JANOME PRIVACY POLICY for AcuSpark2

JANOME Corporation (hereafter the "Company") shall comply with the GDPR and other related laws and regulations when handling the personal data of persons located in the European Economic Area (EEA) (hereafter "Information Providers"), which is subject to protection of their personal data under the EU General Data Protection Regulation (GDPR) and use them appropriately in light of the Company's business. This privacy policy is applicable to those who are subject to the GDPR and other related laws among Information Providers who use our services.

1. Personal Data to be acquired

The Company may acquire personal data such as name, address, phone number, email address, purchase and transaction history, IP address, and cookies of Information Providers who use our services.

2. Cookies

The Company may use cookies to provide valuable information that is easily available to Information Providers. Information Providers who do not want to accept cookies may refuse to accept cookies by using their internet browsing software (browser) settings.

3. Purpose of use of Personal Information and its legal ground

The Company will handle Information Providers' personal data on the ground of their consent to the handling of Information Providers' personal data, fulfillment of contracts, or pursuit of legitimate interests. The Company shall use Information Providers' personal data for the purpose of providing guidance and communication about our services, understanding and analyzing their purchases and usage status and carrying out the Company's business. In addition, Information Providers' personal data may be provided to our group companies in the EEA area to the extent necessary for this purpose.

4. Information Providers' Rights

Information Providers whose personal data is protected by GDPR and other related laws and regulations may withdraw their consent to the provision of their personal data. Information Providers also have access rights, correction rights, erasure rights, rights to restrict processing and data portability rights regarding their personal data, as well as the right to file complaints with regulatory agencies within the EEA area. If Information Providers wish to exercise these rights, please contact our enquiry desk below.

• The Information Desk Customer Service Office: support@gm.janome.co.jp

5. Notification of Infringement of Personal Data

In the event of infringement of personal data, such as improper disposal or security breaches that lead to unauthorized access, we will investigate the cause by complying with the rules stipulated by GDPR and notify the regulatory agency with jurisdiction over the matter as well as the subject of the data.

6. Security Measures

When processing personal data, the Company will take appropriate measures to ensure appropriate security.