Wählen Sie Ihre Region und Ihre Sprache

Los

Menü

Privacy Notice

Your privacy and trust are important to us

This Privacy Notice explains how Hitachi Energy Ltd and the group of companies belonging to Hitachi Energy Ltd (referred to as ’Hitachi Energy’s, ‘we’, ‘us’, or ‘ our’) collect, use and share your personal data.

Available in other languages: Chinese, DutchFrench, GermanItalianJapaneseKoreanPolish, PortugueseSpanish, SwedishThai, Turkish, Russian

Who we are and how to contact us

Hitachi Energy Ltd is a company incorporated under the laws of Switzerland, with registered office at Brown-Boveri-Strasse 5, 8050 Zurich, Switzerland, registered with the Commercial Registry of the Canton of Zurich under registration number CHE-339.599.331.

In addition, the group of companies belonging to Hitachi Energy Ltd is made up of numerous legal entities with offices located across the globe.

If you have any questions, concerns, comments or complaints regarding our privacy notice, please contact our Data Protection Officer and the DPO’s team via [email protected]. If you would like to exercise any of your rights under applicable data protection law, please complete the relevant form here.

Your rights

Under certain circumstances, you have rights under data protection and/or consumers laws in relation to your personal data. It’s our policy to respect your rights and we will act promptly and in accordance with applicable legislation. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data such data is needed for the establishment, exercise or defence of legal claims. Details of your rights are set out below:

If you wish to access, correct, port, update or request deletion of your personal data, you can do so at any time by completing the relevant form here.

You can object to the processing of your personal data, ask us to restrict processing of your personal data or request portability of your personal data. You can exercise these rights by submitting the relevant form here.

You have the right to opt-out of marketing communications we send you at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails we send you. We will keep your name and email address on our CRM databases in order to prevent future communications. If you prefer that your data is deleted from our CRM databases, please complete the relevant form here. If you decide that you don’t want to receive marketing content from us, please note that we may still be required to send you emails regarding factual, transactional and/or servicing information in connection with the products and services that we are providing to you or the organization through which you are known to us.

If we have collected and processed your personal data with your consent, then you can withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent.

You have the right to complain to a data protection authority about our collection and use of your personal data. For more information, please contact your local data protection authority. (Contact details for data protection authorities in the European Union and the UK are available here. Contact details of the Swiss data protection authority are available here.)

For consumers who reside in the State of California: you have the right to opt-out of the disclosure of your personal information for monetary or other valuable consideration.

Hitachi Energy collects and processes different types of personal data about employees, such as:

  • Personal details and identification data such as name, personal and business address, personal and business telephone number, personal and business email address or any other contact details, date and country of birth.
  • Personal data related to family and social circumstances such as gender, age, marital and family status (including also the name and contact details of the next of kin).
  • Employment related personal data such as employee number, signature, employment status, social security and tax numbers, insurance number, country of residence, nationality, photo, emergency contacts and passport information, work and residence permit, immigration status and travel visa information.
  • Qualifications such as qualifications and certifications including current and previous positions, education and training courses, resume/CV, records of education and work achievements, in some cases: contact details of referees and results of capability assessments and interview assessment/feedback.
  • Job information and work metrics such as position, title, employment contract, payroll ID, line manager, job band, performance history, employment status, leave of absence information, working time logging, training records, performance targets and development goals. In some cases, we may also record results of capability assessments, safety reports and incidents, professional feedback.
  • Compensation, allowances, benefits and expense related information such as salary data, payroll data, pension plan number and contributions, non-salary benefits, bonus, compensation, share options, dependents, beneficiaries or health benefit nomination, bank statements, expense claims and receipts, bank account details, credit card data, phone expenses and insurance data.
  • Electronic identification data and information (where employee has access or is affected by such systems or applications) such as access logs, IT and internet usage, device identifiers (mobile device ID, PC ID etc.), registration and login credentials, IP address, tracking and analytics data, recordings (e.g. voice mail/call recordings), posts on corporate platforms (e.g. Yammer), password recovery data, information obtained via IT security tools.
  • Financial and other details such as account information, credit checks, payment details and transactions, investigation information and disciplinary history.
  • Other personal data (which may include special categories of information as mentioned below) namely where you or others (such as your colleagues) may register these data on or in our systems, programs and application such as business documents containing personal information (e.g. queries, questions, complaints, orders and related records; emails; reports; contracts; presentations, minutes; work products), photos, images and/or videos.

The below mentioned types of personal data are only collected and processed, if at all, in accordance with applicable local laws in your country of residence.

