EXTERNAL PRIVACY NOTICE

We respect the privacy of every person who visits or registers with Toshiba Electronics Europe GmbH's website (the “Site”) and we are further committed to ensuring a safe online experience. We also respect the privacy of our suppliers and service providers and of every person who uses the products and services that we make available from the Site or who engages with us to use the products or services that Toshiba Electronics Europe GmbH (“TEE”) provides (be it through the Site or not) (our “Services”) or whose personal information we may process as a result of providing the Services to others or who applies to work at TEE.

To Russian citizens:

We respect the privacy and security of your personal data wherever we provide our services and products. Therefore, through technical and organizational measures, we have ensured that personal data of Russian citizens will not be stored, used and forwarded outside of the Russian territory. As a consequence, we are regrettably not able to offer all of the Website services (such as newsletters, for example) to Russian citizens.

1. PURPOSE OF THIS POLICY

  1. Toshiba strictly observes the Act on the Protection of Personal Information and relevant laws, guidelines established by the government and other regulations. Toshiba has established the Personal Data Protection Policy (the "Policy"), which Toshiba carefully implements and maintains, while striving to continuously improve the personal data protection management system.
  2. Toshiba has established a management framework to protect personal data assigning a person in charge at each of its relevant divisions and ensures that all officers and employees recognize the importance of the Policy and comply with it.
  3. Toshiba utilizes personal data within the scope of the intended use that is clearly communicated to customers, and takes measures not to be used beyond the scope. Toshiba does not disclose or provide personal data provided by customers to third parties except with the consent of the customer from whom the personal data was obtained or when there is a legitimate reason.
  4. While maintaining the accuracy and up-to-dateness of personal data, Toshiba strives to prevent unauthorized access to personal data or the leakage, loss, or damage of personal data and continually enhances and remediates information security management.
  5. Toshiba responds to inquiries from customers concerning personal data or requests from customers for disclosure of personal data sincerely and without delay.

Established: July 1, 2017
Revised: December 22, 2023

Taro SHIMADA
President and Chief Executive Officer
Toshiba Electronic Devices & Storage Corporation

This Basic Policy applies to personal data held by Toshiba Electronic Devices & Storage Corporation in Japan. Concerning the privacy policies of Toshiba's affiliates in Japan or overseas subsidiaries, please check with each company.

This privacy notice (“Privacy Notice”) explains our approach to any personal information that we might collect from you or which we have obtained about you from a third party and the purposes for which we process your personal information. This Privacy Notice also sets out your rights in respect of our processing of your personal information. For more information click here.

This Privacy Notice will inform you of the nature of the personal information about you that is processed by us and how you can request that we delete, update, transfer and/or provide you with access to it.

This Privacy Notice is intended to assist you in making informed decisions when using the Site and our Services and/or to understand how your personal information may be processed by us as a result of providing the Services to others or when you apply to work at TEE. Please take a moment to read and understand it.

Please also note that this Privacy Notice only applies to the use of your personal information obtained by us, it does not apply to your personal information collected during your communications with third parties.

2. WHO ARE WE AND WHAT DO WE DO?

The business domains Toshiba utilizes personal data are covered by Electronic Devices and Storages.

With respect to the intended use of personal data which Toshiba holds, please refer to the Intended Use of Personal Data (Material).

When Toshiba obtains personal data from customers on each products and services, Toshiba clearly indicates in advance the purpose for which the personal data is intended to be used. Toshiba uses the information within the scope of the stated purpose of use. When the need to use a customer's personal data for any purpose that goes beyond the stated purpose of use arises, Toshiba notifies the customer to that effect and obtains the customer's consent before using the information for such purpose. Toshiba uses personal data which are contracted from other companies within the scope of the contract with the company.

The operation of the Website, including data processing for online marketing, web analysis, tracking and customer information purposes are jointly operated by Toshiba Electronics Europe GmbH, Hansaallee 181, 40549 Düsseldorf, Germany (hereinafter “TEE”) and Toshiba Electronic Devices & Storage Corporation, 580‐1, Horikawa-Cho, Saiwai-Ku, Kawasaki, Kanagawa, Japan (hereinafter “TDSC).

Therefore TEE and TDSC are both data controller and responsible for your personal data processed via the site.
For further information on the written joint controllership agreement, please contact datenschutz@datenzeit.de.

3. HOW TO CONTACT US?

  1. Toshiba does not disclose customers' personal data to third parties except in the following cases.
    1. When the customer has given a prior consent to the disclosure
    2. When complying with laws and regulations
    3. When disclosure is necessary for the protection of human life, human health or property and it is difficult to obtain the consent of the customer
    4. When Toshiba consigns the handling of personal data to a third party within the scope necessary to achieve the purpose of use
    5. When another entity succeeds to the business of Toshiba due to a merger, corporate separation, transfer of business or otherwise
  2. When it is deemed that an inquiry from a customer concerning products, repairs, or service can be more appropriately dealt with by a Toshiba affiliate or distributor, we may provide the customer's name, address, telephone number and other information to the affiliate or distributor on the basis of consent of the customer.

If you have any questions about this Privacy Notice or want to exercise your rights set out in this Privacy Notice, please contact our Data Protection Officer at:

Data Protection Officer
Mr. Johannes Schwiegk
c/o Datenzeit GmbH
Friedrich-Engels-Allee 200,
42285 Wuppertal
Germany

Email: datenschutz@datenzeit.de

4. WHAT PERSONAL INFORMATION DO WE COLLECT AND HOW DO WE USE IT?

Toshiba complies with the following requests from customers concerning the customer's personal data held by Toshiba : (1) Request for disclosure; (2) Request for notification of the intended purpose ; (3) Request for correction; (4) Request for addition; (5) Request for deletion; and (6) Request for cessation of use or cessation of disclosure to third parties. Please check with ＜Inquiry Desk＞ for details of request procedures.

Please note that there is a fee charged for requests for disclosure and requests for notification of the intended use.

1. Postal Address for Requests for Disclosure

Please post Requests for Disclosure to the address shown below after attaching the necessary documents to the prescribed request form. When posting the request form to Toshiba, please use simplified registered mail, or another method enabling confirmation of delivery. Please write on the envelope, "Personal Data Request enclosed."

〒212-8583
Head of Personal information Protection
Toshiba Electronic Devices & Storage Corporation
1 Komukai-Toshiba-cho, Saiwai-ku, Kawasaki, Kanagawa

2. Documents to be submitted concerning Requests for Disclosure

When making requests for disclosure, click the link below to download the request form 1), complete all prescribed fields, enclose the identity confirmation document 2), and post the documents to the postal address indicated in 1. above.

1) Toshiba Electronic Devices & Storage Corporation prescribed request form
(1) For requesting disclosure of personal information or notification of intended use (fee required)
Request Form for Personal Data Disclosure (PDF: 72KB)

(2) For requesting a correction, addition, deletion, suspension of use of personal information or suspension of provision to third parties (no fee required)
Request Form for Personal Data Correction (PDF: 79KB)

Note: A fee applies only for disclosure of personal data or notification of intended use. No fee is charged for correction, addition, deletion, cessation of use, or cessation of disclosing to third parties.

