This Part A (General) (the “Policy”) applies to the collection, storage, use, updates, disclosure, transfer, deletion and other operations (“processing”)
of the personal data of individuals in relation to our websites and services of the affiliates of Panasonic Industry Co., Ltd. (“Panasonic Industry”), which are listed below (“Affiliates,” “we,” “our,” or “us”):
※For the residents of the following countries, please read addendums of Part B(Jurisdictional Requirements) as well as PART A(General)
We may collect your personal data directly from you, or automatically when you visit our websites or use our products and services. The types and examples of personal data which we may collect are as follows:
We process the personal data that we hold about you for the purposes set forth below. We will process your personal data only to the extent that it is necessary to fulfill the following purposes:
We may disclose your personal data to the following categories of recipients, including those outside the country where you are located:
We may otherwise disclose your personal data to any third party other than those set forth above, including public agencies, if such disclosure is required to achieve the purposes for which you provided personal data to us or other purposes that we specify when obtaining consent or personal data from you, to the extent necessary to comply with any laws and regulations applicable to us, to cooperate with relevant governmental authorities and agencies, or to establish, exercise or defend legal claims.
We require all of the recipients of your personal data to treat it as confidential and only process it in accordance with the strict requirements of applicable data protection laws, regulations, and other applicable legal safeguards as specified in the Addendum for each jurisdiction in Part B (Jurisdictional Requirements).
Your personal data collected by us may be stored and processed on the servers in Japan and/or the US operated by Panasonic Industry or the Affiliates (or its server vendor(s)). We will ensure that your personal data remains protected in line with the requirements set out in applicable data protection laws, regulations, and other applicable legal safeguards as specified in the Addendum for each jurisdiction in Part B (Jurisdictional Requirements).
You may request additional information in this respect and obtain a copy of the appropriate safeguards we provide for through sending a request to the contact indicated below in Section 9 (Contact Us).
We will only retain your personal data for the period necessary to fulfil the purposes for which it has been collected.
This includes the purposes of fulfilling our contract with you, satisfying any legal, regulatory, accounting, reporting obligation we are subject to and the establishment and defense of legal claims.
You have a number of legal rights in relation to the personal data that we hold about you.
These rights may vary depending on where you are located and which data protection laws apply to the relationship between you and us, but typically will include:
The security of your personal data is of greatest importance to us.
We have put in place a range of appropriate physical and technical measures as well as robust policies and processes.
The purpose thereof is to safeguard your personal data and to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure or access and against other unlawful forms of processing.
These measures take into account the state of the art of the technology, the costs of its implementation, the nature of the personal data, and the risk of the processing.
Information security, including the protection of personal data is organized in a global Panasonic Program called Information Security Management (ISM).
The related aim, standards and implementation measures are organized in a globally valid Policy, and further standards and guidelines.
The program and all its parts follow a strong yearly Plan-Do-Check-Act (PDCA) approach to secure the confidentiality, integrity and availability of all data (including your personal data) for the whole information lifecycle from collection to destruction of such information.
If you have any questions about this Policy, your rights, or any other matter relating to the protection of personal data, please contact us at the following email address:
Email address: privacy@sg.panasonic.com
The content of this Policy may be changed to protect your personal data or to comply with any amendment to laws, regulations, or other rules.
You will be notified of any such changes on our websites, by email, or by other means.
This addendum to the Policy (“India Addendum”) applies to those in India. This India addendum shall be applicable in addition to the Policy set forth above.
We comply with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 to protect your personal data and sensitive personal data or information.
The entities collecting and retaining the data is specified in Section 1 (About this Policy) of the Policy.
For the purpose of this India addendum, SPDI consists of the following items of personal data which we may collect from you:
You hereby consent to the transfers and disclosures of your SPDI to Panasonic Industry, the Affiliates, our service providers, and third parties.
While transferring and disclosing your SPDI, we ensure that the recipient of your data ensures the same level of data protection and information security practices as adopted by us.
This addendum to the Policy (“Indonesia Addendum”) applies to the extent the personal data protection laws in Indonesia apply to the processing of your personal data or so long that such activity is considered as “processing” under the Indonesian law, particularly the Law No. 11 of 2008 on Electronic Information and Transaction and Law No. 27 of 2022 on Personal Data Protection, their amendments, implementing and related regulations, official guidelines and interpretation thereof, as applicable to the processing of personal data in Indonesia that are currently in effect or that may be enacted, issued, or enforced in the future (“PDP Regulations”). Any personal data processed by us in accordance with the Policy and this Indonesia Addendum shall be subject to the PDP Regulations.
