At Fritz Hansen (”we”, ”us” or” our”) confidentiality and data protection is a high priority. This privacy policy sets out our guidelines for processing of your personal data and provides you with the information you have the right to receive according to applicable data protection law.

You must read the privacy policy before submitting your personal data to Fritz Hansen.

1. If you visit our website

This section sets out the policy of Fritz Hansen’s processing of personal data regarding users of Fritz Hansen’s website www.fritzhansen.com.

1.1 Data controller and contact information

The data controller for your personal data is:


Fritz Hansen A/S
Allerød 8
DK-3450 Allerød
Company registration no.: 14 12 02 11
Email: salessupport@fritzhansen.com
Telephone: +45 48172300

1.2 Cookies

We use cookies on our website to, among other things, optimise the user experience and the functionality of the website and to prevent misuse and downtime. You can read more about the use of cookies in our cookie banner, which appears on the front page when you first visit our website. You can always change your cookie settings by clicking on the small cookie icon in the bottom left corner of the website.

1.3 If you contact customer service or otherwise communicate with us

Types of personal data

When you contact customer service or otherwise communicate with Fritz Hansen, we collect and process your personal data. Fritz Hansen collects, processes, and stores the following types of personal data about you:

• Name, email address, phone number
• What your inquiry or the communication concerns, e.g., information about orders and payment
• Date and time of your inquiry
• Other personal data you submit as part of your inquiry or communication with us. We recommend that you do not submit sensitive personal data unless it is strictly necessary in relation to your inquiry. If you submit sensitive or otherwise confidential personal data by email, we recommend that you use encryption.

Purposes of the processing

Your personal data may be processed for the following purposes:

• Handling of your inquiry and potential orders
• Establish, exercise or defend legal claims
• General communication with you
• Statistics and analysis

Legal basis

Fritz Hansen will mainly process your personal data based on one or more of the following legal bases:

• Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis and developing our products and services (Article 6 (1) (f) of the GDPR).
• Contractual obligation: If your inquiry concerns conclusion of a (potential) contract with Fritz Hansen, we process your personal data if necessary to make arrangements prior to the conclusion of the contract (Article 6 (1) (b) of the GDPR).

1.4 When registering on My Fritz Hansen

Types of personal data

When you create a personal My Fritz Hansen-profile on the My Fritz Hansen website, we process your personal data. Fritz Hansen may collect, process, and store the following types of personal data about you:

• Name, address, e-mail address and phone number
• Digital footprints
• Password and username
• Order history and receipts, including product ID
• Newsletter subscription information

Purposes of the processing

Your personal data may be processed for the following purposes:

• Administration of user account/profile
• Registration of Fritz Hansen products in connection with warranties and proof of ownership
• Statistics and analysis
• Marketing

Legal basis

Fritz Hansen processes your personal data on the following basis:

• Legitimate interests: The processing of your personal data will be based on our legitimate interest in, for instance, conducting statistics, analysis and developing our products and services (Article 6 (1) (f) of the GDPR).
• _Fritz Hansen may use your personal data for direct marketing purposes, including newsletters, if you have given your prior and express consent (Article 6 (1) (a) of the GDPR)_

1.5 If you use our webshop

Types of personal data

When you us our webshop, we collect, process, and store the following personal data about you:

• Contact information such as name, email address, address, and phone number
• Billing address and shipping address
• Payment information
• Order/purchase history
• Information you provide when you make a purchase or otherwise communicate with us
• Use of coupons or similar
• Digital footprints (e.g., information about how you use our webshop)

Purposes of the processing

Your personal data may be processed for the following purposes:

• Completion of orders in our webshop
• Administration of shipments, complaints and returns
• User account/profile management
• Sending marketing material based on previous purchases (in accordance with national legislation)
• Statistics and analysis
• Prevention and investigation of suspected fraud

Legal basis

Fritz Hansen will mainly process your personal data based on one or more of the following legal bases:

• Legitimate interests: We process your personal data based on our legitimate interest in promoting ourselves in cases where consent is not required, as well as our legitimate interest in keeping statistics and analysis for the purpose of developing and improving our services (Article 6 (1) (f) of the GDPR).
• Contractual obligation: We process your personal data to fulfill the order you have placed with Fritz Hansen, including delivering the ordered goods, handle order confirmation, complaints, returns, etc. (Article 6 (1) (b) of the GDPR). This personal data is necessary for the fulfilment of the contract.

