This Privacy Policy describes how KYOCERA Fineceramics Medical GmbH (hereinafter: KYOCERA) processes personal data (see also definition in Part D, I. ) when you use its websites. It also explains the choices you have regarding your personal data ("your rights") and how you can contact us.

Within the scope of our responsibility under data protection law, additional obligations have been imposed on us by the entry into force of the EU General Data Protection Regulation (Regulation (EU) 2016/679; hereinafter: "GDPR") in order to ensure the protection of personal data of the data subject (we also refer to you as data subject hereinafter as "customer", "user", "you", "you" or "data subject").

Insofar as we decide either alone or jointly with others on the purposes and means of data processing, this includes above all the obligation to inform you transparently about the nature, scope, purpose, duration and legal basis of the processing (cf. Art. 13 and 14 DS-GVO). With this declaration (hereinafter: "data protection notice"), we inform you about the manner in which your personal data is processed by us.

Our data protection notices have a modular structure. They consist of a general part for all processing of personal data and processing situations that come into play every time a website is called up (A - General) and a special part, the content of which only relates to the processing situation specified there with the designation of the respective offer or product, in particular the visit to websites specified in more detail here (B - Visit to and use of our Internet offers / social media;; C - Data protection declaration for business partners and interested parties).

In order to be able to find the parts that are relevant to you, please refer to the following overview for the subdivision of the data protection notices:

Part A

General

This part is always relevant for you.

Part B

Plugin, Tools and Social Media

This section is relevant for you if you use our German website, including our social media presence.

Part C

Cookie Policy

This part is always relevant for you.

Part D

Business partners and interested parties

This part is relevant for you if you want to work with us as a service provider, supplier or similar partner,

are already in an ongoing business relationship with us or have been in the past.

Part A

General

I. Who is responsible and how can I contact the Data Protection Officer?

The responsible person within the meaning of the DSGVO is

KYOCERA Fineceramics Medical GmbH

Lorenz-Hutschenreuther-Strasse 81

95100 Selb

Tel.: +49 (0)9287 – 807-0

E-mail: contact@kyocera-medical.de Commercial register number: HRB 6916, Hof Local Court

Managing Directors: Dr Carsten Russner, Dr. Fabian Preuß, Uwe Kemmer

If you have any questions about the processing of your personal data by us or about data protection in general, please contact as follows:

KYOCERA Fineceramics Medical GmbH

Lorenz-Hutschenreuther-Strasse 81

95100 Selb

E-mail: contact@kyocera-medical.de 

II. Purposes and legal bases for the processing of personal data

Unless otherwise stated, the legal basis for the processing of your data is Article 6 (1) (a) of the General Data Protection Regulation (DSGVO). Accordingly, we are permitted to process the data required to fulfil a task incumbent upon us.

III. duration of the storage of personal data

Your data will only be stored for as long as is necessary for the fulfilment of tasks, taking into account statutory retention periods.

IV. Your rights as a data subject

If we process your personal data, you have the following rights as a data subject:

• If your personal data is processed, you have the right to obtain information about the data stored about you (Art. 15 DSGVO).
• If inaccurate personal data is processed, you have the right to rectification (Art. 16 DSGVO).
• If the legal requirements are met, you can request the deletion or restriction of processing (Art. 17, 18 DSGVO).
• If you have consented to the processing or if there is a contract for data processing and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 DSGVO).
• If you have consented to the processing and the processing is based on this consent, you can revoke the consent at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by this. You have the right to object to the processing of your data at any time on grounds relating to your particular situation if the processing is based on Article 6(1)(e) of the GDPR (Article 21(1)(1) of the GDPR).

V. Note on data transfer to the USA

Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country in the sense of EU data protection law. US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

VI. Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. Right to object to data collection in special cases as well as to

a. Direct marketing (Art. 21 GDPR)

If the data processing is based on Art. 6 (1) e or f DSGVO, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection declaration. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims (objection under Article 21(1) of the GDPR).

If your personal data are processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerned for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct advertising (objection pursuant to Art. 21. para. 2 DSGVO).

a. Right of complaint to the supervisory authority

The contact details of the supervisory authority responsible for our company's registered office are:

Bavarian State Office for Data Protection Supervision

Address:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)

Promenade 18, 91522 Ansbach

Tel: +49 (0) 981 180093-0

Email: poststelle@lda.bayern.de 

Part B

Visit and use of our internet offers / social media

In the following, we would like to give you an overview of how we ensure the protection of your personal data when you visit our website and which types of personal data we process for which purposes and to what extent.