This Indonesia Addendum supplements the “Policy” and prevails over any conflicting provisions in the Policy.
Unless otherwise defined or the context otherwise requires, capitalized terms used in this Indonesia Addendum shall have the meanings as set forth in the Policy.
Personal data processing conducted by us in relation to your personal data is based on your explicit valid consent for the purposes as indicated in Section 3 (Purposes of Processing Personal Data) of the Policy and other valid legal grounds in compliance with the prevailing regulations, including the PDP Regulations.
Your personal data will be processed only for as long as necessary for accomplishment of the purposes under Section 3 (Purposes of Processing Personal Data) of the Policy, or as allowed by the PDP Regulations.
In any event, we have implemented various measures to ensure that any of personal data relating to you remains safe and secure, and we will only process your personal data based on the valid legal grounds and other requirements under the PDP Regulations.
Where we disclose your personal data to a third party outside Indonesia, we will ensure that we comply with the overseas transfer requirements under the PDP Regulations.
In addition to your rights in the Policy, you may contact us through the contact information as stated in Section 9 (Contact Us) of the Policy to inquire about your further rights under the PDP Regulations and to exercise your rights subject to the PDP Regulations.
We will respond to your request as soon as reasonably possible within the time specified by the PDP Regulations.
We will retain your personal data collected by us in accordance with Section 6 (Data Retention) of the Policy.
In any case, in the event that retention of your personal data is no longer necessary for legal or business purposes or when the purpose for which your personal data was collected is no longer being served by the retention of your personal data, upon the lapse of retention period as required under applicable laws and regulations, including the PDP Regulations, we will remove, destroy or anonymise your personal data.
Subject to any rights you may have under the law, you agree to be bound by the prevailing terms of the Policy and this Indonesia Addendum for those who are subject to the PDP Regulations as may be modified and/or updated by us from time to time.
The Policy and this Indonesia Addendum are issued in both English and Indonesian languages. In the event of any inconsistencies between the English version and the Indonesian language version, the English version shall prevail.
This addendum to the Policy (“Malaysia Addendum”) applies to those in Malaysia and to the extent where Malaysian personal data protection laws apply.
This Malaysia Addendum shall be in addition to and not in diminution of, the Policy set out above.
The Policy and this Malaysia Addendum are collectively referred to as “Privacy Policy” in this Malaysia Addendum.
Please note that the provision of personal data by you is voluntary.
However, in the event you choose to withhold, withdraw or limit consent for us to process your personal data, we may not be able to process your personal data
for any of the purposes as stipulated in the Privacy Policy.
We will process your personal data in accordance with the purposes specified in Section 3 (Purposes of Processing Personal Data) of the Policy
or otherwise in accordance with Malaysian personal data protection laws.
Without prejudice to the above, we may process your personal data if the processing is necessary:
We may transfer your personal data to the recipients described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy, which may be located outside Malaysia.
We will only transfer your personal data outside Malaysia in accordance with the Malaysian personal data protection laws and, where required, will ensure that the recipient processes personal data not in contravention of the Malaysian personal data protection laws.
The Privacy Policy is issued in both English and Malay languages.
In the event of any inconsistencies between the English version and the Malay version, the English version shall prevail.
This addendum to the Policy applies to the processing of personal data in the Philippines.
Any personal data collected, used or disclosed by us in accordance with the Policy shall be subject to Republic Act No. 10173 or the Data Privacy Act of 2012 (“DPA”), its implementing rules and regulations, and the issuances of the National Privacy Commission of the Philippines.
We only process your personal data when you have provided consent to the processing of your personal data for the purposes set out under Section 3 (Purposes of Processing Personal Data) of the Policy or when we have other legal justification for doing so.
Our other legal justifications for processing your personal data for the purposes specified in Section 3 (Purposes of Processing Personal Data) of the Policy are as follows:
We may transfer your information to the types of entities described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy, which may be located in countries outside the Philippines including Japan.
We will only transfer your information overseas in accordance with the DPA and will ensure through contractual or other reasonable means that the entities described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy will be obliged to provide a standard of protection comparable to the protection under the DPA.
