Your privacy and trust are important to us
This Privacy Notice explains how Hitachi Energy Ltd and the group of companies belonging to Hitachi Energy Ltd (referred to as ’Hitachi Energy’s, ‘we’, ‘us’, or ‘ our’) collect, use and share your personal data
Who we are and how to contact us
Hitachi Energy Ltd is a company incorporated under the laws of Switzerland, with registered office at Brown-Boveri-Strasse 5, 8050 Zurich, Switzerland, registered with the Commercial Registry of the Canton of Zurich under registration number CHE-339.599.331.
In addition, the group of companies belonging to Hitachi Energy Ltd is made up of numerous legal entities with offices located across the globe.
If you have any questions, concerns, comments or complaints regarding our privacy notice, please contact our Data Protection Officer and the DPO’s team via privacy@hitachienergy.com. If you would like to exercise any of your rights under applicable data protection law, please complete the relevant form here.
Your rights
Under certain circumstances, you have rights under data protection and/or consumers laws in relation to your personal data. It’s our policy to respect your rights and we will act promptly and in accordance with applicable legislation. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data such data is needed for the establishment, exercise or defence of legal claims. Details of your rights are set out below:
What personal data we process, why and the legal basis we rely on to process your personal data
Hitachi Energy collects and processes different types of personal data about employees, such as:
· Personal details and identification data such as name, personal and business address, personal and business telephone number, personal and business email address or any other contact details, date and country of birth.
· Personal data related to family and social circumstances such as gender, age, marital and family status (including also the name and contact details of the next of kin).
· Employment related personal data such as employee number, signature, employment status, social security and tax numbers, insurance number, country of residence, nationality, photo, emergency contacts and passport information, work and residence permit, immigration status and travel visa information.
· Job information and work metrics such as position, title, employment contract, payroll ID, line manager, job band, employment status,
· Compensation, allowances, benefits and expense related information such as salary data, payroll data, pension plan number and contributions, non-salary benefits, bonus, compensation, share options, dependents, beneficiaries or health benefit nomination, bank statements, expense claims and receipts, bank account details, credit card data, phone expenses and insurance data.
· Financial and other details such as account information, credit checks, payment details and transactions, investigation information and disciplinary history.
In some cases, we may process special categories of data:
· Religious and political beliefs
· Health data
· Sexual orientation
We process personal data about our employees for the following purposes:
· human resources management including organization and personal administration
· conflict of interest and security obligations and prevention, governance, risk and compliance, including compliance with laws, law enforcement, court and regulatory bodies’ requirements customs and global trade compliance, detection, investigation and remediation of crime and fraud or prohibited activities or to otherwise protect legal rights and to establish, exercise or defend legal claims.
Certain personal data collected from you relates to your next of kin and emergency contacts. In these cases, you are requested to inform such persons about this Notice.
Legal grounds for processing personal data of employees
· We rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests may include:
o monitoring, investigating and ensuring compliance with legal, regulatory, standard and Hitachi Energy internal requirements and policies;
o prevention of fraud and criminal activity including investigations of such activity, misuse of Hitachi Energy assets, products and services, and
o transmitting personal data within the Hitachi Energy group for internal administrative purposes as necessary, for example to provide centralized services.
· In some cases, we process your personal data on the basis of statutory requirements, for example, on the basis of labor and social security law, allowances, tax or reporting obligations, cooperation obligations with authorities or statutory retention periods in order to carry out our contractual responsibilities as an employer;
With regard to special categories of personal data we will only process such data in accordance with applicable law and:
· with your explicit consent for specific activities in accordance with applicable law;
· when necessary for exercising rights based on employment, social security or social protection law or as authorized by collective agreement, or for preventive and occupational medicine or and evaluation of working abilities; or
· where necessary for establishment, exercise and defense of legal claims.
· With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.
With whom do we share your personal data
We take care to allow your personal data to be accessed only by those who really need to in order to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. We disclose your personal data to the following categories of recipients:
How do we protect your personal data
We use appropriate technical and organizational measures to protect the personal data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.
How long do we keep your personal data
We will retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
If you have questions about, or need further information concerning our data retention periods, please send an email to privacy@hitachienergy.com.
Countries where we process your personal data and International data transfers
Our Hitachi Energy entities and third-party service providers operate in Switzerland, the EEA, the UK and all countries around the world. This means that when we collect your personal data it will be processed in countries that may have data protection laws that are different to the laws of your country. An overview of the Hitachi Energy locations around the world is available here.
We have taken appropriate safeguards to require that the personal data we process will remain protected in accordance with this Privacy Notice when transferred internationally, including when processed internationally by our third-party support providers and partners.
The safeguards we have taken include implementing the European Commission's Standard Contractual Clauses for transfers of personal information to our Hitachi Energy entities that are established outside the EEA. All Hitachi Energy entities are required to process personal data in accordance with local data protection legislation, as well as the GDPR principles and the OECD privacy guidelines.
We have also implemented similar appropriate safeguards with our third party support providers and partners. The transfer of personal data to third party service providers outside of the EEA takes place on the basis of data protection adequacy decisions by the European Commission (or by the UK Information Commissioner, where applicable) or via the implementation of EU data protection standard contractual clauses. Our data processing agreements are based on the GDPR principles (where applicable) and the OECD privacy guidelines.
For Japanese data subjects, information about the personal information protection system of various foreign countries where your data could be processed is available here. An overview of data protection and privacy legislation worldwide is available here.
If you have questions about, or need further information concerning, international data transfers, please send an email to privacy@hitachienergy.com
Updates to this Privacy Notice
We will update this Privacy Notice from time to time in response to legal, technical and/or business developments. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the end of this Privacy Notice.
Last update: 12 December 2022