Privacy policy
JCR Pharmaceuticals Co., Ltd. and its subsidiaries and associates (hereinafter collectively, the “JCR Group” or “we”) recognize the importance of protecting personal data for our development as a corporate group trusted by society. We maintain compliance with applicable data protection and privacy laws and other related laws and regulations in relevant countries (hereinafter collectively, the “Applicable Laws”) and conduct initiatives as follows to appropriately protect personal data.
Last updated:[11th Oct. 2022]
Privacy policy
The JCR Group collects personal data using appropriate, lawful means, and provides information regarding the purpose for which they will be processed via notification or by posting this information on its corporate website. (Please see the section “Purpose of processing personal data.”)
Personal data collected by the JCR Group are not shared with third parties except when such sharing meets the conditions under the Applicable Laws. (Please see the section “Parties to which we share personal data.”)
The JCR Group appoints a Chief Privacy Officer at each JCR group company and assigns personal data managers in each of its divisions for providing appropriate supervision and training for employees who process personal data to ensure that personal data are thoroughly protected.
The JCR Group continuously reviews the Privacy Policy and works to make improvements to maintain compliance with the Applicable Laws and other related standards to enable its development as a corporate group trusted by society.
Privacy Notice for Personal Data
Last updated:[7th October 2022]
The JCR Group collects the following personal data.
1. Personal data of physicians, pharmacists, nurses, pharmacy personnel and other healthcare professionals (hereinafter, collectively “Healthcare Professionals”), and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Personal identification information issued by government authorities: National identification number, driver license number, passport number, taxpayer number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Information relating to the use of our products: History of purchase and use of our products, records of interaction with us and other relevant information of the data subject
Asset information: Donations or rewards paid from the JCR Group to the data subject, the data subject’s ownership of a JCR group company’s stock or intellectual property rights and other relevant information
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
Occupational information: Academic and career backgrounds, qualifications, professional experience, and officer experience at the JCR Group and other relevant information of the data subject
Familial information: Names, birth dates, contact information, asset information and other relevant information of the data subject’s family members
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
2. Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for pharmaceuticals, medical devices, regenerative medicine and other products, reagents, and other products handled by the JCR Group (hereinafter, “Pharmaceuticals”) and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
Occupational information: Academic and career backgrounds, qualifications and professional experience and other relevant information of the data subject
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
3. Personal data related to patients and members of the general public
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Information relating to the use of our products: History of purchase and use of our products, records of interaction with us and other relevant information of the data subject
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
Familial information: Names, birth dates, contact information and other information of the data subject’s family members
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
Information relating to personal preferences and interests: Information relating to personal preferences and interests of the data subject based on profiling
4. Personal data related to media, securities analysts, investors and other related parties
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
5. Personal data of our shareholders (including past shareholders)
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Asset information: The data subject’s ownership of a JCR group company’s stock or intellectual property rights and other relevant information
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
6. Personal data related to job and internship applicants
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
Occupational information: Academic and career backgrounds, qualifications and professional experience and other relevant information of the data subject
Familial information: Names, birth dates, contact information and other relevant information of the data subject’s family members
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
7. Personal data of our employees, etc. (current and former) and their families
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Personal identification information issued by government authorities: National identification number, driver license number, passport number, taxpayer number and other relevant information of the data subject
Information relating to financial institutions: Bank account numbers, credit card numbers, debit card numbers and other relevant information of the data subject
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
Occupational information: Academic and career backgrounds, qualifications, professional experience and other relevant information of the data subject
Familial information: Names, birth dates, contact information and other relevant information of the data subject’s family members
Information relating to network activities including internet activities: IP address, user account information, web browser information, time zone information, browsing history and other relevant information pertaining to the data subject
8. Personal data related to people using PR-related information desks and other contact points of the JCR Group
Information identifying the data subject and his/her contact information: Name, gender, age, date of birth, address, email address, telephone number and other relevant information of the data subject
Audiovisuals, etc.: Portraits, videos, voice recording and other relevant information of the data subject
We collect personal data through the following methods:
Directly from the data subject
The JCR Group collects personal data directly from data subjects who contact and communicate with us, e.g., making inquiries, using our services, browsing our websites, executing contracts, applying for job placements, or reporting adverse events.