I. Special notes on the internet offer

1. external hosting

Our web server is operated by the company bitzinger GmbH. The personal data you transmit when visiting our website is therefore processed on our behalf by the company bitzinger GmbH.

Contact details:

Name of processor: bitzinger GmbH

Postal address: Ossecker Str. 174, 95030 Hof

E-mail: info@bitzinger.de

The personal data collected on this website is stored on the hoster's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 f DSGVO).

Our hoster will only process your data to the extent that this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

In order to ensure data protection-compliant processing, we have concluded an order processing contract with our hoster.

Remark:

Bitzinger GmbH uses Mittwald CM Service GmbH & Co. KG, Königsberger Str. 4-6, 32339 Espelkamp, Germany, as a subcontractor with regard to hosting.

For details, please refer to Mittwald's privacy policy: www.mittwald.de/datenschutz.

The use of Mittwald is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in ensuring that our website is presented as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.

2. logging

When you access this or other Internet pages, you transmit data to the web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

- IP address

- Directory protection user

- Date

- Time

- pages viewed

- Protocols

- Status code

- Data volume

- Referrer

- User Agent

- called hostname

The access logs of the web servers record which page requests have taken place and when.

The IP addresses are stored anonymously. For this purpose, the last three digits are removed, i.e. 127.0.0.1 becomes 127.0.0.*. IPv6 addresses are also anonymised. The anonymised IP addresses are retained for 60 days. Details of the directory protection user used are anonymised after one day.

Error logs, which record faulty page views, are deleted after seven days. In addition to the error messages, these contain the accessing IP address and, depending on the error, the accessed website.

The mail logs for sending emails from the web environment are anonymised after one day and then retained for 60 days. During anonymisation, all data on the sender/recipient etc. is removed. Only the data on the time of sending and the information on how the email was processed are retained (queue ID or not sent).

Mail logs for sending via the mail server are deleted after four weeks. The longer retention period is necessary to ensure the functionality of the mail services and to combat spam.

This data is not merged with other data sources.

The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website - for this purpose, the server log files must be collected.

3. processing of data when accessing our website - log files

When you visit our website, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of web browser, the operating system used, the domain name of your internet service provider and similar. In addition, the IP address is transmitted and used to access the service you have requested. This information is technically necessary in order to correctly deliver the content of web pages requested by you and is mandatory when using the Internet.

According to our IT security concept, the resulting log file data is generally stored for a period of 30 days in order to be able to detect and analyse any attacks against our website. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO.

We also use contracted, carefully selected and controlled service providers outside the EU. To ensure the adequacy of the level of data protection, we have agreed the standard contractual clauses of the EU Commission with these service providers, unless the Commission has determined by decision the equivalence of the level of data protection in the recipient country or the exemptions of Art. 49 GDPR are applicable.

4. processing of data when using the website - your requests

If you send us an enquiry by e-mail or via the contact form, we collect the data you provide for the purpose of processing and responding to your request. We store your enquiry for a period of up to two years for verification purposes. Depending on the nature of your enquiry, a longer storage period may apply; we provide information on this in the respective purposes of processing. Legal basis for data processing Art. 6 para. 1 sentence 1 letter f DSGVO.

II. Notes on ensuring data security

We take technical and operational security precautions on our sites to protect the personal data we store from access by third parties, loss or misuse and to enable secure data transfer.

We must point out that, due to the structure of the Internet, unauthorised access to data by third parties may occur. It is therefore also your responsibility to protect your data against misuse by encrypting it or in any other way. Without appropriate protective measures, unencrypted data in particular, even if transmitted by e-mail, can be read by third parties.

 III. Plugins, tools and social media

1. Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether data entry on this website (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) as defined by the TDDDG. The consent can be revoked at any time.

For more information about Google reCAPTCHA, please see the Google Privacy Policy and the Google Terms of Service at the following links: policies.google.com/privacy and https://policies.google.com/terms?hl=de.

Part C

Our Cookie Policy

I. General information on the use of cookies

Our website uses so-called cookies. Cookies are small text files that are stored on your terminal device and saved by your browser. They serve to make our offers more user-friendly, effective and secure. We use both so-called temporary cookies, which are automatically deleted when you close your browser ("session cookies"), and persistent (permanent) cookies.

You have the choice of whether to allow cookies to be set. You can make changes in your browser settings. In principle, you have the choice of accepting all cookies, being informed when cookies are set or rejecting all cookies. If you choose the latter option, it is possible that you will not be able to make full use of our services.

When cookies are used, a distinction must be made between cookies that are absolutely necessary and those for more extensive purposes (measuring access figures, advertising purposes).

