4. How do we use your Personal Data (purpose and legal basis)?

We process your Personal Data in the context of the activities and for the purposes set out in the table below and rely on one or more of the following the specified legal bases:

- Performance of a contract: Where we need to perform a contract which we are about to put in place or have put in place with you as a party, or (at your request) take steps before putting such a contract in place (Art. 6(1)(b) GDPR);
- Legal obligation: Where we need to comply with a legal obligation to which we are subject (Art. 6(1)(c) GDPR);
- Legitimate interests: Where we are acting in our legitimate interests, provided that they are not overridden by your fundamental rights (Art. 6(1)(f) GDPR). We assess our legitimate interests for processing your Personal Data and balance them against any potential impact on you. Generally, the legitimate interests pursued by us in relation to our use of your Personal Data is the efficient, secure, and lawful performance and/or management of your use of this website. Where we rely on our legitimate interests you have the right to object to such processing at any time under the conditions set out in the GDPR; for more information on our legitimate interests or our balancing test, please contact us by using the communication means set out in Section 14 below;
- Consent: Where we rely on your consent, we will ask for it separately (6(1)(a) GDPR). Generally, we rely on consent where we are required in relation to sending emails to reply for your inquiry.

Please note that Panasonic does not base any decision solely on automated processing including profiling that significantly affects you or has legal effects for you (Art. 22 GDPR) and that we will only use your Personal Data for the purposes for which we collected it as detailed in the table below, unless we reasonably consider that we need to use if for another reason and that reason is compatible with the original purpose. If you wish to receive an explanation as to how the new purpose is compatible with the original purpose, please contact us by using the communication means set out in Section 14 below.

5. To whom do we disclose your Personal Data?

We will not disclose your Personal Data to third parties for their own independent marketing or business purposes unless you have given your consent to do so. However, we may have to disclose your Personal Data to the following categories of recipients for the purposes we collected it as set out in Section 4 relying on the legal bases specified therein:

I. Panasonic Holdings Corporation and Affiliates
We may need to transfer your Personal Data within the Panasonic Group of Companies to provide the Services you require or any other services/assistance you request. All companies within the Panasonic Group are required to follow the privacy practices set forth in this Privacy Notice, or another privacy policy that they may notify to you and to process your Personal Data in accordance with the applicable privacy and data protection laws and regulations.

II. Third parties when required by Law or to Protect our Business and Services
We will disclose your Personal Data to comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies; to protect our customers (e.g., to prevent spam or attempts to defraud users of our Services); to operate and maintain the security of our Services (e.g., to prevent or stop an attack on our systems or networks); to protect the health and safety of our colleagues and others with whom we have contact; or to protect the rights or property of Panasonic, including enforcing any terms or agreements governing the use of our Services.

III. Other Parties in Connection With Corporate Transactions
We may disclose your Personal Data to a third party or within the Panasonic Group of Companies as part of a reorganisation, merger, transfer, sale, joint venture, assignment or other disposition of all or any portion of Panasonic's business, assets, or stock, including, without limitation, in connection with any bankruptcy or similar proceeding.

IV. Other Parties With Your Consent or At Your Direction
We may share Personal Data about you with third parties when you consent to or request such sharing.

6. What do we do to keep your Personal Data secure?

The security of your Personal Data is of greatest importance to Panasonic. We have put in place a range of appropriate physical and technical measures as well as robust policies and processes. The purpose thereof is to safeguard your Personal Data and to protect it against accidental or unlawful destruction or alteration, accidental loss, unauthorized disclosure, or access and against other unlawful forms of processing. These measures take into account the state of the art of the technology, the costs of its implementation, the nature of the Personal Data, and the risk of the processing.
Information security, including the protection of Personal Data is organized in a global Panasonic Program called Information Security Management (“ISM”). The related aim, standards and implementation measures are organized in a globally valid Policy, and further standards and guidelines. The program and all its parts follow a strong yearly Plan-Do-Check-Act (PDCA) approach to secure the confidentiality, integrity, and availability of all data (including your Personal Data) for the whole information lifecycle from collection to destruction of such information.

