Privacy Policy

TOP＞Privacy Policy

Last updated:[11th Oct. 2022]

JCR Pharmaceuticals Co., Ltd. and its subsidiaries and associates (hereinafter collectively, the “JCR Group” or “we”) recognize the importance of protecting personal data for our development as a corporate group trusted by society. We maintain compliance with applicable data protection and privacy laws and other related laws and regulations in relevant countries (hereinafter collectively, the “Applicable Laws”) and conduct initiatives as follows to appropriately protect personal data.

Collection of personal data: The JCR Group collects personal data using appropriate, lawful means, and provides information regarding the purpose for which they will be processed via notification or by posting this information on its corporate website. (Please see the section “Purpose of processing personal data.”)

Sharing of personal data to third parties: Personal data collected by the JCR Group are not shared with third parties except when such sharing meets the conditions under the Applicable Laws. (Please see the section “Parties to which we share personal data.”)

Organizations and systems: The JCR Group appoints a Chief Privacy Officer at each JCR group company and assigns personal data managers in each of its divisions for providing appropriate supervision and training for employees who process personal data to ensure that personal data are thoroughly protected.

Improvements to the Privacy Policy: The JCR Group continuously reviews the Privacy Policy and works to make improvements to maintain compliance with the Applicable Laws and other related standards to enable its development as a corporate group trusted by society.

Privacy Notice for Personal Data

add

Last updated:[7th October 2022]

Privacy Notice for Personal Data

This Privacy Notice (hereinafter, this “Notice”) is intended to inform how the JCR Group processes personal data. The JCR Group stated in this Notice refers to JCR Pharmaceuticals, Co., Ltd. and its subsidiaries and associates. For the purpose of this Notice, the JCR Group may also refer to any one or more of the JCR group companies. (Click here to refer the information on our address, name of our representative, and the JCR Group and its group companies.)

Personal data subject to collection by the JCR Group

The JCR Group collects the following personal data.

Personal data of physicians, pharmacists, nurses, pharmacy personnel and other healthcare professionals (hereinafter, collectively “Healthcare Professionals”), and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Personal identification information issued by government authorities: National identification number, driver license number, passport number, taxpayer number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Information relating to the use of our products: History of purchase and use of our products, records of interaction with us and other relevant information of the data subject
- Asset information: Donations or rewards paid from the JCR Group to the data subject, the data subject’s ownership of a JCR group company’s stock or intellectual property rights and other relevant information
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
- Occupational information: Academic and career backgrounds, qualifications, professional experience, and officer experience at the JCR Group and other relevant information of the data subject
- Familial information: Names, birth dates, contact information, asset information and other relevant information of the data subject’s family members
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for pharmaceuticals, medical devices, regenerative medicine and other products, reagents, and other products handled by the JCR Group (hereinafter, “Pharmaceuticals”) and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
- Occupational information: Academic and career backgrounds, qualifications and professional experience and other relevant information of the data subject
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data related to patients and members of the general public
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Information relating to the use of our products: History of purchase and use of our products, records of interaction with us and other relevant information of the data subject
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
- Familial information: Names, birth dates, contact information and other information of the data subject’s family members
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
- Information relating to personal preferences and interests: Information relating to personal preferences and interests of the data subject based on profiling
Personal data related to media, securities analysts, investors and other related parties
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data of our shareholders (including past shareholders)
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Asset information: The data subject’s ownership of a JCR group company’s stock or intellectual property rights and other relevant information
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data related to job and internship applicants
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
- Occupational information: Academic and career backgrounds, qualifications and professional experience and other relevant information of the data subject
- Familial information: Names, birth dates, contact information and other relevant information of the data subject’s family members
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data of our employees, etc. (current and former) and their families
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Personal identification information issued by government authorities: National identification number, driver license number, passport number, taxpayer number and other relevant information of the data subject
- Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
- Occupational information: Academic and career backgrounds, qualifications, professional experience and other relevant information of the data subject
- Familial information: Names, birth dates, contact information and other relevant information of the data subject’s family members
- Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Personal data related to people using PR-related information desks and other contact points of the JCR Group
- Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
- Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject

How we collect personal data

We collect personal data through the following methods:

Directly from the data subject

The JCR Group collects personal data directly from data subjects who contact and communicate with us, e.g., making inquiries, using our services, browsing our websites, executing contracts, applying for job placements, or reporting adverse events.
Data subjects who are asked to provide their personal data to the JCR Group may choose not to do so. However, this could result in limiting our relationship with said data subject. For instance, we might not be able to provide our services to these data subjects.

