Privacy Statement for Business Partners

Introduction

This Privacy Statement contains information about the personal data of our business partners we, the Daikin Chemical Companies in Europe (hereinafter referred to as “we”, “us”), collect, process and use in the course of our business activity.

The data controller of the processing of your personal data is the Group company with which you usually interact.

We take protection of your personal data very seriously. Therefore, we process your personal data in compliance with the applicable data protection rules, in particular the General Data Protection Regulation ("GDPR").

Processing of Personal Data for Business Purposes

We process only such personal data as provided to us in the course of our business relations. The purpose of the processing depends on the inquiry or business transaction.

For the data processing related to our website, see our website privacy statement.

We process personal data primarily for the performance of contractual obligations (Art. 6 para. 1 lit. b GDPR), in particular for the initiation of business and the fulfilment of contracts. Such activities include, for example, the preparation of quotes, invoicing, customer service, technical service and responding to general requests. If the data subject is not contractual partner, but e.g. the employee of a business partner, the personal data are processed based on legitimate interests (Art. 6 para. 1 lit. f GDPR) with the same purpose.

Furthermore, we process personal data for the following legitimate interests (Art. 6 para. 1 lit. f GDPR): maintenance of business relationships, product monitoring, IT security and legal claims and disputes.

Depending on the type of inquiry or business transaction, we store your personal data in our communication systems, CRM and ERP system, to the extent required for the respective purpose, in accordance with standard business practices.

Only if it is part of our business relation, or if we have obtained your consent (Art. 6 para. 1 lit. a GDPR), we will process your personal data for the purpose of informing and advising about our products and services, for market research, customer satisfaction analysis and pass them on to third parties.

We can also pass on your personal data to third parties if this is required to comply with legal obligations (Art. 6 para. 1 lit. c GDPR).

We submit inquiries to credit agencies that maintain a data pool with information regarding fraud cases, to check if the pool contains any data about our (potential) business partners, as far as this is required for the protection of legitimate interests (Art. 6 para. 1 lit. f GDPR), in particular the protection of our assets and the assets of third parties.

We do not use your personal data for automated decisions or profiling.

Transfer to Third Parties

We will not transmit your personal data without consent to any third parties, except where we are entitled or obliged by law, receive an official request by a court or authority or where we engage external data processors who support us in the performance of our goods and services, and act only on our behalf. When parts of the data processing are outsourced to external service providers, we conclude data processing agreements according to Art. 28 GDPR.

In order to handle your requests properly, and for the coordination and optimisation of our customer service we may also transfer your contact data to other companies of the Daikin Group (“Affiliates”) which are located in other jurisdictions than the jurisdiction where you are resident.). Such transfer is necessary, in particular, for the provision of our goods and services and to coordinate responses to customer requests. We have concluded data transfer agreements with standard clauses with our Affiliates. Furthermore, the data that is being transferred is subject to appropriate technical and organisational data protection measures.

Data Storage Term

Your personal data will be stored by us or our data processors only for the period necessary to carry out our services and in accordance with the applicable laws and regulations.

Further, we will store your data for as long as it is required by applicable legal provisions on document retention in accordance with our document retention policy. The retention periods can amount up to 10 years for e.g. contract documents or accounting records.

In addition, there can be retention requirements resulting from contractual obligations.

After the omission of the purpose and the expiry of any applicable retention obligation, the personal data are routinely deleted in a data protection compliant manner.

Security

Technical and organisational security measures are being used in order to protect your personal data from being manipulated, lost, destructed or accessed by unauthorised persons. When personal data is collected, such data will be encrypted in transit to prevent misuse of the data by any third parties. Our security measures are continuously reviewed or improved in light of the technological development.

Your rights

You may request from us access to (Art. 15 GDPR), rectification of (Art. 16 GDPR), or erasure of (Art. 17 GDPR) your personal data in compliance with the applicable statutory provisions. Where the deletion of your personal data is not possible due to contractual or statutory requirements, in particular retention obligations based on fiscal or commercial law, personal data will be blocked (Art. 18 GDPR). In this case, further processing of your personal data is restricted. Furthermore, you have a right to data portability (Art. 20 GDPR). Where the processing of your personal data is based on legitimate interests pursuant to Art. 6 Para. 1 lit. f) GDPR, you may object to such processing (Art. 21 GDPR). You can find further information regarding the right to object below.

In case you gave your consent to the transfer of your personal data to third parties you may withdraw your consent anytime by notifying us of the withdrawal (see below). In this case, we will no longer process your personal data. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise the aforementioned rights and/or to obtain further information, you can contact us using the "Request Form for Data Protection Related Rights", or under the following address:

Daikin Chemical Europe GmbH
Data Protection Coordinator
Am Wehrhahn 50
40211 Düsseldorf
Germany

You can contact our data protection officer under the following address:

Data Protection Officer of the Daikin Group:
Masafumi Yamamoto,
Daikin Industries, Ltd.,
Umeda Center Bldg., 2-4-12,
Nakazaki-Nishi, Kita-ku, Osaka, 530-8323,
Japan

Please take into account that we may require a proof of your identity if you exercise the aforementioned rights.

Right to lodge a complaint with a supervisory authority

If you take the view that the processing of your personal data as laid down in this Privacy Statement infringes on the rules provided by the GDPR, you are entitled to lodge a complaint with a supervisory authority, in particular the EU Member State of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR). Such complaint is without prejudice to any other administrative or judicial remedy.

Right to object

You have the right to object (Art. 21 GDPR), on grounds relating to your particular situation, at any time to processing of your personal data which is based on Art. 6 Para. 1 lit. f) GDPR, including profiling based on those provisions. We will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.

August 2022