PRIVACY INFORMATION STATEMENT FOR MARKETING & EPSON ONLINE SHOP
Last update May 2023
Epson cares about your privacy and by this statement gives information about your personal data, as customer, held in Epson’s Marketing database, the Epson Online shop´s database and associated systems related to main Epson website.
(You do not have to register or give any personal information to make use of Epson’s main websites. To register with Epson the only information you are required to give is your e-mail address (plus confirmation that you are over 16). All other information fields at registration are optional).
What personal data Epson collects and holds
(Personal data is any information relating to an identified or identifiable living person)
Epson holds (and will hold in the future) personal data that you choose to provide to Epson, including data when you register to Epson website (s) and about Epson’s interactions with you. It also includes personal data gathered through cookies and other similar tools.
Those personal data may be:
Identity and Contact Data: first name, last name, postal address, phone number, e-mail address and payment method.
Purchase Data: information gathered from Epson’s own systems about purchases (including uncompleted purchases) made by you through the Store pages of its websites.
Marketing and Communications Data: your preferences in receiving marketing from us and our third parties and your communication preferences.
Technical Data: internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
Usage Data: information about how you use our website.
The Controller
Epson Europe B.V. is the controller of your personal data.
Epson Europe B.V.
Azië Building, Atlas Arena
Hoogoorddreef 5
1101BA Amsterdam, The Netherlands.
Purpose for Epson processing your personal data
(‘Processing’ means any activity Epson and/or its subsidiary companies perform with the personal data about you)
A) For marketing activities
The primary purpose for which Epson will process your personal data, as customer, is for the marketing of its products, including direct marketing communications (normally by e-mail, telephone, SMS, push message) to you which includes:
Identifying you when you contact us
Monitoring your preferences so that you can save time when searching our website
Processing your requests to participate in marketing promotions
Monitoring and recording phone and written communications with you for quality assurance and compliance purposes and for dealing with your complaints and queries
Understanding which parts of Epson’s website, and which products and services, most interest you.
B) For the Epson Online shop
The primary purpose for which Epson will process your personal data is the performance, and recording, of transactions (including uncompleted transactions) with you through the Epson Online shop website. The secondary purpose includes:
Storing your particulars, preferences and interests so that you can save time when making further use of our websites, to enable us to understand which parts of Epson’s website, and which products and services, most interest you and to tailor our offerings to you.
Analysing the use made of Epson’s websites by you and others
Monitoring and recording any forms of communication with you for quality assurance and compliance purposes and for dealing with any issues raised in these communications.
Legal basis for holding your personal data
A) Legitimate interests for marketing activities
The legal basis for this is that it is necessary for the legitimate interests of Epson or companies within the Epson group in carrying out marketing activities.
B) Performance of a contract for the Epson Online shop
The legal basis for this primary purpose is that it is necessary for the performance of a contract with you. The basis for the secondary purpose is that it is necessary for the legitimate interests of Epson or companies within the Epson group in understanding its markets and customers.
C) Specific consent given by you in other cases
If you choose to give information beyond that which Epson requires you to provide, the basis for processing that information is your consent as demonstrated by your voluntarily providing it. You have the right to withdraw that consent at any time. You can do this by writing to Epson at the address shown above, or Contact Us About Your Data.
As part of its processing, Epson will perform some automated profiling and decision-making based on the information it holds about you in order to make information presented to you more relevant to your interests.
If, in the future, Epson wishes to process your data for some other purpose it will first provide you with information about that other purpose.
Where you have given your consent to this, Epson will also use your personal data for the purpose of electronic marketing communications to you (normally by e-mail, telephone, SMS, push message) which may include:
Conducting surveys and asking your opinion on our products and services
Notifying you of products or offers that may be of interest to you
Notifying you of promotions such as free gifts, contests and prize draws.
Marketing analysis and customer profiling
Invitations to events
Moreover, Epson uses tools offered by advertising partners (e.g. Google) which may recognize your devices and deliver advertisements to you. The information may include your device ID, your IP address and information about your browser or operating system or other identifier in encrypted form. The information may be processed by the providers in hashed or de-identified form.
The legal basis for this is your specific consent. You may withdraw your consent to this additional purpose (independently of your right to object to Epson processing data for the general purposes described above) at any time by writing to Epson at the address shown above, or at Contact Us About Your Data.
How long Epson will hold my data for marketing activities
Epson will hold your personal data for a period of 2 years after the last contact from you. After that time some information may be held but only in an anonymised form or as part of archived records.
Personal data may be held for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend Epson’s legal rights.
For the Epson Online shop
Epson will hold your personal data for a period of 10 years. After that time some information may be held but only in an anonymised form or as part of archived records.
Personal data may be held for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend Epson’s legal rights.
What personal information Epson shares with third parties and transfers outside the EEA
Epson uses third parties to perform some processing activities on its behalf. Some or all of your personal data may be disclosed to them, but they are only permitted to use the disclosed data for the purposes for which Epson holds your data and in accordance with Epson’s directions.
Some of our external third parties are based outside the EEA so their processing of your personal data will involve a transfer of data outside the EEA.
Epson shares your personal data within Epson’s companies. This involves transferring your personal data outside the European Economic Area (EEA).
If you are located in a country outside the EEA, your personal data will be also transferred to that country.
Whenever Epson transfers your personal data outside the EEA, Epson ensures that a similar degree of protection is afforded to it by the implementation of at least one of the following safeguards:
Epson will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
When Epson shares your personal data within Epson’s companies or uses certain third parties, Epson uses the Model contracts for the transfer of personal data to third countries approved by the European Commission, which give personal data the same protection it has in Europe.
Please contact us if you want further information on the specific mechanism used by us when transferring your personal data outside the EEA.
Data Security
Epson has security measures in place to protect your information and prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, Epson gives access to your personal data to those employees, agents, contractors and other third parties based on “need to know” principle. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.
Epson has procedures in place to deal with any suspected personal data breach and will notify you and any applicable authority of a breach where we are legally required to do so.
Contacting the Epson Data Protection Officer
The controller of the information and its European Data Protection Officer may be contacted by writing to:
The EDPO
Epson Europe B.V.
Azië Building, Atlas Arena
Hoogoorddreef 5
1101BA Amsterdam Zuid
The Netherlands.
or, using E-mail: edpo@epson.eu
Contacting Epson to exercise your rights
As a “data subject” you have statutory rights to request from Epson access to and rectification or erasure of personal data or restriction of processing concerning yourself or to object to processing as well as the right to data portability and the right to lodge a complaint with a supervisory authority.
Please provide Epson with your personal details in this form so we can verify your identity. In some circumstances we may request additional forms of ID from you, such as your passport or driving license.
You can exercise your statutory rights at any time by writing at the contacts above or using the link Contact Us About Your Data.