Privacy Policy for https://de.kashiyama.com

Controller of personal data

This website is operated by Kashiyama Europe GmbH, Leopoldstraße 244, 80807 München (“we”, “us”, “Kashiyama”)
You can also contact us via the phone: + 49 (0)89 / 208039 455.
Our parent company, KASHIYAMA Industries Ltd. is located in 385-8511 Nagano-ken, Saku-shi, Nenei 1-1, JAPAN.

Scope of this privacy policy

This document covers our processing of your personal data on our website: https://de.kashiyama.com This document also covers our processing of your personal data for other purposes such as recruitment or sales and services.

Legal grounds of our processing

We will only process your personal data if there is a legal basis to do so. On our website we rely on the following legal grounds.

Consent – If you agree to our processing. This will be clear when we ask for it. You are also able to withdraw your consent at any time.
Contractual obligation – If we have a contract with you, we will need to store and use some information about you. This also applies to pre-contractual measures necessary to enter into a contract. Further, this symbol also apples to employment contracts.
Balance of interests (Legitimate interest) – Legitimate interest allows us to process personal data if it is necessary for our legitimate interests and your interests or fundamental rights and freedoms do not outweigh our interest. We will inform below if we do such processing and what interests we pursue.

We have marked all processing activities described below with these symbols, so that you can easily see and understand what our legal grounds are.

Deletion of your personal data §

We will generally delete your personal information as soon as we no longer require it for the purposes for which we collected it. If any legal obligation stops us from deleting your information for a certain time, we will stop access to this information, store it securely and delete it after our legal obligation is over.
In case of processing based on your consent, we will delete information as soon as you revoke your consent.

Contacting us /

If you submit inquiries to us via our contact form, or our published contact details, the information provided in the contact as well as any contact information provided will be stored by us in order to handle your inquiry and in the event that we have further questions.

The processing of this data is based on Art. 6 (1) b) GDPR, if your request is related to the execution of a contract with us directly or if it is necessary to carry out pre-contractual measures. In all other cases, including when your request relates to our contracts with your employer (our customer), the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 (1) f) GDPR).
Insofar as necessary to answer your request swiftly and accurately, we will forward your request to our parent company in Japan.

The information you have given us will be stored until you ask us to erase the data or if the purpose for which the information is being stored no longer exists (e.g., after we have concluded our response to your request).

This Website

When using our website, certain personal information will be transferred to our servers automatically. This is necessary to provide you with the website. For example, our servers need to know your IP-Address to know where to send information.

Informational use

If you simply use our website to get information, we will automatically receive and store the following information about you:

Usage data

Which of our websites you visited
Date and time of your request

Metadata

Your IP-Address
Your computers time zone
Your computers date and time
Which website you came from
Information about your browser (version, language, fonts installed)
Information about your operating system (version, language)
Potentially other information your browser sends via the HTTP protocol.

This information is necessary for us to present you our website and show all our products and services. We have a legitimate interest to present our company with a modern looking website. As we only collect necessary information, there is no technical way for us to limit the kinds of information we receive.

The website is hosted and maintained by an external service provider in Japan.

We automatically delete all server-logs within 7 days. We store the logs for this time to see suspicious activities in our server and protect our infrastructure from outside attacks such as DDoS.

You can subscribe to our newsletter to receive updates on new products, events, and promotions we offer.
We have implemented a double opt-in procedure for our newsletter. When you enter your e-mail address in the sign-up form, you will receive an e-mail asking you to confirm your subscription to the newsletter. If you don’t confirm your subscription, we will automatically delete you e-mail address from our system within two weeks.

Our legal grounds for offering you the newsletter is your explicit and informed consent.
We do not use any additional tracking features in our newsletters (such as open- or click-tracking).

At any time, you can revoke your consent by unsubscribing from our newsletter. In this case, we will immediately stop sending you newsletters and will delete your e-mail-address from our data base. A link that you can use to unsubscribe can be found in every newsletter we send you and you can also write to us directly and we will remove you from the list.