Data subjects who are asked to provide their personal data to the JCR Group may choose not to do so. However, this could result in limiting our relationship with said data subject. For instance, we might not be able to provide our services to these data subjects.
Indirectly from sources other than the data subject
We might collect personal data of a data subject from indirect sources other than the data subject, such as:
Publicly available information sources
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Contract research organizations (CROs) for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors, recruitment agencies, etc.
The JCR Group processes personal data for our research, development, manufacturing and sale of Pharmaceuticals and other business activities for the following purposes.
1. Personal data of Healthcare Professionals, and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
Provision, collection and communication of information related to the appropriate use of Pharmaceuticals
Provision, collection and communication of information on the quality, safety and effectiveness of Pharmaceuticals
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Implementation and support for studies and research in medicine and pharmacology and for academic activities such as research symposiums and lectures
Provision, collection, etc. of medical information and academic information
Requests and implementation of clinical trials, post-marketing surveillance, etc. and implementation and assistance for studies and research and provision of related information
Collection and provision of information related to usage conditions, usage status, usage needs, etc. of Pharmaceuticals, and study, consideration and accommodation of their usage conditions, usage status, usage needs, etc.
Identification of delivery destinations for Pharmaceuticals and maintenance of a communication network
Collection and provision of information related to recalls of Pharmaceuticals and other information on adverse reactions, and response to such occurrences
Requests and management, including lectures, instruction and consulting
Applications, notifications and reports to government agencies, public bodies, participating groups, etc.
Provision of Pharmaceuticals
Confirmation of delivery destinations for biological products and communication and provision of such delivery information
Collection and management of information related to payment processing and credit management
Information provision and disclosure to ensure transparency related to funds and other benefits
Inquiry reception and complaint processing related to Pharmaceuticals
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Disclosure and provision related to laws, regulations, and other standards
2. Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for Pharmaceuticals and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
Contacts, consultations, cooperation, confirmation, requests, and instructions related to business administration
Reception of goods, services, etc. based on the transactions and their payment
Negotiations, contacts, consultation, considerations, order reception and issue, settlement, management, and responses related to transactions
Provision and collection of information related to contractual relationships and credit management
Building of new transactional relationships
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Collection and provision of information related to the distribution, supply, use, etc. of Pharmaceuticals
Joint action at the time of occurrence for recalls, adverse reactions and other incidents involving Pharmaceuticals
Provision, collection, consideration and communication of information related to the quality, safety and effectiveness of Pharmaceuticals
Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
Market surveys and monitoring related to Pharmaceuticals
Joint actions for efficient promotion of Pharmaceuticals
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Disclosure and provision related to laws, regulations, and other standards
3. Personal data related to patients and members of the general public
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Surveys and consideration of the content of inquiries, consultations and contacts
Support for patient groups
Information on medical-related forums, etc. for the general public, including patients
Reporting and contact to product manufacturers, sellers, Healthcare Professionals, etc.
Implementation of clinical trials, post-marketing surveillance, etc. and implementation of related research and studies
Collection of Pharmaceuticals, collection and provision of drug recall and adverse reaction information, and responses to such events
Compensation for health hazards or adverse reactions to drugs
Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
Proposal, implementation and evaluation of disease awareness-raising activities
Market surveys and monitoring related to Pharmaceuticals
Building access management for tours and visits to our facilities
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
4. Personal data related to media, securities analysts, investors and other related parties
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Sending of corporate information and provision of event information
Collection and provision of information for publicity and IR activities
Applications, notifications and reporting to government agencies, public bodies, participating groups, etc.
Monitoring and analysis of market needs and related planning
Consideration, survey and response to consultations, inquiries, contacts, etc.