2) Identity confirmation document
A copy of one of the following documents: 1) driver's license; 2) health insurance card; 3) passport; 4) pension booklet; 5) resident registry card; or 6) individual number card (only the front with an ID photo)

Note: After confirming receipt of the prescribed documents and the fee, Toshiba will send a confirmation notice of the receipt to you.

3. Requests for Disclosure through Agent

When your agent is making a Request for Disclosure on your behalf, include the following documents in addition to 1) and 2) in 2. above.

1) Matters Concerning the Agent (PDF: 68KB)

2) Agent identity confirmation document
A copy of one of the following documents: 1) driver's license; 2) health insurance card; 3) passport; 4) pension booklet; 5) resident registry card; or 6) individual number card (only the front with an ID photo)

3) Power of Attorney (PDF: 40KB)
(The person to whom the personal data refers should stamp a power of attorney with his or her seal, and attach a seal registration certificate. When the agent is a person with parental authority or other legal representative, the person making the request may submit a copy or an abridged copy of the family register or a certificate of residence indicating the relationship with the person to whom the personal data refers instead of a power of attorney.)

4. Fee for Requests for Disclosure or Notification of Intended Use

Toshiba charges a fee for requests for disclosure or notification of intended use.

Fee for each request: ¥800 (tax included)

Please include a postal money order in the amount of ¥800 with the documents for submission. The person making the request bears the cost of purchasing the postal money order and of postage to Toshiba.

Note: In cases where the fee is insufficient or where the fee is not included with the documents for submission, Toshiba will notify the person making the request to that effect. If payment is not made within a certain period of time, Toshiba will deem that no request for disclosure or notification of intended use has been made.

5. Method of Responding to Requests for Disclosure

Toshiba will respond in writing to the address written on the request form you submitted.

6. Use of Personal Data Obtained in Connection with Requests for Disclosure

Toshiba Electronic Devices & Storage Corporation will handle personal data obtained in connection with Requests for Disclosure only for the purpose of complying with Requests for Disclosure. Toshiba will not return submitted documents. After a request for personal data has been answered, Toshiba will maintains and dispose of the documents in an appropriate manner.

Note: Reasons for Not Disclosing Personal Data In the cases indicated below, Toshiba will not be able to comply with Requests for Disclosure of personal information. In cases where Toshiba decides not to respond to inquiries as requested, Toshiba will notify the person making the request to that effect and give the reason. Even in cases where Toshiba does not disclose the personal data or provide notification of intended use, Toshiba will retain the prescribed fee.
  • When the principal's identity cannot be confirmed, such as when the address on the completed request form, the address on the completed documents for confirming the identity of the person to whom the personal data refers, and the address registered at Toshiba do not match
  • When it cannot be confirmed that the agent has duly authorized power of attorney
  • When there is a deficiency in the prescribed documents for submission
  • When Toshiba cannot identity the personal data on the basis of the information contained in the request
  • When the information subject to the request does not come within the scope of "retained personal data" as defined in Article 2, Paragraph 5 of the Personal Data Protection Law.
  • When there is a risk of harm to the life, body, or property of the person to whom the personal data refers or to a third party
  • When there is a risk of considerable obstruction to the appropriate operation of Toshiba's business
  • When disclosure would constitute a violation of another law or regulation

7. Revision

Toshiba Electronic Devices & Storage Corporation may from time to time revise these procedures to better protect personal data or to comply with changes in applicable laws or regulations. Be sure to confirm the current procedures when making requests for disclosure of personal data and others.

Our primary goal in collecting personal information from you may be to: (i) verify your identity; (ii) help us deliver our Services; (iii) improve, develop and market new Services; (iv) carry out requests made by you on the Site or in relation to our Services; (v) investigate or settle inquiries or disputes; (vi) comply with any applicable law, court order, other judicial process, or the requirements of a regulator; (vii) enforce our agreements with you; (viii) protect the rights, property or safety of us or third parties, including our other customers or subscribers and users of the Site or our Services; (ix) provide support for the provision of our Services; (x) recruitment purposes; (xi) to receive services and products from our customers, contractors, suppliers and service providers and (xii) use as otherwise required or permitted by law.

To undertake these goals we may process the following personal information:

If you are a visitor to the Site:

  • Name and job title.
  • Contact information including email address.
  • Demographic information such as postcode, preferences and interests.
  • Other information relevant to provision of Services.

If you are a customer or subscriber in receipt of our Services or prospective customer or subscriber:

  • Name and job title.
  • Contact information including email address.
  • Payment information.
  • Other information relevant to provision of Services.
  • Information that you provide to us as part of our providing the Services to you which depends on the nature of your agreement with TEE.
  • Relevant information as required by regulatory Know Your Client and or Anti Money Laundering regulations. This may possibly include evidence of source of funds, at the outset of and possibly from time to time throughout our relationship with clients, which we may request and/or obtain from third party sources. The sources for such verification may comprise documentation which we request from the prospective client or through the use of online sources or both.

Primarily TEE is engaged by corporate customers (i.e. other corporate entities) and as such those customers are not data subjects. However as part of such instructions personal information about other persons may be provided to us (e.g. personal information relating, without limitation, to any of our corporate clients’ or prospective clients’ workers or subscribers.)

If you are an individual whose personal information may be processed by us as a result of providing the Services to others (including individual clients and corporate clients) we will process a variety of different personal information depending on the Services provided in question.

The following is a non-exhaustive list which is reflective of the varied nature of the personal information processed as part of our business.

For instance, if we are providing technical support to a corporate customer for the benefit of a subscriber we may be provided with, and then process, personal information about that subscriber including but not limited to the subscriber’s name and contact details.

We might also need to process personal information in relation to corporate customers’ workers who use a Toshiba product in the course of their work for our corporate customer.

If you are a customer, contractor, supplier or other service provider providing services or selling products to TEE:

  • Name and job title.
  • Contact information including email address.
  • Payment information.
  • Other information relevant to your provision of the services or goods to TEE.
  • Information that you provide to us as part of you providing the services or goods to us which depends on the nature of your agreement with TEE. 

If you are a potential recruit to a TEE office:

  • Name and job title.
  • Contact information including email address.
  • Curriculum vitae, your education, employment history and similar matters and similar information that you may provide to us.
  • Other information relevant to potential recruitment to TEE.

In particular, we may use your personal information for the following purposes:

Fulfilment of Services. For more information click here.

We collect and maintain personal information that you voluntarily submit to us during your use of the Site and/or our Services to enable us to perform the Services.   

Who do we share your personal information with for this purpose?
We may share personal information with a variety of the following categories of third parties as necessary when providing the Services:

  • Other Toshiba group companies within or outside the EU
  • Other external service providers which may be based within or outside the EU
  • Other customers, suppliers, contractors and users of our Services

Please note this list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide the Services as effectively as we can.

What is our legal basis?
It is necessary for us to use your personal information to perform our obligations in accordance with any contract that we may have with you or it is in our legitimate interest or a third party’s legitimate interest to use personal information in such a way to ensure that we provide the Services in the best way that we can.

Receiving goods or services from TEE’s customers, contractors, suppliers and service providers. For more information click here.

