PRIVACY POLICY FOR MARUTTO

Last modified: 4 December 2025

Local Sales Entities (please see LOCAL SALES ENTITIES AND APPLICABLE PRIVACY POLICIES below for further details of your Data Controller) (individually referred to as "Local Sales Entity" and collectively referred to as "Local Sales Entities", "we", "us", "our") offer a building-management and air-conditioning application and website (hereinafter the "MARUTTO Platform"). The MARUTTO Platform is designed to enhance and extend the functionality of air-conditioning and other products of Daikin Industries Ltd. and its subsidiaries by providing users with advanced management, monitoring, and control features through a digital platform. For avoidance of doubt, Local Sales Entities, Daikin Industries Ltd., and its subsidiaries are collectively referred to as Daikin Group.

We are sincerely committed to the protection of your Personal Data in all aspects, including its collection, use, disclosure, transfer, and any other forms of processing ("Process," "Processing" or "Processed") of your Personal Data. To uphold this commitment, we implement a comprehensive range of appropriate measures designed to safeguard your Personal Data. These measures ensure that all Personal Data collected from Data Subjects (hereinafter "User", "Customer", "you", "your") specifically through the MARUTTO Platform is handled and processed securely, confidentially, and in strict accordance with the applicable data protection laws of the jurisdictions to which we are subject (hereinafter "Applicable Data Protection Laws"). For the avoidance of doubt, the term "Personal Data" refers to any information that identifies or can be used to identify a living individual, or any equivalent term as defined under the Applicable Data Protection Laws.

This Privacy Policy consists of:

If you reside in one of the above countries, we encourage you to read the COUNTRY-SPECIFIC ADDENDUM, which is relevant to the country of your jurisdiction, as it contains important additional information about the Processing by us of Personal Data originating from or Processed in those countries. In the case of conflict between the terms of this Privacy Policy and the terms of the applicable Country Specific Addendum, such terms of the Country Specific Addendum shall prevail.

Unless otherwise defined herein, the capitalized terms shall have the same meaning as specified under the Applicable Data Protection Laws.

Please note that this Privacy Policy applies only to Processing activities related to the MARUTTO Platform. Your Personal Data may be Processed for other purposes outside the scope of this Privacy Policy, such as during sales or distribution activities. For those purposes, please refer to the separate privacy policies at the time of contracting with the relevant Local Sales Entities, if any.

LOCAL SALES ENTITIES

No. Jurisdictions Local Sales Entity
1. Australia Daikin Australia Pty., Ltd.
2. Cambodia Daikin Airconditioning (Cambodia) Co., Ltd.
3. Indonesia PT Daikin Airconditioning Indonesia
4. Malaysia Daikin Malaysia Sales & Service Sdn. Bhd.
5. New Zealand Daikin Airconditioning New Zealand Ltd.
6. The Philippines Daikin Airconditioning Philippines, Inc.
7. Singapore Daikin Airconditioning (Singapore) Pte. Ltd.
8. Taiwan HOTAI DEVELOPMENT CO., LTD.
9. Vietnam Daikin Air Conditioning (Vietnam) Joint Stock Company
10. Thailand Siam Daikin Sales Co., Ltd.

In addition, please note that specific campaigns, promotions, programs, applications, or websites created by Local Sales Entities may be governed by their own additional privacy terms or policies, which may differ from this Privacy Policy. We encourage you to carefully read these additional terms or policies before participating in or utilizing these campaigns, promotions, programs, applications, or websites, as the Processing of your Personal Data in those circumstances will be governed by those additional privacy terms and/or policies, which may include different practices regarding the Processing of your Personal Data. In the case of conflict between the terms of this Privacy Policy and the terms of the specific campaigns, promotions, programs, applications, or websites created by Local Sales Entities, such terms of this Privacy Policy shall prevail if the conflicting matters relate to the MARUTTO Platform.

If there is a conflict between the English version of this Privacy Policy and any other language versions, the English version shall prevail.

1.

DATA CONTROLLERS AND PROCESSORS

Local Sales Entities are primarily subject to the Applicable Data Protection Laws that are in force in the countries where they are established. This processing may occur whether these entities are acting in the capacity of a Data Controller or a Data Processor.

DATA CONTROLLERS

We inform you that any Personal Data you submit through the MARUTTO Platform will be used for the purposes described below by the relevant Local Sales Entity located in the country where you reside, acting independently as a Data Controller, Data User, or any other similar designation as defined by the Applicable Data Protection Laws, meaning they are responsible for determining how and why your Personal Data is processed in accordance with those laws.

