Protection of Personal Information
Morpho Inc. (hereinafter, referred to as “COMPANY”) understands social importance of protecting Personal Information (as defined below) and presumes appropriate protection and management of the information to be important responsibility. COMPANY shall handle Personal Information as follows.
Personal Information means any information relating to identified or identifiable natural person (“Data Subject”), including name, address, date of birth, telephone number, email address or identification number of the individual, or the Data Subject’s image or voice, and information by which an individual can be identified or specified in combination with other information.
The provision of Personal Information is not a statutory or contractual requirement unless COMPANY designates specifically. However, it may be necessary to enter into a contract, in such case, failure to provide such information may cause to miss some business opportunities.
Purpose of the Processing
If a Data Subject provides or COMPANY collects his/her Personal Information which is required for COMPANY’s business operation, COMPANY will not process the information out of a scope of proper purposes without his/her consent, unless it is required in a state of emergency regarding laws, life crisis and public hygiene or it is permitted by laws and regulations. COMPANY will process the Personal Information only within a scope of the following purposes of processing:
Legal Basis for the Processing
COMPANY may process Personal Information only if and to the extent that at least one of the following applies:
The Data Subject has the right to withdraw consent set forth above at any time, without affecting the lawfulness of processing based on consent before its withdrawal, and the right to lodge a complaint with a supervisory authority.
COMPANY may transfer Personal Information to third countries where an adequacy decision by the European Commission is absent; provided, however, that COMPANY provides appropriate safeguards by standard data protection clauses adopted by the European Commission.
Disclosure and Provision to Third Party
COMPANY may occasionally entrust an external body with a part of its business operations in order to smoothly implement the operations. If a necessary range of Personal Information is provided to the external body, COMPANY shall carry out necessary and appropriate measures for protecting the Personal Information, e.g. making an agreement concerning Personal Information handling with the external body. COMPANY shall not disclose or provide the Personal Information to a third party unless the information is provided to the above external body or it is applicable to the following cases:
Inquiry for Personal Information
The Data Subject has the right to request from COMPANY access to and rectification or erasure of Personal Information or restriction of processing concerning the information subject or to object to processing as well as the right to data portability. If the Data Subject exercise such rights, the Data Subject is advised to contact COMPANY as follows:
After confirming that the inquirer is a person who is entitled to the request, COMPANY shall appropriately deal with the request as far as it could within a reasonable term. Note that the inquiry will not be accepted if the Data Subject directly visits COMPANY for the inquiry.
Management of Personal Information
COMPANY shall appropriately and carefully handle Personal Information and settle a position responsible for information management in order to ensure accuracy and safety of Personal Information. The person in charge of information management shall:
Application and Modification