If you wish to exercise your rights under Section 7 (Your Rights) of the Policy, please note that:
If you believe that any of your rights has been infringed by us, you may lodge a complaint with the National Privacy Commission of the Philippines.
This addendum to the Policy (“Singapore Addendum”) applies to our collection, use and/or disclosure of personal data in Singapore.
Any personal data collected, used or disclosed by us in accordance with the Policy shall be subject to the Personal Data Protection Act 2012 of Singapore (“PDPA”).
For the purpose of this Singapore Addendum, “personal data” means any data, whether true or not, about an individual who can be identified from that data, or from that data and other information to which any of the Parties has or is likely to have access, and such other data which is deemed as personal data under the applicable personal data laws.
We will not collect your personal data unless (a) it is provided to us voluntarily by you directly after (i) you have been notified of the purposes for which the personal data is collected (including amongst others those set out under Section 3 (Purposes of Processing Personal Data) of the Policy), and (ii) you have provided consent to the collection, usage and/or disclosure of your personal data for such purposes;
or (b) collection, use and/or disclosure of personal data without consent is permitted or required by the PDPA or other applicable laws, including amongst others by way of deemed consent by conduct, deemed consent by contractual necessity or deemed consent by notification.
In addition to the purposes listed under Section 3 (Purposes of Processing Personal Data) of the Policy, we may implement profiling and automated decision-making in respect of your personal data.
Notwithstanding the above, you may choose to exercise any of your rights set out in Section 7 (Your Rights) of the Policy.
For the avoidance of doubt, if we refuse to grant you access to your personal data pursuant to the exercise of your rights as set out in Section 7 (Your Rights) of the Policy, we shall preserve a complete and accurate copy of the personal data for a period of 30 days after the date which we notify you of our refusal to do so.
We may transfer your personal data to the types of entities described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy, which may be located in Japan or other countries outside Singapore.
We will only transfer your information overseas in accordance with the PDPA and will ensure that the entities described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy will be obliged to provide a standard of protection comparable to the protection under the PDPA.
We will retain your personal data collected by us in accordance with Section 6 (Data Retention) of the Policy and in any case, for only as long as:
In the event that retention of your personal data is no longer necessary for any business or legal purposes or when the purpose for which your personal data was collected is no longer being served by the retention of your personal data, we will remove, destroy or anonymise your personal data.
We will further undertake reasonable measures to prevent (a)the unauthorized access, collection, use, disclosure, copying, modification or disposal of your personal data and (b) the loss of any storage medium or device on which your personal data is stored.
In the event of a data breach affecting your personal data (“Breach”), we will promptly conduct an assessment of whether the Breach is notifiable to the Personal Data Protection Commission (“PDPC”) in accordance with the PDPA.
If the Breach is notifiable to the PDPC, we will also notify you of the occurrence of the Breach as soon as practicable in accordance with the PDPA.
This addendum to the Policy (“Thailand Addendum”) applies to those in Thailand and/or to the extent the personal data protection laws
in Thailand apply to the processing of your personal data. In addition to other laws and regulations applicable to us, we are committed to respecting and fulfilling our duties
under the Personal Data Protection Act B.E. 2562 (2019) of Thailand (“Thai PDPA”), where applicable.
We will process your personal data for the specified purposes described in Section 3 (Purposes of Processing Personal Data) of the Policy.
We will handle your personal data consistent with the consent you give us.
Moreover, Thai PDPA also sets out legal basis under Section 24 of Thai PDPA, enabling us to process your personal data without the need to obtain your consent, among others, as follows:
Providing your personal data is not mandatory.
However, if you refuse to provide the requisite personal data requested by us, this refusal will affect our ability to manage our website and provide our service to you,
and we may not be able to provide some or all services to you.
Specifically, in some cases, the lack of certain personal data may hinder our ability to fulfill an agreement with you (such as any product or device warranty);
to provide customer services; and to support or assist you and improve customer relationship with you (such as query or complaint handling, providing you an update and any other communication with you).
We may transfer your personal data to the types of entities described in Section 4 (Disclosure of Personal Data to Recipients) of the Policy, which may be located in Japan or other countries outside Thailand.
In such circumstances, if to do so will trigger our cross-border obligations under Thai PDPA, we will ensure that we will do so only if it is allowed by and in accordance with Thai PDPA.