2. If you subscribe to our newsletter or other marketing material

Data controller and contact information

The data controller for your personal data is:

Fritz Hansen A/S
Allerød 8
DK-3450 Allerød
Company registration no.: 14 12 02 11
Email: salessupport@fritzhansen.com
Telephone: +45 48172300

Types of personal data

When you subscribe to our newsletter or other marketing material, Fritz Hansen collects, processes and stores the following personal data about you:

• Name, email address, phone number and address
• Your consent
• Your “click behaviour” in relation to marketing material we have sent you
• Your use of our website and services
• Order history including any previous correspondence

Purposes of the processing

Your personal data may be processed for the following purposes:

• Promotional marketing
• Statistics and analysis

Legal basis

Fritz Hansen will process your personal data based on one or more of the following legal bases:

• _Fritz Hansen will only use your personal data in order to send you product information, newsletters and other marketing material if you have provided your prior and explicit consent hereto (Article 6 (1) (a) of the GDPR)_
• Legitimate interests: The processing of your personal data for statistics and analysis will be based on our legitimate interest in improving and developing our products and services (Article 6 (1) (f) of the GDPR).

3. If you use our whistleblower scheme

Data controller and contact information

The data controller for your personal data is:

Fritz Hansen A/S
Allerød 8
DK-3450 Allerød
Company registration no.: 14 12 02 11
Email: salessupport@fritzhansen.com
Telephone: +45 48172300

Types of personal data

We may process the following personal data of the person for whom a report has been issued if the data is provided in connection with the report. In addition, a report may contain information about third parties:

• Name
• Contact details
• Position
• Information reported
• Description of the suspected infringement
• Information on potential offences

When a report is made, we will process personal data of the data subjects who are part of the report (i.e., the sender of the report, the person reported and other third parties involved) for the purpose of handling and investigating the report.

If you report a suspected breach, such report will remain confidential and, at your choice, anonymous. However, you should in any event provide an e-mail address at which you can be contacted, as we may need to obtain further information about the breach to handle the case properly.

Purposes of the processing

Your personal data may be processed for the following purposes:

• Establishment and administration of the whistleblower scheme, where suspicions of disorderly conduct and violations of applicable law or internal guidelines can be reported
• Handling reported incidents, including the investigation of potential criminal offences

Legal basis

Fritz Hansen processes the personal data based on the following legal bases:

• Legitimate interests: We may process your personal data based on our legitimate interests in investigating reported matters (Article 6 (1) (f) of the GDPR).
• Legal obligation: We process your personal data to comply with our legal obligation (Article 6 (1) (c) of the GDPR).

4. If you apply for a job at Fritz Hansen

When you apply for a job at Fritz Hansen, we process your personal data in the recruitment process. We recommend that your application does not contain a social security number or sensitive personal information, such as information revealing racial or ethnic background, religion, trade union membership, sexuality, or health information.

Data controller and contact information

The data controller for your personal data is the Fritz Hansen entity with which you seek employment. Information of which entity you seek employment with appears from the job posting. If you are in doubt, you are welcome to contact Fritz Hansen A/S at salessupport@fritzhansen.com.

Types of personal data

Fritz Hansen may collect, process, and store the following personal data, to the extent relevant for the job position applied for:

• Contact information such as name, email address and phone number
• Information contained in your application, CV, and any supporting documents
• Relevant information publicly available on the internet and social media (e.g., Facebook and LinkedIn), where permitted under national legislation and practices, including in particular information on previous employment, activities, competences, performance and general appearance
• Results of personality and skills tests if you are asked to complete any
• References from previous and/or current employers that you have provided in your application, or that you have consented for us to contact
• Health information, if the position you have applied for has specific health requirements
• Other information you provide to us as part of the recruitment process

Purposes of the processing

Your personal data will be processed for the purpose of assessing whether we can offer you a position.

