Yokogawa Group Privacy Statement
Yokogawa Electric Corporation and its subsidiary companies (hereinafter referred to as ‘Yokogawa’) recognize that the protection of information relating to individuals processed in the course of business (hereinafter referred to as ‘personal information’) is an important social responsibility. Yokogawa is committed to the proper handling and protection of Personal Information in accordance with the following statement.
1. Purpose
In order for Yokogawa to conduct its business, Yokogawa needs to process certain personal information about individuals. These individuals include, but are not limited to, Yokogawa’s employees, representatives of customers, suppliers, business contacts and other people that Yokogawa has a relationship with or may need to contact. Yokogawa declares that it will process personal information in an appropriate manner and endeavor to protect the rights and interests of individuals by undertaking appropriate compliance and security measures.
2. Establishment of a compliance system for the protection of personal information
Yokogawa has established a global Privacy and Data Protection management system for the purpose of ensuring compliance with Privacy and Data Protection laws and regulations. As part of this management system Yokogawa’s Privacy and Data Protection Governance Section has been established, which is the organization within Yokogawa responsible for global Privacy and Data Protection compliance. Yokogawa Electric Corporation Top Management oversees the Privacy and Data Protection Governance Section.
3. Appropriate processing of personal information
The Privacy and Data Protection management system referred to above, includes several internal Privacy and Data Protection policies, which specify how personal information shall be processed by Yokogawa, to meet Yokogawa’s Privacy and Data Protection standards and to comply with applicable Privacy and Data Protection laws and regulations. All Yokogawa employees must be familiar with and comply with Yokogawa’s Privacy and Data Protection policies and receive Privacy and Data Protection training, which includes training on Yokogawa’s Privacy and Data Protection policies. Failure to comply with the Yokogawa’s Privacy and Data Protection policies will render an employee liable to disciplinary action.
A number of principles included in Yokogawa’s Privacy and Data Protection policies:
Collection and Use: When Yokogawa collects personal information, a Privacy Notice to inform the individual(s) from whom Yokogawa collects personal information must be provided with the content set forth by and in line with applicable Privacy and Data Protection laws and regulations. Personal information shall only be used for the specific purposes notified to the individual(s) through the relevant Privacy Notice, unless otherwise set forth in the applicable law.
Accuracy: Personal information shall be accurate and kept up to date. Inaccurate or out-of-date personal information must be corrected/destroyed.
Retention Period: Personal information shall not be retained any longer than is necessary for the purpose for which the personal information was acquired and/or as necessary to comply with legal retention requirements.
Transfer to third parties: Personal information may only be transferred to a third party if the transfer is allowed under the applicable Privacy Notice; appropriate security measures have been taken to protect personal information, and other requirements under applicable Privacy and Data Protection laws and regulations have been met.
Data Processor: When outsourcing operations processing personal information to subcontractors, before engaging with a subcontractor, Yokogawa conducts due diligence by using Yokogawa’s supplier privacy compliance questionnaire form to validate if they ensure the same or higher level of Privacy and Data Protection standards ensured by Yokogawa and Yokogawa concludes data processing agreements if necessary.
Privacy by Design: In order to ensure that Yokogawa considers Privacy and Data Protection in the development, design and implementation of any new process, application or product/service which involves the processing of personal information, Yokogawa’s Privacy and Data Protection policies contain strong Privacy by Design requirements, such as conducting privacy impact assessments, and where required data protection impacts assessments.
4. Security of personal information
In order to ensure proper security of personal information, Yokogawa maintains robust Information Security Management standards. Under these standards Yokogawa strives to prevent unauthorized access to, loss, destruction, falsification or leakage of personal information. When outsourcing operations which include processing of personal information to subcontractors, Yokogawa takes appropriate security measures, such as requiring the subcontractors to maintain a high level of information security. Information security incidents related to personal information, however trivial, are managed in line with Yokogawa’s Privacy and Data Protection policies.
5. Response to Individual Rights on personal information
If Yokogawa receives a request from an individual concerning the individual’s personal information, such as informing about the collection and use of their personal information, having inaccuracies regarding their personal information corrected, withdrawing their consent for the collection and use of their personal information, and/or having their personal information deleted, Yokogawa will respond to and handle the request in line with the applicable statutory requirements and in line with Yokogawa’s Privacy and Data Protection policies.
6. Audit
To monitor Yokogawa’s Privacy and Data Protection compliance, the Privacy and Data Protection Governance Section conducts Privacy and Data Protection audits at company level in line with Yokogawa’s Privacy and Data Protection policies. Many Yokogawa entities are ISO 27001 certified.
Yokogawa Electric Corporation
Privacy and Data Protection Governance Section
Legal department
Corporate Administration Headquarters
2- 9-32, Nakacho 2-chome, Musashino-shi, Tokyo 180-8750, Japan
June 10, 2024