Morinaga Milk Co., Ltd. (referred to as "Morinaga Milk" or “we”) continues to strengthen its privacy protections by paying close attention to the procedures used to handle the personal data of its customers.
I. General information
- Who is responsible for processing of personal data
Controller (see Art. 4 No. 7 GDPR) of the processing of personal data is:
Morinaga Milk Co., Ltd., Shiba 5-33-1, Minato-ku, Tokyo, Japan
To protect safety, we take measures to prevent and eliminate the risk of events such as any unauthorized access to, or any loss, destruction, falsification, or leakage of, personal information.
We comply with laws and other norms concerning personal information.
We continuously improve our compliance program.
- What we process
- We process personal data provided by you or data that is automatically allocated while using our website. For further information, see section II. – Processing of personal data.
- For what purpose and on what legal basis do we process personal data
We process your personal data in accordance with the provisions of GDPR for various purposes. In principle, the following can be considered as the purposes of the processing: the processing for the initiation of contractual relationships and the performance of contracts (Art. 6 (1) lit. b GDPR), for the protection of legitimate interests (Article 6 (1) lit. f GDPR), and/or based on your consent (Article 6 (1) lit. a GDPR).
We explain the legal basis we actually use in sections II.
- Who receives your personal data
Service providers employed by us (processors, see Art. 4 No. 8 GDPR) may receive and process personal data on our behalf. We use the following processor or category of processors:- IT service providers
- Google. Inc.
We also may share personal data with other group companies where necessary for answering customers’ inquiries.
We do not share personal data with third party controllers outside of our group of companies.
- Transfer of personal data to a Third Country
Please note, that we are based in Japan and therefore process your personal data outside of the European Economic Area (EEA) in Japan.
We may transmit your personal data to other third countries outside of the EEA. When we transmit your personal data to the third countries where the European Commission does not confirm an adequate level of protection for personal data, we will make sure that we provide an adequate level of protection to the data transferred, in particular by entering into standard contract clauses as approved by the European Commission.
Through the use of Google Analytics, personal data may be transferred to other countries outside of the EEA in exceptional cases. For further information, see section II.3.
- For how long do we process personal data
- We process data only as long as it is necessary in relation to the initial specified, explicit and legitimate purpose. We will delete your personal data if it is no longer necessary to retain for such purpose.
- Your rights
Every data subject has the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR) and the right to data portability (Art. 20 GDPR). In addition, as far as the personal data is processed for the purpose of our legitimate interest according to Art. 6 (1) lit. f GDPR, you have the right to object according to Art. 21 GDPR.
To exercise those rights, you can contact us under the contact information given in section III.
If the processing of personal data is based on your consent, you can withdraw it at any time. The withdrawal should, if possible, be directed to the bodies mentioned in section III.
In addition, if you are of the opinion that the processing of your personal data is unlawful, you have the right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR). This right to complain is without any prejudice to any other administrative or judicial remedy. However, we would appreciate if you would contact us first so that we can response to your concern before you approach the supervisory authority.
II. Processing of personal data
- Access data/ Server logfiles
While visiting our website, the following personal data is stored:- IP address
- Client ID
- Browser type and operating system used
The processing of personal data is based on Art. 6 (1) lit. f GDPR. Purpose and our legitimate interest are administration and improved functionality of our website as well as preventing security issues.
- Google Analytics
In case the anonymization of IP-addresses is active on a website, the user’s IP address will be truncated inside the European Union or the European Economic Area. Only in exceptional cases the user’s full IP address will be transmitted to a server of Google in the US and truncated there. IP-anonymization is active on our websites.
On behalf of us, Google will process this data in order to analyze your use of our websites, to generate reports on website activity and to render further services regarding the use of our websites. The IP address transmitted by your browser will not be associated with other data in possession of Google.
You can prevent the storage of cookies by modifying your browser setting to decline cookies. Furthermore, you can prevent the collection and following procession of data by Google through this cookie by downloading a browser-plugin through the following link: https://tools.google.com/dlpage/gaoptout/.
Preventing storage of cookies may prevent you from taking full advantage of our websites.
You can find further information about terms and conditions as well as data protection on https://www.google.com/analytics/terms/us.html, https://www.google.com/policies/privacy/ and https://support.google.com/analytics/answer/6004245?hl=en.
The processing of personal data through Google Analytics is based on Article 6 (1) lit. a GDPR (consent). Purpose of the processing is the analysis of the use of our websites as well as improved functionality.
- Inquiries from customers
When contacting us (i.e. via email), we process your email address and any personal data disclosed in the message itself (i.e. your name).
When you use our contact form, we process the personal data you provide in said contact form: name, company, industry, country, email address, subject of your inquiry, any data disclosed in the message itself and, should you choose to disclose it, your address, telephone number as well as fax number.
Should it be necessary to answer your inquiry, we will pass on personal data to other companies in our group.
The processing is based on Art. 6 (1) lit. b and lit. a GDPR. Purpose and our legitimate interest is answering your enquiry and, if applicable, follow-up questions
III. Contact Details
Morinaga Milk Co., Ltd.
Shiba 5-33-1, Minato-ku, Tokyo, Japan
Contact form:[ https://www.morinagamilk.co.jp/english/contact/]
Information about your right to object in accordance with Art. 21 General Data Protection Regulation (GDPR)You have the right to object at any time to processing of personal data concerning you on the basis of Art. 6 (1) lit. f GDPR. Should you decide to object the processing, we will stop to process personal data concerning you, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the purpose of establishment, exercise or defense of legal claims. You also have the right to object at any time to processing of personal data concerning you for the purpose of advertising; this also applies to profiling insofar as it is associated with advertising. If you do so, we will stop to process personal data for advertising purposes.