DATA PROCESSORS

In certain cases, some affiliated companies or third parties may also act as Data Processors, meaning they Process Personal Data on behalf of Local Sales Entities. These Local Sales Entities are considered Data Controllers, as they determine the purposes and means of Processing Personal Data related to the MARUTTO Platform. Data Processors act only under the instructions of the Data Controllers and in accordance with Applicable Data Protection Laws. In all circumstances, we shall ensure that appropriate privacy measures, such as having data processing agreements, are in place.

2.

PERSONAL DATA WE COLLECT AND PURPOSES

Local Sales Entities Process your Personal Data provided through the MARUTTO Platform.

We can further Process your Personal Data only:

  • if the purpose of the further Processing is compatible with the purpose of the initial collection of your Personal Data;
  • if you provide your consent to further Processing for a purpose which is new and not compatible with the purpose of the initial collection of your Personal Data; and
  • Where otherwise required or authorized by the Applicable Data Protection Laws.

Depending on the specific purpose of each Processing activity, you may be asked to provide us with various types of Personal Data. This may include, but is not limited to, the following:

  • Profile and account information: account name and log-in details, email address
  • Location information: building’s name, photographs of the building, building’s location (GPS), mobile phone location, country, time zone
  • Device information: A/C information, APU (SSID, Mac address), operations, network public IP
  • Usage data: electrical usage information.
  • Other information: Any other information that you provided via the MARUTTO Platform

The exact types of Personal Data requested will vary based on the particular service or function you are accessing within the MARUTTO Platform.

Once collected, we use such Personal Data mentioned above for a variety of purposes. Please find them listed below:

There may be certain circumstances where Personal Data is required for the purposes of proceeding with your request to enter into a contract with us, or to perform our obligation under the contract with you in which case if you do not provide the required Personal Data, Local Sales Entities may not be able to proceed with your request, or may not be able to perform our obligation under the contract with you, either in whole or in part.

In addition, for the purposes of compliance with law, if you do not provide us with the required Personal Data, it may result in Local Sales Entities and/or you, as the case may be, being in violation or non-compliance with such law.

3.

WILL PERSONAL DATA COLLECTED BE DISCLOSED TO THIRD PARTIES?

For the above purposes, we may need to obtain services, counselling, and/or assistance from third parties. These services may include, but are not limited to, the maintenance of the MARUTTO Platform and bug fixing, the purchase of the MARUTTO Platform, data hosting, counselling on compliance with laws and regulations, and the development of the MARUTTO Platform.

In this regard, to the extent necessary for these purposes, we may transmit or disclose the Personal Data we have collected to any natural person or legal entity, including subcontractors and business partners that are third parties, provided they are involved in delivering the aforementioned services to Local Sales Entities. Whenever we need to transmit or disclose any Personal Data we have collected to third parties, we will ensure that appropriate privacy measures are in place. These measures include, for example, entering into a data processing agreement with the third party in accordance with the provisions of the Applicable Data Protection Laws, requiring the third party to comply with the principles and provisions of the same regulations, and ensuring that they adhere to appropriate security standards to protect your Personal Data.

4.

TRANSFER PERSONAL DATA TO THIRD COUNTRIES

Within the scope of the above-described purposes, we may transmit and jointly use the Personal Data collected, belonging to Data Subjects, with Local Sales Entities’ companies and/or business partners established in any country, including but not limited to Thailand, Japan, and Singapore. These entities may provide services such as maintenance and bug fixing, facilitate the purchase of the MARUTTO Platform, host data, and support the development of the MARUTTO Platform. When transferring your Personal Data to countries outside your jurisdiction, we will take necessary measures to ensure that your Personal Data is appropriately protected in accordance with the minimum standards required under the Applicable Data Protection Laws.

5.

STORAGE AND CRITERIA

We do not keep your Personal Data forever. We use your Personal Data and only with the aim of pursuing the purposes described above. Once the aim no longer exists, we commit to deleting the Personal Data, unless archiving them is required by law, at the international or national level.

Depending on the type of Personal Data, the baseline retention period is determined by the statutory retention period or the statutory limitation period under applicable law, commencing after the expiry of a contract or the termination of a business relationship, plus an additional one year. The period can be longer where needed for the exercise of our rights, or as otherwise required or permitted by applicable laws.