Legal basis

Fritz Hansen will mainly process your personal data based on one or more of the following legal bases:

• Legitimate interests: We may process your personal data on the basis of our legitimate interests in carrying out further assessments of whether we want to hire you, including on the basis of the information you provide in your CV, job application and any supporting documents, based on relevant information publicly available on the internet and social media, results of personality and skills tests, references you have provided in your application and other information you provide to us in the recruitment process. The processing may also be necessary for our legitimate interests in defending or enforcing legal claims (Article 6 (1) (f) of the GDPR).
• or current employers that you have not provided in your application, we will only do so with your consent (Article 6 (1) (a) of the GDPR)_

If the position you have applied for exceptionally requires special health conditions, we will - after specific assessment - ask for your explicit consent prior to processing such personal data (Article 9 (2) (a) and article 6 (1) (a) of the GDPR)

5. If you are a contact person at a supplier, business partners etc.

This section sets out the policy for Fritz Hansen’s processing of personal data collected from owners of sole proprietorships or contact persons at suppliers and other business partners who collaborate with Fritz Hansen.

Data controller and contact information

The data controller for your personal data is the Fritz Hansen entity with which you cooperate. If you are in doubt, you are welcome to contact Fritz Hansen A/S at salessupport@fritzhansen.com.

Collection of personal data

Fritz Hansen may collect, process and store personal data about you in the following instances:

• When your company or the company you are employed with enters into an agreement with Fritz Hansen
• When you have shown an interest in Fritz Hansen, e.g., by providing your business card to Fritz Hansen
• When you collaborate and communicate with Fritz Hansen
• When you sign up in our Partner Portal

Types of personal data

Fritz Hansen may collect, process, and store the following personal data:

• Name, email address, telephone number and similar identification data
• Individual data, such as preferred language and home country
• Organizational data, such as company name, company address, job position, business area, primary work location and country
• Contractual data, such as purchase orders, invoices, contracts, and other agreements between your company (or your employer) and Fritz Hansen, that may include e.g., your contact information
• Financial data, such as payment terms and bank account details
• “Click behaviour”, when logged into our Partner Portal

Such information may be provided directly by you (primarily via emails and other correspondence) or by a third party such as your employer.

Purposes of the processing

Your personal data may be processed for the following purposes:

• To plan, perform and manage the business relationship, including any contracts
• Administration, such as processing payments, evaluation of credit ratings, performing accounting, auditing, and billing
• Marketing
• Completion of requests received from you
• General communication
• Product and service development
• Statistics and analytics
• Compliance with applicable laws and regulations, such as fulfilling our obligations to prevent illegal activities
• Market research
• Administration of user accounts

Legal basis

Fritz Hansen will mainly process your personal data based on the following legal bases:

• Contractual obligation: The processing of your personal data will in some cases be necessary for the performance of a contract (Article 6 (1) (b) of the GDPR).
• Legitimate interests: We may process your personal data pursuant to our legitimate interest in, for instance, to manage daily operations according to lawful and fair business practices, including planning, performing and managing the business relationship or our legitimate interest in e.g. statistics, analysis, marketing activities (where consent is not required), providing support as well as improving and developing our products and services. The processing may also be necessary for our legitimate interests in preventing fraud or establish, exercise, or defend legal claims (Article 6 (1) (f) of the GDPR).
• Legal obligation: The processing of your personal data will in some cases be necessary to comply with legal obligations, such as our obligations to prevent illegal activity (Article 6 (1) (c) of the GDPR).

6. If you visit our physical locations

Data controller and contact information

The data controller for your personal data is the Fritz Hansen entity which you visit. If you are in doubt, you are welcome to contact Fritz Hansen A/S at salessupport@fritzhansen.com.

