1.Contact Details

(1) Controller

Mitsui & Co. Deutschland GmbH

Herzogstraße 15
40217 Düsseldorf
Tel: 0211-9386-0
E-Mail: InfoDUSZZ@dg.mitsui.com

(2) Data Protection Officer

Mrs. Lucia Straßer

@-yet GmbH
Data Protection Officer of Mitsui & Co. Deutschland GmbH
Schloss Eicherhof
42799 Leichlingen
E-Mail: datenschutz@dg.mitsui.com

2.Purposes of processing your personal data

When you contact us, we collect information about you that may contain personal data, for example, we process personal data from and about individuals who are our business customers, suppliers, and/or business partners. This includes processing of your e-mail address, name, department, organization name, telephone number or even your concern.

We use your personal data to be able to exercise our contractual rights and obligations towards you or to be able to carry out pre-contractual measures (e.g. offers) based on Art. 6 para. 1 lit. b GDPR. This involves the following processing activities:

• We will use your personal data to carry out our business activities. The object of our company is trading as well as the import and export of goods of all kinds from and to Japan and other countries, as well as the performance and brokerage of all related activities, in particular movables leasing, warehousing and forwarding.
• We process your personal data in order to offer you our products and services and to provide you with comprehensive information, to maintain business relations with you or to conduct new business.
• Furthermore, we will use your personal data in order to be able to perform the services contractually agreed with you, as well as for the organization and management of the business, such as account management.

In addition, we process your personal data based on our overriding legitimate interests pursuant to Art. 6 para. 1 lit. f GDPR. Respective purposes of processing are the following:

• We process your personal data to inform you about our services or products in order to offer you the best possible service or to reply to your request.
• We occasionally send customer satisfaction surveys via email to our customers because we want to keep the quality of our products and services at the highest level.
• We will use your personal data to protect our business and company, including through the following activities: application of control mechanisms, management reporting and analysis, as well as internal audits and investigations.
• Furthermore, we will use your personal data to comply with legal and/or regulatory requirements, including litigation and to defend against claims.

You are not obliged to provide us with your personal data. However, without such personal data, it might be that we are not able to fulfill our contractual obligations with you.

3.Customer Satisfaction Survey

For conducting our customer satisfaction surveys, we use your email address. Corresponding processing is based on our overriding legitimate interest in improving our services for our customers.

You can request at any time that you no longer receive emails containing customer satisfaction surveys from us. To do so, please send an email to: mdg_imsteam_dusag@dg.mitsui.com

You will not incur any costs other than the transmission costs according to the basic rates.

We use the service provider Netigate Deutschland GmbH, Untermainkai 27-28, 60329 Frankfurt am Main (“Netigate”) for the customer satisfaction survey. For this purpose, we provide your email address to Netigate. All servers and thus all data processed by this service provider are located exclusively in the EU and are therefore also subject to the GDPR. We have concluded a data processing agreement with the service provider in accordance with the Art. 28 GDPR.

4.Automated decision making

We do not use your personal data for automated decision making which produces legal effects concerning you or similarly significantly affects you.

5.Sharing personal data with third parties

We disclose your personal data only to the following third parties:

• other companies within the Mitsui Group;
• authorized external third parties, service providers and/or subcontractors of Mitsui;
• a competent authority, government agency, regulatory or financial authority, if necessary to comply with any legal or regulatory obligation to which such Mitsui entities are subject, or if permitted by local law.

Your personal data may be disclosed to companies within the Mitsui group of companies and/or to authorized third parties that might be located outside your country of residence (including outside the European Economic Area), where potentially, different data protection standards may apply. We have implemented appropriate safeguards to secure your personal data.

This include the conclusion of appropriate contracts for data processing or EU standard contractual clauses that ensure a proper level of data protection.

In the event that we undergo re-organisation or are sold to a third party, any personal data we hold about you may be transferred to that re-organised entity or third party in compliance with applicable law.
We may disclose your personal data if legally entitled or required to do so (for example if required by law or by a court order).

6.Security

We have reasonable state of the art security measures in place to protect your personal data against loss, misuse and alteration. For example, our security and privacy policies are periodically reviewed and enhanced as necessary and only authorised personnel have access to personal data. Whilst we cannot ensure or guarantee that loss, misuse or alteration of personal data will never occur, we use all reasonable efforts to prevent it.

7.Data retention

We strive to keep our processing activities with respect to your personal data as limited as possible. In the absence of specific retention periods set out in this policy, your personal data will be retained only for as long as we need it to fulfil the purpose for which we have collected it and, if applicable, as long as required by statutory retention requirements.

8.Your rights

Under the legislation applicable to you, you may be entitled to exercise some or all of the following rights:

• Right of access pursuant to Art. 15 GDPR: You have the right to request information from us, including what personal data we process from you, for what purposes it is used and to whom we may disclose your personal data.
• Right of rectification according to Art. 16 GDPR: If the personal data we process from you is not correct, you have the right to have it corrected.
• Right to deletion pursuant to Art. 17 GDPR: You have the right to have your personal data deleted immediately unless otherwise provided by law.
• Right to limit the processing according to Art. 18 GDPR: Under certain conditions you have the right to limit the processing, e.g. if the processing is to be stopped but the personal data are not to be deleted.
• Right to data portability according to Art. 20 GDPR: You have the right to receive your personal data processed by us in a common, structured and machine-readable format.
• Right to complain to a supervisory authority pursuant to Art. 77 GDPR: If you are of the opinion that the processing of your personal data is unlawful, you have the right to complain to a supervisory authority.

9.Right to object, Art. 21 GDPR

If the processing is based on an overriding legitimate interest, you have the right to object to the processing of your data. An objection is permissible if the processing is either in the public interest or due to a legitimate interest of the company or a third party. In the event of an objection, we ask you to provide us with the reasons for your objection to the data processing.

The objection can be made without any formalities and should, if possible, be directed to the contact options mentioned in section I.

10.Amendments to this Policy

We reserve the right to change this Notice from time to time. This Notice was last updated on October 20, 2023.