Suntory Beverage & Food

1. Public Announcement of the purpose of use

Categories of personal data	Purpose of use
Technical data
(1) Technical data from devices such as IP-address, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions	To deliver the Website’s functionalities and for its technical and functional management, and to develop and improve the Website, products and/or services
Inquiries
(2) Personal information of the person who contacted the Company via the “Contact us” page	To answer the person’s questions or otherwise react to his/her message, to record the relevant responses, and to develop and improve the Website, products and/or services
Factory visitors and facility users
(3) Personal information of applicants for factory visits or facility use	To make and confirm reservations for the person’s factory visits or facility use, emergency contacts, and sending of requests for cooperation in questionnaire surveys

2. Public Announcement of the legal basis for processing and retention period

Purpose of use	Legal basis for processing	Retention period
To deliver the Website’s functionalities and for its technical and functional management	Legitimate interest to have a well-functioning website and to provide you with the information you are looking for	As long as necessary to fulfil the purpose of use, including for the purposes of satisfying any legal, accounting, or reporting requirements. To determine the appropriate retention period for personal information, the Company will consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, the purpose of use and whether the Company can achieve those purposes through other means, and the applicable legal requirements.
To develop and improve the Website, products and/or services	Legitimate interest to improve our website, products and/or services
To answer the person’s questions or otherwise react to his/her message, to record the relevant responses	Legitimate interest to answer your questions and respond to your messages & inquiries to build a good relationship with our stakeholders
To make and confirm reservations for the person’s factory visits or facility use, emergency contacts, and sending of requests for cooperation in questionnaire surveys	Legitimate interest to make and confirm reservations for your factory visits or facility use, emergency contacts, and sending of requests for cooperation in questionnaire surveys

3. Public Announcement of the joint use in accordance with the APPI

Within the joint use framework, personal information may be disclosed or provided to the other joint users and may be used by such joint users to the extent of the purposes of use as stated below.

The items of the personal data which the specific business operators jointly use		The extent of the joint users	The joint users’ purposes of use	The business operator responsible for managing the personal data
Technical data
(1) Technical data from devices such as IP-address, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions	IP-address, the internet browser the person uses, cookies, the pages the person visited on the Websites, click- and surf behavior and the length of sessions	Suntory Group*	To deliver the Website’s functionalities and for its technical and functional management, and to develop and improve the Website, products and/or services	Suntory Communications Limited
Inquiries
(2) Personal Information of the person who contacted the Company via the “Contact us” page	Name, address, telephone number, email address, and the personal data the person has included in the message	Suntory Group*	To answer the person’s questions or otherwise react to his/her message, to record the relevant responses, and to develop and improve the Website, products and/or services	Suntory Holdings Limited

*Suntory Group means Suntory Holdings Limited, its consolidated subsidiaries and equity method affiliates in Japan, and Suntory Foundation for Arts

4. Public Announcement regarding requests and inquiries

(1) Your legal rights under the Laws
(a) Under the APPI, you have the following rights in relation to your personal information retained by the Company in certain circumstances: Request disclosure. You may request disclosure of your personal information or notification of its purpose of use (where it is allowed to obtain personal data without notification under the Laws). Request correction, addition or deletion. You may request correction, addition or deletion of any part of your personal information if such information is not factual. Request discontinuance of use, erasure, or discontinuance of provision to a third party. You may request discontinuance of use, erasure, or discontinuance of provision to a third party of your personal information if: (i) we are handling such information beyond the scope necessary for achieving of the purpose of use; (ii) we acquired such information through deception or other wrongful means; or (iii) we acquired sensitive personal information without in advance obtaining your consent to do so. Request discontinuance of provision to a third party. You may request discontinuance of provision to a third party of your personal information if we provided a third party (including one in a foreign country) with such information without in advance obtaining your consent to do so, not based on laws and regulations or this Privacy Policy. (b) Where the GDPR applies to our handling of your personal information, you also have the rights to: Object to handling your personal information. You may object to our handling of your personal information based on our legitimate interest. The Company will then no longer handle your personal information for this purpose, unless the Company has an overriding legitimate interest to do so. You may also ask the Company to erase your personal information, unless there is an overriding legitimate interest for the processing. You may also opt out from handling your personal information for direct marketing purposes. Withdraw your consent to handling your personal information. You may withdraw your consent to the handling of your personal information Data portability. You may request receipt or transmission to another organisation, in a machine-readable form, of your personal information that you have provided to the Company. (c) Where any of the Laws provides for any of the foregoing rights to a greater extent than described above, or any other type of rights in relation to your personal information, you may also exercise such rights.
(2) Contacts for requests, inquires or complaints
If you want to exercise any of your rights as mentioned above, or if you have any inquiries, concerns or complaints on our handling of your personal information, please contact us at our Contact Us page. Where the GDPR is applicable to our handling of your personal information, you may also contact at our representative established within the EU on such handling. Contact details are as stated below: Suntory France S.A.S. 44-52 Boulevard du Parc 92200 Neuilly-sur- Seine, France eu_representative@suntory.eu You may also have the right to lodge a complaint with your local supervisory authority if you feel that we do not comply with the Laws. If you have such concerns, we request that you contact us in the first instance so that we can investigate, and hopefully resolve, your concerns.
(3) Procedures for dealing with requests
If we receive any of the requests as set forth in the paragraph (1), we will undertake the necessary investigation and will take necessary action to respond to the request in accordance with the provisions of the Laws. Unless otherwise permitted or required by the Laws, if you request us to disclose your personal information, we will do so in writing.
(4) Cookie consent management
To manage or limit your consent to the storing of cookies on your device when visiting the Website, please click the Cookie Declaration link.

5. Public Announcement regarding de-identified information in accordance with the APPI

As far as de-identified information as defined in the APPI is concerned, the Company will not acquire descriptions deleted from the personal information, personal identification codes, nor information related to the processing method, nor reference the de-identified information against other information for the purpose of identifying the person related to the personal information used in the creation of the de-identified information.

The Company will also endeavor to take necessary and appropriate measures for securely managing de-identified information, to carry out processing of complaints about the handling of such de-identified information, and to take other necessary measures for ensuring the proper handling of such de-identified information.