Types of personal data

When you visit our office facilities and other premises, Fritz Hansen processes your personal data via video surveillance and, where applicable, access control. Fritz Hansen may collect, process, and store the following types of personal data about you:

• License plate
• Date and time of your visit
• Digital footprints, including information on where and when you have used your key card (if you have been issued with a key card)
• Image and audio material from the video surveillance.

Purposes of the processing

Your personal data may be processed for the following purposes:

• To provide you with access to our office facilities and other buildings
• To administrate your visit
• To ensure the security of our office facilities and other buildings
• To prevent and investigate crime at our office facilities and other buildings

Legal basis

Fritz Hansen will mainly process your personal data based on the following legal bases:

- Legitimate interests: We base the processing of your personal data on our legitimate interests in providing you with access to our office facilities and other buildings and in protecting our physical locations (Article 6 (1) (f) of the GDPR). Data relating to criminal offences collected through video surveillance is also processed based on our legitimate interests in solving criminal offences (Article 8 (3) of the Danish Data Protection Act).

7. If you visit our profiles or fan pages on social media

This section sets out the policy for Fritz Hansen’s processing of personal data collected via Fritz Hansen’s profiles or fan pages on social media. Fritz Hansen A/S and the providers of social media are joint data controllers for the processing of your personal data collected when you visit Fritz Hansen’s profile or fan pages on social media. Fritz Hansen complies with the guidelines of the European supervisory authorities concerning joint data controllership and, using the applicable tools the best way possible, Fritz Hansen attempts to ensure that you receive information on the processing of your personal data when you visit Fritz Hansen’s profiles or fan pages on social media. Fritz Hansen has profiles or fan pages on the following social media:

• Facebook and Instagram (Facebook Ireland Ltd.)

• Facebook’s privacy policy is available here
• Manage your privacy settings on Facebook here
• Manage your privacy settings on Instagram in “privacy settings” under “settings”

• YouTube (Google LLC)

• Google’s privacy policy is available here
• Manage your privacy settings on YouTube here

• LinkedIn (LinkedIn Ireland Unlimited Company)

• LinkedIn’s privacy policy is available here
• Manage your privacy settings on LinkedIn here

• Pinterest (Pinterest Europe Ltd.)

• Pinterest’s privacy policy is available here
• Manage your privacy settings on Pinterest here

Collection of personal data

Depending on your conduct on the social media, Fritz Hansen and the provider of the social media in question may retrieve the following personal data about you:

• Information available on your profile, e.g., name, gender, relationship status, place of work, fields of interest and city
• Your "likes" or other reactions expressed on Fritz Hansen’s profile or fan page
• Comments left by you on Fritz Hansen’s profile or fan page
• Your visits to Fritz Hansen’s profile or fan page

Purpose of the processing

Fritz Hansen may process your personal data for the following purposes:

• Improve our products and services, including our profiles and fan pages on social media
• Statistics and analytics
• To communicate with you if you comment on our posts or send us a direct message
• Marketing
• Recruitment

The social media providers process your personal data for the following purposes, among others:

• Improving their advertising system
• To provide Fritz Hansen with statistics that the social media providers compile based on, among other things, your visit to our profiles and fan pages
• Advertising and customisation of the activities on the site

Please see the privacy policy of each social media provider for information on how long they keep your personal data.

Legal basis

Fritz Hansen will mainly process your personal data based on the following legal bases:

• Legitimate interests: We may process your personal data on the basis of our legitimate interests in communicating with you and marketing ourselves to you on our social media profiles, as well as our legitimate interest in improving our products and services (Article 6 (1) (f) of the GDPR).
• The providers of the social media process, among other things, your personal data to enable them to improve their advertisement system and to provide Fritz Hansen with statistics, which the provider, for example, works out on the basis of your visit to Fritz Hansen’s profile or fan page on the social media in question, with a view to advertising and customising the activities on the profile or fan page. The providers of the social media process your personal data as a consequence of their legitimate interests, including their interest in providing innovative, customised, secure and profitable services (Article 6 (1) (f) of the GDPR).
• _The providers of social media may also process your personal data in accordance with your consent, which you are entitled to withdraw at any point in time via the settings on the website of the social media in question (Article 6 (1) (a) of the GDPR)_

Who do providers of social media share your personal data with?
The providers of social media may, among other things, share your personal data with the following categories of recipients:

• Other undertakings in the group which the provider of the social media in question is a part of
• Externally with partners providing analytical services
• Advertisers
• Other individuals using our profile or fan page on the social media in question
• Surveying partners
• Researchers and academics

For more information on the parties with whom the providers of social media share your personal data, we refer to the providers’ general privacy policies.