Indirectly from sources other than the data subject

We might collect personal data of a data subject from indirect sources other than the data subject, such as:

Publicly available information sources
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Contract research organizations (CROs) for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors, recruitment agencies, etc.

Purpose and legal basis for processing personal data

The JCR Group processes personal data for our research, development, manufacturing and sale of Pharmaceuticals and other business activities for the following purposes.

Personal data of Healthcare Professionals, and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
- Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
  - Provision, collection and communication of information related to the appropriate use of Pharmaceuticals
  - Provision, collection and communication of information on the quality, safety and effectiveness of Pharmaceuticals
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Implementation and support for studies and research in medicine and pharmacology and for academic activities such as research symposiums and lectures
  - Provision, collection, etc. of medical information and academic information
  - Requests and implementation of clinical trials, post-marketing surveillance, etc. and implementation and assistance for studies and research and provision of related information
  - Collection and provision of information related to usage conditions, usage status, usage needs, etc. of Pharmaceuticals, and study, consideration and accommodation of their usage conditions, usage status, usage needs, etc.
  - Identification of delivery destinations for Pharmaceuticals and maintenance of a communication network
  - Collection and provision of information related to recalls of Pharmaceuticals and other information on adverse reactions, and response to such occurrences
  - Requests and management, including lectures, instruction and consulting
  - Applications, notifications and reports to government agencies, public bodies, participating groups, etc.
  - Provision of Pharmaceuticals
  - Confirmation of delivery destinations for biological products and communication and provision of such delivery information
  - Collection and management of information related to payment processing and credit management
  - Information provision and disclosure to ensure transparency related to funds and other benefits
  - Inquiry reception and complaint processing related to Pharmaceuticals
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Disclosure and provision related to laws, regulations, and other standards
Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for Pharmaceuticals and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
- Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
  - Contacts, consultations, cooperation, confirmation, requests, and instructions related to business administration
  - Reception of goods, services, etc. based on the transactions and their payment
  - Negotiations, contacts, consultation, considerations, order reception and issue, settlement, management, and responses related to transactions
  - Provision and collection of information related to contractual relationships and credit management
  - Building of new transactional relationships
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Collection and provision of information related to the distribution, supply, use, etc. of Pharmaceuticals
  - Joint action at the time of occurrence for recalls, adverse reactions and other incidents involving Pharmaceuticals
  - Provision, collection, consideration and communication of information related to the quality, safety and effectiveness of Pharmaceuticals
  - Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
  - Market surveys and monitoring related to Pharmaceuticals
  - Joint actions for efficient promotion of Pharmaceuticals
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Disclosure and provision related to laws, regulations, and other standards
Personal data related to patients and members of the general public
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Surveys and consideration of the content of inquiries, consultations and contacts
  - Support for patient groups
  - Information on medical-related forums, etc. for the general public, including patients
  - Reporting and contact to product manufacturers, sellers, Healthcare Professionals, etc.
  - Implementation of clinical trials, post-marketing surveillance, etc. and implementation of related research and studies
  - Collection of Pharmaceuticals, collection and provision of drug recall and adverse reaction information, and responses to such events
  - Compensation for health hazards or adverse reactions to drugs
  - Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
  - Proposal, implementation and evaluation of disease awareness-raising activities
  - Market surveys and monitoring related to Pharmaceuticals
  - Building access management for tours and visits to our facilities
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
Personal data related to media, securities analysts, investors and other related parties
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Sending of corporate information and provision of event information
  - Collection and provision of information for publicity and IR activities
  - Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
  - Monitoring and analysis of market needs and related planning
  - Consideration, survey and response to consultations, inquiries, contacts, etc.
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- The data subject has consented to the processing of his/her personal data
  - Confirmation of access to our shareholders and investors pages on our corporate websites
Personal data of our shareholders (including past shareholders)
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Sending of business reports and other materials and related communications
  - Implementation of various policies for facilitating our shareholder relations
  - Shareholder management within the scope necessary for executing the above
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Execution of obligations stipulated in the Applicable Laws and response to the exercise of rights
  - Notification and reporting based on the Applicable Laws
Personal data related to job and internship applicants
- Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
  - Hiring considerations and decisions
  - Communication and information provision related to hiring
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Implementation of internships and reference for planning and administration in connection with future hiring activities
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Notification and reporting based on the Applicable Laws
Personal data of our employees, etc. (current and former) and their families
- Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
  - Execution, planning, consideration, management, etc. of business-related communications, attendance and absence, salary payments, human resources, evaluations, benefits, disciplinary measures, human resources development, welfare benefits, safety, health, etc. and other business processes related to laws and regulations on labor, tax, and social welfare
  - Reception, execution and management of various procedures stipulated in internal company rules
  - Contact and submission to health insurance associations, corporate pensions, shareholder associations, subsidiaries and affiliated companies
  - Tracking and managing attendance records for various training programs and sessions
  - Provision of Medical Representatives (MR) training records to MR Education Center
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Applications, notifications and reports to government agencies, public bodies, participating groups, etc.
  - Mediation and referrals for employee transfers and relocations
  - Contact to the person involved or their family members in emergencies
  - Contact to subcontractors, consulting firms, insurance companies, etc.
  - Various procedures and contacts after retirement
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Notification and reporting based on laws, regulations, and other standards
Personal data related to people using PR-related information desks and other contact points of the JCR Group
- Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
  - Reporting and contact to product manufacturers, sellers, etc.
  - Telephone reception skill improvement and realization of better customer service
  - Feedback to our representatives on consultation content and response status
  - Smooth communication with persons using our contact points
  - Response to access and other communications and management of related records
  - Consideration, survey and response to consultations, inquiries, contacts, etc.
  - Resolutions to lawsuits and other disputes involving the JCR Group
  - Efficient business execution
  - Fostering good communication
- Processing necessary for compliance with a legal obligation to which the JCR Group is subject
  - Notification and reporting based on laws, regulations, and other standards

