DATA PROTECTION & PRIVACY NOTICE

This Data Protection & Privacy Notice covers the PANASONIC Global Compliance Hotline (the “Hotline” or “this service”) set up to enable the reporting of suspected compliance violations.

In line with the requirements of data privacy protection regulations of some countries, this Notice sets out how personal data is processed, for which purposed, how long we hold the personal data, how to access the personal data and where to go for further information. This includes personal data relating to you when you submit a report, as well as personal data about those individuals against whom an allegation has been made or those who have been identified as having information about the allegation.

You are being asked to read and accept the terms contained below. If you do not wish to accept the terms below, we are unable to accept any information through the Hotline and suggest you report this matter directly to your supervisor or manager or to a representative of the Human Resources, Legal or Corporate Compliance Departments in your company or to the Compliance team in Panasonic’s Headquarter in your region (see Section 8 below), depending on the nature of the possible violation.

General

The PANASONIC Global Compliance Hotline is a web and phone-based intake system provided by Panasonic Corporation, 1006, Kadoma, Kadoma-shi, Osaka 571-8501, Japan (“PANASONIC”) to its employees, vendors, suppliers and business partners and those of its subsidiaries (“Reporters”) for reporting suspected violations of laws or regulations, our Code of Conduct or company policies. The Hotline is operated by a third party provider, NAVEX Global, Inc. (“NAVEX Global”), through its EthicsPoint service.

Use of the PANASONIC Global Compliance Hotline

  • Is it mandatory to report through the Hotline?

Use of the Hotline is entirely voluntary.

You are encouraged to report possible violations directly to your supervisor or manager, or to a representative of the Human Resources, Legal or Corporate Compliance Departments or to the Compliance team in Panasonic’s Headquarter in your region (see Section 8 below, depending on the nature of the possible violation. If you feel that you are unable to do so, you may use this service to make your report.

  • What can you report through the Hotline?

This service is a confidential reporting system that allows you to report suspected violations of law or company policies, as well as other concerns you may have, to PANASONIC.

In certain countries, applicable legislation only allows PANASONIC to accept reports through the Hotline that relate to certain matters, such as financial, accounting, auditing, bribery, competition law, discrimination and harassment, environment, health, hygiene, and safety matters and other suspected serious misconduct. Purely private matters should not be reported through the Hotline.

Once you have chosen your region and country, you will be given a list of matters which can be reported. If your concern pertains to a matter that under local law, may not be accepted by PANASONIC through the Hotline, you will need to contact your supervisor or local management or a representative of the Human Resources, Legal or Corporate Compliance Departments or to the Compliance team in Panasonic’s Headquarter in your region (see Section 8 below to report the matter.

Please be aware that the information you supply about yourself, your colleagues, or any aspect of the company’s operations may result in decisions that affect others. Therefore, we ask that you only provide information that you believe is true. You will not be subject to retaliation from PANASONIC for any report of a suspected violation that is made in good faith, even if it later turns out to be factually incorrect. Please be aware, however, that knowingly providing false or misleading information will not be tolerated.

  • Who can be reported through the Hotline?

The Hotline can be used to report all issues connected with work at Panasonic as relates to all employees, vendors, suppliers and business partners of the Panasonic Group.

In some countries the categories of persons who can be reported may be limited to persons in key positions or managerial roles in a company. Should this be the case, you may be asked to contact your supervisor or local management or a representative of the Human Resources, Legal or Corporate Compliance Departments or to the Compliance team in Panasonic’s Headquarter in your region (see Section 8 below to report the matter.

What personal data and information is collected and processed?

The PANASONIC Global Compliance Hotline captures the following personal data and information that you provide when you make a report:

  1. your name and contact details (unless you report anonymously) and whether you are employed by PANASONIC;

  2. the name and other personal data of the persons you name in your report if you provide such information (i.e.: description of functions and contact details);

  3. a description of the alleged misconduct as well as a description of the circumstances of the incident; and

  4. your location of and the location where the alleged misconduct took place so that any applicable local laws can be applied in gathering information and undertaking any investigation.

We encourage you to identify yourself in order for us to follow up with questions we may have, but anonymous reports will be accepted (unless not possible under local law). The information you submit will be treated confidentially except in cases where this is not possible because of legal requirements or in order to conduct an investigation, in which case the information will be handled sensitively.

Unless this is strictly required in order to make a report, please do not share any sensitive personal data through the Hotline, such as data regarding racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Who is responsible for any personal data collected?

Panasonic Corporation, the regional headquarter in your region, along with your employing company, either solely or jointly with other companies within the Panasonic Group of Companies, are responsible for the personal data collected.

Further information can be obtained from the relevant contact in your region, see Section 8 below, or region-specific information about the Hotline made available to employees through regional or local Intranets or similar.

How will the personal data and information be processed after your report?

PANASONIC will process the above personal data for the purposes of ensuring compliance with applicable legislation and internal policies, managing PANASONIC’s own defense in case of legal claims and ensuring the well-being of PANASONIC’s personnel. This data will be processed on the basis of our legitimate interest to investigate reports of alleged misconduct and infringements of laws and internal policies to enable PANASONIC to pursue the above purposes.