All our websites are protected by Hypertext Transfer Protocol Secure (HTTPS) to secure the communication between your web browser and our web servers. The communication protocol is encrypted using Transfer Layer Security (TLS) OR Secure Sockets Layer (SSL). Other security layers and measures need to be kept confidential to prevent malicious actors from understanding out security setting.

7. If you fail to provide Personal Data to us

Where we need to collect your Personal Data before we can provide our products and/or Services and you fail to provide that data when requested, we will not be able to provide products and/or Services if we do not have all the Personal Data we need. In this case, may have to cancel a Service you have with us and will notify you if this is the case at the time.

8. Accessing your Personal Data and other rights you have

What are your rights?
Your rights under the GDPR include the right to be informed, the right to access a copy of your Personal Data, the right to request the rectification or the update of any inaccurate Personal Data we hold, and the right to request erasure of your Personal Data.
You also have the right to obtain restriction of the processing of your Personal Data, the right to object to the processing of your Personal Data at any time under the conditions set out in the GDPR, and the right not to be subject to a decision based solely on automated processing.
In addition, you have the right to data portability in certain cases. This is the right to request the return of the personal data you have provided to us in a structured, commonly used and machine-readable format and to request the transmission of such personal data to a third party, without hindrance from us and subject to your own confidentiality obligations.
You also have the right to not provide consent and, where you have consented to our processing of your Personal Data, you have the right to withdraw such consent at any time without this withdrawal affecting the lawfulness of the processing prior to such withdrawal.
Your rights are further specified in Art. 7 and Chapter 3 of the GDPR and other applicable data protection legislation.

Exercising your rights
If you wish to exercise any of the above rights, then please contact us by using the communication means set out in Section 14 below.

Complaints
If you are not satisfied with how we process your Personal Data, then please contact us by using the communication means below in Section 14 or alternatively file a complaint with the competent supervisory authority:

- EEA/EU authorities: Members | European Data Protection Board (europa.eu)
- United Kingdom (UK): Make a complaint | ICO

9. International Transfers

Where we transfer your Personal Data to recipients located outside of the European Economic Area ("EEA") we ensure that your Personal Data remains protected by transferring it only to countries that offer an adequate level of protection as recognised by the European Commission such as e.g., Japan and the United Kingdom and/or by using the Standard Contractual Clauses (“SCCs”) approved by the European Commission and where required putting supplementary measures in place to afford your Personal Data with essentially the same level of protection it has in the EEA. Your use of our Services may particularly involve the transfer and the processing of your Personal Data from the EEA to our headquarter in Japan (Panasonic Holdings Corporation), to our affiliates (in the United Kingdom (UK) and to service providers and/or third parties based in the United States of America (USA).

- According to their own statements, all non-EU providers we used provide for an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield. In addition, we have entered into SCCs with them to ensure a level of data protection essentially equivalent to the one afforded in the EU. Facebook
Facebook EU Data Transfer Addendum (https://www.facebook.com/legal/EU_data_transfer_addendum)
https://www.facebook.com/legal/terms/page_controller_addendum)
- Google
Data Processing Agreement (SCCs): https://business.safety.google/adsprocessorterms

In the same way, if we transfer your Personal Data outside of Serbia, Switzerland, Turkey, or the UK, we will ensure that your Personal Data remains protected in line with the requirements set out in the applicable data protection legislation. You may request additional information in this respect and obtain a copy of the appropriate safeguards we provide for by using the communication means below in Section 14.

10. Data Retention – How long we will retain your Personal Data?

We will only retain your Personal Data for the period necessary to fulfil the purposes for which it has been collected. This includes the purposes of fulfilling our contract with you, satisfying any legal, regulatory, accounting, reporting obligation we are subject to and the establishment or defence of legal claims.

To determine the appropriate retention period, we consider the amount, nature and sensitivity of your Personal Data, the potential risk of harm from unauthorized use or disclosure of your Personal  Data, the purposes for which we process your Personal Data and whether we can achieve those purposes through other means, and the applicable legal requirements. The period which we would basically retain is at least 12 months to maximum 24 months from the date of your inquiry received but if you would like to know more about the retention periods we apply to your Personal Data, please contact us by using the communication means set out in Section 14 below.