Parties to which we share personal data

The JCR Group might share the personal data collected to the extent necessary for the purpose of processing personal data. We list the parties to which we share personal data by type of personal data as follows.

Personal data of Healthcare Professionals, and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for Pharmaceuticals. and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
- Business successors due to mergers or other reason: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
Personal data related to patients and members of the general public
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
Personal data related to media, securities analysts, investors and other related parties
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
Personal data of our shareholders (including past shareholders)
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as a joint ventures, reorganizations, or acquisitions
Personal data related to job and internship applicants
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as a joint ventures, reorganizations, or acquisitions
Personal data of our employees, etc. (current and former) and their families
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
Personal data related to people using PR-related information desks and other contact points of the JCR Group
- JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
- Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
- Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
- Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions

In addition to the above, for the sharing of personal data to JCR group companies in Japan in particular, please see the section “Joint use of personal data” in “Supplementary Information: Notification Regarding Personal Data of Data Subjects Who Are Located in Japan” (available in the Japanese version only).”

Retention period of personal data

The JCR Group retains personal data for the period reasonably necessary for achieving the purpose of processing personal data specified in this Notice or for the period required under the Applicable Laws.
In determining the retention period of personal data, we consider the need for achieving the purpose of processing personal data, requirements under the Applicable Laws, agreement with the data subject regarding the retention period, implications of erasure or destruction of personal data to the data subject or another natural person, and other relevant factors.

Legal basis

The JCR Group processes personal data only if and to the extent that at least one of the following legal bases is met in doing so:

The data subject has given consent to the processing of his/her personal data;
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the JCR Group is subject;
Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest;
Processing is necessary for the purposes of the legitimate interests pursued by the JCR Group or by a third party.

Rights of the data subject

The JCR Group respects the rights of each data subject under the Applicable Laws* for the personal data we process. If you wish to exercise your rights under the Applicable Laws for your personal data processed by the JCR Group, you may contact us via the JCR Group’s contact points. (Please see the section “Inquiry contacts.”)
We will confirm your identity before proceeding with addressing your inquiry.
*Note: We list the names of Applicable Laws in the key countries where we operate and the data subject’s rights given thereunder.