II. Mandatory cookies when using the website

When you access this website, we store technical cookies (small files) on your device that are valid for the duration of your visit to the website, so-called session cookies. We only use these during your visit to our website and only store the current session ID of the browser.

This cookie is removed again when the browser session is ended.

IP addresses are not stored.

III. Use of cookies with your consent with Usercentrics Consent Management

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this in a data protection compliant manner. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, website: usercentrics.com/en/ (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:

• Your consent(s) or the revocation of your consent(s)
• Your IP address
• Information about your browser
• Information about your terminal
• Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

Job processing

We have concluded a contract on order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Part D

Privacy policy for business partners and interested parties

In this document, we explain which of your personal data we process when you contact us or when we have a business relationship with your company. With this information - valid since 25 May 2018 - we would like to comply with the obligations of the EU General Data Protection Regulation and inform you transparently about our data processing.

This data protection notice applies to all companies listed below. The responsible person according to Art. 4 No. 7 DSGVO is named in the imprint.

KYOCERA Europe GmbH

Address: Fritz-Müller-Str. 27, 73730 Esslingen, Germany

KYOCERA Fineceramics Italy S.r.l.

Address: Viale delle Industrie 20/5, 20020 Arese (MI), Italy

KYOCERA Fineceramics S.A.S.

Address: Parc Icade Orly - Rungis, 21 rue de Villeneuve, 94150 Rungis, France

KYOCERA Fineceramics Ltd.

Address: Prospect House, Archipelago, Lyon Way, Frimley, Surrey GU16, 7ER, England

KYOCERA Automotive and Industrial Solutions GmbH

Address: Waldstrasse 41, 63128 Dietzenbach, Germany

KYOCERA Fineceramics Europe GmbH

Address: Steinzeugstraße 92, 68229 Mannheim, Germany

KYOCERA Fineceramics Medical GmbH

Address: Lorenz-Hutschenreuther-Strasse 81, 95100 Selb, Germany

If you have any questions about the processing of your personal data by us or about data protection in general, please contact by mail fabian.preuss@kyocera-medical.de   or  privacy@kyocera.de (or for KYOCERA Automotive and Industrial Solutions GmbH - privacy.kas@kyocera.de and for KYOCERA Fineceramics Europe GmbH  datenschutz@kyocera-fineceramics.de.

I. Personal data processed about you

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, (business) contact details and relationship with a company and your interaction/activities with us.

We process the data that we receive from you in the context of your enquiries or existing contractual relationships. This includes, in addition to your (business) contact data, in particular all information exchanged, such as e-mails, orders, requests for our products, payment data. In the case of business relationships, you must provide the personal data that is required for the preparation or execution of the contracts or which we are legally obliged to process; otherwise we cannot fulfil the contracts.

II. scope of data processing and purposes of use

1. contract implementation

KYOCERA Europe GmbH Group (hereinafter: KEG Group) processes the data provided in the context of placing an order for the performance of the contract and may use specialised, carefully selected and monitored service providers for this purpose (e.g. financial service providers, hosting of data, service/maintenance). Data processing in the context of contract performance includes the use of data to provide the contractually owed service, including the processing of payments via our payment service providers/banks, provision of services in the context of service contracts or the processing of any warranty claims. In addition, in the context of a financing enquiry, the data required to prepare an offer may be used by KEG Group and, if necessary, passed on to the contractual partners. Further details on the purposes can be found in the respective contract documents. This data processing is carried out on the basis of Art. 6 para. 1 sentence 1 letter b DSGVO.

The data collected by KEG Group regarding the purchase of our products or the use of services may also be passed on to the external auditors and/or tax consultants of KEG Group for their consulting and auditing purposes. KEG Group stores the data collected for the performance of the contract in the operational system for as long as warranty claims exist or for other purposes indicated in this declaration. Subsequently, the data subject to the retention obligations according to §§ 146 ff. Tax Code (Abgabenordnung) or § 257 of the German Commercial Code (Handelsgesetzbuch) are archived and deleted after expiry of these retention obligations. All other data will be deleted immediately, unless there are further purposes for the use of the data as indicated in this declaration. The data processing is carried out with regard to warranty claims on the basis of Art. 6 para. 1 p. 1 lit. b DSGVO as well as for the fulfilment of legal obligations according to Art. 6 para. 1 p. 1 lit. c DSGVO.

2. audio-video conferencing and e-mail

Data processing

One of the tools we use to communicate with our business partners is online conferencing. The individual tools we use are listed below. If you communicate with us by video or audio conference via the Internet, your personal data will be collected and processed by us and the provider of the respective conference tool. The conferencing tools collect all data that you provide/enter to use the tools (e-mail address and/or your telephone number).

Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other "contextual information" related to the communication process (metadata). Furthermore, the provider of the tool processes all technical data required to handle the online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers.

Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemails uploaded photos and videos, files, whiteboards and other information shared while using the Service.

Please note that we do not have full influence on the data processing procedures of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the data protection statements of the respective tools used, which we have listed below this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 p. 1 lit. B DSGVO). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO).

Insofar as consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with effect for the future.

Storage period

The data collected directly by us via the video and conference tools is deleted from our systems as soon as you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal retention periods remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

We use the following conference tool:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy:

privacy.microsoft.com/en/privacystatement.

Conclusion of a contract on order processing

We have concluded an order processing contract with the Microsoft Teams provider and fully implement the strict requirements of the German data protection authorities when using Microsoft Teams.

Job processing

We have concluded a contract on order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Electronic mail (e-mail)

Information that you send to us unencrypted by electronic mail (e-mail) can possibly be read by third parties during transmission. As a rule, we are also unable to verify your identity and do not know who is hiding behind an e-mail address. Legally secure communication by simple e-mail is therefore not guaranteed. We use - - filters against unwanted advertising ("SPAM filters"), which in rare cases may also automatically classify normal e-mails as unwanted advertising by mistake and delete them. E-mails containing harmful programs ("viruses") are automatically deleted by us in any case.

If you wish to send messages to us that are worthy of protection, we recommend that you encrypt and sign them in order to prevent unauthorised knowledge and falsification on the transmission path or send the message to us by conventional mail.

Please also let us know whether and how we can send you encrypted e-mails in order to reply to your mailings. If you do not have the option of receiving encrypted e-mails, please let us know the method of contact you would like to use in order to reply to your messages that are worthy of protection.

3. address and creditworthiness check

In order to check your address and creditworthiness, KEG Group calls up the address data stored in the databases of your company from credit agencies and credit insurers as well as creditworthiness data, including those determined on the basis of mathematical-statistical procedures (scoring). This is done if KEG Group enters into an economic risk with the conclusion of the contract and wants to protect itself by means of the creditworthiness query. With the help of this information, KEG Group can grant a goods delivery or service credit.

Various credit agencies and credit insurers provide KEG Group with addresses and creditworthiness data. We will be happy to inform you on request which credit agencies and credit insurers we use for your company. To do so, please contact us using the contact details above.

The information from the credit agencies and credit insurers and the internal information on payment behaviour are evaluated by the KEG Group and thus an own rating is created as a basis for the allocation of a credit limit. The credit rating data is deleted 5 years after the last delivery of goods. For these purposes, credit information may also be forwarded to KYOCERA Corporation, 6 Takeda, Tobadono-cho, Fushimi-ku, Kyoto 612-8501, Japan, as part of the contract initiation process. Japan provides an adequate level of protection, as confirmed by decision of the EU Commission. The data processing referred to here is carried out on the basis of Art. 6 para. 1 sentence 1 letter f DSGVO in order to provide you with a goods delivery or service credit.

4. promotional use of data by the KEG Group

KEG Group as well as commissioned, carefully selected and monitored service providers (printers, lettershops, etc.) use the name, address of you as a contact person in ongoing business relationships and interested parties, as well as the data accruing within the scope of the business relationship (contact data, products purchased, services ordered, etc.) for advertising purposes. The KEG Group provides further information on products and services from the KEG Group and carries out analyses for marketing purposes (so-called advertising scoring). In addition, data may be used for data analysis for advertising purposes, which KEG Group receives from you on the basis of your consent. Through this promotional approach, we want to continue to inform you about current developments in our products and services, ensure that we can provide you with the services you need and thus build a long-lasting business relationship.

The KEG Group uses your telephone number for advertising purposes if consent has been given or the conditions for presumed consent - for example within the framework of an existing business relationship or after prior contact - are met. In addition, the KEG Group uses the e-mail address collected from the contact persons in the course of concluding a contract to advertise similar offers. Of course, you have the right to object to these advertising approaches, which you can most easily assert by contacting us using the above-mentioned contact details. We refer to the right to object to advertising separately in each case.

For the achievement of the objectives associated with the promotional use, the data will be processed during the term of our products and your capacity as a customer. Exceptions apply if longer use is permitted by consent and/or data is subject to statutory retention obligations. In the latter case, the data will be deleted after the retention period has expired. Exercising your right to object, which we inform you about under IV, may result in a shorter processing period.

The legal basis for the advertising use is Art. 6 para. 1 sentence 1 letter f DSGVO or, if you have given your consent, Art. 6 para. 1 sentence 1 letter a DSGVO. We inform you about your rights regarding the use of advertising, in particular the right to object to advertising, below.

