Handling of Personal Data in Europe (Ocean Freight)

This document explains how Nippon Express Co., Ltd. (the “Company”) processes personal data relating to individuals in Europe (the “Personal Data”) in connection with its ocean freight transportation services. Please read this document before providing any Personal Data.

2. Types of personal data we hold

Our company may collect all or part of the following types of personal data:

1. Customer and delivery address contact information
   (Name, address, phone number, mobile phone number, email address, fax number, etc.)
2. Cargo details

3. Customer choice

You are free to choose which personal data items you provide to us. However, if you do not provide all or some of your personal data, and we are unable to contact you, we may be unable to provide you with transportation services or respond to your inquiries.

4. Acquisition of personal data from other companies or publicly available information

Our company may acquire personal data from the following organizations and companies for the purposes described in sections A through C of "1. Purposes of Use of Personal Data and Legal Basis."

1. Shipping company
2. Roofing contractors
3. NX Group companies within EU/EEA member states

5. Disclosure and provision of personal data to other companies

We will only disclose or provide your personal data to third parties in the following cases. In such cases, we will, under our responsibility, appropriately verify the management system of our business partners. Except as required by law or with your special permission, we will not disclose or provide your personal data to third parties for any purpose other than those listed below.

1. Our company will provide your personal data to our affiliated companies for the purposes described in Section A of "1. Purposes of Use and Legal Basis of Personal Data."
2. Our company will provide your personal data to our selected contractors (transportation companies and storage companies) for the purposes described in Section A of "1. Purposes of Use and Legal Basis of Personal Data."
3. We will disclose your personal data when necessary to comply with EU law or the national laws of EU/EEA member states.

6. Ensuring adequate protection for transfers outside the region.

In connection with the provision of our transportation services, we transfer our customers' personal data from within the EU/EEA to Japan. In doing so, we will transfer your personal data in accordance with the General Data Protection Regulation and the national laws of the country in question, after concluding Standard Contractual Clauses (SCCs) between the source and destination.

ご参考：https://www.jetro.go.jp/world/reports/2018/01/8d894f365ea5c3a7.html

7. Storage of personal data

The personal data you provide to us will be stored for the period stipulated by law or internal rules, in accordance with the purpose of use. The personal data covered is as follows:

1. Personal data related to the transportation of your cargo to your designated destination
2. Personal data related to the provision of ancillary services
3. Personal data related to responding to customer inquiries
4. Personal data related to market trend research, quality improvement, or future product and service development of our company

8. Automated decision-making, including profiling.

Our company does not use automated decision-making, including profiling (Note 2).

Note 2: This refers to any form of automated processing of personal data used to evaluate certain personal aspects related to an individual, particularly aspects relating to the individual's work performance, financial status, health, personal preferences, interests, trustworthiness, behavior, location, and movement.

9. Inquiries regarding personal data

Customers have the following rights regarding the personal data we hold:

1. Request for disclosure of personal data:
   The right to confirm whether or not your personal data is being handled, and, if so, to request disclosure of that personal data and related information.
2. Request for correction or deletion of personal data:
   The right to request the correction of inaccurate personal data and to request that incomplete personal data be made complete. The right to request the deletion of personal data without undue delay, provided that legal requirements are met.
3. Restrictions on the handling of personal data:
   Where legal requirements are met, you have the right to request restrictions on how your personal data is handled.
4. Objections regarding the handling of personal data:
   In specific circumstances, if legal requirements are met, you have the right to object to the handling of your personal data.
5. Data portability of personal data:
   The right to receive your personal data in a data format or electronic medium that is generally usable by computers, etc., provided that legal requirements are met.
6. Withdrawal of consent regarding personal data:
   The right to withdraw consent at any time.

If you wish to exercise these rights, please contact the inquiry desk below, and we will guide you through the necessary procedures. However, due to reasons such as compliance with laws and regulations, we may not be able to fulfill some or all of your requests. In such cases, we will notify you in writing of the reasons why we cannot fulfill your request. We generally respond to inquiries regarding your personal data free of charge.

Complaints and Consultation Desk for Personal Information, Compliance and Risk Management Division

個人情報に関するお問い合わせ

Nippon Express Co., Ltd.
Personal Information Manager
(Contact information is the same as above.)

10. Complaints regarding personal data, etc.

1. If you have any comments or questions regarding how we handle your personal data, please contact us at the inquiry desk listed above.
2. Customers can file complaints regarding the handling of their personal data with the supervisory authority of the EU/EEA member state in which they reside or work. For detailed procedures, please contact the respective supervisory authority.

11. Affiliation and contact information of the Data Protection Officer