1.1 DGC Global Inc.

1.2 EU/EEA Representative

DGC Global has appointed Data Protection Representative Limited (trading as DataRep), an Irish company registered under number 616588, as its representative in the EU/EEA under Article 27 GDPR. Individuals in the EU/EEA and supervisory authorities may contact DGC Global directly or contact DataRep about personal-data questions and rights requests.

When contacting DataRep, identify “DGC Global Inc.” as the organisation concerned and use “DGC Global Inc. / DGCG01” as the email subject. Postal correspondence must be addressed to “DataRep” and should identify DGC Global Inc. and client reference “DGCG01.” Unless necessary, do not include the personal data that is the subject of the request in the first message.

• DataRep Privacy Notice

2.1 Categories of Personal Data

To the extent necessary for our business activities and services, we may process:

• Name, employer, department, position, address, telephone number, email address and other contact details
• Information about inquiries, information requests, quotations, applications, orders, contracts, billing, payment, delivery and support
• Communications, meetings, events and relationship history involving customers, prospective customers, distributors, business partners, joint-project participants, contractors and other business contacts
• Accounts, authentication, permissions, usage history and security logs for services controlled by DGC Global
• IP address, cookie identifiers, device and browser information, access date and time, pages viewed and interaction logs on websites or online services controlled by DGC Global
• Information necessary for legal compliance, identity verification, rights requests or dispute management

As a rule, we do not need special-category personal data under the GDPR. If such processing becomes necessary, we will identify a condition permitted by applicable law and apply additional safeguards.

2.2 Sources and Required Information

We may obtain personal data directly from you; from your employer, a customer, distributor, business partner, joint-project participant, contractor or another relevant party; from use of our services; or from lawful public sources.

Where we identify information as necessary to enter into or perform a contract or comply with law, providing it may be a contractual or legal requirement. If it is not provided, we may be unable to accept an application, enter into a contract or provide all or part of a service. Other information is voluntary.

3.1 Processing Purposes

Where we rely on legitimate interests, we balance our business need against your rights and interests. Where processing is based on consent, you may withdraw consent at any time for the future.

4.1 Recipients

Where necessary for the purposes above, we may disclose personal data to our officers and personnel; DGC Technology Co., Ltd. and other related companies; customers, distributors, business partners and joint-project participants; laboratory, analysis and technical-support providers; IT, cloud, hosting and email providers; payment and financial institutions; delivery providers; professional advisers; DataRep; public and judicial authorities; and other recipients permitted by law. Where a recipient acts as our processor, we put in place contractual and oversight measures required by Article 28 GDPR and other applicable law.

4.2 International Transfers

Personal data may be stored or processed in Japan and in other countries where we or our service providers operate. Where available, transfers from the EEA to Japan may rely on the European Commission’s adequacy decision for Japan. Where adequacy is not available, we use Standard Contractual Clauses, supplementary measures, explicit consent or another transfer mechanism permitted by applicable law. Contact DGC Global or DataRep for further information about safeguards.

5.1 Retention

We retain personal data only for as long as necessary for the relevant purpose, the contractual relationship, legal retention duties, rights requests, claims or dispute management. We consider the nature, volume and sensitivity of the data, risks, purposes and statutory periods, and securely delete or anonymize data when it is no longer required.

5.2 Security Measures

We apply technical and organizational measures appropriate to risk, including access and authentication controls, protection of communications and stored data, logging, malware and unauthorized-access defenses, service-provider management, training and incident response.

5.3 Cookies and Similar Technologies

Where a website or online service controlled by DGC Global uses cookies or similar technologies, the relevant site or service will provide information about purposes, categories, duration, third parties and how to change consent choices.

This Notice is hosted on dgc.co.jp, a website operated by DGC Technology Co., Ltd. For cookies and similar technologies on that website, see the DGC Technology Cookie Policy.

6.1 GDPR Rights

Subject to applicable conditions and exceptions, you may request access, rectification, erasure, restriction and data portability, object to processing and withdraw consent. You may object to direct marketing at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

As a rule, we do not make decisions based solely on automated processing that produce legal or similarly significant effects.

6.2 Exercising Rights and Complaints

To exercise your rights, contact DGC Global or DataRep using the details above. We may request information reasonably necessary to verify your identity and prevent unauthorized disclosure. You also have the right to lodge a complaint with the supervisory authority for your residence, workplace or the place of an alleged infringement.

7.1 Revisions

We may revise this Notice in response to changes in law, our business or our processing activities. We will provide appropriate notice of material changes.