Responsible as controller for the processing of your personal data is:
Japan Pulp & Paper Company Limited
Address: Forefront Tower, 3-12-1 Kachidoki, Chuo-Ku, Tokyo 104-8656, Japan.
We process various personal data you provide to us when using our website for several purposes.
In principle, the following can be considered as the purposes of the processing: the processing for the initiation of contractual relationships and the performance of contracts (Art. 6 (1) lit. b GDPR), the processing for the protection of legitimate interests (Art. 6 (1) lit. f GDPR), the processing based on your consent (Art. 6 (1) lit. a GDPR) and/ or the processing subject to statutory provisions (Art. 6 (1) lit. c GDPR).
You can find in the following further information on the specific personal data and the purposes we process such personal data for as well as the legal basis for such processing.
While visiting our website, the following specific data is stored upon every visit:
• Name of your internet provider
• Time and date of your visit
• Browser information
• Referral-URL (previous visited website)
• Information on your device
• Information on your browsing behavior
We differentiate between strictly necessary cookies, which are required for the use of our websites, statistics cookies, with which we generate aggregated data on website usage and statistics, and marketing cookies to display relevant content and advertising.
As far as data is collected by cookies, which are strictly necessary for the use of the website, the use of such cookies is based on Art. 6 (1) lit. f GDPR. Purpose and our legitimate interest are administration and improved functionality of our website as well as preventing security issues (e.g. hacking).
Other cookies, such as statistics cookies and marketing cookies are only used if you have given us your prior consent pursuant to Art. 6 (1) lit. a GDPR. Purpose of the processing of statistics cookies is the analysis of the use of our website as well as improved functionality with regard to the website and purpose of the processing of marketing cookies is advertising. You have the right to withdraw your consent to such cookies at any time with effect for the future.
When you contact us by e-mail, your e-mail address as well as any other details provided by you will be processed by us in order to best answer any questions or issues you may have.
When you use our inquiry form, we process the personal data you provide in said form: name, company/organization, country/region, email address, telephone number and any data disclosed in the form in order to best answer any questions or issues you may have.
Legal basis for the processing of personal data is Art. 6 (1) lit. f GDPR (legitimate interests). Our legitimate interest for the processing is the offering of good customer care and optimal handling of your requests.
We maintain business relationships with our customers, suppliers and other business contacts. For this, we process your name, address, company, email address, telephone number and all other personal data you choose to disclose to us in relation to our business relationship.
The processing of the personal data is based on Art. 6 (1) f. GDPR (legitimate interests). Purpose and our legitimate interest is maintaining business relationships and staying in touch with our business partners.
There is no legal or contractual obligation to provide us with your personal data when using our website. We only ask you to provide us with the data necessary for providing our services. Without these personal data, we are not able to offer you the full functionalities of the website and our services may be limited.
We use external service providers to process personal data when providing the website and its functionalities and services to you. Processing of personal data by such service provider is carried out on our behalf and in accordance with our instructions (so-called “Processors”, see Art. 4 No. 8 GDPR).
We engage the following service providers or categories of services providers:
• IT Service Providers (including hosting, administration and security reviews).
We may also share personal data with recipients, which process personal data under their own responsibility for own purposes (see Art. 4 No. 7 GDPR). This includes transfer to the following recipients or categories of recipients:
Any transfer to a third country shall take place only in compliance with the applicable data protection regulations, in particular the assurance of an adequate level of data protection (see Art. 45 GDPR).
We transfer your personal data in the following cases:
• Processing of personal data by services providers located in Japan acting on our behalf, including hosting and administration of our website (see Section D). According to the EU Japan adequacy decision by the EU Commission Japan provides an adequate level of protection pursuant to Art. 45 GDPR.
• Sharing of personal data with Google located in the USA for tracking and web analytics purposes. Google has subjected itself to the EU-US Privacy Shield Agreement, https://www.privacyshield.gov/EU-US-Framework. According to the EU-US privacy shield decision by the EU Commission data transfers to companies located in the USA and certified under the EU-US Privacy Shield Agreement are subject to an adequate level of protection.
We process your personal data as long as they are necessary for the specific processing purposes.
In general, we store your personal data for the time required for carrying out the processing for the purposes above, unless storage beyond this period is necessary to fulfil the respective processing purposes.
We maintain up-to-date technical measures to safeguard data security, in particular to protect your personal information from threats when transferring data and from third parties gaining unlawful knowledge. These measures are constantly adapted to the latest state of the art.
In order to prevent unauthorized access by third parties to your personal data, the connection is encrypted using SSL technology.
You have the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR).
When personal data is processed based on your consent, you have the right to withdraw your consent according to Art. 7 (3) GDPR. Please keep in mind that your withdrawal only affects future processing based on your consent.
To exercise the aforementioned rights, you can contact us, in particular via email under . Please note that we may require you to present proof of identity to verify the eligibility of your rights execution.
If you are of the opinion that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). This right to complain is without any prejudice to any other administrative or judicial remedy.
Information about your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you on the basis of Art. 6 (1) lit. f GDPR (processing of personal Data based on legitimate interests); this includes profiling based on those provisions (Art. 4 No. 4 GDPR).
Should you decide to object the processing, we will stop to process personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the purpose of establishment, exercise or defence of legal claims.
You also have the right to object at any time to processing of personal data concerning you for the purpose of advertising; this also applies to profiling insofar as it is associated with advertising.
Should you decide to object to the processing for advertising purposes, we will stop to process personal data concerning you for these purposes.
The objection is not subject to any form. Ideally, it should be lodged via email at the bodies mentioned in Section A.
Established on August 1, 2020