Privacy Policy for Applications for
Construction, Mining, Forestry and other
Machinery
This privacy policy for Applications for Construction, Mining, Forestry and other
Machinery (this “Policy”) sets out our policies on the handling of information that
Komatsu Ltd. (“Company” or “we” as the case may be) may acquire from the persons
who have entered into a license agreement with respect to the applications for which
the Company licenses the use and are listed at the end of “TERMS OF USE_FOR
APPLICATIONS FOR CONSTRUCTION, MINING, FORESTRY AND OTHER
MACHINERY” which have been established by the Company (said person shall be
referred to as the “User” and said application shall be referred to as the “Application”).
This Policy shall be applied in addition to the "Global Privacy Policy", "Personal
Information Protection Policy" and other policies with respect to personal information
which are separately established by the Company (hereinafter collectively referred
to as the "Common Policy" excluding this Policy). If there is a conflict between the
Common Policy and this Policy, this Policy shall prevail with respect to the use of the
Application.
1. Definition
In this Policy, “Personal Information,” “Personal Data,” and other words that have
definitions in the Personal Data Protection Law issued by Royal Decree No. (M/19)
dated February 28, 2022 and amended by Royal Decree No. (M/148) dated March
27, 2023 (hereinafter the “Act”) have the meaning defined in the Act.
2. Information collected and its purpose of use
The Company may acquire, or may acquire in the future, the information listed in
the each raw of the following table on the occasions set in the each raw of the
following table for the purpose of use set in the each raw of the following table.
For the avoidance of doubt, the Company does not acquire the Personal Data of
minors under the age of 18.
User information
Occasions
we acquire
Purpose of use
name, e-mail
address, country of
residence,
language,
year/month/date of
birth, profile image
When
User
registers
as a user
of the
Application
⚫ To provide our services and
after sales services
⚫ To improve our services, after
sales services and products,
and to develop new services,
after sales services and
products
company name,
company location,
group name within
the company,
name of target
work/role, name of
person performing
specific work
When
User use
the
Application
⚫ To provide our services and
after sales services
⚫ To improve our services, after
sales services and products,
and to develop new services,
after sales services and
products
Location data,
Precise location
with User’s
approval
(latitude/longitude),
Coarse location
data (estimated
from IP address,
etc.)
When you
use our
services
⚫ To provide our services and
after sales services
⚫ To improve our services, after
sales services and products,
and to develop new services,
after sales services and
products
3. Provision of Personal Data to Third Parties, etc.
3.1 Provision of Personal Data to Third Parties
The Company will not provide User’s Personal Data to a third party
except for the cases set forth below:
1. upon User’s prior approval;
2. cases based on laws and regulations;
3. cases in which there is a need to protect the life, well-being, or
property of an individual, and it is difficult to obtain User’s
consent;
4. cases in which there is a special need to improve public well-
being or promote healthy child development, and it is difficult to
obtain User’s consent; or
5. cases in which there is a need to cooperate with a national
government organ, local government, or person entrusted
thereby with performing the functions prescribed by laws and
regulations, and obtaining User’s consent is likely to interfere
with the performance of those functions.
Additionally, the Company may transfer your Personal Data to
countries outside the Kingdom of Saudi Arabia. We will only do so with
your explicit consent and in compliance with the Saudi Data Protection
Law (PDPL). You have the right to refuse or withdraw your consent at
any time. If the recipient country does not have an adequate level of
data protection as recognized by the Saudi Data and Artificial
Intelligence Authority (SDAIA), we will implement appropriate
safeguards to ensure a level of protection equivalent to that provided
by the PDPL.
3.2 Entrustment of the Handling of Your Personal Data
In order for the operation of our services and within the scope
necessary for achieving the purpose of use, the Company may entrust
the handling of User’s Personal Data to a third party.
3.3 [Intentionally left blank]
3.4 External websites
For the handling of Personal Data in external websites or services
linked by the Company’s website or the Company’s services, please
look at privacy policies in such websites or services.
3.5 Utilization of Google Analytics
The Company may use Google Analytics, one of the services of
Google LLC (“Google,”) to measure the frequency or other status of
User’s usage of the Company’s websites or services for their
improvements and updates. For this reason, Google Analytics collects
anonymous traffic data, which will not identify the User. For the
information that Google Analytics collects and its handling, please
access Google’s Privacy Policy and its webpage on “Google’s use of
information collected from websites and apps which use Google
service.”
（www.google.com/intl/jaen/policies/privacy/partners/）
3.6 Collection of User’s information by third parties
With regard to the collection of User’s information by third parties, the
Company disclose the related information as follows.
Third party
collecting
information
The purpose of
collecting
information
Information
collected by
third party
Google
Analytics
Analyzing
User’s
access
history in
order to
improve
the
Company’s
services
Frequency
of access,
time spent
on webpage,
user agent,
geographical
diversity of
users,
inbound
traffic,
search
words, etc.
4. Measures for Managing the Security of Personal Data
The Company will take the necessary and appropriate measures for managing the
security of Personal Data, including encryption, access control and data breach
notification procedures, to preventing the leaking, loss, or damage of the Personal
Data the Company handle. For details of those measures, please contact the
inquiry form set out in the last part of this Policy.
5. Procedures of disclosures, rectifications, etc.
When the Company receives a request from User or User’s agent for notification of
the purpose of use, disclosure, rectification or deletion, suspension of use, or
provision to third parties of your Personal Data retained by the Company, the
Company will respond to that request according to applicable laws and ordinances,
including the Saudi Data Protection Law. The Company will retain User’s Personal
Data for a period of [5 years] from the date of collection, unless a longer retention
period is required by law or for legitimate business purposes. For these requests,
please contact the inquiry form set out in the last part of this Policy.
6. Revisions of Policy
The Company may revise the provisions of the Policy. The changes will be
disclosed and notified to User by the means designated by the Company.
7. About the Company
The Company’s corporate name, address, and the name of our representative
director are as follows.
Komatsu Ltd.
2-3-6, Akasaka, Minato-ku, Tokyo 107-8414 Japan
Representative Director: Hiroyuki Ogawa
[Temporary relocation of headquarters]
Relocation period: January, 2024 – December, 2026 (planned)
Location: Shiodome Building, 1-2-20, Kaigan, Minato-ku, Tokyo
8. Inquiry
For requests on Personal Data with respect to the Application handled by the
Company, and other inquiries relating to this Policy, please contact the Company
via the contact form in https://www.komatsu.jp/en/inquiry
Established April 1, 2024