Privacy Notice – Website

In regard to business activities and professional relationships, personal information is collected, used, and disclosed³ solely for KAVX’s business purposes/legitimate interests, including:

• Establishing, managing, or terminating the sales or purchase relationships with KAVX;
• Processing payments;
• Establishing credit or credit lines;
• Collecting unpaid amounts due to KAVX;
• Verifying of insurance;
• Evaluating business reputation and competence;
• Verifying compliance with laws and regulations;
• Verifying compliance with KAVX ethical and other policies;
• Verifying authorization to take actions or issue orders;
• Evaluating training and skills; and
• Promoting sales of KAVX products or services.

KAVX does not engage in automated decision-making or profiling.⁴

KAVX may disclose such information to law enforcement, government officials or third parties involved in litigation with KAVX if (i) KAVX is compelled to do so by subpoena, court order, or other legal processes, (ii) KAVX must do so to comply with laws, statutes, rules or regulations, including credit card rules, (iii) KAVX believes in good faith that the disclosure is necessary to prevent physical harm or financial loss or to report suspected illegal activity or is otherwise permitted under privacy laws to disclose the personal data. KAVX will only disclose personal data in response to such a request if KAVX believes in good faith that doing so is necessary to comply with applicable law or a legal obligation to which it is bound or is otherwise permitted under privacy laws to disclose the personal data. In addition, in the event of a merger, acquisition, reorganization, bankruptcy, or other similar events, any information in KAVX’s possession may be transferred to KAVX’s successor or assign.

KAVX processes the personal data of individuals who are current employees of the corporation who may use an KAVX website to access information, make reports, or engage in training. In particular, we process personal data for recruitment, the fulfillment of employment contracts, management and organization of responsibilities, equality and diversity in the workplace, health and safety at KAVX, and the protection of our property or the property of our customers.

If you are an employee of KAVX and would like more information on what information we process, you may contact your local Human Resource department or view it on KAVXNet.

KAVX processes the personal data of individuals who apply for jobs with members of the KAVX Group. Specifically, we process potential employee information to conduct the application process, such as reviewing applications and conducting interviews. Additionally, this information is stored for one year⁵ after being received unless a specific request is made by the individual for erasure of such information prior to that time. If the individual is applying for work with another member of the Group, then KAVX will transmit the data gathered by the website to such Group member. At that point, the Group member will become a joint controller of such data.

If you are an applicant, or potential applicant, at KAVX and would like more information on the information processed for potential employees, processed at the website level, please contact the Corporate DPO. For information regarding storage or processing at an individual facility, please contact that facility’s DPO or its Human Resource Department.

KYOCERA AVX Components Corporation web sites automatically gather certain usage information like the quantity and frequency of visitors to the web site and its areas. Whenever you visit or interact with our website, our service providers may use various technologies that automatically or passively collect information about how the website is accessed and used. We refer to this information as traffic data. Traffic data may include browser type, device type used to access the web site, user browsing time, geographical data, unique number assigned to identify such device, operating system, application version, click path taken through the website, your use of features or applications on the website, and other non-personal information. This information helps us improve the website, products, and services. Traffic data is generally non-identifying, but we will treat it as personal information if we can associate it with you as an identifiable person. Depending on your jurisdiction, some applicable privacy laws may treat certain traffic data as personal information.

Technologies we use on the website to collect traffic data may include cookies (data files placed on your computer or other devices used to access the website), which assist in tracking site performance only. This allows us to improve our site by maintaining and diagnosing problems with our website and assuring visitors a positive experience. When you visit our site for the first time, you will be asked to give consent to all non-essential cookies before they are activated. If you do not give consent to the use of non-essential cookies, such cookies will not be activated.

To learn how you may be able to reduce the number of cookies you receive from us or delete cookies that have already been installed in your browser’s cookie folder, please refer to your browser’s help menu or other instructions related to your browser.

All information transmitted on the KYOCERA AVX Components Corporation website is confidential and will not be sold, licensed, or given to any third parties without your consent.

³ Although KAVX sells primarily to incorporated entities, there may be some individual customers. Further, in the course of dealing with such entities, individuals often supply personal information as representatives or agents of such entities

⁴ See Art. 13(2)(f) of the GDPR.

⁵ In the event that Bulgarian law applies, then the application will be retained for no longer than six months without the data subject’s consent.

Cookies are small text files with information that can be placed on a user’s device through the browser when an individual visits a website. When the same device visits the website again, the cookie and the information it contains can be retrieved.

All non-essential cookies require your consent.

We request your consent before placing them on your device. You can give your consent by clicking on the appropriate button on the banner displayed to you. If you do not wish to give consent, do not click on that button. If you wish to withdraw your consent to any cookies at any time, you will need to delete and block or disable cookies via your browser settings⁷. Please note that disabling these cookies will affect the website’s functionality and prevent you from accessing certain features.

Different browsers have different ways to configure cookie settings. You can find more extensive information on this, for example, at https://www.allaboutcookies.org/manage-cookies.

Generally, the website uses cookies to distinguish you from other users of the website. This helps us to provide you with a good experience when you browse the website and also allows us to improve it. The cookies we use on the website may be categorized as follows:

⁶ This section embodies and constitutes KAVX’s Cookie Policy. It is included in this Privacy Notice for the convenience of the reader to avoid multiple requests for information.

⁷ Please note that once a cookie is placed on your computer with your consent, KAVX has no ability to control that cookie.

You have the right to obtain information about why your personal information is being processed, what categories of recipients may receive your personal information under Article 15 of the General Data Protection Regulation.⁸

More specifically, you have the right to confirm that we are processing your personal data. If we are, you have the right to obtain access to personal data. This includes information regarding the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients to whom the personal data has been or will be transferred, as well as other information under Article 15 of the General Data Protection Regulation. You may also request copies of your personal data.