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
The data subject has consented to the processing of his/her personal data
Confirmation of access to our shareholders and investors pages on our corporate websites
5. Personal data of our shareholders (including past shareholders)
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Sending of business reports and other materials and related communications
Implementation of various policies for facilitating our shareholder relations
Shareholder management within the scope necessary for executing the above
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Execution of obligations stipulated in the Applicable Laws and response to the exercise of rights
Notification and reporting based on the Applicable Laws
6. Personal data related to job and internship applicants
Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
Hiring considerations and decisions
Communication and information provision related to hiring
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Implementation of internships and reference for planning and administration in connection with future hiring activities
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Notification and reporting based on the Applicable Laws
7. Personal data of our employees, etc. (current and former) and their families
Processing necessary for the performance of a contract to which the data subject is a party or for taking steps at the request of the data subject prior to entering into a contract
Execution, planning, consideration, management, etc. of business-related communications, attendance and absence, salary payments, human resources, evaluations, benefits, disciplinary measures, human resources development, welfare benefits, safety, health, etc. and other business processes related to laws and regulations on labor, tax, and social welfare
Reception, execution and management of various procedures stipulated in internal company rules
Contact and submission to health insurance associations, corporate pensions, shareholder associations, subsidiaries and affiliated companies
Tracking and managing attendance records for various training programs and sessions
Provision of Medical Representatives (MR) training records to MR Education Center
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Applications, notifications and reports to government agencies, public bodies, participating groups, etc.
Mediation and referrals for employee transfers and relocations
Contact to the person involved or their family members in emergencies
Contact to subcontractors, consulting firms, insurance companies, etc.
Various procedures and contacts after retirement
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Notification and reporting based on laws, regulations, and other standards
8. Personal data related to people using PR-related information desks and other contact points of the JCR Group
Processing necessary for the legitimate interests pursued by the JCR Group (such as regular business operations, etc.) or by a third party
Reporting and contact to product manufacturers, sellers, etc.
Telephone reception skill improvement and realization of better customer service
Feedback to our representatives on consultation content and response status
Smooth communication with persons using our contact points
Response to access and other communications and management of related records
Consideration, survey and response to consultations, inquiries, contacts, etc.
Resolutions to lawsuits and other disputes involving the JCR Group
Efficient business execution
Fostering good communication
Processing necessary for compliance with a legal obligation to which the JCR Group is subject
Notification and reporting based on laws, regulations, and other standards
The JCR Group might share the personal data collected to the extent necessary for the purpose of processing personal data. We list the parties to which we share personal data by type of personal data as follows.
1. Personal data of Healthcare Professionals, and personal data of researchers in medicine, pharmacology and other scientific fields, and government officials involved in medical and pharmaceutical affairs
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
2. Personal data of people affiliated with wholesalers, joint developers, technology licensees or subcontractors for Pharmaceuticals. and personal data of people affiliated with companies, organizations or consultants that have transactions with the JCR Group or that are related contractually or in terms of debts and obligations
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
Business successors due to mergers or other reason: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
3. Personal data related to patients and members of the general public
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
4. Personal data related to media, securities analysts, investors and other related parties
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
5. Personal data of our shareholders (including past shareholders)
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as a joint ventures, reorganizations, or acquisitions
6. Personal data related to job and internship applicants
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as a joint ventures, reorganizations, or acquisitions
7. Personal data of our employees, etc. (current and former) and their families
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Regulatory authorities, etc.: Regulatory authorities, courts, government agencies and other public bodies in relevant countries
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
8. Personal data related to people using PR-related information desks and other contact points of the JCR Group
JCR group companies: A JCR group company/companies other than a JCR group company which collected personal data
Business partners: Healthcare Professionals, researchers, sales companies, other pharmaceutical companies, industry associations in relevant countries and our other business partners
Contractors: Business entities to which the JCR Group consigns its operations to achieve its purpose for processing personal data, e.g., CROs for Pharmaceuticals, third-party inspectors, system vendors, event agencies, marketing agencies, medical service providers, consultants, auditors, accountants, lawyers and other professional advisors
Business successors due to mergers or other reasons: Parties that will succeed the business of the JCR Group in the future due to mergers or other reasons, such as joint ventures, reorganizations, or acquisitions
In addition to the above, for the sharing of personal data to JCR group companies in Japan in particular, please see the section “Joint use of personal data” in “Supplementary Information: Notification Regarding Personal Data of Data Subjects Who Are Located in Japan” (available in the Japanese version only).”
The JCR Group retains personal data for the period reasonably necessary for achieving the purpose of processing personal data specified in this Notice or for the period required under the Applicable Laws.