Act on the Protection of Personal Information (Japan)
- The data subject’s right to request notice of purpose of use
- The data subject’s right to request a disclosure of retained his/her personal data
- The data subject’s right to request a correction, addition or deletion of retained his/her personal data that is inaccurate
- The data subject’s right to request ceasing the processing or erasure of retained his/her personal data which is processed or collected improperly or that has become unnecessary for use
- The data subject’s right to request ceasing the processing or erasure of retained his/her personal data or the suspension of the provision of retained his/her personal data to the third party, in the event of leaks, or in other cases where the data subject’s right or legitimate interests are likely to be harmed.
- The data subject’s right to request the suspension of the provision of retained his/her personal data provided to the third party in violation of laws and regulations
- The data subject’s right to request disclosure of the third party provisioning records
Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter, the “EU GDPR”) (European Economic Area: hereinafter, the “EEA”)
- The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
- The data subject’s right to request a correction of his/her personal data that are not accurate
- The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
- The data subject’s right to request restricted processing of his/her personal data
- The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
- The data subject’s right to object to processing of his/her personal data by the JCR Group
- The data subject’s right to withdraw consent on the processing of his/her personal data
- The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
- The data subject’s right not to be subject to a decision based solely on profiling or other automated processing
United Kingdom General Data Protection Regulation (hereinafter, the "UK GDPR") and the Data Protection Act 2018 (UK)
- The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
- The data subject’s right to request a correction of his/her personal data that are not accurate
- The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
- The data subject’s right to request restricted processing of his/her personal data by the JCR Group
- The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
- The data subject’s right to object to processing of his/her personal data
- The data subject’s right to withdraw the consent on the processing of his/her personal data
- The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
- The data subject’s right not to be subject to a decision based solely on profiling or other automated processing
Lei Geral de Proteção de Dados Pessoais (hereinafter, “LGPD”) (Brazil)
- The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
- The data subject’s right to request a correction of his/her personal data that are not accurate
- The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
- The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
- The data subject’s right to object to processing of his/her personal data by the JCR Group
- The data subject’s right to information about public and private entities with which the JCR Group has shared data
- The data subject’s right to information about the possibility of denying consent and the consequences
- The data subject’s right to withdraw the consent on the processing of his/her personal data
- The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
- The data subject’s right not to be subject to a decision based solely on profiling or other automated processing

Protection of personal data

The JCR Group establishes management systems necessary for appropriately managing personal data and conducts rigorous security system management to prevent the occurrence of unauthorized intrusion, leaks, alteration, loss, unauthorized use, unauthorized disclosure, etc. of personal data.About specifically information of our security control action, please contact us at the address listed at the end of this document.

Transfer of personal data

The JCR Group might transfer personal data collected in one country or territory to a third country or territory for the processing of the personal data. When doing so, we take appropriate measures and transfer such data only to the extent permitted under laws and regulations applicable therein.

Transfer of personal data of a data subject who is located in Japan, the EEA, UK or Brazil

The JCR Group might transfer personal data of a data subject who is located in Japan, the EEA, UK or Brazil to a third country or territory where we operate (e.g., Japan, the US, EEA, UK, Switzerland, Brazil) to process his/her personal data.
It is permitted under the Applicable Laws to transfer personal data of a data subject who is located in one country to a third country or territory that is assessed to have established adequate data protection standards by supervisory authorities in the relevant country or by the European Committee. Please see the countries or territories that are covered by adequacy regulations forJapan, theEEAandUK, respectively. Brazil has none so far at the time of the release of this Notice.
We transfer personal data of a data subject who is located in one country to a third country or territory that is not covered by adequacy regulations only in cases where the data subject’s consent has been obtained, the appropriate safeguards required by the Applicable Laws (e.g., binding corporate rules (Article 47 of the GDPR), standard contractual clauses (Article 46.2 of the GDPR)) have been taken, or there is a need to respond to other specific situations permitted by the Applicable Laws.
For further information and to obtain a copy of the documents used to protect your personal data, please contact us at the address listed at the end of this document.

Processing of personal data of children or minors

For personal data of data subjects that are subject to the restricted processing of personal data under the Applicable Laws*, the JCR Group obtains the consent of the holders of parental responsibility in advance and processes their personal data to the extent of the purpose of processing personal data specified in this Notice. Data subjects who are children or minors may exercise their rights permitted under the Applicable Laws. Please see the section “Rights of the data subject” for more details.
*Note: We list the age ranges subject to the restricted processing of personal data by the name of Applicable Laws in the key countries where we operate.

Act on the Protection of Personal Information (Japan)
- Minors as defined under the applicable local laws
EU GDPR (EEA)
- Under 16 years of age or a lower age (at least under 13 years of age) specified under applicable laws of the respective EU member state
UK GDPR and the DPA 2018 (UK)
- Under 13 years of age
LGPD (Brazil)
- Under 13 years of age

Inquiry contacts

The JCR Group works to take immediate, appropriate measures when receiving an inquiry or claim regarding the processing of personal data. Please send your inquiries regarding the processing of personal data via email to:privacy@jcrpharm.co.jp
We have appointed a representative for the EU and UK. Please see the section “Representative” for information on how to contact our representative.
We also have appointed a Data Protection Officer. Please see the section “Data Protection Officer” for information on how to contact the Data Protection Officer.

Supplementary information: Notification Regarding Personal Data of Data Subjects Who Are Located in the EEA or UK

add