We collect and maintain personal information that you voluntarily submit to us when providing services or goods to us.

Who do we share your personal information with for this purpose?
We may share personal information with a variety of the following categories of third parties as necessary when providing the Services:

  • Other Toshiba group companies within or outside the EU
  • Other external service providers which may be based within or outside the EU

What is our legal basis?
It is necessary for us to use your personal information to perform our obligations in accordance with any contract that we may have with you or it is in our legitimate interest.

Customer services. For more information click here.

Our Site uses various user interfaces to allow you to request information about our Services: these include electronic enquiry forms. Contact information may be requested in each case, together with details of other personal information that is relevant to your Service enquiry. This information is used in order to enable us to respond to your requests.

Who do we share your personal information with for this purpose?
We may share personal information with a variety of the following categories of third parties as necessary when providing the Services:

  • Other Toshiba group companies within or outside the EU
  • Other external service providers which may be based within or outside the EU
  • Other customers and users of our Services

Please note this list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide the Services as effectively as we can.

What is our legal basis?
It is in our legitimate interest or a third party’s legitimate interest to use your personal information in such a way to ensure that we provide the very best client service we can to you or others.

Your feedback about our Services. For more information click here.

From time to we will contact you to invite you to provide feedback about our Services in the form of online or postal. We use this information to help us improve the quality of service provided by our staff. We also use your feedback to monitor the quality of our Services.

Who do we share your personal information with for these purposes?

We may use a third party service provider to assist us with client surveys and feedback requests. We may also share your personal data with other Toshiba group companies within and outside the EU.

What is our legal basis?

It is in our legitimate business interests to use the information you provide to us in your feedback for the purposes described above.

Business administration and legal compliance. For more information click here.

We use your personal information for the following business administration and legal compliance purposes:

  • to comply with our legal obligations (including Know Your Client, Anti-Money Laundering or Anti-Bribery or similar obligations including but without limitation maintaining regulatory insurance);
  • to enforce our legal rights;
  • protect rights of third parties; and
  • in connection with a business transition such as a merger, acquisition by another company, or sale of all or a portion of our assets.

Who do we share your personal information with for these purposes?
We will share your personal information with professional advisers such as lawyers and accountants and/or governmental or regulatory authorities. We may also share your personal information with other Toshiba group companies within or outside the EU.

What is our legal basis?
Where we use your personal information in connection with a business transition, to enforce our legal rights, or to protect the rights of third parties it is in our or a third party’s legitimate interest to do so. For all other purposes described in this section, it is our legal obligation to use your personal information to comply with any legal obligations imposed upon us.

Recruitment. For more information click here.

We use your personal information for the following recruitment purposes:

To assess your suitability for any position for which you may apply at TEE whether such application has been received by us online, via email or by hard copy or in person application.

Who do we share your personal information with for these purposes?
We will not share your personal information as part of the recruitment process.

What is our legal basis?
Where we use your personal information in connection with recruitment it will be in connection with us taking steps at your request to enter a contract we may have with you or it is in our legitimate interest to use personal information in such a way to ensure that we can make the best recruitment decisions for TEE. We will not process any special data except where we are able to do so under applicable legislation or with your explicit consent.

Client insight and analysis. For more information click here.

We analyse your contact details with other personal information that we observe about you from your interactions with our Site, our email communications to you and/or with our Services such as the Services you have viewed.

Where you have given your consent (where lawfully required), we use cookies, log files and other technologies to collect personal information from the computer hardware and software you use to access the Site, or from your mobile. This includes the following:

  • an IP address to monitor Site traffic and volume;
  • a session ID to track usage statistics on our Site;
  • information regarding your personal or professional interests, demographics, buying habits, experiences with our products and contact preferences.

Our web pages and e-mails contain “cookies” "web beacons" or “pixel tags.” (“Tags”). Tags allow us to track receipt of an e-mail to you, to count users that have visited a web page or opened an e-mail and collect other types of aggregate information. Once you click on an e-mail that contains a Tag, your contact information may subsequently be cross-referenced to the source e-mail and the relevant Tag.

In some of our e-mail messages, we use a “click-through URL” linked to certain website administered by us or on our behalf.

By using this information, we are able to measure the effectiveness of our content and how visitors use our Site and our Services. This allows us to learn what pages of our Site are most attractive to our visitors, which parts of our Site are the most interesting and what kind of offers our registered users like to see.

We may also use this information for marketing purposes (see the marketing section below for further details).

Who do we share your personal information with for these purposes?
We share your personal information with a variety of third party service providers to assist us with client insight analytics. These providers include for example Google Analytics. Please see Section 6 of this Privacy Policy below.

What is our legal basis?
Where your personal information is completely anonymised, we do not require a legal basis to use it as the information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised personal information may be subject to other laws where your consent is required. Please see Section 6 of this Privacy Policy below.

Where your personal information is not in an anonymous form, it is in our legitimate interest to use your personal information in such a way to ensure that we provide the very best products and services to you and our other clients. Please also see Section 6 of this Privacy Policy below.

Marketing communications

We may carry out the following marketing activities using your personal information:

Postal marketing. For more information click here

We use information that we observe about you from your interactions with our Site, our email communications to you and/or with our Services (see the Client Insight and Analysis section above for more details of the information collected and how it is collected) and/or your address details, to send you marketing communications by post.

Who do we share your personal information with for these purposes?
We share your personal information with a variety of third party postal providers who assist us in delivering our postal marketing campaigns to you, including the post office.

What is our legal basis?
Where your personal information is completely anonymised, we do not require a legal basis to use it as the personal information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised information may be subject to other laws where your consent is required.

Where your personal information is not in an anonymous form, such as your postal address, it is usually in our legitimate interest to use your personal information for postal marketing. If and to the extent your consent is lawfully required, we will only send you marketing communications where you have consented to receive such marketing communications, or where we have a lawful right to do so.

Email marketing. For more information click here

We use information that we observe about you from your interactions with our Site, our email communications to you and/or with our Services (see the Client Insight and Analysis section above for more details of the information collected and how it is collected) and/or your email address, to send you marketing communications by email, where you have consented to receive such marketing communications, or where we have another lawful basis to do so.

Who do we share your personal information with for these purposes?
We share your personal information with a variety of third party email marketing providers who assist us in delivering our email marketing campaigns to you.

What is our legal basis?
Where your personal information is completely anonymised, we do not require a legal basis to use it as the personal information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised personal information may be subject to other laws where your consent is required.

Where your personal information is not in an anonymous form, it is in our legitimate interest to use your personal information for marketing purposes.

We will only send you marketing communications via email where you have consented to receive such marketing communications, or where we have a lawful right to do so.

Online personalised advertising. For more information click here

We use information that we observe about you from your interactions with our Site, our email communications to you and/or with Services (see the Client Insight and Analysis section above for more details of the information collected and how it is collected) to provide you with personalised online advertising.

Who do we share your personal information with for these purposes?
We share your personal information with a variety of third party service providers who assist us with our online personalised advertising campaigns.

What is our legal basis?
Where your personal information is completely anonymised, we do not require a legal basis to use it as the personal information will no longer constitute personal information that is regulated under data protection laws. However, our collection and use of such anonymised personal information may be subject to other laws where your consent is required.