  • Special categories of personal data such as:
    • membership of religious congregations (e.g. if required for tax purposes);
    • health and medical information, including disability status, special working conditions (such as use of a standing desk) and medical devices needed on the premises, work related injury and illness information, data for travel emergency support (blood type, medical history, allergies);
    • race or ethnicity (e.g. where this is used for diversity purposes);
    • in some cases: trade union membership, political opinions and sex life or sexual orientation (e.g. where this is used for investigations of non-equal treatment).
  • Data about criminal convictions and offences such as criminal background information and sanction list information to the extent required for the purposes of criminal background screening and Know Your Customer (“KYC”) and Anti Money Laundering (“AML”) obligations.
  • To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency) such as data in public professional social media (e.g. LinkedIn), background check data.

We process personal data about our employees for the following purposes:

  • human resources management including organization and personal administration, working hours management, improving and maintaining effective staff administration, internal workforce analysis, reporting and planning;
  • staff transfer management from different affiliates and succession planning;
  • payroll, compensation and benefits management including providing staff benefits and maintaining salary, compensations including intellectual property, allowances, benefits, insurances, pensions and performance reviews;
  • talent management and acquisition including recruitment, assessing suitability and working capacity, background checks and verification of qualifications, obtaining and providing references;
  • learning and development management including certifications, training staff and performing assessments and employee satisfaction surveys;
  • processes related to joining and leaving including internal moves and terminations;
  • sickness and other leave and vacations management;
  • internal health and safety programs including health and safety and accident records or reporting and managing process quality;
  • travel and expenses management and organization of business trips including monitoring of travelers to provide support during security or medical emergencies; providing travel security, health and safety training and on a voluntary basis assistance in giving security support during emergencies;
  • carrying out the obligations and exercising specific rights in the field of employment and social security law or a collective agreement;
  • internal and external communication of Hitachi Energy's organization and representation of Hitachi Energy including commercial register and assigning powers of attorney;
  • organizing Hitachi Energy events and documentation of such events including managing and organizing internal non-marketing related campaigns, events and meetings;
  • managing Hitachi Energy assets including pictures and videos depicting employees or other individuals available for download on our  intranet, website, etc.;
  • finance and shared accounting services providing record to report, order to cash and purchase to pay services;
  • reorganization, acquisition and sale of activities, business units and companies;
  • business reporting, statistics and analytics;
  • monitoring and auditing compliance of employees’ activities in the workplace with Hitachi Energy's corporate regulations and policies, contractual obligations and legal requirements including disciplinary actions;
  • carrying out audits, reviews and regulatory checks to meet obligations to regulators;
  • governance, risk and compliance, including compliance with laws, law enforcement, court and regulatory bodies’ requirements (such as for the process of verifying the identity of customers, called as Know Your Customer ("KYC")/ Anti Money Laundering ("AML") monitoring purposes), customs and global trade compliance, conflict of interest and security obligations) and prevention, detection, investigation and remediation of crime and fraud or prohibited activities or to otherwise protect legal rights and to establish, exercise or defend legal claims;
  • managing the customer relationship, processing customer orders and providing customer support, processing, evaluating and responding to requests and inquiries;
  • managing the suppliers, contractors, advisers and other professional experts including contact interaction, processing and fulfilling purchases and invoices, and contract lifecycle management;
  • making use of work performance and products and for references on documents, such as drawings, purchase orders, sales orders, invoices, reports;
  • access control system providing electronically controlled ingress and/or egress for authorized individuals to locations that have access restrictions and a registry of personnel on site in case of emergencies;
  • intrusion detection including 3rd party monitoring of duress, perimeter, internal security points and ancillary supervisory monitors for site maintenance/automated systems;
  • maintaining and protecting the security of products, facilities, services, systems, networks, computers and information, preventing and detecting security threats, fraud or other criminal or malicious activities, and ensuring business continuity; and
  • managing IT resources, including infrastructure management including data back-up, information systems’ support and service operations for application management, end user support, testing, maintenance, security (incident response, risk, vulnerability, breach response), master data and workplace including user accounts management, software licenses assignment, security and performance testing and business continuity.

Certain personal data collected from you relates to your next of kin and emergency contacts. In these cases, you are requested to inform such persons about this Notice.

In case you are working at a third-party site (for example at a customer location or facility), such third party may need to process your personal data for their purposes acting as a data controller. In these cases, you will receive or may request a separate privacy notice from the relevant data controller.

