1 Your privacy and trust are important to us
This Privacy Notice explains how Hitachi Energy Ltd and the group of companies belonging to Hitachi Energy Ltd (referred to as ’Hitachi Energy’, ‘we’, ‘us’, or ‘our’) collect, use and share your personal data when you use our mobile products.
This privacy notice only applies to the enterprise work and asset management mobile applications. If you wish to know how Hitachi Energy uses personal data in other situations, our global privacy notice is available at Privacy Notices | Hitachi Energy.
2 Who we are and how to contact us
Hitachi Energy Ltd is a company incorporated under the laws of Switzerland, with registered office at Brown-Boveri-Strasse 5, 8050 Zurich, Switzerland, registered with the Commercial Registry of the Canton of Zurich under registration number CHE-339.599.331.
In addition, the group of companies belonging to Hitachi Energy Ltd is made up of numerous legal entities with offices located across the globe.
If you have any questions, concerns, comments or complaints regarding our privacy notice, please contact our Data Protection Officer and the DPO’s team via [email protected]. If you would like to exercise any of your rights under applicable data protection law, please complete the relevant form here.
3 Your rights
Under certain circumstances, you have rights under data protection and/or consumers laws in relation to your personal data. It’s our policy to respect your rights and we will act promptly and in accordance with applicable legislation. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data such data is needed for the establishment, exercise or defense of legal claims. Details of your rights are set out below:
3.1 Access, rectification or deletion of personal data
If you wish to access, correct, port, update or request deletion of your personal data, you can do so at any time by completing the relevant form here.
3.2 Object to processing of personal data
You can object to the processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. You can exercise these rights by submitting the relevant form here.
3.3 Withdrawal of consent
If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.
3.4 Right to submit a complaint to a data protection authority
You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Union and the UK are available here. Contact details of the Swiss data protection authority are available here.)
3.5 Opt-out from sale of information
For consumers who reside in the State of California: you have the right to opt-out of the disclosure of your personal information for monetary or other valuable consideration.
4 What personal data do we process?
This section explains the types of personal data we process, the reasons we process it and the legal basis for the processing.
Our mobile applications may collect:
- Basic Identification Information:
- Name (First and Last)
- Username
- Employee ID or Worker Number
- Contact Information:
- Email Address
- Phone Number (Mobile and/or Work)
- Work Address
- Home Address (if relevant)
- Location Data:
- See section 4.1 below for more detail
- Work-Related Information:
- Job Title/Position
- Work History (Previous tasks, completed jobs)
- Skills and Certifications
- Work Schedules
- Authentication Data:
- Login Credentials (Usernames, passwords)
- Two-Factor Authentication Data (e.g., phone number or email for codes)
- Device Information:
- Device Identifiers (e.g., mobile device ID, IMEI)
- IP Address
- Communications Data:
- Chat or Messaging Logs (Internal communications, messages between users)
- Emails (Sent through the platform as attachments)
- Usage Data:
- App Interaction Logs (e.g., features used)
- Time Spent on Tasks
- Financial Information:
- Billing Information (e.g., invoice ID, amounts, etc.)
4.1 Location Data
What location data do we collect?
Our mobile applications may collect precise location data – latitude and longitude.
- Real-Time Location Data: Device’s geographic location, which may include GPS coordinates, Wi-Fi signals, or cell tower triangulation.
- Historical Location Data: Information about location history or a location address while using the app.
- Routing Location Data: Information about origin and destination locations and associated routes, times, and distances between points.
How We Collect Location Data?
Users must grant permission explicitly to location data collection when the app runs the first time. The app will collect location data at specific time intervals or distance intervals depending on how the customer (the employer of the mobile app user) has configured the app.
Purpose of Collecting Location Data?
Location data is used to:
- Provide the app user with directions to a work site.
- Provide directions and routing from one point to another.
- Associate latitude and longitude with an associated address.
- Identify potential work or work sites in the vicinity of the user.
- To allow the customer (the app user’s employer) to monitor the location of the app user.
- To locate the app user in the event of an emergency.
- Analyze usage patterns and improve the app’s functionality and user experience.
4.2 Legal basis for processing your personal data
We process your personal data including your location data based on our legitimate interest. Hitachi Energy will have a contract with the customer (the employer of the mobile app user); in order to provide the contracted services, Hitachi Energy must process location data.
4.3 Data retention
Hitachi Energy only retains the location data until it can be transmitted to the customer and stored in the customers’ own databases.
Other personal data is stored in the mobile application for as long as you continue to use the app.
5 With whom do we share your personal data
We take care to allow your personal data to be accessed only by those who really need to in order to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. We disclose your personal data to the following categories of recipients:
5.1 Companies belonging to Hitachi Energy Ltd
We share your personal data with other Hitachi Energy Ltd group companies. An overview of the Hitachi Energy Ltd group entities is available here.
5.2 Hitachi
Hitachi Energy Ltd is an entity within the Hitachi group of companies. We share personal data with other Hitachi entities. An overview of the Hitachi group entities is available here.
5.3 Support providers
We transfer or disclose the personal data we collect to external support providers (and their subsidiaries and affiliates) who assist us in operating the mobile app. It is our policy to only use third-party support providers that are bound to maintain appropriate levels of data protection, security and confidentiality, and that comply with any applicable legal requirements for transferring personal data outside the jurisdiction in which it was originally collected.
5.4 Acquirer or successor of Hitachi Energy
If we go through a corporate sale, merger, reorganization, dissolution or similar event, personal data we gather from you will be transferred in connection with such an event. Any acquirer or successor of Hitachi Energy may continue to use the data as described in this notice provided that the acquirer or successor is bound by appropriate agreements or obligations and may only use or disclose your personal data in a manner consistent with the use and disclosure provisions of this notice, or unless you consent otherwise.
5.5 CCPA Sale of Information
We have not disclosed to other businesses or third parties any personal information for monetary or other valuable consideration within the twelve months preceding the effective date of this Privacy Notice. We have disclosed personal information to our support providers for business purposes in the prior twelve months. The information we have disclosed for business purposes may include some or all of the categories listed above.
For more information about the categories of entities to which we have disclosed this information and the purposes for which we have disclosed the information, please see “With whom we share your personal data”.
While Hitachi Energy does not sell personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the California Consumer Privacy Act (Cal. Civ. Code 1798.140(t)(1)). We support the CCPA and wish to provide you with control over how your personal information is collected and shared. You have the right to direct Hitachi Energy to not sell your personal information. If you wish to opt-out of sale of your information, please submit our CCPA request form here or contact us via +1 (800) 290 5290.
5.6 Legally compelled disclosure
There are circumstances under which Hitachi Energy is legally compelled to disclose your personal data. These circumstances include, among others, situations where disclosure is required by law applicable to Hitachi Energy, or necessary to comply with an order of a court or governmental agency, export control, or necessary for matters of safety and security. In such cases, Hitachi Energy will only provide the minimum amount of personal data permissible when responding to a request for disclosure.
6 How do we protect your personal data
We use appropriate technical and organizational measures to protect the personal data that we collect and process about you. The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.
7 How long do we keep your personal data
We will retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements).
When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.
If you have questions about, or need further information concerning, our data retention periods, please send an email to [email protected].
8 Countries where we process your personal data and international data transfers
Our Hitachi Energy entities and third-party service providers operate in Switzerland, the EEA, the UK and all countries around the world. This means that when we collect your personal data it will be processed in countries that may have data protection laws that are different to the laws of your country. An overview of the Hitachi Energy locations around the world is available here.
We have taken appropriate safeguards to require that the personal data we process will remain protected in accordance with this Privacy Notice when transferred internationally, including when processed internationally by our third-party support providers and partners.
The safeguards we have taken include implementing the European Commission's Standard Contractual Clauses for transfers of personal information to our Hitachi Energy entities that are established outside the EEA. All Hitachi Energy entities are required to process personal data in accordance with local data protection legislation, as well as the GDPR principles and the OECD privacy guidelines.
We have also implemented similar appropriate safeguards with our third party support providers and partners. The transfer of personal data to third party service providers outside of the EEA takes place on the basis of data protection adequacy decisions by the European Commission (or by the UK Information Commissioner, where applicable) or via the implementation of EU data protection standard contractual clauses. Our data processing agreements are based on the GDPR principles (where applicable) and the OECD privacy guidelines.
For Japanese data subjects, information about the personal information protection system of various foreign countries where your data could be processed is available here. An overview of data protection and privacy legislation worldwide is available here.
If you have questions about, or need further information concerning, international data transfers, please send an email to [email protected]
9 Updates to this Privacy Notice
We will update this Privacy Notice from time to time in response to legal, technical and/or business developments. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.
You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the end of this Privacy Notice.
Last update: August 26 2024