Privacy Policy

FUJI OIL HOLDINGS INC.
Mikio Sakai, President & CEO

FUJI OIL HOLDINGS INC. (hereinafter referred to as the "Company") processes personal information of customers and other business-related persons including directors, officers, and employees, shareholders, applicants for employment, and retirees of the Company (hereinafter referred to as "Customers" or "the Individual" depending on who is the subject of the personal information) in compliance with applicable national privacy laws and regulations, including the General Data Protection Regulation (GDPR)., as follows.

  • The details of the following items are set forth in Attachment 1, Attachment 2, Attachment 3, and Attachment 4. Please note that Section 1. (3) and 1. (5) are limited to cases where the GDPR is applicable.
    • Categories of personal information subject to processing/Types of sensitive information
    • Purpose of processing
    • Legal basis for processing
    • Retention period of personal information
    • Sources of Personal Information
    • Sharing and Disclosure of Personal Information
    • Cross-border transfer of personal information
  • Joint Use of Personal Information under Japanese Law

    Based on the joint use under the Act on the Protection of Personal Information of Japan, the Company will use personal information jointly with specific parties as described below. However, if it is necessary to obtain the consent of the Customers or the Individual under applicable personal information protection regulations other than the Act on the Protection of Personal Information of Japan, the Company will obtain the consent of the Customers or the Individual.

    • Items of Personal Information to be shared
      Items described in the Section 1. (1)
    • Purpose of use of personal information to be shared
      Items described in the Section 1. (2)
    • Scope of parties for joint use
      Group companies (click here *Only for group companies in Japan)
    • Name, etc. of the person responsible for joint use management
      Company (for address and name of representative, please click here)
  • Measures for Security Management of Personal Information

    The Company will take necessary and appropriate measures to prevent leakage, loss, or damage of the personal information the Company handles and to safely manage the personal information. In addition, when handling personal information in a foreign country, the Company will take necessary and appropriate measures for the security management of personal information, based on the understanding of the external environment, including systems for the protection of personal information in that foreign country. For more information on the measures for the security management of personal information taken by the Company, please contact the Company at the e-mail address specified in the Section 6.

  • Cookies and similar technologies

    The Company website uses cookies and other similar technologies for tracking or analysis (hereinafter collectively referred to as "cookies") in order to provide the Customers or the Individual with more appropriate services. In such cases, when the Company collects such information, the Company will treat it as personal information.

    • ① Cookie Overview

      A cookie is a small file containing random characters that is exchanged between the web server and the Internet browser of the Customers or the Individual when the Customers or the Individual visit a website and stored on their terminal. By using these cookies, the Company may obtain non-personally identifiable attribute information, such as the browsing history, service usage history, and location information of the Customers or the Individual.

      The Customers or the Individual may set their browser to indicate in advance that a site uses cookies, disable cookies, or delete cookies that have been saved. Please note that if the Customers or the Individual reject or delete cookies, the available functions of the website may be limited.

    • ② About Google Analytics

      The Company uses Google Analytics provided by Google. The Company may receive the results of collection and analysis of the browsing history of the Customers or the Individual based on cookies set by the Company or Google in order to use them for understanding the usage of the services of the Company. Please visit their website for more information about
      "How the Customers or the Individual can control the information collected by Google on these sites and apps": https://policies.google.com/technologies/partner-sites?hl=en

  • Rights of Customers [the Individual]

    • The Company respects the rights that Customers [the Individual] have under the personal information protection regulations applicable to Customers [the Individual]. In accordance with the Act on the Protection of Personal Information of Japan, Customers [the Individual] may request disclosure of personal information, correction, addition, deletion of content, suspension of use, elimination, suspension of provision to third parties, and disclosure of records of provision to third parties. The Company will respond to requests for disclosure, etc. (meaning requests for notification of purpose of use, disclosure of personal information or records of provision to a third party, correction, addition, deletion, suspension of use, or suspension of provision to a third party) as follows.

      • ① Notification of purpose of use or disclosure of personal information or records of provision to third parties

        Customers may request the Company to notify them of the purpose of use or disclosure of personal information or records of provision to third parties in accordance with the procedures set forth by the Company. However, the Company may not disclose the information in any of the following cases. The Company may charge Customers a fee determined by the Company for the disclosure request.

