Privacy Information Statement

Edition 3.0 21/08/2020

Epson cares about your privacy and by this statement gives information about your personal data held in Epson’s Service records and associated systems:

What personal data does Epson collect and hold?

(Personal data is any information relating to an identified or identifiable living person)

Epson holds (and will hold in the future)

• Information that you choose to provide to Epson, through its customer interaction centre or a service provider, websites or otherwise
• Information recorded by Epson or its contractors about interactions with you.

You do not have to give any personal information to Epson, but the level of service Epson and its subsidiary companies can provide to you will be affected by how much information you provide. A record about you is only created when a request or enquiry or comment about Epson products is made by you or on your behalf.

The Controller

Epson Europe B.V.
Azië Building, Atlas Arena
Hoogoorddreef 5,
1101BA Amsterdam Zuid
The Netherlands.
E-mail: EDPO@epson.eu

Purpose for Epson processing your personal data

(‘Processing’ means anything Epson does with the information about you including gathering it, holding it, using it and disclosing it.)

The purpose for which Epson will process your personal data is to provide services to you.

This includes:

• Identifying you when you contact us
• Recording what has been requested and provided
• Delivering the services
• Storing your preferences so that you can save time when contacting us or searching our website
• Monitoring and recording phone and written communications with you for quality assurance and compliance purposes and for dealing with any queries or complaints
• Understanding which parts of Epson’s website, and which products and services, most interest you
• Understanding the use made of Epson’s website and services and the performance of its products

Legal basis for holding your personal data

The legal basis for this is that it is necessary for the legitimate interests of Epson or companies within the Epson group in providing its services.

If you choose to give information beyond that which Epson requires you to provide, the basis for processing that information is your consent as demonstrated by your voluntarily providing it. You have the right to withdraw that consent at any time. You can do this by writing to Epson at the address shown above, or at https://www.epson.co.uk/contact-us-about-your-data .

As part of its processing, Epson will perform some automated profiling and decision-making based on the information it holds about you to make information presented to you more relevant to your interests.

If, in the future, Epson wishes to process your data for some other purpose it will first provide you with information about that other purpose.

Where you have given your consent to this, Epson will also use your personal data for the purpose of electronic, and other, marketing communications to you (normally by e-mail) which may include:

• Conducting surveys and asking your opinion on our products and services
• Notifying you of products or offers that may be of interest to you
• Notifying you of promotions such as free gifts, contests and prize draws.
• Marketing analysis and customer profiling

The legal basis for this is your specific consent. You may withdraw your consent to this additional purpose (independently of your right to object to Epson holding data for the general purposes described above) at any time writing to Epson at the address shown above, or at [https://www.epson.eu] or by calling our service helpline, the numbers for which can be seen at [https://www.epson.eu]

How long will Epson hold my data for?

Epson will hold your personal data for a period of 5 years after the last contact with you. After that time some information may be held but only in an anonymised form or as part of archived records. Personal data may be held for longer periods where extended retention periods are required by law or regulation and in order to establish, exercise or defend Epson’s legal rights.

What personal information does Epson share with third parties?

Epson uses third parties to perform some processing activities on its behalf. Some or all your personal data may be disclosed to them, but they are only permitted to use the disclosed data for the purposes for which Epson holds your data and in accordance with Epson’s directions. In addition to third party processors, Epson may disclose some or all your personal data to:

• Banks or others involved in handling payments being made by you
• Organisations you want to provide out-of-warranty services to you
• Resellers who you want to assist you in obtaining or seeing products

Transfer outside the European Economic Area (EEA)

If you, or your product, are located outside the EEA Epson will transfer some of your personal data, outside the EU, to Epson group staff in the region concerned and to contractors in that region used by Epson to provide services. This will be subject to the protections required by law.

Whenever Epson transfers your personal data outside the EEA, Epson ensures that a similar degree of protection is afforded to it by the implementation of at least one of the following safeguards:

• Epson will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
• When Epson shares your personal data within Epson’s companies or uses certain third parties, Epson uses the Model contracts for the transfer of personal data to third countries approved by the European Commission, which give personal data the same protection it has in Europe.

Data Security

Epson has security measures in place to protect your information and prevent your personal data from being accidentally lost, used or accessed in an unauthorised way, altered or disclosed. In addition, Epson gives access to your personal data to those employees, agents, contractors and other third parties based on “need to know” principle. They will only process your personal data on our instructions, and they are subject to a duty of confidentiality.

Epson has procedures in place to deal with any suspected personal data breach and will notify you and any applicable authority of a breach where we are legally required to do so.

Contacting Epson to exercise your rights

As a “data subject” you have statutory rights to request from Epson access to and rectification or erasure of personal data or restriction of processing concerning yourself or to object to processing as well as the right to data portability and the right to lodge a complaint with a supervisory authority.

Please provide Epson with your personal details in this form so we can verify your identity. In some circumstances we may request additional forms of ID from you, such as your passport or driving licence.

Epson’s European Data Protection Officer may be contacted by writing to “The EDPO, Epson Europe B.V. Azië Building, Atlas Arena, Hoogoorddreef 5, 1101BA Amsterdam Zuid, The Netherlands or at https://www.epson.co.uk/contact-us-about-your-data .

This statement is only about information in Epson’s Services records. If Epson processes information about you in other records, you will be notified separately about this.