Public Announcement

1. Public Announcement of the purpose of use and categories of sources
Categories of personal data Categories of sources Purpose of use
◆Technical data
(1) Technical data from devices such as IP-address, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions Yourself (by automated means when you use our website) To deliver the Website’s functionalities and for its technical and functional management, and to analyze data for developing and improving the products and/or services
◆Inquiries
(2) Personal information of the person who contacted the Company via the “Contact us” page Yourself (via “Contact us” page when you submit inquiries) To respond to the person’s inquiries and keep record the relevant responses, conduct and analyze data for beneficial communication with customers, send requests for cooperation in questionnaire surveys, and analyze data for developing and improving the products and/or services
◆Factory visitors and facility users
(3) Personal information of applicants for factory visits or facility use Yourself (via reservation systems or application forms when you make reservations for your factory visits or facility use) To manage the person’s factory visits or facility use, send requests for cooperation in questionnaire surveys, and analyze data for developing and improving the products and/or services
◆Information of campaign / prize competition applicants
(4)Personal information of customers who applied for campaigns / prize competitions provided by the Company Yourself (via application forms when you apply for campaigns / prize competitions) To conduct campaigns and prize competitions, analyze data for beneficial communication with customers, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal information in campaigns and the like
2. Public Announcement of the legal basis for processing and retention period
Purpose of use Legal basis for processing Retention period
To deliver the Website’s functionalities and for its technical and functional management Legitimate interest to have a well-functioning website and to provide you with the information you are looking for As long as necessary to fulfil the purpose of use, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period for personal information, the Company will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purpose of use and whether the Company can achieve those purposes through other means, and the applicable legal requirements.
To analyze data for developing and improving products and/or services Legitimate interest to improve our products and/or services
To respond to the person’s inquiries and keep record the relevant responses Legitimate interest to respond to the person’s inquiries and keep record the relevant responses
To analyze data for beneficial communication with customers Legitimate interest to analyze data for beneficial communication with customers
To send requests for cooperation in questionnaire surveys Legitimate interest to send requests for cooperation in questionnaire surveys
To manage the person’s factory visits or facility use Legitimate interest to manage the person’s factory visits or facility use
To conduct campaigns and prize competitions, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal information in campaigns and the like Legitimate interest to conduct campaigns and prize competitions, deliver advertisements for Suntory Group’s products, services, events, etc., and for other purposes described in a policy on the use of personal information in campaigns and the like
3. Public Announcement of the joint use in accordance with the APPI

Within the joint use framework, personal information may be disclosed or provided to the other joint users and may be used by such joint users to the extent of the purposes of use as stated below.

The items of the personal data which the specific business operators jointly use The extent of the joint users The joint users’ purposes of use The business operator responsible for managing the personal data
◆Technical data
(1) Technical data from devices such as IP-address, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions IP-address, the internet browser the person uses, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions Suntory Group* To deliver the Website’s functionalities and for its technical and functional management, and to analyze data for developing and improving the products and/or services Suntory Holdings Limited
◆Inquiries
(2) Personal Information of the person who contacted the Company via the “Contact us” page Name, address, telephone number, email address, and the personal data the person has included in the message Suntory Group* To respond to the person’s inquiries and keep record the relevant responses, conduct and analyze data for beneficial communication with customers, send requests for cooperation in questionnaire surveys, and analyze data for developing and improving the products and/or services Suntory Holdings Limited
◆Factory visitors and facility users
(3) Personal information of applicants for factory visits or facility use Name, phone number, age, sex, email address, etc. Suntory Group* To manage the person’s factory visits or facility use, send requests for cooperation in questionnaire surveys, and analyze data for developing and improving the products and/or services Suntory Holdings Limited
  • *Suntory Group means Suntory Holdings Limited, its consolidated subsidiaries and equity method affiliates in Japan, and Suntory Foundation for Arts
4. Public Announcement regarding requests and inquiries
(1) Your legal rights under the Laws

(a) Under the APPI, you have the following rights in relation to your personal information retained by the Company in certain circumstances:

  • Request disclosure.
    You may request disclosure of your personal information or notification of its purpose of use (where it is allowed to obtain personal data without notification under the Laws).
  • Request correction, addition or deletion.
    You may request correction, addition or deletion of any part of your personal information if such information is not factual.
  • Request discontinuance of use, erasure, or discontinuance of provision to a third party.
    You may request discontinuance of use, erasure, or discontinuance of provision to a third party of your personal information if: (i) we are handling such information beyond the scope necessary for achieving of the purpose of use; (ii) we acquired such information through deception or other wrongful means; or (iii) we acquired sensitive personal information without in advance obtaining your consent to do so.
  • Request discontinuance of provision to a third party.
    You may request discontinuance of provision to a third party of your personal information if we provided a third party (including one in a foreign country) with such information without in advance obtaining your consent to do so, not based on laws and regulations or this Privacy Policy.