Legal grounds for processing personal data of employees

  • We process your personal data for the fulfilment of obligations in your employment contract with us and similar collective employment agreements, or as part of pre-contractual measures to establish employment and related contracts;
  • In some cases, we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests may include:
    • monitoring (for example through IT systems), investigating and ensuring compliance with legal, regulatory, standard and Hitachi Energy internal requirements and policies;
    • prevention of fraud and criminal activity including investigations of such activity, misuse of Hitachi Energy assets, products and services, and as strictly necessary and proportionate for ensuring network and information security; and
    • transmitting personal data within the Hitachi Energy group for internal administrative purposes as necessary, for example to provide centralized services.
  • In some cases, we process your personal data on the basis of statutory requirements, for example, on the basis of labor and social security law, allowances, tax or reporting obligations, cooperation obligations with authorities or statutory retention periods in order to carry out our contractual responsibilities as an employer;
  • In exceptional circumstances we may ask your consent at the time of collecting the personal data, for example photos, communications materials and events. If we ask you for consent in order to use your personal data for a particular purpose, you are free to withdraw your consent at any time and we will tell you how you can do this.

With regard to special categories of personal data we will only process such data in accordance with applicable law and:

  • with your explicit consent for specific activities in accordance with applicable law;
  • when necessary for exercising rights based on employment, social security or social protection law or as authorized by collective agreement, or for preventive and occupational medicine or and evaluation of working abilities; or
  • where necessary for establishment, exercise and defense of legal claims.
  • With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.

Hitachi Energy collects and processes different types of personal data about contractors, such as:

  • Identification data and business contact information, you share with us such as first name, last name, job/position/title, employer, employer address, nationality, tax number, work permit/visa information, business email address, business address, telephone number, mobile telephone number, telefax number, private telephone number, private email address, gender, date of birth.
  • Additional information you provide to us in the course of your work assignment such as data concerning the fulfilment of your work assignment, our contractual obligations and pre-contractual measures including correspondence data, offers, tenders, resume/CV, background check data, conditions, qualifications/certificates, contract and order data, invoices, payments, business partner history, records relating to queries/questions/complaints/orders, working time logging, and training and education records, vehicle license plate, insurance data.
  • Expense related information such as bank statements, payment details, transactions, expense claims and receipts, bank account details, credit card data.
  • Electronic identification data and information collected by the communications systems, IT applications and website browser (where contractor has access or is affected by such systems or applications and in accordance with the applicable law) such as information technology usage (system access, IT and internet usage), device identifier (mobile device ID, PC ID), registration and login credentials, IP address, login data and log files, Analytics ID, digital alias/signature, time and url, searches, website registration and cookie data recordings (e.g. voice mail/phone recordings, Skype recordings).
  • Other personal data namely where you or others (such as your colleagues) may register these data on or in our systems, programs and application such as business documents containing personal information (e.g. queries, questions, complaints, orders and related records, emails, reports, contracts, presentations, minutes, work products),
  • photos, images and/or videos.

The personal data referenced below is only collected and processed, where applicable, in accordance with applicable local laws in your country of residence and where relevant depending on your work assignment. 

  • Special categories of personal data such as data for travel emergency support (blood type, medical history, allergies).
  • Data about criminal convictions and offences such as criminal background information for the purposes of criminal background screening.
  • To the extent necessary to fulfil our obligations, data obtained from publicly accessible sources or which are legitimately transmitted by other third parties (e.g. a credit agency) such as data transferred to Hitachi Energy by your employer or the company through which you are assigned to Hitachi Energy, commercial register data, creditworthiness data.

We process personal data about contractors for the following purposes:

  • human resources management as relevant to your work assignment and the services you are providing under the work assignment/statement of work directly to Hitachi Energy including organization and personal administration, working hours management, improving and maintaining effective staff administration, internal workforce analysis, reporting and planning;
  • supplier and service provider management throughout the procurement, logistics and supply chain including contact interaction including tendering, engagement, processing orders, process and fulfilment of purchases, administration and management of suppliers, vendors, contractors, advisers and other professional experts including contact interaction, processing and fulfilling purchases and invoices, and contract lifecycle management;
  • staff transfer management from different affiliates and succession planning;
  • training contractors;
  • internal health and safety programs;
  • travel and expenses management and organization of business trips including monitoring of travelers to provide support during security or medical emergencies, providing travel security, health and safety training and on a voluntary basis assistance in giving security support during emergencies, insurance management;
  • finance and shared accounting services providing record to report, order to cash and purchase to pay services;
  • making use of work performance and products and for references on documents, such as drawings, purchase orders, sales orders, invoices, reports;
  • reorganization, acquisition and sale of activities, business units and companies;
  • monitoring and auditing compliance with Hitachi Energy corporate regulations and policies, contractual obligations and legal requirements;
  • carrying out audits, reviews and regulatory checks to meet obligations to regulators;
  • maintaining and protecting the security of products, facilities, services, systems, networks, computers and information, preventing and detecting security threats, fraud or other criminal or malicious activities, and ensuring business continuity; and
  • managing IT resources, including infrastructure management including data back-up, information systems’ support and service operations for application management, end user support, testing, maintenance, security (incident response, risk, vulnerability, breach response), master data and workplace including user accounts management, software licenses assignment, security and performance testing and business continuity.