Where your personal information is not in an anonymous form, it is in our legitimate interest to use your personal information for marketing purposes. We will only use your personal information where we have a lawful right to do so.

Specific information regarding the use of LinkedIn For more information click here

1. Scope and responsibility for the processing of personal data

Our website (www.toshiba.semicon-storage.com) uses so-called plugins of the career network LinkedIn. Plugins are buttons redirecting visitors to further content on LinkedIn. The operator of the LinkedIn website is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn“).

We are responsible, jointly with LinkedIn, for the processing of personal data arising from the use of the LinkedIn plugin on our website. In the following, we would like to inform you about processing operations we are responsible for. For more information on processing operations carried out by LinkedIn, please contact the operator of the LinkedIn website (please see contact details above), or use the contact form available under https://www.linkedin.com/help/linkedin/solve?lang=en or contact LinkedIn’s Data Protection Officer under https://www.linkedin.com/help/linkedin/ask/TSO-DPO. 
A connection to LinkedIn’s servers is established every time a page of our website containing the LinkedIn plugin is called-up. Regardless of whether you select the LinkedIn plugin or not, the LinkedIn plugin on our site automatically records which of our pages you have visited, even if you do not have a LinkedIn account or are not logged in to your LinkedIn account. These information are transferred to LinkedIn. If you are calling up one of our pages containing the plugin while being logged in to your LinkedIn account, you make it possible for LinkedIn to associate your browsing behavior to your personal LinkedIn profile. For any transfer of personal data to the USA, LinkedIn submitted itself to the EU-US Privacy Shield https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active. You can find further information on how LinkedIn collects and processes personal data in LinkedIn’s Privacy Policy under https://www.linkedin.com/legal/privacy-policy.

2. Legal basis for the processing of personal data

The collection of personal data listed above in Section 1 “Scope and responsibilities for the processing of personal data” and the transmission of those personal data to LinkedIn is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interests in promoting our products and in optimizing communication with visitors of our websites.
You have the right to object to processing of your personal data that is based on Art. 6 (1) (f) GDPR. For details, please see Section 11 “How to access your information and your other rights?”

3. Purpose of data processing

We use the LinkedIn plugin to ensure an attractive presentation of our online-services and to enable effective information and communication with our websites’ visitors and/or LinkedIn users. This also serves to promote our company and our products further and to expand our network.

4. Storage period

The information collected from the LinkedIn plugin are temporarily stored for no longer than is necessary for the achievement of the abovementioned purposes.

5. Configuration options and rights of data subjects

You can find additional settings related to the use of personal data under https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

You can find more information on data subject rights in Section 11 “How to access your information and your other rights?”.

Specific Information regarding the use of Youtube. For more information click here

1. Scope and responsibility for the processing of personal data

Our website (www.toshiba.semicon-storage.com) uses so-called plugins from YouTube. Plugins are buttons redirecting visitors to further content on YouTube.  The operator of the YouTube service in the European Economic Area and in Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
We are responsible, jointly with Google, for the processing of personal data arising from the use of the YouTube plugin on our website. In the following, we would like to inform you about processing operations we are responsible for.  For more information on processing operations carried out by Google, please contact  Google (please see contact details above), or use the contact form available under https://support.google.com/youtube/#topic=9257498 or contact YouTube’s Data Protection Officer under  https://policies.google.com/privacy.
A connection to Google’s servers is established every time a page of our website containing the YouTube plugin is called-up. Regardless of whether you select the YouTube plugin or not, the YouTube plugin on our site automatically records which of our pages you have visited, even if you do not have a YouTube account or are not logged in to your YouTube account. These information are transferred to Google. If you are calling up one of our pages containing the plugin while being logged in to your YouTube account, you make it possible for Google to associate your browsing behavior to your personal YouTube profile.
For any transfer of personal data to the USA, Google submitted itself to the EU-US Privacy Shield  https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. You can find further information on how Google collects and processes personal data in Google’s Privacy Policy under  https://www.google.de/intl/de/policies/privacy.

2. Legal basis for the processing of personal data

The collection of personal data listed above in Section 1 “Scope and responsibilities for the processing of personal data” and the transmission of those personal data to Google is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interests in promoting our products and in optimizing communication with visitors of our websites.
You have the right to object to processing of your personal data that is based on Art. 6 (1) (f) GDPR. For details, please see Section 11 “How to access your information and your other rights?”.

3. Purpose of data processing

We use the YouTube plugin to ensure an attractive presentation of our online-services and to enable effective information and communication with our websites’ visitors and/or YouTube users. This also serves to promote our company and our products further and to expand our network.

4. Storage period

The information collected from the YouTube plugin are temporarily stored for no longer than is necessary for the achievement of the abovementioned purposes.

5. Configuration options and rights of data subjects

You can find additional settings related to the use of personal data under https://support.google.com/youtube/topic/9257518?hl=de&ref_topic=9257107.
You can find more information on data subject rights in Section 11 “How to access your information and your other rights?”.

Any other purposes for which we wish to use your personal information that are not listed above, or any other changes we propose to make to the existing purposes will be notified to you using your contact details.

5. HOW DO WE OBTAIN YOUR CONSENT?

1. Customers should direct inquiries concerning their personal data to the division that they have registered
2. Inquiries about the Personal Data Protection Policy and the division that customers have registered should be directed to <Inquiry Desk>.

Toshiba may record phone calls that we accurately understand comments or requests from customers.

Where our use of your personal information requires your consent, you can provide such consent:

  • at the time we collect your personal information following the instructions provided; or
  • by informing us by e-mail or post using the contact details set out in this Privacy Notice.

6. MARKETING AND WEB ANALYTICS TOOLS

When children under 16 years provide their personal data to Toshiba, they should provide them only after obtaining the consent of a parent or guardian.

I. Content Delivery Network Akamai. For information, click here.

Use of Content Delivery Network Akamai

1. Scope of processing of personal data

We use Akamai, a content delivery network from Akamai Technologies, Inc. 145 Broadway

Cambridge, Massachusetts 02142, USA (Akamai) to increase the security and delivery speed of our website. A content delivery network is a network of globally distributed servers that is able to deliver optimized content to the website user.

Akamai sets cookies on the user's computer (for cookies see above). When you visit our website, Akamai generates information about your use of our website (including your IP address, URLs of visited pages, date and time of access, location based on your IP address and the location of the Akamai server, telemetry data like mouse clicks, movement patterns and associated browser data) which is usually transferred to servers of Akamai around the world and stored there. 

Akamai has implemented compliance measures for international data transfers. These apply to all global activities where Akamai processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.akamai.com/legal/compliance/privacy-trust-center 

2. Legal basis for the processing of personal data

The legal basis for the use of Akamai is Art. 6 Para. 1 lit. f GDPR.

3. Purpose of data processing

By using Akamai as our processor, we do not have to operate a content delivery network ourselves. For each region around the world Akamai controls the distribution and update of content for that region. This vastly improves the speed of access to our local sites around the world and we have access to the Akamai tool which allows us to force a refresh of content that we’ve updated. This is in line with our legitimate interest.