Your personal data may be transferred by the providers of social media to recipients outside the EU/EEA in accordance with the European data protection standards applicable from time to time. You may read more in the providers of social media’s general privacy policies.

For information of who Fritz Hansen shares your personal with, please refer to section 10 below.

8. How long do we store your data?

Your personal data will be deleted when we no longer need to process it for one or more of the above purposes. However, the data may be processed and stored longer in anonymised form or if we are required to do so by law.

Personal data that is necessary to document our customer relationship is stored for as long as the customer relationship exists and for as long as the data is required thereafter to document Fritz Hansen's legal position, for example in connection with a dispute or the collection of overdue payments.

Business letters and accounting material, including personal data, which we are obliged to keep under the national bookkeeping legislation, will be deleted no earlier than 5 years after the end of the financial year to which the data relates.

My Fritz Hansen

Your personal data will generally be stored until you terminate your membership. You may opt out here.

Purchase in webshop

We will generally keep your personal data for 2 years from your last purchase. If you have purchased products covered by a warranty, we will delete your personal data at the earliest at the end of the warranty period.

Newsletters

Your personal data will be stored as long as your consent to receive newsletters is active.

You can always withdraw your consent by clicking on the unsubscribe link at the bottom of each email or by contacting us as described below. However, withdrawal of your consent will not affect the lawfulness of the processing that preceded the withdrawal.

We will keep evidence of your marketing consent for two years from the date you withdrew your consent to receive direct marketing material. The retention period is determined on the basis of our legitimate interest in being able to demonstrate that direct marketing has been carried out in accordance with the applicable law (Article 6 (1) (f) of the GDPR).

Whistleblower scheme

Fritz Hansen will retain personal data for as long as necessary to deal with specific reports.

Job applications

If you are offered a position with Fritz Hansen, your application and additional relevant personal information collected in connection with the recruitment process will be kept in your personnel file with us and for as long as necessary in connection with your employment.

If you are not offered a position, we will retain your application and any additional personal data collected in connection with the recruitment process for a period of 6 months following our refusal, unless you have consented to a longer retention of such personal data.

You may withdraw any consent you may have given as part of our recruitment process at any time. Withdrawal of your consent will affect the future processing of your personal data but will not affect the lawfulness of the processing based on the consent prior to the withdrawal. If you wish to withdraw your consent, please contact us as indicated below.

Video Surveillance

Recordings from video surveillance made for crime prevention purposes are deleted or anonymised within 30 days of the recording, unless it is necessary for Fritz Hansen to retain the recordings for the purpose of handling a specific dispute, e.g., in connection with solving a criminal offence. In Germany, recordings are deleted no later than 72 hours.

9. Disclosure to other data controllers and sharing with data processors

To fulfil the purposes described above we may provide access to your personal data for third parties or outsourcing contractors who, on the basis of a contractual relationship with Fritz Hansen, provide relevant services, e.g., IT-providers and email providers. Such service providers will only process personal data in accordance with our instructions pursuant to the data processor agreements entered into.

We also disclose your personal data to certain business partners in connection with, for example, payment solutions on our website and in connection with the delivery of your order. In addition, we may disclose your IP address and order information to our affiliate marketing partners for the purpose of billing for referrals to our webshop.

In connection with Fritz Hansen’s development, the company structure may change, e.g., through a full or partial sale of Fritz Hansen. In case of a partial hand over of assets containing personal data, the legal basis for the related disclosure of personal data is, as a general rule, Article 6 (1) (f) of the GDPR, as Fritz Hansen has a legitimate interest in handing over part of its assets as well as making commercial changes.