Recruitment /

When you decide to apply to open job positions or send us your information in an unsolicited application, we will store and process all information that you provide to us. This will usually include:

Address
Name
Date of birth
Contact details
Academic history
Curriculum vitae

We do not need any further personal data from you to initially process your application.
If we decide to invite you to an interview, further notes may be created.
The purpose for this processing is to select and recruit suitable candidates. The legal basis is Art. 88 of the GDPR in connection with the German federal data protection law (BDSG) §26 (1).

Depending on the position you apply for, we may forward some or all your personal data to our parent company or other connected companies. This is the case if part of the position requires active communication with connected group companies and staff members of those companies may attend interviews.

We will store your information for 6 months after closing the recruitment process, based on our legitimate interest according to Art. 6 (1) f) GDPR to defend against possible legal claims. After 6 months, your personal data will be erased.

Products and services /

We process personal data of contact persons of our customers and trading partners to the extent necessary for the establishment of the contract, for the fulfilment of all necessary steps and to provide a high level of service and support which includes the following:

For guidance on the company’s products, services, and campaigns
To deliver the company’s products
For registration as a trading partner

The personal data collected from contact persons of customers and partners is the following:

Name
Place of employment
Contact details such as telephone number and e-mail address
Further information as printed on business cards or otherwise provided to us

We share personal data with third parties if this is necessary in conjunction with the handling of the contract; for example with our parent company to provide after-sales support and technical expertise in case of any problems.

Generally, the basis for the processing of personal data is Art. 6 (1) f) GDPR, our legitimate interest to conduct business with the contracting company, to fulfil the contract, develop better products and services and provide a high level of support.
The processing is based on Art. 6 (1) b) GDPR if you are in contract with us directly or if the processing is necessary to carry out pre-contractual measures to this effect.

The data shall be deleted upon termination of the business relationship or when the contact person changes unless legal retention periods exist.

We may contact you for marketing and survey analysis on the company’s products and services. This processing is based on our legitimate interest to develop better products and understand our customers better, as well as our legitimate interest to provide relevant marketing for similar products.
You may object to this processing at any time.

Kashiyama Cloud Storage /

When providing you with sensitive and confidential documents or information, we may upload it to our own NextCloud instance. NextCloud is a self-hosted cloud platform that we operate on servers maintained by Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have concluded the necessary data protection agreements with this processor. All data transferred from and to these servers is securely encrypted in transit. Further the servers are located in the EU.
When we provide a download or upload link to this cloud storage, please be aware that the platform is technically a Kashiyama Europe GmbH operated website. Therefore the same data is processed as described above under “Informational use”.

Additionally, for authentication purposes or to send out links, we may also process the e-mail address of our contacts.

The data shall be deleted upon termination of the business relationship or when the contact person changes unless legal retention periods exist.

Your Rights

At any time you can exercise your rights by contacting us directly or our data protection officer whos’ contact detail you can find below.
Please be aware that we might ask for some sort of verification of identity in order to safeguard other data subjects. These verifications will be made as non-intrusive as possible.

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to revoke your consent

Statutory limits may apply that can restrict your rights. For example if your request interferes with the rights and freedoms of a third person, your right to access may be limited.
In any case, we will answer your request within 30 days and in case we deny your request fully or in part, we will explain the reasons for this.

Right to lodge a complaint with a supervisory authority

At any time, you may lodge a complaint about our data processing activities with a supervisory authority.

Right to object

You have the right to object to any processing we do on grounds of our legitimate interest, if your particular situation challenges our balance of interests.
Unless we can demonstrate legitimate grounds for the processing which overrides your interests, rights, and freedoms, and if we do not need your personal data for the establishment, exercise of defence of legal claims, we will no longer process your personal data.

Questions regarding our processing or this policy

You can contact us for any questions regarding the privacy policy or our use of your personal data via the contact information above.

You can also contact our data protection officer, whom you can reach via dpo@enobyte.com

Enobyte GmbH
Augustenstr. 49
D-80333 Munich Germany
Email: dpo@enobyte.com