If no retention period is stipulated by law, the retention period can be shorter in accordance with, but not limited to, one or more of the following criteria: contract length and legal obligations; business and organizational needs; long-term business relationship; whether the purpose for which the personal data was collected is no longer being served by retention of the personal data.

As has been stated, we commit as much as possible to work with aggregated, anonymized, or pseudo-anonymized Personal Data, and in all cases, it will cease connections to individuals as quickly as possible.

6.

YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

If you have any questions about the protection of your Personal Data or the exercise of your rights, you can contact us at any time, using the contact details provided in Section 7 below.

When your Personal Data is subject to Processing and depending on the country in which you reside or have access or use the MARUTTO Platform, and subject to the conditions and limitations under the Applicable Data Protection Laws, you may have several rights as a Data Subject that can be exercised, as listed below.

Be as specific as possible any time you wish to exercise your rights. We can only properly answer queries couched in sufficient detail. We may need to verify your identity in as much detail as possible, in order to avoid someone else trying to exercise your rights. 

  1. Right to withdraw consent: You may withdraw consent at any time if the Processing of your Personal Data relies on consent.
  2. Right to access and obtain a copy: You may access or obtain a copy of your Personal Data, including the right to request the disclosure of the source(s) of your Personal Data which has been obtained without your consent.
  3. Right to rectification: You may request that we correct, update, or complete your Personal Data to ensure it is accurate and not misleading.
  4. Right to erasure or destruction: You may request that we delete, destroy, or de-identify your Personal Data, such as when your Personal Data is no longer necessary for the purposes for which it was collected.
  5. Right to object: You may object to the Processing of your Personal Data.
  6. Right to data portability: You may request to receive your Personal Data from the Local Sales Entities which is arranged to be in the format which is commonly readable or usable by automatic tools or equipment, and can be used or disclosed by automated means, and to request the Local Sales Entities to send or transfer your Personal Data in said format to other data controllers, including to request to receive the Personal Data in said format to which the data controller transferred to other Data Controllers.
  7. Right to restrict the use: You may request that we restrict the use of your Personal Data.
  8. Right to lodge a complaint: You may lodge a complaint with the supervisory authority if you believe that the Processing of your Personal Data by Local Sales Entities does not comply with the Applicable Data Protection Laws or other relevant laws. However, we kindly ask that you firstly contact a Local Sales Entity in your jurisdiction per the contact details set out in Section 7 below if you have any concerns, so that we can address your issues effectively and promptly before you file any complaints.
7.

CONTACT US

If you have any questions regarding the Processing of your Personal Data or wish to exercise your rights as a Data Subject, please contact the relevant Local Sales Entity and/or its Data Protection Officer in your country of residence using the contact details provided in the applicable privacy policy in LOCAL SALES ENTITIES AND APPLICABLE PRIVACY LOCAL SALES ENTITIES AND APPLICABLE PRIVACYPOLICIES above.

8.

MINORS

Through its MARUTTO Platform, Local Sales Entities do not Process any Personal Data of natural persons below the legal age of majority in the respective countries where Local Sales Entity is established, neither does it make commercial offers to or tries to contact them, unless their legal representative has consented.

9.

SECURITY MEASURES TO PROTECT PERSONAL DATA

Local Sales Entities have implemented adequate security measures in order to maintain integrity and security and prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored, or otherwise Processed, in line with the Applicable Data Protection Laws.

10.

FURTHER CHANGES TO THIS PRIVACY POLICY

Local Sales Entities regularly seek to improve their efforts in protecting Personal Data. This Privacy Policy can be changed or updated in light of upcoming legislation, both at the international and national levels. We will inform you of all substantive changes in this Privacy Policy and obtain your consent, where required by law, through the MARUTTO Platform.

You can always find the most recent version of our Privacy Policy available at any time by contacting your Local Sales Entities.

COUNTRY-SPECIFIC ADDENDUM

AUSTRALIA ADDENDUM

If you are located in Australia, the references to "Personal Data" in this Privacy Policy also encompass equivalent terms which are used in the Privacy Act 1988 (Cth) and which apply to Local Sales Entities located in Australia, such as the term "personal information".