(b) Where the EU GDPR and UK GDPR applies to our handling of your personal information, you also have the rights to:

  • Object to handling your personal information.
    You may object to our handling of your personal information based on our legitimate interest. The Company will then no longer handle your personal information for this purpose, unless the Company has an overriding legitimate interest to do so. You may also ask the Company to erase your personal information, unless there is an overriding legitimate interest for the processing. You may also opt out from handling your personal information for direct marketing purposes.
  • Withdraw your consent to handling your personal information.
    You may withdraw your consent to the handling of your personal information.
  • Data portability.
    You may request receipt or transmission to another organisation, in a machine-readable form, of your personal information that you have provided to the Company.

(c) Where the CCPA applies to our handling of your personal information, you also have the right to:

  • Not receive discriminatory treatment. You have a right not to receive discriminatory treatment by us for the exercise of the privacy rights conferred by the CCPA.

(d) Where any of the Laws provides for any of the foregoing rights to a greater extent than described above, or any other type of rights in relation to your personal information, you may also exercise such rights.

(2) Contacts for requests, inquires or complaints

If you want to exercise any of your rights as mentioned above, or if you have any inquiries, concerns or complaints on our handling of your personal information, please contact us at our Contact Us page.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. The verifiable request shall:

  • Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
  • Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Where the EU GDPR is applicable to our handling of your personal information, you may also contact at our representative established within the EU on such handling. Contact details are as stated below: Suntory France S.A.S.
44-52 Boulevard du Parc 92200 Neuilly-sur- Seine, France
eu_representative@suntory.eu

Where the UK GDPR is applicable to our handling of your personal information, you may also contact at our representative established within the UK on such handling. Contact details are as stated below: Suntory MONOZUKURI Expert Europe Limited
2 Longwalk Road, Stockley Park, Uxbridge UB11 1BA, United Kingdom
uk_representative@suntory.com

You may also have the right to lodge a complaint with your local supervisory authority if you feel that we do not comply with the Laws. If you have such concerns, we request that you contact us in the first instance so that we can investigate, and hopefully resolve, your concerns.

Where the CCPA is applicable to our handling of your personal information, you may also contact us by calling at +1 866-899-2342. Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

(3) Procedures for dealing with requests

If we receive any of the requests as set forth in the paragraph (1), we will undertake the necessary investigation and will take necessary action to respond to the request in accordance with the provisions of the Laws.

Unless otherwise permitted or required by the Laws, if you request us to disclose your personal information, we will do so in writing.

(4) Cookie consent management

To manage or limit your consent to the storing of cookies on your device when visiting this website, please click the Cookie Declaration link.

5. Public Announcement regarding de-identified information in accordance with the APPI

As far as de-identified information as defined in the APPI is concerned, the Company will not acquire descriptions deleted from the personal information, personal identification codes, nor information related to the processing method, nor reference the de-identified information against other information for the purpose of identifying the person related to the personal information used in the creation of the de-identified information.

The Company will also endeavor to take necessary and appropriate measures for securely managing de-identified information, to carry out processing of complaints about the handling of such de-identified information, and to take other necessary measures for ensuring the proper handling of such de-identified information.

6. Public Announcement in accordance with the CCPA
As far as the CCPA is applicable, the following applies to our handling of personal information:
(1) Personal information collected in the preceding twelve (12) months

In the preceding twelve (12) months, we have collected the following category of personal information:

  • Category A: Identifiers.
  • Category B: Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
  • Category C: Protected classification characteristics under California or federal law.
  • Category D: Commercial information.
  • Category F: Internet or other similar network activity.
(2) Personal information shared in the preceding twelve (12) months

In the preceding twelve (12) months, we have disclosed the following category of personal information for the purposes described above in this Privacy Policy:

  • Category A: Identifiers.
  • Category B: Personal Information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).
  • Category C: Protected classification characteristics under California or federal law.
  • Category D: Commercial information.
  • Category F: Internet or other similar network activity.

We may disclose your personal information for the purposes described above in this Privacy Policy to the following categories of third parties:

  • Suntory Group*.
  • Third parties that provide services to us in connection with the operation of our business.
  • Third parties to whom you or your agents authorize us to disclose your personal information in connection with our services.
  • *Suntory Group means Suntory Holdings Limited, its consolidated subsidiaries and equity method affiliates in Japan, and Suntory Foundation for Arts.

We do not sell, and have not sold in the preceding twelve (12) months, any personal information.