Revised January 17, 2019

General Data Protection Regulation EU/2016/679 (“GDPR”) is a European regulation on protection of personal data. This GDPR Privacy Notice shall apply to processing of personal data of residents of the European Economic Area (“EEA”) along with Personal Information Protection Law of Japan.

Sumitomo Forestry Co., Ltd (“we” “our” and “us”) is a corporation registered in Japan conducting businesses in sectors including housing and real estate businesses (in Japan, US, Australia and Asia), distribution of timber and building materials, and distribution of environmentally friendly natural resources.

We will process your personal data only to respond to your enquires including when we provide you certain requested information. The processing is based on our respective contractual relationship in accordance with Art. 6 (1) b GDPR.

Personal data collected by analytical and/or advertising and retargeting cookies on our website in accordance with our Cookie Policy will be processed to improve the user experience on our website and for to display advertising based on your interests and activities on our website. The processing is based on our prevailing legitimate interests in these processing purposes in accordance with Art. 6 (1) f GDPR.

Any personal information will not be kept for longer than is necessary for the abovementioned purposes for which the personal data are processed. Any personal data collected by cookies will be deleted after a maximum storage period of two years.

We may share your personal information with our affiliated companies in case your information request involves a request for certain information regarding businesses conducted by our affiliated companies, and when sharing of such personal information is necessary to respond to your request. We may also share your personal information with our service providers for the purposes of data analytics and marketing.

You may object at any time against any processing of your personal data based on our legitimate interests without any costs from our side for you. In that case we ask you to provide reasons why you believe that your privacy interests outweigh our legitimate interests to process as stated above. However, when objecting to the processing of your personal data for marketing purposes you do not have to provide any reasons and we will cease such processing upon receiving your objection.

With regard to your personal data collected or processed in accordance with this policy you are furthermore entitled to:

• ■access to all your personal data controlled by us;
• ■rectification of false personal data;
• ■erasure your personal data (“right to be forgotten”);
• ■restriction of processing of your personal data
• ■receive a copy of your personal data (right to data portability);

You are furthermore entitled to lodge a complaint with a data protection supervisory authority.