The following Australia-specific provision applies to our Processing of your Personal Data in lieu of the relevant sub-section h. above of the Privacy Policy:

  1. Right to lodge a complaint: If you believe that the Processing of your personal information by Local Sales Entities does not comply with the Privacy Act 1988 (Cth), you may lodge a written complaint to your jurisdiction’s Local Sales Entity via our contact details set out in Section 7 above. We take any privacy complaint seriously and will aim to investigate any such complaint in a timely and efficient manner (typically within 30 days of receipt of the complaint). If you are not satisfied with our response, you may lodge a complaint with an applicable external body or with the Office of the Australian Information Commissioner.

INDONESIA ADDENDUM

If you are a resident of Indonesia, the following Indonesia-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy:

The following definition is deemed inserted, or if there are corresponding definitions, supplement those corresponding definitions in the Privacy Policy.

2.

PERSONAL DATA WE COLLECT AND PURPOSES

We acknowledge that under the Applicable Data Protection Laws and Regulations, there are two types of personal data:

General Data: full name, gender, nationality, religion, and marital status.

Specific Data: health-related information, biometric data, genetic data, criminal record, data concerning minors, and personal financial information.

By agreeing with this Privacy Policy, you expressly acknowledge and provide your consent for the processing of your personal data in line with the above-described purposes outlined in the table of this section. In addition to your consent for us to process the personal data according to the aforementioned purposes, we may also process your personal data based on the basis outlined in the table in this section.

4.

TRANSFER PERSONAL DATA TO THIRD COUNTRIES

Notwithstanding your consent to this Privacy Policy, in situations where we need to transfer your personal data to countries outside of your jurisdiction, we will take steps to ensure that the country of the recipient provides a level of data protection equivalent to or higher than that required under the PDP Law. If this standard cannot be guaranteed, we will implement adequate and legally binding safeguards to protect your personal data. In cases where neither of these measures can be ensured, we will obtain your consent before transferring your data.

6.

YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

Other than what is already listed above, please see specific additions in relation to your rights:

  1. Right to withdraw consent: We will cease processing any Personal Data for which consent has been withdrawn within 3 x 24 hours of your request for the consent withdrawal.
  2. Right to access and obtain a copy: We will provide you with access to or a copy of your Personal Data within 3 x 24 hours of your request.
  3. Right to rectification: We will take the required action within 3 x 24 hours of your request, and upon which we will notify you of the corrected, updated, or completed Personal Data.
  4. Right to erasure or destruction: You may request that we delete, destroy, or de-identify your Personal Data, such as when your Personal Data is no longer necessary for the purposes for which it was collected. We will notify you of the report on the deletion, destruction, or de-identification of your Personal Data.
  5. Right to object: You have the right to submit an objection to actions based solely on automated processing, including profiling, which have legal consequences or significant impacts on you.
  6. Right to restrict the use: You may request that we restrict the use of your Personal Data. We will restrict the use of your Personal Data within 3 x 24 hours of your request, and upon which we will notify you of the restriction of your Personal Data.
8.

MINORS

Through its MARUTTO Platform, Local Sales Entity in Indonesia does not process any Personal Data of natural persons aged under 18, neither does it make commercial offers to or tries to contact them.

MALAYSIA ADDENDUM

If you are located in and are downloading, accessing, or using the MARUTTO Platform from Malaysia, the following Malaysia-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy:

6.

YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

In addition to your rights specified above, you can restrict our Processing of your Personal Data at any time, including where processed for the purposes of direct marketing.

Minor - If you are a minor (as defined under the laws of the jurisdiction in which you are domiciled), please do not provide us with any Personal Data unless you have reviewed this Privacy Policy with your parent or legal guardian and both you and your parent or legal guardian understand this Privacy Policy, and your parent or legal guardian has provided their consent to our processing of your Personal Data in accordance with this Privacy Policy. In the event you agree to this Privacy Policy on behalf of a minor, you hereby consent to the provision of Personal Data of the minor to be processed in accordance with this Privacy Policy, and you personally accept and agree to be bound by the terms in this Privacy Policy.

NEW ZEALAND ADDENDUM

If you are a resident of New Zealand, the following New Zealand-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy.

Where a term used in this Privacy Policy corresponds to a defined term under the Privacy Act 2020 (New Zealand) ("NZ Privacy Act"), it will have the meaning given to that corresponding term in the NZ Privacy Act. For example:

  • "Personal Data" will have the same meaning as "personal information" in the NZ Privacy Act; and
  • The terms "Data Controller" (and "Joint Data Controller"), "Data Processor", and "Data User" will refer to and be used synonymously and interchangeably with "agency" as defined in the NZ Privacy Act.
6.

YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

  • Section 6 c. above is replaced with the following:
    1. Right to rectification: You may request that we correct your Personal Data at any time to ensure that it is accurate, up to date, complete, and not misleading. You may provide us with a statement of the correction you would like us to make ("statement of correction"), and if we do not make the correction that you have sought, you can request that we attach the statement of correction to the information so that it is read with the information.
  • Section 6 d. to 6 g. above do not apply
  • Reference in Section 6 h. above to the "supervisory authority" is to be read as a reference to the Privacy Commissioner as defined in the NZ Privacy Act. 
THE PHILIPPINES ADDENDUM

The Philippines, Philippines’ Data Privacy Act of 2012 ("DPA"), its implementing rules ("IRR"), and issuances by the National Privacy Commission ("NPC") shall be applicable to users of the MARUTTO Platform who are Philippine residents or citizens. If there is any conflict between this Philippines Addendum and the Privacy Policy, this Philippines Addendum shall prevail to the extent of that conflict in connection with the processing of Personal Data.

The following definitions are deemed inserted, or if there are corresponding definitions, supplement those corresponding definitions in the Privacy Policy.

The following Philippines-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of the Privacy Policy:

2.

PERSONAL DATA WE COLLECT AND PURPOSES

To the extent that we process Special Categories of Personal Data, we will only do so:

  • with your express consent;
  • when the processing of the Special Categories of Personal Data is provided for by existing laws and regulations;
  • when the processing concerns Special Categories of Personal Data necessary for the protection of lawful rights and interests, or the establishment, exercise, or defense of legal claims.
6.

YOUR RIGHTS AS DATA SUBJECT AND HOW TO EXERCISE THEM

In addition to the rights mentioned above, you have the following rights under the DPA and its IRR:

You can be indemnified for damages

You may have the right to be indemnified for any damage sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of Personal Data, taking into account any violation of your rights and freedoms as a Data Subject. You may do so by filing a complaint with the Philippines’ NPC.

You can lodge a complaint

You also have the right to lodge a complaint before the National Privacy Commission for any violation of your data privacy rights.

SINGAPORE ADDENDUM

If you are a resident of Singapore, the following Singapore-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections of this Privacy Policy:

"Data Controller" shall refer to and be used synonymously and interchangeably with "organization" as defined in Singapore’s Personal Data Protection Act 2012 (2020 Revised Edition) as may be amended from time to time ("Singapore PDPA"). "Data Processor" shall refer to and be used synonymously and interchangeably with "data intermediary" as defined in the Singapore PDPA.

"Personal Data" shall be as defined in the Singapore PDPA.

2.

PERSONAL DATA WE COLLECT AND PURPOSES

The following paragraph shall be deleted:

"We can further Process your Personal Data only:

  • if the purpose of the further Processing is compatible with the purpose of the initial collection of your Personal Data;
  • if you provide your consent to further Processing for a purpose which is new and not compatible with the purpose of the initial collection of your Personal Data; and
  • Where otherwise required or authorized by the Applicable Data Protection Laws."

And the following paragraph shall be substituted therefore:

"We can Process your Personal Data only:

  • if you have given consent or your consent is deemed to be given in accordance with the Singapore PDPA;
  • where required or authorized under the Singapore PDPA or other applicable laws (for avoidance of doubt, we may do so even if you have not given consent or have withdrawn consent in respect of such purpose)."

For avoidance of doubt, we may process your personal data insofar as lawfully required or authorized under the Singapore PDPA or other applicable laws, and are not limited to processing only on the legal bases set out in the second column of the table in Section 2 above.

4.

TRANSFER PERSONAL DATA TO THIRD COUNTRIES

The following shall be inserted at the end of Section 4:

"We have ensured an appropriate level of protection by putting into place contractual safeguards for transfers of your Personal Data from Singapore to another jurisdiction outside of Singapore."

7.

DATA PROTECTION OFFICER

Here follows the contact details of the Local Sales Entities’ Data Protection Officer:

  • email address: euprivacy@daikin.co.jp;
  • Data Protection Officer, Osaka Umeda Twin Towers South, 1-13-1 Umeda, Kita-ku, Osaka, Japan 530-0001.
8.

SECURITY MEASURES TO PROTECT PERSONAL DATA

The Section shall be replaced with the following:

Local Sales Entities have implemented reasonable security measures in order to maintain integrity and security and prevent accidental or unlawful collection, use, copying, disposal, destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored, or otherwise Processed, and the loss of any storage medium or device on which personal data is stored.