Aside from above, it is a general rule that your personal data is not disclosed to a third party without your permission. However, under certain circumstances and in accordance with applicable law, we may need to disclose your personal data to

• Police
• Lawyers
• Auditors
• Courts
• Public authorities
• Prospective buyers
• Affiliated companies

If your personal data is transferred to data processors or data controllers established in countries outside the EU/EEA which does not have an adequate level of protection, such transfer will be based on the EU Commission’s standard contracts, which you have a right of access to, or another lawful basis for transfer in accordance with Chapter V of the GDPR.

10. Your rights

• You have the right to access and receive a copy of the personal data we process about you
• You have the right to object to our collection and further processing of your personal data
• You have the right to have your personal data rectified, completed and deleted, with certain statutory exceptions, including national bookkeeping legislation
• You have the right to request us to restrict the processing of your personal data
• Under certain circumstances you may also request the transmission of your personal data which you have provided us with to another data controller (data portability)
• You may, at all times, withdraw any consent you may have given. We will then delete your personal data, unless we can continue the processing on another basis. Our newsletter can be unsubscribed by clicking the link at the bottom of the newsletter

You may exercise your rights free of charge by contacting us as stated in section 11 below.

11. Questions or complaints

If you have any questions in relation to this privacy policy or if you wish to make a complaint in connection to our processing of your personal data, please contact us:

Fritz Hansen A/S
Allerød 8
DK-3450 Allerød
Email: salessupport@fritzhansen.com
Telephone: +45 48 17 23 00

If your complaint is not resolved by us and you wish to proceed with the case, you can send your compliant to the supervisory authority in your country. A list of European supervisory authorities is available here.

12. Provisions applicable to residents in the Republic of Korea

Data controller

If you apply for a job at Fritz Hansen in Korea, cooperate with or visit Fritz Hansen in Korea, Fritz Hansen A/S Branch Korea is the data controller for the processing of your personal data.

Cookies

In addition to section 1.2, you may refuse to store cookies by setting options in the Tool Menu on the upper part of your web browser -> Internet option -> and personal data menu. If you refuse to store cookies, you may experience difficulties in using customized services.

Legal basis

In Korea, the legal bases provided in sections 1 to 7 are subject to applicable privacy laws of Korea. Further, in addition to the legal bases provided in section 1 to 7, Fritz Hansen will process your personal data based on your consent.

How long do we store your data?

In addition to section 8, we will destroy personal data without delay when either the purpose of processing has been achieved or the period of processing and retention has expired:

• Personal data stored in the form of an electronic file shall be permanently deleted using a technical method that renders the record irrecoverable.
• Other records, printed materials, written documents or recording media shall be destroyed by shredding or incinerating them.

We will determine those items of personal information that are subject to destruction and destroy such personal information after obtaining approval from the Chief Privacy Officer. However, if such personal data is required to be retained under other laws and regulations, such personal data will be stored and managed separately from other personal data.

Your rights

In addition to section 10, you have the right to exercise your rights herein through a legal representative. In such case, we reserve the right to verify whether the person exercising such rights on your behalf has the legal authority to do so.

How do we protect your information?

We implement a variety of physical, administrative and electronic security measures to ensure the reasonable security of your personal data on our systems, including the following:

• Managerial measures: Establishment and enforcement of a personal information internal management plan, provision of periodic education on protection of personal information for employees, etc.
• Technical measures: Management of the right to access the personal information processing system, etc., installation of the access control system, encryption of unique identification information, etc., installation of security programs
• Physical measures: Restrictions on the access to physical storage facilities storing personal information, including computer rooms and data rooms.

13. Provisions applicable to residents in the People’s Republic of China

Data controller

If you apply for a job at Fritz Hansen in China, cooperate with or visit Fritz Hansen in China, Fritz Hansen Trading Co. Ltd. is the data controller for the processing of your personal data.