4. Duration of storage

The data is erased as soon as it is no longer needed for our purposes. Cookies will be stored for at least 1 day. 

5. Possibility of objection and removal

The cookies used regarding Akamai are a strictly necessary cookie which you can’t opt out of. 

However, you can prevent cookies from being stored on your computer by making the appropriate settings in your browser software or by using specific tools like Ghostery. In this case you may not be able to use all functions of our website to their full extent. However, this can lead to certain restrictions in the functions and user-friendliness of our offer.

Finally, there is also the possibility of asserting data subject rights directly with Akamai under https://privacyportal.onetrust.com/webform/1fb891e6-1cdb-46fd-a5e2-78b57cd7977a/b547fd1a-9fdd-4123-a7f0-d23482defb5f. 

Cookie Pro/One Trust. For information, click here.

Use of CookiePro/OneTrust

1. Scope of processing of personal data

Our site uses a special tool from the provider OneTrust LLC, 1200 Abernathy Road, Building 600, Atlanta, GA 30328, USA for the automatic identification and categorization of cookies (see above for cookies). For this purpose, the browser you are using must connect to OneTrust's servers. By doing so, OneTrust becomes aware that your anonymized IP address has been used to access our Web site. The tool itself also uses cookies. In cases where personal data is transferred to the U.S., OneTrust has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/participant?id=a2zt0000000GnPeAAK&status=Active=a2zt0000000GnPeAAK&status=Active.
For more information about the information CookiePro collects, how OneTrust uses that information, and to whom the service may share that information, please visit: https://www.cookiepro.com/privacy-notice/

2. Legal basis for the processing of personal data

The legal basis for the use of CookiePro is Art. 6 Para. 1 S. 1 lit. a) and f) DSGVO.

3. Purpose of data processing

We use CookiePro to generate consent forms and to implement a cookie banner on our website. We do this primarily to comply with our legal obligations.

4. Duration of storage

CookiePro or OneTrust stores the information for a period of one year. This serves to know the preferences of returning visitors and to take into account the settings made by users via the tool. We would like to point out that, apart from the data mentioned above, we have no concrete knowledge of the transmitted data or its use by OneTrust. OneTrust's current data protection regulations can be found at https://www.onetrust.com/privacy-notice/

5. Possibility of objection and removal

You can use the CookiePro tool to organize your consents. To do this, you can revoke your consent to the various cookies and marketing and analysis tools we use at any time. The processing of the data will then be discontinued from this point in time unless it is technically necessary for the operation and delivery of our website or is in our legitimate interest.

Ptengine. For more information, click here.

Ptengine

I. Search Service Ptengine

1. Scope of processing of personal data

We use Ptengine (https://www.ptengine.com/), a website search service that refers to all websites, properties and services owned or operated by Ptmind Inc (the "company"), located in Yushin Main 6F, 3-27-11, Shibuya, Shibuya-ku, Tokyo 150-0002, Japan.

When you visit our website, Ptengine sets cookies on the user's computer (for cookies see above) and generates anonymized information about your use of our website. These cookies contain a cookie value that allows the company to detect if the visitor is a returning visitor or a first-time visitor.

The cookies do not include personally identifiable information such as name, phone number, e-mail address or mailing address, nor does Ptengine link cookies to such personally identifiable information in its servers or databases.

Internet Protocol (IP) addresses are considered personal information and are not individually targeted or disclosed but instead are shown as region or city.

The information collected by ptengine (e.g., visit time, type and number of web pages viewed, type and number of documents downloaded, circuit simulation setting parameters) is used on our behalf by the Company  to evaluate your use of our website, to maintain service quality, to compile reports on website activity and to provide other services relating to the use of our website and the internet.

The information is provided to clients in the form of aggregated reports and/or statistics that identify collective behavior of visitors to the client’s website, as opposed to the behavior or activity of specific or identified individuals.

For more information about ptengine handling of personal data from the European Union, please visit https://www.ptengine.com/privacy-policy and https://www.ptengine.com/gdpr/

2. Legal basis for the processing of personal data

The legal basis for the use of ptengine is Art. 6 Para. 1 lit. aGDPR , i.e. your consent, which you have given via our cookie banner or consent management tool for the described data processing.

3. Purpose of data processing

The processing of users' personal data enables us to improve the use of our website. In a simple and intuitive way, it ensures that visitors find the information they are looking for quickly and accurately. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website and our products. This helps us to constantly improve our website and its user-friendliness.

4. Duration of storage

The data is erased as soon as it is no longer needed for our recording purposes. They will be stored for at least 1 year.

5. Possibility of objection and removal

The company uses first party cookies on our  website and a "Opt-In Cookie". 

The "Opt-In Cookie" ensures that no "Visitor Cookie" is set by visitors who have selected the "Do Not Track" setting in their browser.

You can prevent cookies from being stored on your computer by making the appropriate settings in the browser software or by using our Consent Management Tool, where You can revoke your consent at any time with effect for the future by changing the settings in our cookie banner or consent management tool. Note that your objection has no effect on the lawfulness of the data processing up to that point. In this case you may not be able to use all functions of our website to their full extent. However, this can lead to certain restrictions in the functions and user-friendliness of our offer.

Brightcove Audience. For more information, click here.

Brightcove

We are using Brightcove Audience, an online video hosting platform and online video player solution provided by Brightcove Inc., 290 Congress Street, Boston, Massachusetts, 02210, USA (“Brigthcove”). Brightcove uses cookies, webbeacons, log files and other tracking technologies to gather information on the number of viewers of our videos, on the video performance and on the audience (e.g. location of the viewers). The Brightcove cookies connect with Marketing Cookies (e.g. Marketo, Pardot, etc.) set on our Site and enables us to synchronize the data obtained by these cookies.

Brightcove may use the collected data to block viewers from a specific region, e.g. if we want to target videos to users from a specific country. Brightcove aggregates and anonymizes the collected data to perform analytics and generate statistics about the video performance and video audience and provides us with such aggregated data. We use these reports and statistics to evaluate the performance of our videos and to improve the contents and placement of our videos.

The data collected by Brightcove includes your IP address, device data (e.g. your device ID, device type, device manufacturer), system data (e.g. your browser, operating system, screen resolution, preferred language), your location and your clickpath (e.g. referring domain, destination domain, destination path and geolocation data). Your data will be tracked via multiple devices (such as your smartphone, computer or tablet). In addition, the following information may also be collected by Brightcove: viewer name, address, email address, title and industry. This information is, however, collected only if you use certain features that are intended to collect such information. We would like to stress that we only receive aggregated information, such as player loads, play rates, number of views, viewed minutes, percentage of viewed content, new viewers, unique viewers, attention span, top domains, geography, traffic sources and search terms. This information is not connected to individual viewers.

The data collected by Brightcove will be stored by Brightcove on servers in various countries, including countries located outside the European Union/ European Economic Area like the U.S.A. To ensure the protection of your data, Brightcove is certified under the EU-US Privacy Shield. You can download the certificate here:

 https://www.privacyshield.gov/participant?id=a2zt00000008RmxAAE&status=Active

We would like to point out that, as the provider of the Site, we do not have precise knowledge about the way how Brightcove uses the data collected. As far as we are informed the data obtained by Brightcove is used by Brightcove for the following purposes:

-    to provide and personalize services and support to Brightcove’s customers;
-    to provide Brightcove’s customers with analytical data and reports concerning the video viewing activities on their websites;
-    for Brightcove’s internal business purposes, such as data analysis, benchmarking, audits, developing new products, enhancing services, facilitating product, software and applications development, conducting research, analysis, studies or surveys and identifying usage trends;
-    to protect the security and integrity of Brightcove’s services, the video content and data and Brightcove’s business.

As far as we are informed Brightcove may share, disclose and transfer information, including personal information as follows:

-    with third parties where the viewer or we have requested to use a third-party service (including applications) in connection with Brightcove’s services;
-    with third parties for marketing, advertising, promotions, contests or other similar purposes. If required by applicable law, Brightcove will share such data for advertising and marketing purposes only in an aggregate, anonymous and de-identified manner.

We were informed that the data collected by Brigthcove is stored by Brigthcove for a period of one month. TEE will delete the received data as soon as it is no longer needed for our recording purposes.

The legal basis for the use of Brightcove Audience is your consent in accordance with Art. 6 para. 1 lit. a GDPR or it is in our legitimate interest (Art. 6 para. 1 lit f GDPR). We obtain your consent via the cookie banner on our Site. Regarding our legitimate interest your interest in the protection of your personal data is sufficiently taken into account as we only receive anonymized and aggregated data.

You can withdraw your consent at any time by deleting the cookies or by refusing the use of cookies by selecting the appropriate settings on your browser. In this case you may not be able to use all functions of our Site to their full extent.
Please find further information on data processing by Brightcove in Brightcove’s Privacy Policy:

https://www.brightcove.com/en/legal/services-privacy-policy

Inquiry System. For more information, click here.

Inquiry System

I. Inquiry System, use of Salesforce Services

1. Scope of processing of personal data

You can contact our customer support via the Inquiry System (https://toshiba.semicon-storage.com/eu/contact/inquiry-form.html). We will use the entered personal information to process you request.

With your consent, we will transfer your personal data entered in our contact form when you use our Inquiry System to Salesforce, a web analytics service from salesforce.com Inc, The Landmark at One Market St. Suite 300, San Francisco, CA 94105, USA. 
If you consent to Salesforce Analytics, Salesforce will process the following data: Contact details (name, address, e-mail-address, phone number, company name), meta-data (device, browser type, time, approximate location based on IP-address), information you have provided in your request.

The information is usually transferred to a server of salesforce.com Inc. in Japan and stored there with a unique Case-ID. For Japan, there is an adequacy decision by the European Commission (https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32019D0419).

To ensure that transfers are GDPR-compliant in every case, Salesforce also uses binding corporate rules (BCR), which have been approved by the French supervisory authority for data protection (Commission Nationale de l’Informatique et des Libertés - CNIL) and has entered into the Standard Contractual Clauses (SCC) by the European Commission.

Salesforce Inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on behalf of salesforce.com inc. For more information about Salesforce handling of personal data from the European Union, please visit https://www.salesforce.com/company/privacy/.

2. Legal basis for the processing of personal data

The legal basis for the processing of your personal data of the inquiry form is Art. 6 para. 1 lit. a GDPR. If your inquiry is related to a business contract, the legal basis for the processing is Art. 6 para. 1 lit b GDPR.
The legal basis for the use of Salesforce Services is Art. 6 Para. 1 lit. a GDPR.

3. Purpose of data processing

The processing of users' personal data enables us to answer the inquiries of our users.

The analysis of users' personal data and inquiries enables us to analyse the interests of our customers. By evaluating the data obtained, we are able to compile information on the use of the individual components of our portfolio. This helps us to constantly improve our website and its user-friendliness. Salesforce also serves us to automate marketing and to generate and maintain leads.

4. Duration of storage

The data retention period is three years.

5. Possibility of removal

You can withdraw your consent to the processing of your data for the future by contacting us. In that case, we are not able to continue the conversation. You can withdraw your consent to perform analytics of your personal data through Salesforce for the future by contacting us. We will delete all personal data obtained through your use of the inquiry system. Note that the withdrawal of your consent will not impact the processing of your data until then. 

Pardot. For more information, click here.

Pardot

I. Web analysis by Pardot

1. Scope of processing of personal data

We use Pardot, a web analytics service from salesforce.com inc, The Landmark at One Market St. Suite 300, San Francisco, CA 94105, USA. Pardot sets cookies on the user's computer (for cookies see above). When you visit our website, Pardot records your click path and creates an individual user profile using a pseudonym. The information generated about your use of our website (including your IP address) is usually transferred to a server of salesforce.com inc. in the USA and stored there. For the cases in which personal data is transferred to the USA, salesforce.com inc. has submitted to the EU-U.S. Data Privacy Framework (DPF), https://www.dataprivacyframework.gov/list.

The information is used on our behalf by salesforce.com inc. to evaluate your use of our website, to compile reports on website activity and to provide other services relating to the use of our website and the Internet. salesforce.com inc. may also transfer this information to third parties where required to do so by law, or where such third parties process the information on behalf of salesforce.com inc. You can find further information on Pardot's handling of personal data from the European Union at https://www.pardot.com/legal/ and https://www.salesforce.com/company/privacy/

2. Legal basis for the processing of personal data

The legal basis for the use of Pardot is Art. 6 Para. 1 S. 1 lit. f GDPR.

3. Purpose of data processing

The processing of users' personal data enables us to analyse the surfing behaviour of our users. By evaluating the data obtained, we are able to compile information on the use of the individual components of our website. This helps us to constantly improve our website and its user-friendliness. Pardot also serves us to automate marketing and to generate and maintain leads. In these purposes, our legitimate interest lies in the processing of data in accordance with Art. 6 Para. 1 lit. f GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer needed for our recording purposes. They will be stored for at least 180 days.

5. Possibility of opposition and removal

The cookies used regarding Pardot are a "Visitor Cookie", an "Opt-In Cookie" and a "Pardot App Session Cookie". The "Visitor Cookie" generates an identification number which is used to recognize the browser of the website visitor. The identification number is a generated numerical code that has no meaning outside of Pardot. The "Opt-In Cookie" ensures that no "Visitor Cookie" is set by visitors who have selected the "Do Not Track" setting in their browser. The "Pardot App Session Cookie" is only set when a customer logs into the Pardot App as a user. All cookies only receive a generated number code.

You can prevent cookies from being stored on your computer by making the appropriate settings in the browser software. In this case you may not be able to use all functions of our website to their full extent. You can also deactivate the creation of pseudonymised user profiles at any time by configuring your Internet browser so that cookies from the domain "pardot.com" are not accepted. However, this can lead to certain restrictions in the functions and user-friendliness of our offer.

You can refuse the use of Pardot by clicking on the following link. An opt-out cookie will be installed on the computer, which prevents the future collection of your data when visiting this Site: https://mk01.toshiba.semicon-storage.com/Optout_eu.html

Google Analytics. For more information, click here.

