Notis Perlindungan Data ini ("Notis") menerangkan aktiviti pemprosesan data sehubungan dengan penggunaan aplikasi berikut oleh anda yang dibangunkan dan ditawarkan oleh Shimano Inc.

• Aplikasi E-TUBE PROJECT ("E-TUBE PROJECT"); dan
• Aplikasi E-TUBE RIDE ("E-TUBE RIDE", secara kolektif "Aplikasi").

Melainkan dinyatakan sebaliknya, maklumat yang diberikan di sini terpakai kepada kedua-dua Aplikasi secara am.

Notis ini juga memaklumkan anda tentang aspek aturan yang paling berkaitan yang diputuskan oleh entiti-entiti Shimano yang bertanggungjawab terhadap aktiviti pemprosesan data sehubungan dengan Aplikasi.

Data Peribadi bermaksud apa-apa maklumat yang berkaitan dengan seseorang yang dikenal pasti atau boleh dikenal pasti; seseorang yang boleh dikenal pasti adalah orang yang boleh dikenal pasti, secara langsung atau tidak langsung, khususnya melalui rujukan kepada pengecam seperti nama, nombor pengenalan, data lokasi, pengecam dalam talian atau rujukan kepada satu atau lebih faktor yang khusus kepada fizikal, fisiologi, genetik, mental, ekonomi, identiti budaya atau sosial orang tersebut ("Data Peribadi").

Kategori-kategori khas data peribadi termasuk data yang mendedahkan asal usul kaum atau etnik, pendapat politik, kepercayaan agama atau falsafah, atau keahlian kesatuan pekerja, data genetik, data biometrik, data mengenai kesihatan atau data mengenai kehidupan seks atau orientasi seksual seseorang tersebut (juga dirujuk sebagai "Data Sensitif").

Anda boleh mendapatkan maklumat lanjut tentang cara kami memproses Data Peribadi pengguna California dengan menyemak bahagian "Pendedahan Tambahan untuk Pengguna California" dalam Notis ini di bawah.

We process your Personal Data only for specified, explicit and legitimate purposes and provided that we have a legal basis to rely on. Your Personal Data will not be processed for any purpose other than the one they were originally collected, unless the new purpose is compatible with the initial one or in the event you give us your consent.

We have summarized the purposes for which we process your Personal Data and the legal bases we justify the processing with in the list below:

• User identification (applicable for all Apps):

  We use your Personal Data to verify your identity when registering and logging into our Apps.

  The processing of your Personal Data for this purpose is necessary for the performance of the contract concluded with you for the use of the Apps, see Art. 6 (1)(b) General Data Protection Regulation ("GDPR").

• Use of the Apps (for each app see the information applicable below):

(a) E-TUBE PROJECT

E-TUBE PROJECT offers you the option of using the app without logging in. In case of using the app with user log-in, the app operates on the basis of the user profile you have created. We use your Personal Data to manage your bike information associated with your user account. Our aim is to offer you a seamless experience by enabling you to access your data from any place and any device. We base the processing of your Personal Data for the above purposes on the performance of a contract to which you are party, see Art. 6 (1)(b) GDPR.

When configuring your user profile, you can choose to submit more information than the strictly required to provide you with our services. The provision of optional information to complete your user profile enables you to benefit from a more personalized experience on our Apps.

We rely on your consent to process any Personal Data you have freely chosen to provide us with, see Art. 6 (1)(a) GDPR. In case you withdraw your consent, for example, by updating your user profile, we will stop processing your Personal Data for this purpose.

(b) E-TUBE RIDE

E-TUBE RIDE offers you the option of using the app without logging in. In case of using the app with user registration, the app operates on the basis of the user profile you have created. We use your Personal Data to manage your bike information and riding log associated with user account. Our aim is to offer you a seamless experience by enabling you to access to your data from any place and any device. We base the processing of your Personal Data for the above purposes on the performance of a contract to which you are party, see Art. 6 (1)(b) GDPR.

When configuring your user profile, you can choose to submit more information than the strictly required to provide you with our services. This includes health-related data (heart rate and weight information). The provision of optional information to complete your user profile enables you to benefit from a more personalized experience on our Apps.