In determining the retention period of personal data, we consider the need for achieving the purpose of processing personal data, requirements under the Applicable Laws, agreement with the data subject regarding the retention period, implications of erasure or destruction of personal data to the data subject or another natural person, and other relevant factors.
The JCR Group processes personal data only if and to the extent that at least one of the following legal bases is met in doing so:
The data subject has given consent to the processing of his/her personal data;
Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
Processing is necessary for compliance with a legal obligation to which the JCR Group is subject;
Processing is necessary in order to protect the vital interests of the data subject or of another natural person;
Processing is necessary for the performance of a task carried out in the public interest;
Processing is necessary for the purposes of the legitimate interests pursued by the JCR Group or by a third party.
The JCR Group respects the rights of each data subject under the Applicable Laws* for the personal data we process. If you wish to exercise your rights under the Applicable Laws for your personal data processed by the JCR Group, you may contact us via the JCR Group’s contact points. (Please see the section “Inquiry contacts.”)
We will confirm your identity before proceeding with addressing your inquiry.
*Note: We list the names of Applicable Laws in the key countries where we operate and the data subject’s rights given thereunder.
Act on the Protection of Personal Information (Japan)
The data subject’s right to request notice of purpose of use
The data subject’s right to request a disclosure of retained his/her personal data
The data subject’s right to request a correction, addition or deletion of retained his/her personal data that is inaccurate
The data subject’s right to request ceasing the processing or erasure of retained his/her personal data which is processed or collected improperly or that has become unnecessary for use
The data subject’s right to request ceasing the processing or erasure of retained his/her personal data or the suspension of the provision of retained his/her personal data to the third party, in the event of leaks, or in other cases where the data subject’s right or legitimate interests are likely to be harmed.
The data subject’s right to request the suspension of the provision of retained his/her personal data provided to the third party in violation of laws and regulations
The data subject’s right to request disclosure of the third party provisioning records
Regulation of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter, the “EU GDPR”) (European Economic Area: hereinafter, the “EEA”)
The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
The data subject’s right to request a correction of his/her personal data that are not accurate
The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
The data subject’s right to request restricted processing of his/her personal data
The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
The data subject’s right to object to processing of his/her personal data by the JCR Group
The data subject’s right to withdraw consent on the processing of his/her personal data
The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
The data subject’s right not to be subject to a decision based solely on profiling or other automated processing
(Note) As stated above, you have the right to object to the processing of your personal data by the JCR Group based on the legitimate interests of the JCR Group.
United Kingdom General Data Protection Regulation (hereinafter, the “UK GDPR”) and the Data Protection Act 2018 (UK)
The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
The data subject’s right to request a correction of his/her personal data that are not accurate
The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
The data subject’s right to request restricted processing of his/her personal data by the JCR Group
The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
The data subject’s right to object to processing of his/her personal data
The data subject’s right to withdraw the consent on the processing of his/her personal data
The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
The data subject’s right not to be subject to a decision based solely on profiling or other automated processing
(Note) As stated above, you have the right to object to the processing of your personal data by the JCR Group based on the legitimate interests of the JCR Group.
Lei Geral de Proteção de Dados Pessoais (hereinafter, “LGPD”) (Brazil)
The data subject’s right to make inquiries regarding his/her personal data that are processed by the JCR Group and to request access to his/her personal data
The data subject’s right to request a correction of his/her personal data that are not accurate
The data subject’s right to request a deletion of his/her personal data that are processed unnecessarily or unlawfully
The data subject’s right to transmit his/her personal data to a third party or to retrieve his/her personal data collected by the JCR Group for such transmission (the right to data portability)
The data subject’s right to object to processing of his/her personal data by the JCR Group
The data subject’s right to information about public and private entities with which the JCR Group has shared data
The data subject’s right to information about the possibility of denying consent and the consequences
The data subject’s right to withdraw the consent on the processing of his/her personal data
The data subject’s right to lodge a complaint with relevant data protection authorities located in the country where he/she resides
The data subject’s right not to be subject to a decision based solely on profiling or other automated processing
The JCR Group establishes management systems necessary for appropriately managing personal data and conducts rigorous security system management to prevent the occurrence of unauthorized intrusion, leaks, alteration, loss, unauthorized use, unauthorized disclosure, etc. of personal data.About specifically information of our security control action, please contact us at the address listed at the end of this document.