11. Third-party links products on our Services

Our websites, applications and products may contain links to third-party websites, plug-ins, applications, embedded functions, and content such as videos. Clicking on those links or enabling those connections may allow third parties to collect or share Personal Data about you.

We do not control these third-party websites or applications and are not responsible for their privacy practice. If you choose to use any third-party website or application, Personal Data collected by the third party’s website or application will be subject to the privacy policy of that third party. We strongly recommend that you take the time to review the privacy policies of any third parties to which you provide Personal Data.

I. Social Media Networking Providers
We do not use any social media plug-ins on our websites, applications, and products. If our websites, applications, and products contain symbols of social network providers we only use them for passive linking to the pages of the social networking providers.

II. Google Fonts
We integrate the fonts ("Google Fonts") of the provider Google to displaying the fonts in your browser.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy.

III. YouTube
We integrate YouTube videos, which are stored on YouTube.com and can be displayed directly from our website. The videos are integrated with the advanced privacy mode; only if you display the videos Personal Data will be transferred to YouTube. We have no influence on this data transfer.
You have the right to object to the creation of these user profiles and need to contact YouTube to exercise this right. For more information, please consult Google Privacy Policy.

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Privacy Policy: https://policies.google.com/privacy 
Possibility of objection (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de
Settings for the display of advertisements: https://adssettings.google.com/authenticated

12. Cookies

A. What are cookies?
Panasonic Absorption chiller “Inquiry Form” does not collect any information through Cookies. However, Panasonic, as well as certain other third parties that provide content, advertising, or other functionality on our Services, may use cookies and other technologies in certain areas of our Services. Cookies are small text files which may be placed on your device when visiting our website. It can be read by the web server which put the cookie on your hard drive. We may use cookies to store your preferences and settings, help you with signing in, providing targeted advertisement and to analyse your browsing experience on our website.

Please note that you can modify your browser so that it notifies you when cookies are sent to it. If you do not want to receive cookies, you may also refuse cookies altogether by activating the relevant settings on your browser. Please note that if you choose to refuse all the cookies, some features of the Services may not be accessible to you or not work properly. Finally, you can also delete cookies that have already been sent.

B. Further information on cookies
For information on what cookies are, how Panasonic and other third parties use cookies and similar technologies, and for details of how cookies can be disabled, please see our Cookie Policy [Cookie Policy | Panasonic].

13. Changes to this Privacy Notice or to your Personal Data

It also is important that you check back often for updates to the Privacy Notice, as we may change it from time to time. The “Date last updated” Section at the top of this page states when this Privacy Notice was last updated, and any changes will become effective upon our posting of the revised Privacy Notice.
We will provide additional notice to you if these changes are material by adding a statement to this website or by sending you a notification through any relevant Services or email.

We encourage you to review the Privacy Notice whenever you access the Services or otherwise interact with us to stay informed about our information practices and the choices available to you. It is important to us that the Personal Data we hold about you is accurate and up to date at all times. If any of the Personal Data we hold about you changes, please keep us informed.

14. Contact Us

If you have any questions regarding the collection, processing, or use of your Personal Data or if you wish to exercise your rights, please contact us:

I. By using inquiry form:
[https://aircon.panasonic.com/business/lineup/chiller.html]

II. By mail:
[1-1-1 Sakata, Oizumi-machi, Ora-gun, Gunma 370-0596, Japan]

III. By email:
[abs_chiller_inquiry@jp.panasonic.com]

If you have questions about Data Protection in Europe, please contact us at:
Panasonic Business Support Europe GmbH
The Data Protection Officer
Hagenauerstrasse 43
D-65203 Wiesbaden
Germany
or by e-mail: Data_Protection@eu.panasonic.com

Please note that Panasonic Business Support Europe GmbH acts as Representative of the data controller (Art. 27 GDPR) if you reside in a member state of the European Economic Area.

If you have any questions about Data Protection in the United Kingdom (UK), please contact us at:
UK Legal Department
Panasonic Business Support Europe GmbH (UK branch)
Maxis 2, Western Road,
Bracknell, Berkshire,
RG12 1RT
UK
or by e-mail: UKLegal@eu.panasonic.com