1.Contact Details

(1) Controller

Mitsui & Co. Deutschland GmbH

Herzogstraße 15
40217 Düsseldorf
Tel: 0211-9386-0
E-Mail: InfoDUSZZ@dg.mitsui.com

(2) Data Protection Officer

Mrs. Lucia Straßer

@-yet GmbH
Data Protection Officer of Mitsui & Co. Deutschland GmbH
Schloss Eicherhof
42799 Leichlingen
E-Mail: datenschutz@dg.mitsui.com

2.Purposes of processing your personal data

When you contact us via our hotline, telephone or during a visit to one of our exhibition stands, we collect information about you that may contain personal data, for example, we process personal data from and about individuals who are our business customers, suppliers, and/or business partners. We will use your personal data in order to process your request or inquiry. This includes processing of your email address, name, department, organization name, telephone number or even your concern. We use this personal data to be able to exercise our contractual rights and obligations towards you or to be able to carry out pre-contractual measures (e.g. offers). Respective processing operations are based on Art. 6 para. 1 lit. b GDPR.

In addition, we have an overriding legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in processing your personal data for the following purposes:

• to inform you about our services or products in order to offer you the best possible service or to reply to your request and
• to protect our business and company, including through the following activities: application of control mechanisms, management reporting and analysis, as well as internal audits and investigations.

You are not obliged to provide us with your personal data. However, without such personal data, it might be that we are not able to fulfil our contractual obligations with you.

3.Automated decision making

We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.

4.Sharing personal data with third parties

We will not disclose your personal data to any third parties. In exceptional cases, or where we are unable to process your request, we will share your information with our European Headquarters in London or our Group Headquarters in Tokyo, which will assist us in processing your request. In these cases, an appropriate level of data protection is ensured through the use of EU standard contractual clauses and/ or data processing agreements.

In the event that we undergo re-organisation or are sold to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law.

We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).

5.Security

We have reasonable state of the art security measures in place to protect your personal data against loss, misuse and alteration. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of personal data will never occur, we use all reasonable efforts to prevent it.

6.Data retention

We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.

7.Your rights

Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:

• Right of access pursuant to Art. 15 GDPR: You have the right to request information from us, including what personal data we process from you, for what purposes it is used and to whom we may disclose your personal data.
• Right of rectification according to Art. 16 GDPR: If the personal data we process from you is not correct, you have the right to have it corrected.
• Right to deletion pursuant to Art. 17 GDPR: You have the right to have your personal data deleted immediately unless otherwise provided by law.
• Right to limit the processing according to Art. 18 GDPR: Under certain conditions you have the right to limit the processing, e.g. if the processing is to be stopped but the personal data are not to be deleted.
• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data processed by us in a common, structured and machine-readable format.
• Right to complain to a supervisory authority pursuant to Art. 77 GDPR: If you are of the opinion that the processing of your personal data is unlawful, you have the right to complain to a supervisory authority.

8.Right to object, Art. 21 GDPR

If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. An objection is permissible if the processing is either in the public interest or due to a legitimate interest of the company or a third party. In the event of an objection, we ask you to provide us with the reasons for your objection to the data processing.

The objection can be made without any formalities and should, if possible, be directed to the contact options mentioned in section I

9.Amendments to this Policy

We reserve the right to change this Notice from time to time by updating our website respectively. Please visit the website regularly and check our respectively current privacy policy. This Notice was last updated on October 20, 2023.