data collected by our company very important. This policy informs you about how we process your personal data in accordance with the applicable data protection regulations of the European Economic Area (Below, referred to as "EEA"), in particular the General Data Protection Regulation 2016/679 (Below, referred to as "GDPR") and the UK Data Protection Act 2018 (Below, referred to as "UK GDPR"). Under the GDPR, our company is the controller of your personal data. In this policy, in addition to customers who purchase our products and services, we also refer to those who visit the websites of our company and HighChem group companies, etc., and job applicants to HighChem group companies as "customers".

2. Categories of your personal data we process and how we collect it
(1) We process the following categories of your data:
① Your identity and contact information (such as your name, company name, company address, job title, contact details, email address, phone number, credit card information and other personal data related to your preferences in relation to our products and services)
② Data entered in registration forms, etc. (customer requests, registered details, details of inquiries, etc.)
③ Data on your use of our products, services, website, etc. (such as your purchase history of our products and services, records of your receipt of marketing data provided by us, records and preferences of communications between you and us, records of your browsing or searches on our website and other media, data such as browsing time, and information on the usage of our website, such as interaction information, etc.)
④ Technical Data (such as information collected when you visit our website, such as your IP address, login data, browser type and version, device type, time zone, and your location)

(2) We collect your personal data directly or indirectly as follows:
① Direct collection:
When you provide your information directly to us via our website, designated forms, email, postal mail, or other methods. Our websites include corporate sites, sales sites, and recruitment sites. Other methods include when you provide your information to us through platforms provided by third parties, such as Instagram and LinkedIn.
②Indirect collection:
When you use our website, we indirectly collect technical data about the actions and patterns of your device or internet browser.
In order to obtain this technical data, we use cookies and analysis tools such as Google Analytics. For the policies relating to these, please refer to our separately established Cookie Policy.

3. Purpose and legal basis for processing your personal data
The type of personal data we process depends on how you interact with us. The following explanation explains how we process personal data and the legal basis for our processing of your personal data. The legal basis for the processing described is the GDPR and UK GDPR. In Japan, processing is generally based on your consent.

(1) Providing information and carrying out business related to products and services
①Type of personal data handled
Your identity and contact information (such as name, company name, company address, department name, country, location, telephone number, email address, credit card information, etc.), and data on your use of our products, services and websites (such as your purchase history of our products and services, records of your browsing or searches on our websites and other media, etc.)
② Purpose of handling
We process your personal data to provide you with product and service information and transactional activities, specifically to complete transactions, process and manage payments, and process your requests for products and services you request or use.
3) Legal basis
The legal basis is the performance of a contract with you and our legitimate interests in providing a quality service.

(2) When contacting customers or providing information
①Type of personal data handled
Your identity and contact information (such as name, address, telephone number, email address), data provided on registration forms, etc., data on your use of our products and services (such as your purchase history of our products and services, records of your browsing or searches on our website and other media), and technical data.
② Purpose of handling
We process personal data to contact you, such as through newsletters, provide you with information (including promotions, advertising, marketing and public relations), and to respond to your inquiries about various services.
3) Legal basis
The legal basis for this is your consent and our legitimate interests in providing you with a quality service.

(3) If you are a job applicant
①Type of personal data handled
Applicant's identity verification information (name, sex, date of birth, telephone number, email address), skills, qualifications, work history, resume, educational background, etc., desired job type
② Purpose of handling
To provide information to job applicants, contact them, and for other recruitment-related purposes
3) Legal basis
This is the consent of the job applicant.

(4) To improve our products, services, etc.
①Type of personal data handled
Your usage data (webpage visit history, usage status, etc.) and technical data (online identifiers, IP addresses, cookie identifiers, location data, etc.)
② Purpose of handling
We use the collected personal data to improve our products, services, etc. Furthermore, we process the data to improve our information provision related to them. This includes processing personal data to improve your experience when you visit our website, analyzing related traffic data, monitoring statistics and indicators, and improving, verifying the effectiveness of, managing, and investigating the website.
3) Legal basis
Our legitimate interests to provide and maintain our products, services and website, and your consent to the processing of cookies, etc.

We process your data for the specified, explicit and legitimate purposes set out above and will not further process it in a manner that is incompatible with those purposes. Furthermore, we will always inform you if we intend to process data originally collected for one purpose for a different purpose.

4. Sharing of Personal Data
We may share your Personal Data with the following recipients:

(1) Affiliated companies belonging to the HighChem Group.
　　　Our website In this case, the affiliated company and our company, which has established this policy HighChem are responsible for managing personal data.

(2) Service providers to our company, and business partners entrusted with the handling of personal data.
The service providers and contractors selected by us to provide our website and related services will process your personal data for the purposes set out in this policy, including, for example, cloud service providers, CRM/customer management service providers, marketing-related service providers, business travel arrangements, delivery services, reception desk services, meeting and event organizers, hospitality and accommodation services.