Web analysis by Google Analytics

1. Scope of processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics can use cookies on the user's computer (for cookies, see above) and allows us to analyze your use of our website. For example, we take into account which content you have called up within one or various usage processes, which search terms you have used and how you have interacted with our online offering overall. The time of use and duration are also stored, as well as technical aspects of your end devices and browsers used. For this purpose, pseudonymous user profiles are created with information from the use of various devices. Through the use of Google Analytics, data on the geographical location is determined and provided. For this purpose, the following metadata is collected based on the IP search: City (and the derived latitude and longitude of the city), Continent, Country, Region, Subcontinent (and the ID-based equivalents). To ensure the protection of personal data of European users in the EU, Google receives and processes all data via domains and servers within the EU. The IP address of the users is not logged and is shortened by the last two digits by default, whereby the shortening with regard to European users takes place on European servers.

The information obtained through the use of Google Analytics is used by Google on our behalf to evaluate your use of our website, to compile reports on website activity for us and to provide other services relating to the use of our website and the internet. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Full or unabbreviated IP addresses are not transferred to Google servers in the USA, so that it should be excluded that personal data is transferred to the USA. The USA is considered by the European Court of Justice to be a country with an insufficient level of data protection according to European standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes. Furthermore, risks may arise for you because it may be more difficult to enforce your rights in the USA. For cases in which personal data is transferred to the USA, Google invokes the standard contractual clauses of the European Union after the discontinuation of the EU-US Privacy Shield, cf. https://business.safety.google/adsprocessorterms/, as well as additional measures that can be accessed at the following link: https://services.google.com/fh/files/misc/safeguards_for_international_data_transfers.pdf

2. Legal basis for the processing of personal data

The legal basis for the use of Google Analytics is Art. 6 para. 1 p. 1 lit. a DSGVO, i.e. your consent, which you have given via our cookie banner or consent management tool for the described data processing.

3. Purpose of data processing

The processing of users' personal data enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness. By anonymizing the IP addresses, the interest of the users in their protection of personal data is sufficiently taken into account.

4. Duration of Storage

The data is deleted as soon as it is no longer required for our recording purposes. Furthermore, we would like to point out that we, as the provider of the pages, have no further knowledge of the content of the transmitted data or its use by Google. You can find more information on this in Google's privacy policy at https://policies.google.com/privacy. 

5. Possibility of objection and removal

You can revoke your consent at any time with effect for the future by changing the settings in our cookie banner or consent management tool.

In addition, you can prevent cookies from being stored on your computer by setting your browser software accordingly. In this case, you may not be able to use all the functions of our website to their full extent. To prevent the collection of data generated by the cookies and related to your use of our website (including your IP address) by Google as well as the processing of this data by Google, a browser plug-in is available for download and subsequent installation at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative (https://optout.networkadvertising.org/) and additionally the US website (https://www.aboutads.info/choices) or the European website (https://www.youronlinechoices.com/uk/your-ad-choices/).

 

Google AdWords Remarketing. For more information, click here.

Google AdWords Remarketing

We use Google AdWords Remarketing to advertise TEE across the internet, in particular Google Display Network. AdWords remarketing will display ads to you based on what parts of the TEE Site you visited. To achieve this, the Site places a cookie in your web browser. This cookie does not in any way identify you or give access to your computer or mobile device.

The cookie is only used to indicate the following to other websites: “This person visited a particular page, so show them ads relating to that page.”

Google AdWords Remarketing allows us to tailor our marketing to better suit your needs and only display ads that are relevant to you.

If you do not wish to see ads from TEE, you can opt out in the following ways:

Disable "Ads Personalization" in Google’s Ads Settings.
Opt out of a third-party vendor’s use of cookies by visiting the Network Advertising Initiative's opt-out page.

Google Tag Manager. For more information, click here.

Google Tag Manager

I. Use of the Google Tag Manager

1. Scope of the processing of personal data

The Google Tag Manager is used on this page. The provider of this service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland or Google LLC, Mountain View 1600 Amphitheatre Parkway Mountain View, CA 94043 USA. The processed data only includes your IP address, which is necessary to run the Google Tag Manager, but is not collected without your consent (e.g. through appropriate settings of your browser or our consent management tool). The Tag Manager itself does not create user profiles or store cookies. 

The data may be processed in the USA.

For those cases in which personal data is transferred to the USA, this is done on the basis of the standard contractual clauses of the European Commission. More information on this can be found at https://business.safety.google/adsprocessorterms/.

2. Legal basis for the processing of personal data

The legal basis for the use of the Google Tag Manager is your consent according to Art. 6 para. 1 p. 1 lit. a GDPR.

3. Purpose of data processing

By using the Google Tag Manager, it is possible for us to manage so-called website tags via an interface and thus to be able to integrate other services into our online offer (please refer to the further and specific information in this privacy policy). 

4. Duration of storage

We would like to point out that we have no concrete knowledge about the transmitted data as well as their use by Google. For more information on Google Tag Manager, please visit https://marketingplatform.google.com/intl/en/about/tag-manager/. The applicable privacy provisions of Google can be found at https://www.google.com/policies/privacy/.

5. Possibility of objection and removal

You can revoke your consent at any time by changing the setting in our Consent Management Tool. Note that your objection has no effect on the lawfulness of the data processing up to that point.

The processing of data by Google can also be changed and excluded at https://adssettings.google.com/authenticated.

7. THIRD PARTY CONTRACTORS AND OTHER CONTROLLERS

  1. Notice for Use of Services
    Please note that some services provided by Toshiba (including services offered on websites operated by Toshiba) may not be available if the customer does not provide personal data.
  2. Basic policy and management
    Toshiba Electronic Devices & Storage Corporation ("Toshiba") is handling in compliance your personal information that is registered on Web site of Toshiba in Japan and the United States of personal information protection laws. These laws and regulations may be different as those applied in the country or region of the customer. The Customers of the information may be subject to disclosure request by the government agencies, the courts, law enforcement agencies on the basis of Japan and the United States laws and regulations. The Personal information is managed in accordance with Toshiba's privacy policy. When customers use Toshiba's Web site, please read our privacy policy, it is necessary to agree for them.
  3. Personal Information Gathering
    If the customer has authorized Toshiba to cooperate with external service operated by third parties, it will be assumed that the customer has authorized Toshiba collect the customer's personal information from the external service.
  4. Purposes of Use of Personal Information
    Personal Information will be used for the following purposes:
    • Provision of membership service such as e-mail newsletter
    • Sending information about Toshiba's products, development of Toshiba's new products, documents, service, or events
    • Conducting questionnaire surveys
    • Implementation of Toshiba s products and/or service monitoring programs
    • Response to your inquiries
  5. Encryption of Transmission
    In case Toshiba receives personal data from customers, the website uses encryption technology such as SSL (Secure Sockets Layer) /TLS (Transport Layer Security) and the personal data of customers is protected. It may not be possible to access the page from browsers that do not support SSL/TLS or other technologies.
  6. Consignment of Personal Information Management
    In some cases Toshiba may consign all or part of the management of Personal Information to third parties within the necessary scope as specified in the above "3. Purposes of Use of Personal Information."
  7. Provision of Personal Information
    Personal information, which you register on the website of Toshiba, will be shared among Toshiba, Toshiba's affiliates and business partners. Personal Information will be used in any country and/or region where Toshiba and/or Toshiba's affiliates are doing each business.
  8. 8.Use of Cookies and various technologies
    Toshiba uses cookies and various technologies provide better services on its websites For more information on cookies, please confirm the “Cookie Policy”

As mentioned above, we may appoint sub-contractor data processors as required to deliver the Services, such as, without limitation, service providers to assist TEE with for example warranty inquiries and who will process personal information on our behalf and at our direction.  We conduct an appropriate level of due diligence and put in place necessary contractual documentation in relation to any sub-contractor to ensure that they process personal information appropriately and according to our legal and regulatory obligations.