We rely on your consent to process any Personal Data you have freely chosen to provide us with, see Art. 6 (1)(a) GDPR. In case you withdraw your consent, for example, by updating your user profile, we will stop processing your Personal Data for this purpose.

• Communication with you (applicable for all Apps):

  We use your Personal Data to contact you (i) in order to provide you with information about the Apps and their functionalities for the purpose of providing you with the Services, (ii) to send you information about similar products and/or services, (iii) upon your request or consent (for example, to obtain feedback from you in order to improve our products, services and/or marketing).

  We base the processing of your Personal Data on your consent, as well as on the performance of a contract to which you are party and our legitimate interests to provide customer support, and to provide you with product and/or service information, see Art. 6 (1)(a), (b) and (f) GDPR.

• Product development (applicable for all Apps):

  We process your Personal Data for quality improvement purposes, e.g. to detect and analyse problems in our products, to carry out predictive maintenance and calculate the necessary product replacement timing, to introduce new products and test their compatibility, etc.

  We base the processing of your Personal Data on our legitimate interests to improve the quality of our products and services, for product development research and to expand and grow as a business, see Art. 6 (1)(f) GDPR.

• App user measurement and usage analysis (applicable for all Apps):

  We analyse the performance of our Apps and Services content in order to understand how users interact with them and improve them accordingly.

  We rely on your consent to process your Personal Data for this purpose, see Art. 6 (1)(a) GDPR. In case you withdraw your consent, we will stop processing your Personal Data for this purpose.

• Detect and avoid misuse of the Apps (applicable for all Apps):

  We analyse technical data gathered via the Apps to detect and avoid misuse thereof, for example, by a breach of the terms of use of the software license agreement.

  We base the processing of your Personal Data on the performance of a contract to which you are party, as well as on our legitimate interests in prosecuting any misuse of our Apps which could affect us and could have legal consequences, see Art. 6 (1)(b) and (f) GDPR.

We share your Personal Data with the following recipients:

• Other group companies and distributors. Given the international footprint of our business, our group companies work closely together. To be able to do so, we share data, including Personal Data, within the group. This means that your Personal Data will be shared to other group companies and distributors only to the extent necessary, e.g. for the fulfillment of data subjects’ rights or to respond to your inquiries. You can find a list of all the group companies and distributors with whom we share your Personal Data as attached.
• Service providers acting on our behalf. We engage service providers to assist us in our daily business such as IT support and maintenance providers, web server providers. All service providers are legally and contractually required to respect and comply with applicable data protection legislation. Our service providers include:
  • Amazon Web Services Inc., 410 Terry Avenue North, Seattle, WA 98109-5210, USA (cloud service provider acting as sub-processor) ("AWS"); and
  • SAP, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany (data processor; provider of customer relations and identity management services)
• To other app users, if you have given us your consent to do so.

The transfer of your Personal Data to recipients located in third countries outside of the European Economic Area ("EEA") is subject to the provisions set out in Section 7 below ("international data transfers").

All data collected via the Apps will be stored centrally in the European Union ("EU") on servers provided by AWS. As (joint) data controller, SIC has access to that database. Accordingly, your Personal Data will be transferred and/or disclosed to recipients located outside of the EEA in Japan which has been recognized by the European Commission in its adequacy decision (Commission Implementing Decision 2019/419 of 23 January 2019) as providing for an adequate level of data protection. AWS is located in the USA. The data transfer to AWS is based on the EU-US-Data Protection Framework which is an adequacy decision by the EU Commission determining that the USA provide an adequate level of data protection. In addition, standard contractual clauses for the transfer of personal data to processors established in third countries have been concluded. A copy of the clauses can be requested from the DPO. For more information on international data transfers in connection with the Apps and adequate safeguards implemented for this purpose you may contact our DPO.

Kami tidak akan memproses Data Peribadi anda lebih lama daripada yang diperlukan untuk tujuan asal Data Peribadi tersebut dikumpulkan.

