Privacy Policy

Nissei ASB Machine Co., Ltd. (hereinafter referred to as the "Company") strongly recognizes the importance of protecting the personal information of our customers, shareholders, business partners, and executives and employees acquired through our business activities. The Company will strive to protect personal information based on the following policy in compliance with the Act on the Protection of Personal Information and related laws and guidelines.

1. Proper Acquisition

The Company will acquire personal information by proper and fair means.

2. Purpose of Use of Personal Information

The Company will use the provided personal information for the following purposes:

  • Providing information regarding our products and services
  • Supporting transactions, orders, or contracts
  • Managing customer and business partner information
  • Responding to inquiries from customers and shareholders
  • Implementing and providing information on IR-related measures
  • Exercising rights and fulfilling obligations under the Companies Act
  • Providing information on recruitment, selection procedures, and personnel and labor management after joining the Company
  • Provision and improvement of products/services, investigation and response to security vulnerabilities

3. Prohibition of Use for Other Purposes

The Company will not use personal information for any purpose other than the stated purposes of use.

4. Security Control Measures

The Company will take security control measures to prevent the leakage, loss, or damage of personal information and to appropriately manage personal information.

5. Provision to Third Parties

Except as required by law, the Company will not provide personal information to any third party without obtaining the prior consent of the individual.

6. Entrustment

The Company may entrust part of the handling of personal information to external parties. In this case, the Company will exercise necessary and appropriate supervision over the entrusted parties in accordance with the Act on the Protection of Personal Information.

7. Joint Use

The Company will jointly use personal data only when necessary under Article 26 GDPR, as described below:

  • Items of personal data to be jointly used: Name, address, telephone number, email address, facial photograph
  • Scope of joint users: The Company and its subsidiaries (including overseas subsidiaries)
  • Purpose of use: The scope described in "2. Purpose of Use of Personal Information"
  • Person responsible for managing jointly used personal data:
    • EEA Contact Point (Representative):
      Nissei ASB GmbH
      Address： Wahlerstraße 8, 40472 Düsseldorf,Germany
      Email： dataprotection@nisseiasb.de
    • The other Region
      Nissei ASB Machine Co., Ltd.
      Address：4586-3 Kou, Komoro-shi, Nagano
      Representative：Makoto Fujiwara

8. Requests Regarding Personal Information

When the Company receives a request from an individual or their agent for the disclosure, correction, or deletion of their personal information, the Company will respond in accordance with laws and regulations. For inquiries regarding the above, please refer to "9. Contact for Inquiries and Complaints".

9. Contact for Inquiries and Complaints

For inquiries or complaints regarding the Company's handling of personal information, please contact the following:

  • Nissei ASB Machine Co., Ltd.
    Human Resources and General Affairs Department,
    Email：asb.soumu@nisseiasb.com
  • Nissei ASB GmbH - EU Representative pursuant to Art. 27 GDPR Email：
    dataprotection@nisseiasb.de

10. Special Provisions for Individuals in the EEA

For the handling of personal information of individuals (including vulnerability reporters) located in the European Economic Area (EEA) , the following provisions shall apply in addition to Sections 1 through 9 above, in accordance with the EU General Data Protection Regulation (GDPR) .

  • Legal Basis for Processing The Company processes personal information based on one of the following legal bases:
    • Contractual Basis : For orders, transactions, and contract management
    • Legitimate Interest : For IT security, product improvements, vulnerability reporting
    • Consent : For marketing or newsletter distribution
    • For compliance with legal obligations.
  • Data Transfer to Japan and other countries The Company is located in Japan, and your personal information will be transferred to and processed in Japan. This transfer is conducted lawfully under appropriate safeguards based on the "Adequacy Decision" granted to Japan by the European Commission.If data is transferred to our subsidiaries or third parties in countries without an adequacy decision, we ensure appropriate safeguards are in place, such as executing Standard Contractual Clauses (SCCs) approved by the EU Commission.
  • Retention Period Retention periods are determined based on statutory limitation and retention periods as well as the duration of our active business relationship.
  • Data Subject Rights Subject to conditions under applicable laws, you have the following rights regarding your personal information: The right to access, right to rectification, right to erasure (right to be forgotten), right to restriction of processing, right to data portability, and the right to object to processing based on our legitimate interests. To exercise these rights, please contact the address provided in "9. Contact for Inquiries and Complaints".
  • Right to Lodge a Complaint with a Supervisory Authority You have the right to lodge a complaint regarding our handling of personal information with the data protection supervisory authority in your place of residence, place of work, or the EU member state where the alleged infringement occurred.
  • AI Usage and Automated Decision-Making
    When you submit a vulnerability or technical report, the Company will review and process its content.
    • Use of AI for Analysis: To ensure a rapid and effective response to security threats, we utilize Artificial Intelligence (AI) tools to assist our teams in the initial triage, categorization, and technical analysis of submitted reports. The legal basis for this processing is our legitimate interest (Art. 6(1)(f) GDPR) in ensuring the cybersecurity, stability, and integrity of our systems and products.
    • No Automated Decision-Making: We do not subject reporters to automated decision-making processes that produce legal or similarly significant effects under Art. 22 GDPR. While AI tools assist in the preliminary evaluation, all final decisions, validations, and subsequent actions are performed exclusively by human personnel.
  • Use of Third-Party Services and Cookies
    • General and Legal Basis：We use cookies and similar tracking technologies (such as pixels or local storage) on our website to ensure functionality, improve user experience, and analyze web traffic.
    • Necessary Cookies：These are technically required to operate the website safely and securely. The legal basis for these cookies is our legitimate interest (Art. 6(1)(f) GDPR) in providing a stable and functional website.
      Optional Cookies (Analytics & Media):Cookies used for performance analysis or to display external media are completely optional. The legal basis for these cookies and the associated processing of your personal data (e.g., your IP address and device identifiers) is your explicit consent (Art. 6(1)(a) GDPR), which you can freely give or deny via our Cookie Consent Banner when you visit our site.
    • Embedded Third-Party Media (YouTube and Vimeo) ：To provide you with high-quality video content directly on our site, we embed videos from YouTube (operated by Google Ireland Limited) and Vimeo (operated by Vimeo.com, Inc.).When you browse our website, no personal data is automatically transmitted to these third-party platforms. The video elements remain blocked until you actively click to play the video or consent via our Cookie Consent Banner. By actively enabling these elements, you consent to your data (such as IP address and the URL of the page you are visiting) being transmitted to the respective platform provider (Art. 6(1)(a) GDPR).
    • International Data Transfers (USA) ：Some of our third-party service providers (including Google and Vimeo) are headquartered in the United States. Data transfers to these providers are safeguarded either by the EU-U.S. Data Privacy Framework (for certified providers) or through the execution of the European Commission’s Standard Contractual Clauses (SCCs) to guarantee an EU-equivalent level of data protection
    • Withdrawal of Consent：You have the right to withdraw your consent for optional cookies and third-party services at any time with future effect. You can do this by reopening our (add the link to our cookie settings) and updating your preferences.

Support & Inquiries