You have the right to correct any inaccurate personal information about you or, taking into account the purpose of the processing, have incomplete personal information about you completed.

As such, you have the right to receive from us, without undue delay, the rectification of inaccuracies in your personal data and completion of incomplete personal data.⁹

Generally, you have the right to obtain from us the erasure of your personal data. We are obliged to erase your personal data without undue delay unless an exemption applies. For example, if personal data is no longer necessary concerning the purposes for which it is collected or processed.¹⁰

You have the right to have the processing of your personal information restricted under Article 18 of the General Data Protection Regulation.

Restriction means that stored personal data are marked to restrict their future processing (Article 4 paragraph 3 of the General Data Protection Regulation) such that the processing will only be permitted with consent, for the establishment exercise or defense of legal claims or for the protection of rights or for reasons of public interest.

As a data subject, you have a right to data portability. This right will apply only when you have provided your consent to the processing (or the processing is necessary for the performance of a contract) and the processing is by automated means. It applies to personal information you give to KAVX.¹¹

As a data subject, you have a right to object when we are relying on our legitimate interests to process your personal information. In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms or need to do so to establish, exercise, or defend legal claims.¹²

We do not share your personal information with third parties for direct marketing purposes.

Where your personal data is processed for direct marketing purposes, you have the right to object at any time. If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.¹³

You have the right to withdraw your consent to the extent that consent is the basis for us to collect, store, or otherwise process your personal information.¹⁴ The data processing undergone until the withdrawal will remain valid.

As a data subject, you have a right to complain to a supervisory authority.¹⁵

For the appropriate supervisory authority in your region, please visit the European Commission Data Protection Authorities Directory https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.

If you are a French resident, you have the right to communicate instructions relating to the conservation, deletion and communication of your personal information after your death.

⁸ Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

⁹ You can find the full text to your right to rectification in Article 16 of the General Data Protection Regulation.

¹⁰ You can find the full text to this right in Article 17 of the General Data Protection Regulation.

¹¹ You can find the full text to this right in Article 20 of the General Data Protection Regulation

¹² You can find the full text to your right to object in Article 21 of the General Data Protection Regulation.

¹³ You can find the full text to your right to objection in Article 21 of the General Data Protection Regulation.

¹⁴ You can find the full text to this right in Article 7 paragraph 3 of the General Data Protection Regulation.

¹⁵ You can find the full text to this right in Article 77 of the General Data Protection Regulation.

Under the CCPA, California residents have certain rights regarding their personally identifiable information. If you would like to exercise these rights on or after January 1, 2020, please contact us using the email address or toll-free phone number listed within this section below. As provided by CCPA, we may require you to provide information to verify your identity before providing the requested information. It may take us some time to respond to your request, but we will do so within the requirements of the CCPA.

This Privacy Notice provides you disclosure regarding the personal information we collect from you and its purposes. Please see “USE AND DISCLOSURE” as provided above. We do not sell your personal information as provided under the CCPA.

You may access, correct, update and delete your account with us. You may change your choices for subscriptions and newsletters. Once you have chosen to receive newsletters or other information from us, “Opt-out” instructions from all our newsletters and press material are included in each issue. You may choose whether to receive from us information about our additional products and services, about which you may be interested. You may ask to see the personal information that KAVX holds about you. To review, verify, or correct such information, contact the Corporate Data Privacy Officer using the contact information set out below. Please note that any such communication must be in writing. Please be aware that if you do not allow us to collect personal information about you, we may not deliver certain products and services to you. We are obliged to inform you of:

1. The categories of personal information we have collected about you.
2. The categories of sources from which the personal information was collected.
3. The business purpose of collecting personal information.
4. The categories of third parties with whom we have shared the information.
5. The specific pieces of personal information we have collected about you.

Upon a verifiable request, made through one of the methods provided within the “Contact Information” section below, we will delete or pseudonymize personal information regarding you and direct our service providers to delete your personal information from their records to the extent provided by the CCPA. Please note that one or more exceptions may cause us to deny your deletion request as set forth below:

1. Complete the transaction for which we collected the personally identifiable information, provide a good or service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
2. Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
3. Debug products to identify and repair errors that impair existing intended functionality.
4. Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
5. Comply with a legal obligation.
6. Make other internal and lawful uses of that information compatible with the context in which you provided it.

We will not discriminate against you for exercising any of your rights under the CCPA. Please keep in mind that we may charge you a different price or rate under certain circumstances or provide a different level or quality of goods or services if that difference is reasonably related to the value provided to us by your personal information.

We engage certain trusted third parties to perform functions and provide services to us, including hosting and maintenance, error monitoring, debugging performance monitoring, billing, customer relationship, database storage and management, and direct marketing campaigns. We may share your personally identifiable information with these third parties, but only to the extent necessary to perform these functions and provide such services. We also require these third parties to maintain the privacy and security of the personally identifiable information they process on our behalf.

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;

“Data subject” means the respective identified or identifiable natural person, to which the personal data refers to;

“International organization” means an organization and its subordinate bodies governed by public international law, or any other body which is set up by, or based on, an agreement between two or more countries;

“Personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

“Processor” means a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller;

“Profiling” means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyses or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements;

“Processing” means any operation or set of operations which is performed on personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

“Recipient” means a natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry following Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall comply with the applicable data protection rules according to the purposes of the processing;

“Special categories of personal data” means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data to identify a natural person uniquely, data concerning health or data concerning a natural person’s sex life or sexual orientation;

“Third country” means: (i) in respect of any country that is a member the European Union (“EU”) or the European Economic Area (“EEA”), any country which is outside of the EU or the EEA; or (ii) in respect of the UK, any country that is outside of the UK.

“Third party” means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data;