We may also disclose your personal data:
- To comply with laws, regulations, court orders, or requests from public or government authorities.
- When we determine that disclosure is necessary or appropriate for reasons of national security, law enforcement, or other issues of public importance.
・When it is deemed necessary for the protection of human life, body, or property.
- We reserve the right to transfer or inherit personal data held by us in the event that we transfer or inherit all or a part of our business or assets (including in the event of a merger, acquisition, reorganization, etc.).

5. Links to Third Party Services
Our website may contain hypertext links to third party websites or internet sources.

We do not control such third party websites and cannot be responsible for their privacy policies, etc. Please read the privacy policies, etc. of such third parties carefully to understand how they handle your personal data.

6. Transfer of Personal Data
Our company and HighChem Group, to which we belong, are conducting business worldwide. For this reason, in handling your personal data for the purposes described in this policy, HighChem Group may transfer your personal data to companies in HighChem Group located outside your country or to the recipients described in Section 4. In addition, in disclosing your personal data to the recipients described in Section 4, your personal data may be transferred to countries outside the EEA.

At HighChem Group, our company in Japan is primarily responsible for the processing of personal data for the purposes set out in this policy, and the main processing of information will be carried out in Japan. Regardless of the country in which you are located, when transferring personal information from Japan to a country outside of Japan, we will do so in accordance with the requirements of the Personal Information Protection Act, such as by entering into a contract that meets the requirements of the Personal Information Protection Act.

Between the EEA and the United Kingdom (Below, referred to as "UK") and Japan, there is an adequacy decision that recognizes that the mutual personal information protection systems are at a sufficient level of protection. In the event that personal data is transferred outside the EEA, we will comply with these applicable personal information-related laws and regulations and enter into contracts, etc., in which a specific form is required by such laws, in order to ensure that your personal data is adequately protected in accordance with applicable laws.

7. Retention period and disposal of personal data
We will retain personal data for the period necessary to achieve the purposes set out in this Policy and will promptly and securely destroy or delete it after the completion of that period, unless a longer retention period is required by law, etc.

8. Security measures and safety management measures
We take measures to safely manage information and strive to prevent leaks, etc., by implementing information security measures such as establishing and improving systems for protecting information, educating and raising awareness among employees, managing entrance and exit to areas where personal information is handled and controlling access to personal information, and introducing antivirus software. Furthermore, when providing or sharing personal data with recipients for the purposes set out in this policy, we will require them to take appropriate safety management measures.

9. Data Breach Notification
We have put in place information security systems and procedures to promptly detect and evaluate any possible breach of the security of personal data.

Depending on the outcome of the measures, we will make any necessary notifications required by supervisory authorities and/or contact customers affected by the breach.

10. Your rights
If you reside in a country in the EEA, the UK or Switzerland, you have the following rights, under the GDPR or UK GDPR, and under certain statutory conditions, regarding your personal data processed by us:

(1) Access to your personal data
Obtain confirmation from us as to whether or not your personal data is being processed, and, if so, access that personal data and certain related information.

(2) Correction or deletion of personal data
Correction or deletion of inaccurate personal data, and completion or deletion of incomplete personal data.

(3) Restriction of processing of personal data
Obtain from us the restriction of the processing of your personal data.

(4) Objection to improper processing of personal data
Object at any time to the processing of your personal data on grounds relating to your particular situation.

(5) Data portability of personal data
Receive the personal data you have provided to us in a structured, commonly used, machine-readable format and to transmit it to another controller without our hindrance.

(6) Right to withdraw consent to personal data
Where we process your personal data on the basis of your consent, you may withdraw your consent at any time. However, withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

(7) Opting out of automated decision-making
Not to be subject to automated decision-making, including profiling, based on the processing of your personal data (which produces legal effects or a similarly significant effect).

If you wish to exercise any of the rights set out above, please contact us using the contact details below. If you are not satisfied with our response to your request or have a complaint about how we process your personal data, you may lodge a complaint with a data protection supervisory authority.

11. Children
Our products and services are directed at adult audiences, therefore we do not knowingly process personal data from children under the age of 16. If we learn that we have processed information about a child under the age of 16, or equivalent minimum age in the applicable jurisdiction, we will take steps to delete that information as soon as possible.

12. Changes to this Policy
We will comply with relevant laws and regulations, review this policy as appropriate, and strive to improve it. Changes to this policy will take effect when the updated policy is posted on our website.

13. お問い合わせ窓口
　本ポリシーに関するお問い合わせは、下記の窓口でお受けしています。
　〒105-0001 東京都港区虎ノ門1丁目3番1号
　東京虎ノ門グローバルスクエア11階
　ハイケム株式会社　総務課
　連絡先：soumu@highchem.co.jp

更新日：2024/06/12