Privacy Notice Alexa Customers

Privacy Notice for SHARP Brand SmartTV Users

About this notice

We will process your personal data in compliance with every applicable law and any laws that replace them in the future (including the European Union’s General Data Protection Regulation, Regulation (EU) 2016/679 and the United Kingdom General Data Protection Regulation, as it forms a part of the law of England, Wales, Scotland, and Northern Ireland by virtue of Section 3 of the European Union (Withdrawal) Act 2018 and as amended by Schedule 1 to the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (SI 2019/419) (the “GDPR”)).

In this notice, we provide information based on such laws related to processing your personal data. This notice sets out the basis on which any personal data that you provide to us, or that we obtain about you from other sources, will be processed by us. Please take the time to read and understand this notice.

Information about us

For the purpose of data protection law, SHARP Corporation (“we”, “us” and “our”) is a data controller in respect of your personal data (“Data Controller”). And we are committed to respecting your privacy. Data Controller’s main office address:
1 Takumi-cho, Sakai-ku, Sakai City, Osaka 590-8522, Japan

(b) Data Controller’s E-mail address: AQUOS-EU-Alexa@sharp.co.jp

Definitions

In this notice:

(a) your “personal data” means any data which relates to you and from which you can be identified.;

(b) our “affiliates” means our subsidiaries; and

(c) “processing” means any activity or operation that is carried out in respect of your personal data, such as collecting, storing, using, transferring or deleting it.

How we collect your personal data and what personal data we collect

We will collect and process the following personal data about you (in several different ways, for example: when you complete text fields or upload documents). Such information generally includes your E-mail, Unique TV name and its MAC address.

There may be circumstances where the provision of our service results in collecting other types of personal data from you. If so, then we will protect such personal data to the same high standards explained in this policy and take any additional steps necessary to ensure we process such personal data in accordance with applicable laws.

Legal basis and purpose of processing personal data

The legal basis for the processing of your personal data are:

Legitimate Interests. This is where the processing of your personal data is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests.

Agreement. In cases necessary for the performance of the agreements to be concluded with us we use the personal data that we hold about you for the following purposes: to connect your TV to smart equipment.

We do not process your “sensitive data” (information about your race, ethnic origin, religion, physical or mental health, political opinions, sexual life, any actual or alleged criminal offences, and genetic and biometric data).

Disclosure of personal data to recipients

We may share your personal data with recipients in the situations described below:

(a) Internal Use for us: Employees of us or our affiliates who are authorised and need to access these data.

(b) Affiliates: We share your personal data with our affiliates for internal administrative purposes and uses that are consistent with this Notice.

(c) Service Providers: We share your personal data with third-party service providers who perform services, such as providing data servers.

(d) Legal Process and Safety: We may disclose your personal data to legal or government regulatory authorities as required by applicable law. We may also disclose your personal data to third parties as required by applicable law in connection with claims, disputes or litigation, when otherwise required by applicable law, or if we determine its disclosure is necessary to protect the health and safety of you or others, or to enforce our legal rights or contractual commitments that you have made.

(e) Business Transfers: Your personal data may be disclosed as part of a corporate business transaction, such as a merger, acquisition, joint venture, or financing or sale of company assets, and could be transferred to a third party as one of the business assets in such a transaction. It may also be disclosed in the event of insolvency, bankruptcy or receivership.

Transfers of personal data outside the European Economic Area and/or the UK

The personal data that we collect from you may be transferred to, and stored at, a destination outside the European Economic Area (“EEA”) and/or the UK. It may also be processed by staff operating outside the EEA and/or the UK who work for us, for our affiliates or for one of our suppliers.

Where we transfer your personal data outside the EEA and/or the UK, we will ensure that:

(a) the recipient destination has been subject to a finding from the European Commission that it ensures an adequate level of protection for the rights and freedoms that you possess in respect of your personal data and/or the Government of the UK has specified the recipient destination as a country that ensures an adequate level of protection as provided under the Data Protection Act 2018; or

(b) the recipient enters into standard data protection clauses with us that have been approved by the European Commission and/or the Government of the UK.

You can obtain more details of the protection given to your personal data when it is transferred outside the EEA and/or the UK (including a copy of the standard data protection clauses which we have entered into with recipients of your personal data) by contacting us in accordance with the information about us in Section 2.

Storage limit of personal data

We will retain the personal data that we collect about you as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer period is demanded by applicable laws.

Your rights

(a) Access, rectification, erasure, restriction

Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you have the following rights:

Request from us access to your personal data pursuant to Art. 15 GDPR

You have the right to obtain from us confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and certain related information.

Request from us rectification of your personal data pursuant to Art. 16 GDPR

You have the right to obtain from us the rectification of inaccurate personal data concerning you without undue delay, and to complete any incomplete personal data.

Request from us erasure of your personal data pursuant to Art. 17 GDPR

You have the right to obtain from us the erasure of personal data concerning you without undue delay, when certain legal conditions apply.

Request from us restriction of processing pursuant to Art. 18 GDPR

You have the right to obtain from us the restriction of processing of personal data, when certain legal conditions apply.

(b) Right to object

Subject to the statutory requirements, the fulfilment of which must be assessed on a case-by-case basis, you also have the right to object to the processing of your personal data.

If you have any complaints regarding our privacy practices, you have the right to lodge a complaint with your national data protection authority (i.e., supervisory authority).

Contacts

Questions, comments and requests regarding this privacy notice are welcome. Please contact us using the information about us in Section 2 (c).