5. data processing for press work

If you are a journalist and contact us (e.g. by phone or in writing), we will store your data to handle the communication and to keep track of the process. We may send you emails or mail with information about KYOCERA companies, products and services if you are on our press mailing list. We may also share the information with monitored and controlled agencies with whom we work. You can object to receiving press information or revoke your wish at any time - simply inform us of this wish using the contact details provided above or in the emails. The described data processing for the purposes of press relations is based on your consent according to Art. 6 para. 1 sentence 1 letter a DSGVO or, in particular in the case of advertising by post, according to Art. 6 para. 1 sentence 1 letter f DSGVO.

6. processing of personal data due to legal obligations

KEG Group - like every company in Europe - is subject to various legal obligations to carry out checks on the data of our customers and business partners. We process your personal data in these cases only to the extent necessary for these legal requirements. In order to fulfil the legal obligations, it may be necessary to process your data in part automatically with the aim of evaluating personal aspects (profiling). Automated case-by-case decisions are made - unless you are expressly informed of this. The legal basis is Art. 6 para. 1 sentence 1 lit. c DSGVO in conjunction with the relevant statutory provisions.

These legal requirements refer in particular to:

• Fraud and money laundering prevention
• Control and reporting obligations under tax law
• Assessment and management of risks in the Group
• Sanctions lists

III. Disclosure of data within the KEG Group and to distributors

KEG Group may share your master data (company name, contact person, address and contact details such as telephone number and email address) with other KEG Group companies as well as KYOCERA Corporation (address: 6 Takeda, Tobadono-cho, Fushimi-ku, Kyoto 612-8501, Japan, tel. +81 75 604 3500; fax +81 75 604 3501) (hereinafter: KC) and KYOCERA International Inc. (address: 8611 Balboa Avenue, San Diego, Ca. 92123 Tel. +1 858-576-2626) (hereinafter: KII) to ensure that all KEG Group, KC or KII companies involved in a transaction with you (e.g. processing a contract) have uniform master data about you. This serves to simplify our processes and may exempt you from having to provide the master data again when contacting another group company. This data processing is carried out on the legal basis of Art. 6 para. 1 sentence 1 letter b or f DSGVO. Your rights are safeguarded by regulations that ensure a high standard of data protection.

In addition to master data, order data may also be transferred to other KEG Group companies, KC or KII if required by your order. The various products are manufactured by different KYOCERA companies (mostly KC), so that a transfer of delivery data may take place to simplify order processing and delivery. In this case, you will be informed of the transfer as part of the conclusion of the contract. The legal basis is Art. 6 para. 1 sentence 1 letter b DSGVO.

The data you provide may also be passed on during the contract initiation process: In some cases, the products/services you have requested may not be distributed by our company, but by other companies within the KEG Group or by external (independent of Kyocera) companies (in particular distributors). In such cases, we may forward your request directly to the relevant company, with the purpose that the company can contact you directly with its expertise and assist you in your request in the best possible way. It is possible that the relevant companies are based outside the EU, in particular they may be based in Japan. It is agreed with the companies that have their registered office in Japan that they comply with a comparable level of data protection, in particular within the KEG Group by concluding EU standard contractual clauses. Further information can be obtained directly from the companies to which we have forwarded your data or from us using the contact details above. The legal basis for this procedure is either Art. 6 para. 1 p. 1 lit. b or (if the forwarding is not part of your request) lit. f DSGVO.

The processing operations described above may result in your master data also being processed by KEG Group companies or other cooperating companies outside the European Union (EU) or the European Economic Area (EEA). Japan provides an adequate level of protection, as confirmed by decision of the EU Commission. If an adequate level of data protection has not been determined by the EU Commission, we have taken contractual safeguards, usually we have concluded the EU standard contractual clauses.

IV. Your rights

The easiest way to exercise your rights is to contact us at the above address. Every data subject has the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification of inaccurate data (Art. 16 DSGVO)
• Right to erasure (Art. 17 DSGVO)
• Right to restrict the processing of personal data (Art. 18 DSGVO)
• Right to data portability (Art. 20 DSGVO)
• Right to lodge a complaint with a data protection supervisory authority (Art. 77 DSGVO).

You may object to the processing of personal data for advertising purposes, including the analysis of customer data or the transmission to third parties for advertising purposes, at any time without giving reasons.

In addition, every data subject has a general right to object (cf. Art. 21 (1) DSGVO). In this case, the objection to data processing must be substantiated. If data processing is based on consent, your consent can be revoked at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Last revision: May 2024