The JCR Group might transfer personal data collected in one country or territory to a third country or territory for the processing of the personal data. When doing so, we take appropriate measures and transfer such data only to the extent permitted under laws and regulations applicable therein.
The JCR Group might transfer personal data of a data subject who is located in Japan, the EEA, UK or Brazil to a third country or territory where we operate (e.g., Japan, the US, EEA, UK, Switzerland, Brazil) to process his/her personal data.
It is permitted under the Applicable Laws to transfer personal data of a data subject who is located in one country to a third country or territory that is assessed to have established adequate data protection standards by supervisory authorities in the relevant country or by the European Committee. Please see the countries or territories that are covered by adequacy regulations for Japan, the EEA and UK, respectively. Brazil has none so far at the time of the release of this Notice.
We transfer personal data of a data subject who is located in one country to a third country or territory that is not covered by adequacy regulations only in cases where the data subject’s consent has been obtained, the appropriate safeguards required by the Applicable Laws (e.g., binding corporate rules (Article 47 of the GDPR), standard contractual clauses (Article 46.2 of the GDPR)) have been taken, or there is a need to respond to other specific situations permitted by the Applicable Laws.
For further information and to obtain a copy of the documents used to protect your personal data, please contact us at the address listed at the end of this document.
For personal data of data subjects that are subject to the restricted processing of personal data under the Applicable Laws*, the JCR Group obtains the consent of the holders of parental responsibility in advance and processes their personal data to the extent of the purpose of processing personal data specified in this Notice. Data subjects who are children or minors may exercise their rights permitted under the Applicable Laws. Please see the section “Rights of the data subject” for more details.
*Note: We list the age ranges subject to the restricted processing of personal data by the name of Applicable Laws in the key countries where we operate.
Act on the Protection of Personal Information (Japan): Minors as defined under the applicable local laws
EU GDPR (EEA): Under 16 years of age or a lower age (at least under 13 years of age) specified under applicable laws of the respective EU member state
UK GDPR and the DPA 2018 (UK): Under 13 years of age
LGPD (Brazil): Under 13 years of age
The JCR Group works to take immediate, appropriate measures when receiving an inquiry or claim regarding the processing of personal data. Please send your inquiries regarding the processing of personal data via email to:privacy@jcrpharm.co.jp
We have appointed a representative for the EU and UK. Please see the section “Representative” for information on how to contact our representative.
We also have appointed a Data Protection Officer. Please see the section “Data Protection Officer” for information on how to contact the Data Protection Officer.
Supplementary information
Notification Regarding Personal Data of Data Subjects Who Are Located in the EEA or UK
Last updated:[18th Feb 2022]
The JCR Group has appointed DataRep as our data protection representative for the EU and UK. Any queries requiring the input of our representative should be directed to them as follows:
Sending an email to DataRep at datarequest@datarep.com quoting < JCR Pharmaceuticals Co., Ltd.> in the subject line,
Contacting us through our online webform at https://www.datarep.com/data-request, or
Mailing your inquiries to the following address;
DataRep, 72 rue de Lessard, Rouen, 76100, France
DataRep, 3rd and 4th floor, Altmarkt 10 B/D, Dresden, 01067, Germany
DataRep, Viale Giorgio Ribotta 11, Piano 1, Rome, Lazio, 00144, Italy
DataRep, Calle de Manzanares 4, Madrid, 28005, Spain
DataRep, 107-111 Fleet Street, London, EC4A 2AB,, United Kingdom
Please note that if you choose to mail your enquiry, it is essential that you address your letters to ‘DataRep’ and not ‘JCR Pharmaceuticals Co., Ltd.,’ or your enquiry may not reach them. Please refer clearly to JCR Pharmaceuticals Co., Ltd. in your correspondence.
The JCR Group has appointed a Data Protection Officer for the assistance of our compliance with the Applicable Laws and our group policies. For inquiry to the Data Protection Officer, please send emails to: jcrpharm-dpo-office@iij-pj.jp