        • When disclosure may harm the life, body, property, or other rights or interests of the person in question or a third party
        • If there is a risk that disclosure may cause significant hindrance to the proper conduct of the Company’s business
        • Cases in which disclosure would violate laws and regulations
        • When the Company is not able to confirm that the request for disclosure is made by the person in question

      • ② Corrections, additions and deletions

        Customers may request correction, addition, or deletion of their personal information in accordance with the procedures set forth by the Company. In such cases, the Company will investigate without delay to the extent necessary to achieve the purpose of use, and correct, add, or delete the relevant personal information based on the results of the investigation.

      • ③ Suspension of use, elimination or suspension of provision to third parties

        Customers may request the Company to stop using, erase, or stop providing personal information to third parties in accordance with the procedures set forth by the Company.

      • ④ Procedure

        Customers are requested to contact the Company at the e-mail address specified in the Section 6.

    • If the GDPR applies to the Customers [the Individual], the Customers [the Individual] have the following rights. If the Customers [the Individual] wish to exercise any of their rights, please contact the Company at the e-mail address specified in the Section 6 of this Privacy Policy.

      • ① Obtaining information about data processing: The Individual has the right to obtain from the Company all necessary information about data processing activities that concern the Individual (Articles 13 and 14, GDPR).

      • ② Access to personal information: The Individual has the right to obtain confirmation from the Company as to whether or not personal information relating to the Individual has been processed and, if so, the Individual has the right to access the personal information and certain related information (Article 15, GDPR).

      • ③ Correction or deletion of personal information: The Individual has the right to have inaccurate personal information relating to the Individual corrected by the Company without undue delay and to have incomplete personal data made complete by the Company (Article 16, GDPR). the Individual also has the right to have personal information relating to the Individual erased by the Company without undue delay if certain conditions are met (Article 17, GDPR).

      • ④ Restrictions on the processing of personal information: If certain conditions are met, the Individual has the right to have the Company restrict the processing of personal information relating to the Individual (Article 18, GDPR).

      • ⑤ Object to the processing of personal information: If certain conditions are met, the Individual has the right to object to the processing of personal information relating to the Individual (Article 21, paragraph 1 of the GDPR).

      • ⑥ Objections to direct marketing: The Individual has the right to object at any time to the processing of the personal information of the Individual for direct marketing (Article 21(2), GDPR).

      • ⑦ Data portability of personal information: If certain conditions are met, the Individual has the right to receive personal information relating to himself/herself in a structured, commonly used and machine-readable format and to transfer such personal information to another party without interference from the Company (Article 20, GDPR).

      • ⑧ Right to withdraw consent: The Individual has the right to withdraw his/her consent at any time by the means separately specified when the Company obtained their consent. However, the withdrawal of the Individual’s consent will not affect the legality of the processing carried out based on the Individual’s consent made prior to the withdrawal. (Article 7(3), GDPR)

      • ⑨ Not being subject to automated decision-making: if certain conditions are met, the Individual has the right not to be subject to automated (non-human-involved) decision-making that has legal or material effects on the Individual (Article 22, GDPR).

      • ⑩ The Individual may file a complaint about the processing of his/her personal information by the Company with the data protection supervisory authority of the Member State in which the Individual resides, works or where the alleged breach occurred (Article 77, GDPR).

  • Contact for Inquiries

    If the Individual has any comments, questions, complaints, or other inquiries regarding the handling of personalinformation (including whether or not the Individual has any objections to the decisions of the Company to the supervisory authority), please contact at this e-mail address (holdingslegal@so.fujioil.co.jp).

  • Changes of this Privacy Policy

    If the Company decides to change this Privacy Policy, the Company may do so by posting such changes on the Company's website, sending an e-mail to the Customers [the Individual], or by any other method the Company deems appropriate (in accordance with applicable laws and regulations, if any). The Company will also follow any other procedures required by applicable privacy regulations, if any.
    Customers [the Individual] are encouraged to visit this page periodically to check for updates. Customers [the Individual] can find out when this Privacy Policy was last updated by checking the "Last Updated" date.

This privacy policy is effective on October 1, 2023