Tertakluk kepada tempoh penyimpanan berkanun, kami akan memadamkan Data Peribadi anda:

• sekiranya profil pengguna anda tidak aktif selama 5 tahun; dan/atau
• apabila anda memadamkan profil pengguna anda

Di bawah undang-undang perlindungan data yang terpakai, anda mempunyai hak-hak tertentu berkenaan dengan pemprosesan Data Peribadi anda oleh kami:

• Hak akses kepada Data Peribadi anda ;
• Hak untuk membetulkan Data Peribadi yang tidak tepat atau tidak lengkap;
• Hak untuk memadam Data Peribadi anda ;
• Hak untuk menyekat pemprosesan;
• Hak untuk kemudahalihan data, apabila pemprosesan Data Peribadi anda adalah berdasarkan persetujuan anda atau berdasarkan kontrak, dan pemprosesan dijalankan dengan cara automatik ;
• Hak untuk menarik balik persetujuan yang berkuat kuasa pada masa depan;
• Hak untuk membuat aduan kepada pihak berkuasa penyeliaan; dan
• Hak untuk membantah pemprosesan Data Peribadi anda atas alasan yang berkaitan dengan keadaan tertentu anda, dan hak untuk membantah pemprosesan Data Peribadi anda untuk tujuan pemasaran langsung.

Penduduk Amerika Syarikat juga boleh menghubungi kami untuk merayu apa-apa keputusan yang kami buat berkaitan dengan permintaan untuk melaksanakan hak anda. Untuk membuat rayuan ke atas suatu keputusan, sila hubungi kami menggunakan butiran hubungan di atas.

SIC, SSJ, SNAH dan SEU bersama-sama menentukan tujuan dan cara pemprosesan Data Peribadi anda berkaitan dengan Aplikasi seperti yang diterangkan dalam Seksyen 2 di atas. Akibatnya, seperti yang dikehendaki oleh undang-undang, SIC, SSJ, SNAH dan SEU telah memeterai perjanjian pengawalan bersama untuk data peribadi pengguna yang terletak di EEA menurut Art. 26 GDPR. SIC, SSJ, SNAH dan SEU akan menyelaras dan bekerjasama antara satu sama lain untuk mematuhi kewajipan perlindungan data mereka, untuk mematuhi hak anda dan memproses permintaan anda dan membalas mana-mana pertanyaan anda.

SEU ialah orang hubungan yang ditetapkan untuk pengguna Aplikasi yang meminta untuk melaksanakan hak mereka di bawah Seksyen 9 di atas. Jika anda ingin berbuat demikian, atau sekiranya anda mempunyai pertanyaan mengenai hak tersebut, sila hubungi SEU melalui telefon di +31-40-2612222 atau melalui e-mel di privacy@shimano-eu.com. Di samping itu, jika anda berada di EU, sila ambil perhatian bahawa sebagai tambahan kepada orang hubungan anda yang ditetapkan, anda juga boleh menghubungi SIC, SNAH dan SSJ untuk melaksanakan hak anda.

Kami telah melaksanakan amalan standard industri secara dalaman dan dengan penyedia perkhidmatan kami untuk mengekalkan keselamatan Data Peribadi anda bergantung pada sensitiviti data tersebut dan untuk mengelakkan pendedahan Data Peribadi tersebut yang tidak dibenarkan di bawah Notis ini.

Perkhidmatan kami menawarkan anda kemungkinan untuk mengakses kandungan pihak ketiga, seperti laman web, aplikasi dan perkhidmatan dalam talian. Sila ambil perhatian bahawa kami tidak bertanggungjawab terhadap aktiviti pemprosesan data pihak ketiga tersebut. Kami menggalakkan anda untuk membaca notis perlindungan data mana-mana laman web, aplikasi atau perkhidmatan dalam talian pihak ketiga yang anda sambungkan.

Kami tidak memproses Data Peribadi individu di bawah umur 16 tahun dengan sengaja tanpa persetujuan ibu bapa atau penjaga. Jika anda adalah ibu bapa atau penjaga kanak-kanak dan anda percaya bahawa kami telah memproses Data Peribadi tentang kanak-kanak tersebut, sila hubungi DPO kami menggunakan butiran hubungan yang diterangkan di atas dalam Seksyen 3.

Notis ini mungkin disemak semula dari semasa ke semasa untuk mencerminkan dan mematuhi perubahan dalam undang-undang yang terpakai. Kami akan memaklumkan kepada anda tentang sebarang kemas kini dengan cara yang sesuai, contohnya melalui e-mel atau mesej dalam Aplikasi. Tarikh kemas kini terakhir tersedia di bahagian atas Notis ini.

Lampiran