Legal basis

In China, the legal bases provided in sections 1 to 7 are subject to applicable privacy laws of China, in particular the Personal Information Protection Law (“PIPL”). In accordance with the PIPL, Fritz Hansen will process your personal data as set out in section 1 to 7 data based on your consent (cf. Article 13 (1) of the PIPL) and/or contractual obligations (cf. Article 13 (3) of the PIPL).

If you visit our profiles or fan page on social media, we may also, within a reasonable scope, process your personal data that is disclosed by yourself or other personal data that has been legally publicized, unless you expressly refuse such processing (Article 27 of the PIPL).

Disclosure to other data controllers and sharing with data processors

In addition to the disclosure and sharing of your personal data described in section 9, you will be notified of the name and contact information of the recipient if we disclose your personal data in relation to a full or partial sale of Fritz Hansen and Fritz Hansen’s assets. The recipient will continue to fulfill its obligations as a data controller. Where the recipient changes the original purpose and method of processing, it will obtain your consent anew in accordance with applicable laws (Article 22 of the PIPL).

If your personal data is transferred to data processors or data controllers established in countries/regions outside China, such transfer will be based on the standard contract issued by the Cyberspace Administration of China (“CAC”), if applicable, or other conditions for cross-border data transfer, for example, security assessment by the CAC or personal information protection certification (Article 38 of the PIPL). Meanwhile, we will inform you of such matters as the name of the overseas recipient, contact information, purpose and method of processing, type of personal data and the method and procedure for you to exercise your rights against the overseas recipient, and shall obtain your separate consent (Article 39 of the PIPL).

14. Provisions applicable to residents in Japan

Data controller

If you apply for a job at Fritz Hansen in Japan, cooperate with or visit Fritz Hansen in Japan, Fritz Hansen A/S Branch Japan is the data controller for the processing of your personal data.

Legal basis

In Japan, the legal bases provided in sections 1 to 7 are subject to applicable privacy laws of Japan, in particular the Act on the Protection of Personal Information (“APPI”). In accordance with the APPI, Fritz Hansen will not handle your personal data beyond the necessary scope to achieve purposes of processing specified in section 1 to 7, without obtaining your consent in advance (Article 6 18 (1) (f)and (2) of the Act on the Protection of Personal Information in Japan (“APPI”).

However, we are permitted to handle your personal data beyond the scope to achieve the purposes of processing without your consent in the following cases (collectively referred to as “exceptions”):

(i) cases based on laws and regulations;

(ii) cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal's consent;

(iii) cases in which there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain a principal's consent;

(iv) cases in which there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing affairs prescribed by laws and regulations, and when there is a possibility that obtaining a principal's consent would interfere with the performance of the said affairs; and

(v) cases when the third party is an academic research institution, etc. and it is necessary for the third party to handle the personal data for the purpose of academic research (including cases where part of the purpose of handling the personal data is for academic research purposes, but excluding cases where there is a risk of unfairly infringing the rights and interests of individuals) (Article 6 18 (12) (b) of the APPI).

How long do we store your data? Your personal data will be deleted in accordance with the description in section 8 above. However, accounting material, including personal data, which we are obliged to keep under the Corporation Tax Act in Japan, will be deleted no earlier than 7 years (10 years for the business year in which loss occurs) after the end of the financial year to which the data relates.

Disclosure to other data controllers and sharing with data processors

Aside from the disclosure and sharings described in section 9, you AGREE that we may need to disclose your personal data to

• Police
• Lawyers
• Auditors
• Courts
• Public authorities
• Prospective buyers
• Affiliated companies

If your personal data is transferred to data processors or data controllers established in countries outside Japan which does not have an adequate level of protection, such transfer will be based on the Article 28 of APPI.

How do we protect your information?

Fritz Hansen has implemented organizational, personnel, physical and technical security management measures to prevent leakage, loss or damages etc. of customers’ personal data. When customers’ personal information is handled in a foreign country, Fritz Hansen takes appropriate action by acquiring information on personal information protection system of such foreign country.