We collect only the personal data from you that we need for the purposes described above. For statistical purposes, improvement of our services and testing of our IT systems we use as much as reasonably possible anonymized data. This means that these data can no longer (in)directly identify you or single you out as an individual.

Legal grounds for processing personal data of our contractors are:

  • We process your personal data for the fulfilment of contractual obligations resulting from your work assignment, or as part of pre-contractual measures we take;
  • In some cases, we rely on our legitimate interests to process your personal data insofar as this is not overridden by your own privacy interests. Such interests include:
    • conduct, management, development and furtherance of our business in the broadest sense possible including supply of products and services, performance of agreements and order management with suppliers, process and fulfilment of purchases, process quality management and improvement of products or services, analytics and market intelligence, reduction of default risks in our procurement processes and reorganization, acquisition and sale of activities, business divisions and companies;
    • monitor, investigate and ensure compliance with legal, regulatory, standard and Hitachi Energy internal requirements and policies;
    • prevent fraud and criminal activity including investigations of such activity, misuse of Hitachi Energy’s assets, products and services, and as strictly necessary and proportionate for ensuring network and information security; and
    • transmitting personal data within the Hitachi Energy group for internal administrative purposes as necessary for example to provide centralized services.
  • In some cases, we process your personal data on the basis of legal obligations and statutory requirements, for example, on the basis of tax or reporting obligations, cooperation obligations with authorities, statutory retention periods or the disclosure of personal data within the scope of official or judicial measures may be required for the purposes of taking evidence, prosecution or enforcement of civil law claims.

With regard to special categories of personal data we will only process such data in accordance with applicable law and:

  • We will ask your explicit consent for specific activities in accordance with applicable law; or
  • Where necessary for establishment, exercise and defense of legal claims.

With regard to personal data concerning criminal convictions and offences, we will only process such data where such processing is permitted by applicable (local) law.

We collect information from and about candidates in connection with employment opportunities at Hitachi Energy. The information that we collect, the manner in which it is used, and the timing in which it is gathered varies depending on the country in which you apply. As general matter, the data we collect regarding our job applicants includes contact details, resumes or CVs, identification documents, education records, work history, employment information and references.

We use your personal data to match your skills, experience and education with specific roles offered by Hitachi Energy. This information is passed to the relevant hiring managers and persons involved in the recruitment process to decide whether to invite you for an interview. Hitachi Energy will collect further information if you are invited to the interview (or equivalent) stage and onward. Such information includes interview notes, assessment results, feedback and offer details.

In connection with our recruitment activities including applications and onboarding, we also collect special category data from candidates where we have an employment law obligation to do so. This information is relevant to their future working environment at Hitachi Energy or the future provision of employment benefits, or with the individual's explicit consent, where collecting such information is permitted by law. For example, where allowed under applicable law, we will collect information about an individual’s disabilities in order to analyze the diversity of our workforce. Once onboarded, an individual’s provision of information regarding disabilities will also be used to provide a suitable working environment. We will also need to conduct criminal background checks for certain candidates to assess their eligibility to work at Hitachi Energy or for Hitachi Energy customers. In certain countries, we will also ask candidates to provide diversity information (for example about their race and ethnicity) for diversity monitoring purposes, although the provision of this information will be entirely voluntary. However, where a candidate does not voluntarily provide such information, we could be required by law to make our own assessment of such criteria.

For successful candidates, we process personal data necessary for the conclusion of the employment contract and for the employee onboarding process, such as the applicable personal identity number (tax, citizenship, social security or possibly other type of individual number applicable for you due to your country and role); data of your related persons (name of spouse/partner, children, etc.); signature; bank account details; emergency contacts; insurance data; driving license number; training records; clothing and shoe size where necessary.

Depending on the country in which you apply, Hitachi Energy collects personal data about candidates (“you”) from the following sources:

  • Directly from you – for example, information that you have provided when applying for a position directly through the Hitachi Energy careers website
  • From recruitment agencies – for example, when a recruitment agency with your details contacts us to suggest you as a potential candidate;
  • Through publicly available sources online – for example, where you have a professional profile posted online (e.g., on your current employer's website or on a professional networking site, such as LinkedIn)
  • By reference – for example, through a reference from a former employee or employer, or from a referee you have identified
  • Results of assessments or background screening checks

The personal data we collect will be used for the following purposes: 