TAIWAN ADDENDUM

If you are a resident of Taiwan, the following Taiwan-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the following:

2.

PERSONAL DATA WE COLLECT AND PURPOSES

In addition to the legal basis disclosed in this section, our legal basis for our Processing of your Personal Data includes the contractual or quasi-contractual relationship between us and you, so as for you to use the MARUTTO Platform and any functions therein. You may, at your discretion, decide whether to allow us Processing your Personal Data. If you refuse to provide us with your Personal Data, you may not be able to use the MARUTTO Platform or the functions therein, or we may not continue to perform the contract you have entered with us.

VIETNAM ADDENDUM

If you are a resident of Vietnam, the following Vietnam-specific provisions apply to our Processing of your Personal Data in lieu of or in addition to the relevant sections as described below:

This Privacy Policy is made in Vietnamese and English. If there is a conflict between the two versions, the version that is more favorable to consumers shall prevail.

SPECIAL CATEGORIES OF PERSONAL DATA

Special Categories of Personal Data or Sensitive Personal Data refer to personal data in association with individual privacy, which, when being infringed, will directly affect an individual's legal rights and interests. Local Sales Entities may process the following Special Categories of Personal Data:

  • Customer information of credit institutions/foreign bank branches/payment intermediary service providers, or
  • Location data identified via location services.

Local Sales Entities can collect Personal Data, including Special Categories of Personal Data, without the consent of the involved Data Subject if: 1) in the event of emergency in which the data processing is necessary to protect the life and health of the Data Subjects or others; or 2) for the performance of contractual obligations of Data Subject with relevant entities; or 3) in the event of an emergency threatening national defense, national security, social order and safety, major disaster, or dangerous epidemic; 4) in support of the specialized activities of state agencies; or 5) the disclosure of personal data is in accordance with the law; or 6) other cases as prescribed by law.

2.1

PERSONAL DATA WE COLLECT FROM YOU OR FROM THIRD PARTIES.

In addition to the terms specified in Section 2 above,the following terms shall apply:

"You acknowledge and agree that we could also use Personal Data you provided to third parties, for example, to service providers, or Personal Data that falls within the public domain, such as commonly acknowledged Personal Data, Personal Data visible on your own website or blog, or posted on your publicly accessible social media profile.";and

You represents and warrants to Local Sales Entities that you inform third parties whose personal data that you provided of the details under this Privacy Policy and obtain their prior consent in accordance with the format and procedure required by applicable law, if necessary, or apply other legal bases to ensure that Local Sales Entities can collect and/or process personal data of the aforementioned third party. You shall indemnify and hold Local Sales Entities harmless from your failure to comply with the foregoing obligations.

"As no method of transmission over the Internet, or method of electronic storage, is totally secure, we cannot guarantee the absolute security of your personal information."

6.

YOUR DATA SUBJECT RIGHTS AND OBLIGATIONS

In addition to the rights detailed in Section 6 above, Data Subjects also have the following rights:

  1. You have the right to be informed
  2. You have the right to be informed of your personal data processing, unless otherwise provided for by law
  3. You can give consent
  4. You have the right to give consent to the processing of your personal data, except in cases where processing without consent is permitted by law.
  5. You can complain, denounce, and initiate lawsuits
  6. You can complain, denounce to competent authorities, or initiate a lawsuit pursuant to relevant laws if you believe that the Processing of your Personal Data is violating or not complying with relevant laws.
  7. You can claim damage compensation
  8. You can claim damages arising from violations against laws and regulations on data protection related to your Personal Data, unless otherwise agreed by the parties or otherwise provided by law.
  9. You can protect yourself
  10. You can self-protect according to the applicable laws, including but not limited to the Civil Code, or request competent agencies and organizations to implement civil right protection methods, such as compulsory termination of the violating act, public apology or correction, compensation for loss or damage, etc.

In addition, Data Subjects have the following obligations:

  • To protect your own personal data and to request that relevant organizations and individuals protect your personal data.
  • To respect and protect others’ personal data.
  • To fully and accurately provide your personal data when you consent to the processing
  • To participate in the dissemination of personal data protection skills.
  • To comply with regulations of law on the protection of personal data and prevent violations against regulations on the protection of personal data.
8.

MINORS

Through the MARUTTO Platform, Local Sales Entities do not process any Personal Data of natural persons aged between 7 to 16 years old, neither does it make commercial offers to or tries to contact them.