Further, we may appoint external data controllers in common where necessary to deliver the Services (for example, but without limitation other Toshiba entities). When doing so we will comply with our legal and regulatory obligations in relation to the personal information including but without limitation where necessary putting appropriate safeguards in place to ensure any personal information is processed according to our legal and regulatory obligations.

8. EXTRA-EEA TRANSFERS

When important changes and notices on personal data arise, Toshiba will post it to Information.

If you are based within the EEA, please note that where necessary to deliver the Services we will transfer personal information to countries outside the EEA (including to Toshiba’s Japanese entities) and other Toshiba entities via the applicable Data Sharing Agreements which utilise model contracts as the extra-EEA transfer mechanism). When doing so we will comply with our legal and regulatory obligations in relation to the personal information including but without limitation having a lawful basis for transferring personal information and putting appropriate safeguards in place to ensure an adequate level of protection for the personal information. You can request a copy of the model clauses which we entered into by contacting us.

9. HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION FOR?

From time to time Toshiba may revise the Personal Data Protection Policy to better protect customers' personal data and to comply with changes in the applicable laws and regulations.

We will retain relevant personal information for as long as it is necessary in order to fulfil the relevant purposes described in this Privacy Notice and to comply with other legal obligations (for example in the areas of finance and accounting). We may then destroy such files without further notice or liability.

10. CONFIDENTIALITY AND SECURITY OF YOUR PERSONAL INFORMATION

Toshiba Electronic Devices & Storage Corpration and its subsidiary Toshiba Electronics Asia (Singapore) Pte. Ltd. are committed to ensuring the security and protection of personal data that we process and to provide a compliant and consistent approach to data protection in accordance with the Personal Data Protection Policy. Inquiries for Personal Data Protection Policy should be directed to the following desk…

Inquiries for Personal Data Protection Policy should be directed to the following desk.

Human Resources & Administration Division
Toshiba Electronic Devices & Storage Corporation
Address: 1-1-1 Shibaura, Minato-ku, Tokyo
e-mail: semicon-Privacy@ml.toshiba.co.jp

Revised: January 22, 2024
Data Protection Officer
General Manager, Human Resources and Administration Division

Intended Use of Personal Data

Toshiba intends to use personal data of customers and other individuals for the following purposes:

1. Personal Data of Customers

1) Shipment of products
2) Sending information about products, services or events
3) Provision of product support or maintenance
4) Improvement of our products and services
5) Responses to inquiries
6) Issuance of warranty cards and provision of after-sales service under warranty
7) Provision of membership services
8) Product development, conduct of questionnaire surveys, implementation of product and service monitoring programs
9) Execution of contracts
10) Business negotiations or meetings with customers

2. Personal Data of Shareholders

1) Enforcement of rights or fulfillment of obligations under laws and regulations
2) Provision of benefits to shareholders (e.g., shareholder benefit programs, etc.)
3) Implementation of measures concerning shareholders (e.g., questionnaires, etc.)
4) Shareholder management as required by laws and regulations (e.g., preparation of shareholder data, etc.)

3. Personal Data of Government Office Workers and Civil Servants

Communication with, reporting to, inquiries addressed to or other contact with competent governmental authorities required for the execution of business

4. Personal Data of Employees of Business Partners and Other Companies

1) Communication, discussion, and other contact required for the execution of business
2) Business partners' data management and processing of payments and receipts by Toshiba

5. Personal Data contracted from Business Partners

Execution of agreement on contracted operations

6. Personal Data of Applicants for Employment at Toshiba

1) Provision of recruitment information to and communication with applicants for employment (including internships)
2) Management of employment-related data at Toshiba

Personal data with respect to the above 3 or 4 may be obtained through commercially available lists of the relevant personnel.
Personal Data with respect to the above 5 will not be object of disclosure in principle.

We are committed to keeping the personal information provided to us secure and we will take reasonable precautions to protect personal information from loss, misuse or alteration. For more information click here.

We have implemented information security policies, rules and technical measures to protect the personal information that we have under our control from:

  • unauthorised access;
  • improper use or disclosure;
  • unauthorised modification; and
  • unlawful destruction or accidental loss.

All of our members, employees, workers and data processors (i.e. those who process your personal information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of personal information, are obliged to respect the confidentiality of the personal information of all visitors to the Site and all users of our Services.

11. HOW TO ACCESS YOUR INFORMATION AND YOUR OTHER RIGHTS?

You have the following rights in relation to the personal information we hold about you:

Your right of access. For more information click here.

If you ask us, we’ll confirm whether we’re processing your personal information and, if necessary, provide you with a copy of that personal information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.

Your right to rectification. For more information click here

If the personal information we hold about you is inaccurate or incomplete, you’re entitled to have it rectified. If you are entitled to rectification and if we’ve shared your personal information with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Your right to erasure. For more information click here.

You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll let them know about the erasure where possible (the right to be forgotten). If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Your right to restrict processing. For more information click here.

You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances such as where you contest the accuracy of that personal information or you object to us processing. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal information with so that you can contact them directly.

Your right to data portability. For more information click here.

With effect from 25 May 2018, you have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Your right to object. For more information click here.

You can ask us to stop processing your personal information, and we will do so, if we are:

  • relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or
  • processing your personal information for direct marketing. Please refer to section four above which outlines our marketing activities.

Your rights in relation to automated decision-making and profiling. For more information click here.

You have the right not to be subject to a decision when it’s based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

Your right to withdraw consent. For more information click here.

If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.

Your right to lodge a complaint with the supervisory authority. For more information click here.

If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to the North Rhine-Westphalia Commissioner for Data Protection and Freedom of Information (LDI NRW). You can find details about how to do this on the LDI NRW website at https://www.ldi.nrw.de/index.php.

12. COLLECTION OF INFORMATION BY THIRD-PARTY SITES AND SPONSORS

The Site contains links to other sites whose information practices may be different than ours. Visitors should consult the other sites' privacy notices as TEE has no control over information that is submitted to, or collected by, these third parties.

13. CHANGES TO THIS PRIVACY NOTICE

We may make changes to this Privacy Notice from time to time. For more information click here.

To ensure that you are always aware of how we use your personal information we will update this Privacy Notice from time to time to reflect any changes to our use of your personal information. We may also make changes as required to comply with changes in applicable law or regulatory requirements. We will notify you by e-mail of any significant changes. However, we encourage you to review this Privacy Notice periodically to be informed of how we use your personal information.

A new window will open