This addendum to the Policy (“Turkey Addendum”) applies to those in Turkey to inform the data subjects located in Turkey and whose personal data will be collected and processed by the entities specified in Section 1 (About this Policy) of the Policy acting as the data controller pursuant to the Law on the Protection of Personal Data numbered 6698 (“LPPD”) and to fulfill our disclosure obligations set forth under the Article 10 of LPPD.
This Turkey Addendum supplements the Policy and prevails over any conflicting provisions in the Policy.
This Policy and Turkey Addendum shall be collectively referred to as “Privacy Policy” within the Turkey Addendum herein
Your personal data we collect from you as described under Section 2 (How We Collect Your Personal Data) of the Policy, shall be processed for the purposes specified under the Section 3 (Purposes of Processing Personal Data) of the Policy relying on the legal grounds set forth below;
For international transfers of your personal data outside Turkey for the purposes specified under the Section 3 (Purposes of Processing Personal Data) of the Policy,
and as explained hereunder, we abide by the requirements set forth under the Article 9 of the LPPD until one of the appropriate safeguards set forth are ensured and where it is required we rely on your explicit consent in accordance with the Article 9/1 of the LPPD.
When transferring your personal data outside Turkey, we ensure that your personal data will be adequately protected, including by ensuring that the recipient country is deemed to provide an adequate level of protection recognized by the Turkish DPA and, if that is not the case, ensuring that we put appropriate safeguards in place such as executing standard agreements as published and approved by the Turkish DPA with data importers.
In addition to the rights listed under the Section 7 (Your Rights) of the Policy, you have the below additional rights as per the Article 11 of the LPPD:
You may exercise any of your rights by contacting us, using the information about us indicated in Section 9 (Contact Us).
You also have a right to lodge a complaint with the relevant supervisory authority in Turkey that is the Personal Data Protection Authority for Turkey (further information available at: www.kvkk.gov.tr)
This addendum to the Policy (“VN Addendum”) applies where the Policy and this VN Addendum are used for our processing of your personal data pursuant to the Vietnam data protection regulations
, including Decree No. 13/2023/ND-CP dated 17 April 2023 of the Government of Vietnam on personal data protection, as amended from time to time.
In relation to the processing of your personal data governed by the laws of Vietnam, “we,” “our,” or “us” used herein means the entities specified in Section 1 (About this Policy) of the Policy.
This VN Addendum provides additional provisions of the Policy from the perspective of Vietnamese law and is an integral part of the Policy.
Unless otherwise specified herein, this VN Addendum shall prevail over any conflicting provisions in the Policy and amendments thereto (if any).
Other sections of the Policy that are not amended hereunder shall remain unchanged.
After being collected by us from the relevant sources as mentioned in Section 2 (How We Collect Your Personal Data) of the Policy and obtaining necessary legal basis for processing your personal data, we will start processing your personal data in accordance with the Policy and this VN Addendum.
Your personal data will be collected electronically via our website or manually from paper media and then input automatically (if entered by you on the website) into our website servers, or manually (if provided in paper media) by our designated staff of responsible department into our information technology system (e.g., computer system)
and stored electronically and securely in servers in Japan and/or the US operated by Panasonic Industry or the Affiliates (or its server vendor(s) such as HubSpot located in the US), and locked storage. Your personal data will be further processed electronically in such servers.
We and the parties set forth in Section 4 (Disclosure of Personal Data to Recipients) of the Policy will access, manage, and use the personal data electronically
and securely for the purposes in accordance with the Policy and this VN Addendum.
If personal data is received directly in hard documents by paper, the hard copy will be kept in locked document cabinet.
The parties set forth in Section 4 (Disclosure of Personal Data to Recipients) of the Policy may download or have us electronically send, store, and use your personal data electronically and securely in servers operated by themselves or third-party vendors for the purposes in accordance with the Policy and this VN Addendum.
In relation to “Send marketing communications” mentioned in Item (g) of Section 3 (Purposes of Processing Personal Data) of the Policy, details of our marketing communications to be sent to you are as below:
We commit to the protection of your personal data and have implemented reasonable technical and organizational measures to achieve this goal.
However, you acknowledge that no data transmission over the internet is completely secure, and transmissions may be exposed to cyberattacks, resulting in leakage of or unauthorized access to the collected personal data, and that you transmit this data to us at your own risk.
In addition to the rights listed out in Section 7 (Your Rights) of the Policy, you have additional rights granted by the Vietnam data protection regulations as below:
In addition to the rights to your personal data, you have certain obligations including but not limited to the following obligations: