Nissan – ProRex Portal Privacy Policy

Nissan International SA and the Nissan entity (list of Nissan entities in Appendix 1) in contractual relationship with the supplier ("we" or "us"), as independent data controllers, take data protection very seriously and respect the privacy of visitors to the ProRex website. We are committed to protecting and respecting your privacy, in accordance with the General Data Protection Regulation ("GDPR"), directive 2002/58 and any national law in relation to data protection within the EU (“Privacy Laws”).

This policy (together with our terms of use https://nissan-prorex.com/ProRex/TermsOfUse.aspx and any other documents referred to on it) sets out the basis on which we will handle and process any Personal Data we collect from you, or that you provide to us. Please take your time to read this privacy policy carefully so that you understand how we use and treat your Personal Data.

For the purpose of the General Data Protection Regulation, the Controller are Nissan International SA and, when applicable, the Nissan entity (list of Nissan entities in Appendix 1) in contractual relationship with the supplier, acting both as independent data controllers.

If you have any questions regarding this policy or how we process Personal Data gathered through this website please contact us atHelpdesk-Functional-Prorex-Europe@nissan-europe.com.

Our Data Protection Officer can be contacted at dpo@nissan-europe.com.

We will comply with the data protection principles in the Privacy Laws, which say that Personal Data must be:

• Processed fairly, lawfully and in a transparent manner.
• Obtained for specified, explicit and lawful purposes and processed compatibly with those purposes.
• Adequate, relevant and not excessive for the purpose(s) for which it is processed.
• Accurate and up-to-date.
• Kept in a form which enables identification of individuals no longer than necessary for the purposes for which it is processed.
• Processed subject to appropriate security measures.

"Personal Data" is information that can be used to identify you directly or indirectly. It can include your name, date of birth, email address, postal address, telephone number, location and other personal information.

"Processing" means doing anything with the data, such as accessing, disclosing erasing, transmitting, or using the data in any way.

"Special category of personal data" includes Personal Data, revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership; data concerning health or sex life and sexual orientation; genetic data or biometric data. Criminal offences data is not included within the definition of special category of personal data, but we will process criminal data using the same safeguards we operate in respect of special category personal data.

We may collect and process the following data about you:

• · Information you give us. You may give us information about you by completing forms on our ProRex site (the site) or by contacting us at Helpdesk-Functional-Prorex-Europe@nissan-europe.com. This includes information you provide when you register to use our site and when you report a problem with our site. The information you give us may include your name, address, e-mail address, phone number, bank account and VAT number.].
• · Information we collect about you. With regard to each of your visits to our site we may automatically collect the following information:
  • technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your log-in information, browser used, time zone setting, browser plug-in types and versions, operating system and platform;
  • information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for; page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), and methods used to browse away from the page and any phone number used to call our [supplier support number]; and
  • transactional information including information in respect of the products or services you provide to us and our communications with you
• · Information we receive from other sources. We may receive information about you if you use any of the other websites we operate. We are also working closely with third parties (including other companies within the Renault-Nissan Alliance, business partners, sub-contractors in technical, payment and delivery services, analytics providers, search information providers) and may receive information about you from them. In some cases, we may receive information which comes from publicly accessible sources. We will inform you if and when we receive such information.

We will usually only process your Personal Data on the basis of the performance of a contract, our legitimate interest (or the legitimate interest of third parties) and to comply with our legal obligations. We do not sell or rent personal information which you provide to us through the ProRex portal.

We consider that in some circumstances the processing of your Personal Data is necessary for our legitimate interests. These include the efficient management of our systems to ensure the proper payment of sums due by or to us under enforceable contracts, updating our suppliers details to create a better understanding of our commercial relationships, transmission of personal data with our group of companies for internal administration purposes and processing for the purposes of ensuring network and information security.

• · Information you give us. We will use this information:
  • · to carry out our obligations arising from any contracts which we entered into with you;
  • · to communicate with you;
  • · to maintain your ProRex Portal accounts and records;
  • · to provide to group companies which are involved in any transaction you make using the ProRex Portal;
  • · to notify you about changes to our purchasing requirements; and
  • · to ensure that content from our site is presented in the most effective manner for you and for your computer.
• · Information we collect about you. We will use this information:
  • to administer our site and for internal operations, including troubleshooting, data analysis, testing, research, statistical and survey purposes;
  • to improve our site to ensure that content is presented in the most effective manner for you and for your computer;
  • to allow you to participate in interactive features of our service, when you choose to do so;
  • as part of our efforts to keep our site safe and secure; and
  • to measure or understand the effectiveness of the site.
• · Information we receive from other sources. We may combine this information with information you give to us and information we collect about you. We may use this information and the combined information for the purposes set out above (depending on the types of information we receive).

Your Personal Data will only be processed to the extent that it is necessary for the specific purposes notified to you.

We will keep the Personal Data we store about you accurate and up to date. We will take every reasonable step to erase or rectify inaccurate data without delay. Please notify us if your personal details change or if you become aware of any inaccuracies in the Personal Data we hold about you. We will contact you from time to time to check your details are still up-to-date.[In any event, you can update your details yourself on the site.

The period for which we will store Personal Data is based on our need to fulfil our contractual obligations, comply with our legal obligations and legitimate operational needs, and when necessary resolve disputes. We will not keep your Personal Data for longer than is necessary for the purpose(s) for which we process it. This means that data will be destroyed or erased from our systems when it is no longer required.

We do not intend to process your Personal Data for marketing purposes. Our site may, from time to time, contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.

You have the right to:

• · Request access to any Personal Data we hold about you.
• · Have any Personal Data which we hold about you which is inaccurate rectified.
• · Have incomplete Personal Data completed.
• · Have Personal Data erased, in certain circumstances.
• · Have the processing of your Personal Data restricted, in certain circumstances.
• · In certain circumstances, be provided with the Personal Data that you have supplied to us, in a portable format that can be transmitted to another data controller without hindrance.
• · Object to certain types of processing, including automated processing (which includes profiling) and processing for direct-marketing purposes.
• · In certain circumstances, the right not to be subject to a decision that is based solely on automated processing which produces a legal effect or which has a similar significant effect for you.

If you wish to exercise any of the rights set out above, you must make the request in writing to the following email addressHelpdesk-Functional-Prorex-Europe@nissan-europe.com.

You have the right to object, at any time, to the processing of your Personal Data which:

• · is necessary for the performance or a task carried out in the public interest or in the exercise of official authority vested in the controller; or
• · which is necessary for the purposes of the legitimate interests pursued by us or a third party.

If you object to the processing set out above, we must no longer process that Personal Data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or that the processing is required for the establishment, exercise or defence of legal claims. If you object to our processing of any of your Personal Data, please contact us on the following email address Helpdesk-Functional-Prorex-Europe@nissan-europe.com.

We may share your personal information with any member of our group, which means our subsidiaries, our ultimate holding company, NISSAN Motor Co., Ltd a corporation situated, organized and existing under the laws of Japan and its subsidiaries. Where we do disclose your Personal Data to a third party, we will have regard to the data protection principles.

We rely on third parties for important parts of our operations. We may share your information with these third parties including:

• · Business partners, suppliers and sub-contractors for the performance of any contract we enter into with you.
• · Analytics, software and search engine providers that assist us in the improvement and optimisation of our site.

We may disclose your personal information to third parties:

• · In the event that we sell or buy any business or assets, in which case we may disclose your Personal Data to the prospective seller or buyer of such business or assets.
• · If we or substantially all of our assets are acquired by a third party, in which case Personal Data held by us about our suppliers will be one of the transferred assets.
• · If we are under a duty to disclose or share your Personal Data in order to comply with any legal obligation, or in order to enforce or apply our terms of use and other agreements; or to protect the rights, property, or safety of Nissan, our customers, or others. This includes exchanging information with other companies and organisations for the purposes of fraud protection and credit risk reduction.]

If your Personal Data is provided to any third parties, you are entitled to request details of the recipients of your Personal Data or the categories of recipients of your Personal Data.

We use reasonable and up to date security methods to keep your data secure and to prevent unauthorised or unlawful access to your information. All information you provide to us is stored on our secure servers. Where you need to establish an account with us you will be given a password to access that account. You are responsible for keeping this password secure. Do not share your password with anyone. Remember to sign out of your account when you finish a session.

We will not transfer your Personal Data outside the EEA unless such transfer is compliant with the GDPR. This means that we cannot transfer any of your Personal Data outside the EEA unless:

• · The EU Commission has decided that another country or international organisation ensures an adequate level of protection for your Personal Data; or
• · The transfer of your Personal Data is subject to appropriate safeguards, which may include:
  • Binding corporate rules; or
  • Standard data protection clauses adopted by the EU Commission.
• · One of the derogations in the GDPR applies (including if you explicitly consent to the proposed transfer).

We currently transfer Personal Data outside the EEA:

• · [E.g. to carry out penetration testing of our systems and security processes]
• · [as some Personal Data is stored on cloud systems, the servers for which are based outside the EEA];
• · [For the provision of support services].
• · For reporting to our holding company, NISSAN Motor Co., Ltd

The Personal Data we transfer may also be processed by staff operating outside the EEA who work for us or for one of our suppliers. Such staff may be engaged in, among other things, the processing of any payment you make and the provision of support services.

If you have any issues with our processing of your Personal Data and would like to make a complaint, you may contact the relevant data protection authority.

Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail. Please check back frequently to see any updates or changes to our privacy policy.