For the purpose of processing and investigating your report and subject to the provisions of local law, the personal data and information you provide may be accessed, processed and used on a need to know basis by the relevant personnel of PANASONIC, including Human Resources, Finance, Internal Audit, Legal, Corporate Compliance, management, external advisors (e.g. legal advisors. Those individuals may be located in the United States, the United Kingdom, Europe or elsewhere. If you are based in Europe, except if you belong to the Panasonic Avionics Group, information will only be shared with individuals located within Europe and Japan. If you are based in the Commonwealth of Independent States (CIS), information will only be shared within individuals located within Europe, CIS and Japan. In addition, information may be processed in limited circumstances by technical staff at NAVEX Global for administrative services and, for the purpose of translation, by translators/interpreters at NAVEX Global, its subsidiaries, including at NAVEX Global's call center in Portugal, or subcontractors. Those individuals may be located in the United States, the United Kingdom, in the EU/EEA or elsewhere.

The personal data and information you provide in the report will be stored in a database which is located on servers hosted in Germany and Netherlands and operated by GCS Compliance Services Europe Unlimited Company trading as NAVEX Global, an Irish company with principal place of business in United Kingdom, a subsidiary of NAVEX Global, Inc. NAVEX Global has entered into contractual commitments with PANASONIC to secure the information you provide in accordance with applicable law. NAVEX Global is committed to maintaining stringent privacy and security practices including those related to notice, choice, onward transfer, security, data integrity, access, and enforcement. All subcontractors used by NAVEX Global to provide the Hotline have to be pre-approved by PANASONIC and NAVEX Global must impose equally stringent privacy and security measures on its subcontractors.

Personal data and information you provide may also be disclosed to the police and/or other enforcement or regulatory authorities in accordance with applicable law. The relevant bodies that receive and process personal data can be located in the US or in another country that may not provide the level of data protection available in the EU.

Where we transfer your personal data outside the country in which you are based, we will ensure that suitable safeguards are put in place to ensure that the recipients provide an adequate level of protection to your personal data in accordance with applicable law.

You may request additional information in this respect and obtain a copy of the relevant safeguards in place through sending a request to the relevant contact for your region, see section 8 below.

The personal data you provide will be kept as long as necessary to process your report, or, if applicable, as long as necessary to initiate sanctions, until the reported offences (if any) are time-barred or to meet our legal, judicial or financial needs.

Can anybody else access my report?

PANASONIC will promptly notify any person who is the subject of a report to the Hotline except where notice needs to be delayed to ensure the integrity of the investigation and preservation of relevant information.

With some exceptions, the subject of the report may access information concerning the report (with the exception of the identity of the reporter – unless required by local law) and request correction of personal data that is inaccurate or incomplete in accordance with applicable law.

What are your rights under data protection legislation?

Similarly, with some exceptions, reporters may also access information about the report and request corrections of their personal data subject to the conditions and limitations set out in the applicable law.

Further information can be obtained from the relevant contact for your region, see section 8 below.

If you are based in the EU/EEA, your rights under the General Data Protection regulation (“GDPR”) include the right to access your personal data and obtain a copy thereof, the right to request the correction or update of any inaccurate personal data and the right to object to or restrict the processing of your personal data under the conditions set out in the GDPR. You also have the right to request the erasure of your personal data under certain conditions. In addition, you also have the right to data portability in certain cases. This is the right to request the return of the personal data you have provided to us in a structured, commonly used and machine-readable format and to request its transmission to a third party, where technically feasible, without hindrance from us and subject to your own confidentiality obligations.

If you wish to exercise any of the above rights, you may contact PANASONIC at:
compliance.panasoniceurope@eu.panasonic.com.

We will respond to your request without undue delay and no later than one month from receipt of any such request, unless a longer period is permitted under the applicable data protection laws.

In addition to your rights outlined above, you may raise issues with your local data protection officer (if any) or file a complaint with the competent supervisory authority if you are not satisfied with how we process your Personal Data. Please refer to the privacy notice for your company for details of the local data protection officer (if there is one) and also for the details of your local data privacy authority. Alternatively, we will provide you with the contact details, where applicable, immediately upon request by contacting Panasonic Europe Compliance Team:

compliance.panasoniceurope@eu.panasonic.com.

Further information can be obtained from the relevant contact for your region, see section 8 below.

Who can I contact for further information?

You may contact PANASONIC with any questions relating to this Notice or this service as follows:

Compliance Department, Legal & Compliance Division, Panasonic Corporation
e-mail: kigyorinri@ml.jp.panasonic.com

Europe and CIS region:

Regional headquarter:
Panasonic Europe BV, Zuidplein 136 H-16 – NL-1077 XV Amsterdam (Netherlands) Panasonic Europe Compliance Team:
e-mail: Compliance.PanasonicEurope@eu.panasonic.com.

I have read this Notice and understand that by submitting a Report, I also consent to the processing of my personal information as described in this Notice.