  • Evaluation of your application, based on Hitachi Energy’s legitimate interest in finding the most suitable candidate for the opened job position. Hitachi Energy has to conduct assessments and interviews, which corresponds also with your interest in finding the job that suits you best;
  •  Your job application for the specific position within Hitachi Energy or Hitachi, which we process as part of the precontractual measures fulfilment to establish employment and related contracts (in order to take steps prior to entering into an employment contract);
  • Your job application for the purpose of potential future recruitment purposes within Hitachi Energy or Hitachi, on the basis of your consent;
  • Your job application for the purpose of talent pooling, where we allocate candidates to a specialist pool and approach candidates when a suitable job becomes available, on the basis of your consent;
  • In case of employment contract conclusion – to undertake steps necessary to fulfill controller obligations resulting from the employment contract and applicable legal provisions such as confirming that you meet internal and legal requirements relevant to the position, creation and signing of the employment contract and other employment documentation, creation of necessary accounts in our information systems; providing you access to the Hitachi Energy; providing mandatory notifications to governmental authorities; provide you work uniform and personal protection equipment where necessary; and performing an onboarding session necessary to provide you with equipment, training and information required for the position you have been recruited.

Legal grounds for processing personal data of our job applicants are:

  • Explicit consent of the candidate
  • Our legitimate interest in attracting, identifying and sourcing talent
  • Our legitimate interest to process and manage applications for roles at Hitachi Energy, including the screening and selecting of candidates
  • Our legitimate interest to hire and onboard candidates by making an offer to successful candidates, and carrying out pre-employment screening checks
  • Our legitimate interest to manage our career websites (including conducting statistical analyses)
  • Compliance with a legal or regulatory obligation (when carrying out background checks to warrant a candidate is eligible to work)

When you engage us to provide you with our goods and services, we collect and use personal data when we have a valid business reason to do so in connection with those goods and services.

In the context of providing services to customers, Hitachi Energy also processes personal data of individuals who are not directly our customers (for example, employees, clients or suppliers of our customer). See the section “Individuals whose personal data we obtain in connection with providing services to our customers” for additional information.

The majority of the personal data we collect and use to provide our services is supplied voluntarily by (or collected by us from third-party sources at the request of) our customers. Because of this, if you are a customer of Hitachi Energy, then it will generally be obvious to you what personal data we collect and use. This information can include:

  • Basic information, such as your name, the company you work for, your position and your relationship to the company
  • Contact information, such as your postal address, email address and telephone numbers
  • Financial information, such as payment-related information
  • Any other personal data relating to you or other third parties which you provide to us for the purpose of receiving our services

We use this information:

  • To provide services to you
  • To administer our relationship and maintain contractual relations
  • For accounting and tax purposes 
  • For marketing and business development
  • To comply with our legal and regulatory obligations
  • To establish, exercise or defend legal rights
  • For historical and statistical purposes

Legal grounds for processing personal data of our clients are:

  • Performance of a contract
  • Compliance with a legal or regulatory obligation
  • Our legitimate interest in providing you with our goods and services and securing prompt payment of any fees, costs and debts in respect of our services
  • Our legitimate interest in safeguarding Hitachi Energy against inadvertently dealing with the proceeds of criminal activities or assisting in any other unlawful or fraudulent activities (for example, terrorism)

We process personal data about our suppliers (including subcontractors, and individuals associated with our suppliers and contractors) in order to manage our relationship and contract, and to receive services from our suppliers.

The personal data we process is generally limited to contact information (name, name of employer, phone, email and other contact details) and financial information (payment-related information).

Before we take on a new supplier, we perform integrity compliance searches that could include – depending on the risk level - for example anti-money laundering, anti-bribery and anti-corruption checks, modern slavery audits, adverse media checks, Politically Exposed Persons (PEPs) searches and/or Sanction Lists checks.

Legal grounds for processing personal data of our suppliers are:
 

  • Performance of a contract
  • Compliance with a legal or regulatory obligation
  • Our legitimate interest in managing payments, fees and charges, and to collect and recover money owed to Hitachi Energy
  • Our legitimate interest in safeguarding against Hitachi Energy inadvertently dealing with the proceeds of criminal activities or assist in any other unlawful or fraudulent activities (for example, terrorism)

When you visit an Hitachi Energy office, factory or warehouse, we process your personal data in order to provide you with certain facilities (such as access to our buildings and conference rooms or Wi-Fi), to control access to our buildings, and to protect our offices, personnel, goods and confidential information.

The personal data we collect is generally limited to your name, contact information, location, and the time you enter and leave our building.

Visitor records and access badges
We require visitors to our offices, factories and warehouses to sign in at reception and we keep that record of visitors for a short period of time. Visitors to our buildings are provided with a temporary access badge to access our building. Our visitor records will be used to verify that access badges are returned, to look into a security incident and for emergency purposes (for example, if an office needs to be evacuated).

Wi-Fi
We monitor and log traffic on our Wi-Fi networks. This allows us to see limited information about a user’s network behavior, but will also include being able to see at least the source and destination addresses the user is connecting from and to.

CCTV
Hitachi Energy uses CCTV monitoring where permitted by law. CCTV images are securely stored and only accessible on a need-to-know basis (for example, to look into an incident). We are allowed to disclose CCTV images to law enforcement bodies. We will also share CCTV images with our insurers for purposes of processing an insurance claim as a result of an incident. CCTV recordings are typically deleted or automatically overwritten after a short period of time unless an issue is identified that requires further investigation.

Visitor Health Check / COVID-19

We ask visitors to our offices, factories and warehouses to provide health related and travel information to protect the health and safety of our staff and visitors and to prevent spreading of the CIVID-19 virus. Information we ask is whether you have potential COVID-19 symptoms (fever, cough, shortness of breath or other respiratory difficulties), whether you recently visited destinations on the Hitachi Energy HotSpot country list and whether you have been in close contact with someone that was diagnosed with COVID-19.

Your questionnaire will be destroyed immediately (latest at the end of the day you visited us) in case you have been asked not to enter our facilities. If you are our external visitor and you have answered NO to all the questions we may keep your form for a period of 30 days in order to be able to prove that everyone who was allowed to the office was diligently screened.

Legal grounds for processing personal data of visitors to our buildings are:

  • Our legitimate interest in protecting our offices, factories and warehouses, personnel, goods and confidential information
  • Our legitimate interest in preventing and detecting crime, and establishing, exercising and defending legal claims

As for health check / COVID-19 related information the legal grounds we rely on are:

  • To comply with the legal obligation we have as employer to protect and maintain the health and safety of our staff;
  • For reasons of public interest in the area of public health, such as protecting against serious cross-border threats to health or ensuring high standards of quality and safety of health care

Personal data that we collect about you when you visit our website and other digital channels (hereinafter referred to as ‘our site’) falls into several categories.

Information that you provide voluntarily

We collect personal data that you provide voluntarily through our site, for example, when completing online forms to contact us, subscribing to a newsletter, subscribing to receive marketing communications from us, participating in surveys or registering for events that we are organizing. The information we collect about you include the following:

  • Name
  • Job title, job level or job function, role
  • Education
  • Company or organization
  • Company data
  • Contact information, including primary email, email address and telephone numbers
  • Demographic information, such as industry, country, postcode, preferences and interests
  • Other information relevant to customer surveys or similar research
  • Information relating to events captured through event-related forms, such as dietary restrictions, hotel and flight information, registration/participation status, media interview attendance, previous event experience and gender 
  • Information pertinent to providing goods and services to you
  • Any other personal data that you voluntarily choose to provide to us

We do not intentionally collect sensitive personal, unless you provide us with such data. While there may be free text boxes on the site where you are able to enter any information, we do not intend to process sensitive data. You are not required to provide, and should not disclose, sensitive personal data. If you choose to provide any sensitive personal data in this manner, you acknowledge you consent to the collection and processing of this sensitive information.

If you register on our site, your personal data will be stored in our CRM system . If you have opted out of receiving marketing communications, your basic contact details will remain on our opt-out list.

Information that we collect automatically

When you visit our site, we collect certain personal data automatically from your device. Specifically, the data we collect automatically include information, such as your IP address, pixel ID, device type, unique device identification number, browser type, operating system, broad geographic location (e.g., country or city-level location) and other technical information. We also collect information about how your device has interacted with our site, including the pages accessed, current URL, time you visited the site and links clicked. Collecting this information enables us to better understand the visitors who come to our site, where they come from and what content on our site is of interest to them. We use this information for our internal analytics purposes, and to improve the quality and relevance of our site to our visitors. Information will be collected using cookies and similar tracking technology, as explained further in the Cookie Notice.

Our site uses Google Analytics and Adobe Analytics in order to provide reporting, visualizations and analysis of data, but only with your consent. Click here to learn more about Google’s privacy policies and principles. The Adobe Privacy Center is available here.

Our site also uses various social media plugins.

Purposes for which we process your personal data as a visitor to our site are:

  • To administer and manage our site, including to confirm and authenticate your identity, and prevent unauthorized access to restricted areas of our site
  • To personalize and enrich your browsing experience by displaying content (including targeted advertising) that is more likely to be relevant and of interest to you
  • To analyze the data of visitors to our site and site traffic information
  • To capture webmetrics about the journey of users within our site
  • To determine the company, organization, institution or agency that you work for or with which you are otherwise associated
  • To develop our business and services
  • To provide you with marketing communications
  • To conduct benchmarking and data analysis (for example, regarding usage of our site and demographic analyses of visitors of our site)
  • To understand how visitors use the features and functions of our site
  • To monitor and enforce compliance with applicable terms of use
  • To conduct quality and risk management reviews
  • To enable the better management of our events
  • To enable teams managing events to coordinate their email campaigns and event notifications more effectively
  • To allow for event and webinar sign-up
  • To allow for content download and lead capturing
  • To allow services and information to be delivered effectively to you
  • Any other purpose for which you provided information to Hitachi Energy

Legal grounds for processing personal data of visitors of our site are:
 

  • Our legitimate interest in the effective delivery of information and services to you, and the effective and lawful operation of our businesses
  • Our legitimate interest in developing and improving our site, and your user experience
  • Explicit consent of the visitor

You can accept or reject cookies for our Websites and other digital channels through our cookie preference center. You can also do so by adjusting your web browser controls. Please read our Cookie Notice for more information about our use of cookies.

Hitachi Energy uses a variety of tools to maintain the security of our IT infrastructure, including our email facilities. Examples of such tools are:

  • Systems that scan incoming emails to Hitachi Energy recipients for suspicious attachments and URLs, in order to prevent malware attacks
  • Tools that provide end-point threat detection to detect malicious attacks
  • Tools that block certain content or websites

If you correspond via email with an Hitachi Energy recipient, your emails will be scanned by the tools Hitachi Energy operates to maintain the security of its IT infrastructure, which could result in content being read by authorized Hitachi Energy persons other than the intended recipient.

Legal grounds for processing personal data of individuals who correspond with Hitachi Energy via email:

  • Our legitimate interest in protecting our IT infrastructure against unauthorized access or data leakage
  • Our legitimate interest in analyzing email traffic

When you call Hitachi Energy personnel, only your phone number will be stored on our servers and will be delivered to the recipient of your call on their handset and via an email. No other personally identifiable information is collected but technical logs and reports may be stored for trouble shooting purposes.

Hitachi Energy’s voicemail service is provided by Microsoft. When you call Hitachi Energy personnel and leave a voicemail, this voicemail and any personal data contained within it will be stored on global Microsoft Azure servers and will be delivered to the recipient of your call as an MP3 voice clip in an email. Microsoft will not keep call logs in relation to your calls to Hitachi Energy personnel.

Legal grounds for processing personal data of individuals who correspond with Hitachi Energy via phone and voicemail services:

  • Our legitimate interest in maintaining communication networks

Hitachi Energy provides employees, customers and other stakeholders outside Hitachi Energy with a means to confidentially, and either anonymously or on a disclosed basis, report on activities which involve unethical or illegal behavior that is in violation of our professional standards or otherwise inconsistent with the Hitachi Energy Code of Conduct and/or the Supplier Code of Conduct. Reporting should be done via one of the following channels:

  • Via the Ethics Web Portal and Ethics Hotline;
  • (employees only): by sending an email to the Office of Special Investigations at [email protected] ; or
  • By sending correspondence by post to the Office of Special Investigations at the following address: George Hintzenweg 81 - 3068 AX Rotterdam, The Netherlands

The Ethics Web Portal and Ethics Hotline contains its own Privacy and Consent Notice which describes the practices Hitachi Energy follows.  We encourage individuals using the Ethics Web Portal and Ethics Hotline to refer to this Privacy Notice and Consent form.

With whom do we share your personal data

We take care to allow your personal data to be accessed only by those who really need to in order to perform their tasks and duties, and to third parties who have a legitimate purpose for accessing it. We disclose your personal data to the following categories of recipients:

We share your personal data with other Hitachi Energy Ltd group companies. An overview of the Hitachi Energy Ltd group entities is available here.

Hitachi Energy Ltd is an entity within the Hitachi group of companies. We share personal data with other Hitachi entities. An overview of the Hitachi group entities is available here.

We transfer or disclose the personal data we collect to external support providers (and their subsidiaries and affiliates) who are engaged by us to support our internal ancillary processes. For example, we engage support providers to provide (a) general office support including printing, document production and management, archiving, and translation services; (b) accounting, finance and billing support; (c) IT functions including system management and security, data storage, analytics, business applications, voicemail and replication of systems for business continuity/disaster recovery purposes; (d) HR functions including payroll and payment providers, training providers; recruitment agencies and (d) conflict checking, risk management and quality reviews. It is our policy to only use third-party support providers that are bound to maintain appropriate levels of data protection, security and confidentiality, and that comply with any applicable legal requirements for transferring personal data outside the jurisdiction in which it was originally collected

Depending on the purpose for which we collect and process your personal data, we share your personal data with the following recipients:

  • Professional advisors, such as law firms, tax advisors or auditors
  • Insurers
  • Pension funds
  • Banks
  • Regulators
  • Tax and customs
  • Regulatory and other professional bodies
  • Stock exchange and listing authorities
  • Public registries of company directors and shareholdings
  • Providers of identity verification services
  • Credit reference agencies
  • Insolvency administrators or creditors
  • Travel agents
  • Government departments and agencies

If we go through a corporate sale, merger, reorganization, dissolution or similar event, personal data we gather from you will be transferred in connection with such an event. Any acquirer or successor of Hitachi Energy may continue to use the data as described in this notice provided that the acquirer or successor is bound by appropriate agreements or obligations and may only use or disclose your personal data in a manner consistent with the use and disclosure provisions of this notice, or unless you consent otherwise.

We have not disclosed to other businesses or third parties any personal information for monetary or other valuable consideration within the twelve months preceding the effective date of this Privacy Notice. We have disclosed personal information to our support providers for business purposes in the prior twelve months. The information we have disclosed for business purposes may include some or all of the categories listed above.  

For more information about the categories of entities to which we have disclosed this information and the purposes for which we have disclosed the information, please see “With whom we share your personal data”.

While Hitachi Energy does not sell personal information in exchange for any monetary consideration, we do share personal information for other benefits that could be deemed a “sale,” as defined by the California Consumer Privacy Act (Cal. Civ. Code 1798.140(t)(1)). We support the CCPA and wish to provide you with control over how your personal information is collected and shared. You have the right to direct Hitachi Energy to not sell your personal information. If you wish to opt-out of sale of your information, please submit our CCPA request form here or contact  us via +1 (800) 290 5290.

With respect to cookies, you can always customize your settings at any time. Please note that we may still use aggregated and de-identified personal information that does not identify you or any individual; we may also retain information as needed in order to comply with legal obligations, enforce agreements, and resolve disputes.

There are circumstances under which Hitachi Energy is legally compelled to disclose your personal data. These circumstances include, among others, situations where disclosure is required by law applicable to Hitachi Energy, or necessary to comply with an order of a court or governmental agency, export control, or necessary for matters of safety and security. In such cases, Hitachi Energy will only provide the minimum amount of personal data permissible when responding to a request for disclosure.

How do we protect your personal data

We use appropriate technical and organizational measures to protect the personal data that we collect and process about you.  The measures we use are designed to provide a level of security appropriate to the risk of processing your personal data.

How long do we keep your personal data

We will retain personal data we collect from you where we have an ongoing legitimate business need to do so (for example, to provide you with a service you have requested or to comply with applicable legal, tax or accounting requirements). 

When we have no ongoing legitimate business need to process your personal data, we will either delete or anonymize it or, if this is not possible (for example, because your personal data has been stored in backup archives), we will securely store your personal data and isolate it from any further processing until deletion is possible.

If you have questions about, or need further information concerning, our data retention periods, please send an email to [email protected].

Countries where we process your personal data and International data transfers

Our Hitachi Energy entities and third-party service providers operate in Switzerland, the EEA, the UK and all countries around the world.  This means that when we collect your personal data it will be processed in countries that may have data protection laws that are different to the laws of your country.  An overview of the Hitachi Energy locations around the world is available here.

We have taken appropriate safeguards to require that the personal data we process will remain protected in accordance with this Privacy Notice when transferred internationally, including when processed internationally by our third-party support providers and partners.

The safeguards we have taken include implementing the European Commission's Standard Contractual Clauses for transfers of personal information to our Hitachi Energy entities that are established outside the EEA. All Hitachi Energy entities are required to process personal data in accordance with local data protection legislation, as well as the GDPR principles and the OECD privacy guidelines.

We have also implemented similar appropriate safeguards with our third party support providers and partners. The transfer of personal data to third party service providers outside of the EEA takes place on the basis of data protection adequacy decisions by the European Commission (or by the UK Information Commissioner, where applicable) or via the implementation of EU data protection standard contractual clauses. Our data processing agreements are based on the GDPR principles (where applicable) and the OECD privacy guidelines.

For Japanese data subjects, information about the personal information protection system of various foreign countries where your data could be processed is available here. An overview of data protection and privacy legislation worldwide is available here.

If you have questions about, or need further information concerning, international data transfers, please send an email to [email protected]

Updates to this Privacy Notice

We will update this Privacy Notice from time to time in response to legal, technical and/or business developments. We will obtain your consent to any material Privacy Notice changes if and where this is required by applicable data protection laws.

You can see when this Privacy Notice was last updated by checking the “last updated” date displayed at the end of this Privacy Notice.

Last update: 30 March 2022