This Privacy Statement (“Statement”) applies to the Kyocera Document Solutions company located in the country where your company is using KYOCERA Fleet Services (“KFS”). If Kyocera Document Solutions is not located in the country where your company is using KFS, then this Statement applies to Kyocera Document Solutions Europe B.V. A list of the applicable Kyocera Document Solutions companies is located under the heading ‘Exercising your rights and contacting us’.
This Statement applies to the collection of personal information by Kyocera Document Solutions in relation to KYOCERA Fleet Services.
You can download this statement in pdf format below:
KYOCERA Fleet Services is a powerful, web-based service to perform device management and remote maintenance on a company’s fleet. KYOCERA Fleet Services enables companies and their service staff to view device status, quickly and easily identify and respond to issues and undertake key maintenance task, all from any location.
In this Statement, we will explain in detail the following:
A. Billing and supply management. Counter information of your company’s device(s) is shared for the purpose of billing and supply management.
B. User account management. Your company may have directly or indirectly provided us with your name and email address so that we can set-up and manage a user account for you. Note that we provide this service as a data processor under our Data Processing Terms and Conditions, available at www.kyoceradocumentsolutions.eu.
C. Device management. Configuration and maintenance of the device, security settings, asset management, general administrative tasks (such as adding and removing devices). Note that we provide this service as a data processor under our Data Processing Terms and Conditions, available at www.kyoceradocumentsolutions.eu.
D. Remote access. In individual cases and after the user has specifically accepted this, log files with device data are created and sent to the KFS server and used for the purpose of remote maintenance of the applicable device. Note that we provide this service as a data processor under our Data Processing Terms and Conditions, available at www.kyoceradocumentsolutions.eu.
E. Quality improvement. Device data, including IP-address and Serial Number of the device, is used for improving the quality and reliability of the device and consumables and system and network scalability.
The legal basis for processing your personal information for the purposes under A and E is that we have a legitimate business interest to do so. Here is why:
We have made a careful assessment of your fundamental rights and freedoms and our legitimate business interests and are continuously monitoring the balance. Should you however wish to object to the processing of your personal information based on our legitimate business interest, please see the section ‘Your rights’ below.
Your personal information shall only be shared with:
We may transfer your personal information to a group company or third party that is located outside the European Union or the European Economic Area. If this country does not provide for an adequate level of protection by domestic law according to the European Commission, we have ensured this adequate level of protection by agreeing on additional appropriate safeguards with that group company or third party through the Standard Data Protection Clauses adopted by the European Commission.
Where we use service providers from the US, such US based service provider has registered itself to be on the EU/US Privacy Shield list and has been self-certified with the US Department of Commerce.
Alternatively, we may ask you for your explicit consent to the proposed transfer. You may request a copy of the Standard Data Protection Clauses by sending us an email, motivating your request.
Where possible, we have set specific retention periods for keeping your personal information. These specific retention periods are stated below, or we shall communicate these to you at or before we start processing your personal information.
Where it is not possible for us to use set retention periods, we have stated below the criteria that we use to determine the retention periods.
Purpose (A) User account management. We shall keep your personal information related to your user account as long as you have an active user account with us. Inactive user accounts shall be erased after one year of last use. There is no obligation for you from our side to have your account set-up; if you don’t log in for the first time within 30 days of creation of the account, we shall erase it. You may always request us to delete your user account. In that instance, we shall erase your user account within 30 days after your request.
Purpose (B) Billing and supply management. Any (personal) information related to this purpose shall be kept for a period of 6 years (business information) or 10 years (accounting information).
Purpose (C and D) Device management and remote access. We will delete the device log files after one year of creation. When the service engineer comes across the device address book during a remote maintenance session, no information shall be stored from the address book.
In any other circumstances, we use the following criteria to determine the applicable retention period:
In any case, we shall keep your personal information in compliance with applicable legal requirements and we make periodical reviews of the personal information we hold.
We take the security of your personal information very seriously and take all reasonable efforts to protect your personal information from loss, misuse, theft, unauthorized access, disclosure or modification.
In our continuous efforts to achieve excellence in security, all Kyocera Document Solutions companies that are named in this Statement have acquired the ISO/IEC 27001 certification for Information Security Management System. In addition, specifically for the KFS service Kyocera Document Solutions Inc. has acquired the ISO/IEC 27017 certification, which certification ensures additional information security controls applicable to the provision of KFS.
You have certain legal rights that we wish to inform you of.
Access. You have the right to be informed on whether we process your personal information or not and to related information on that processing.
Rectification. You have the right to have your personal information rectified or completed by us without undue delay. If you have set up an account with us, you have the possibility to rectify or complete your personal information yourself.
Right to be forgotten. You have the right to have your personal information erased by us without undue delay. This right is limited to specific grounds, for example if you have withdrawn your consent, or if you object and there are no overriding legitimate grounds for us to maintain the processing. If you have an account with us, in many instances you have the option to erase your account yourself, in which case all your personal information is permanently deleted.
Restriction of processing. You have the right to request that we restrict the processing of your personal information based on specific grounds. These are (1) the time for us to verify the accuracy of your personal information on your request; (2) instead of erasure of unlawful processing, you request restriction of use instead; (3) you need personal information in legal proceedings; or (4) we are verifying whether our legitimate grounds override your objection to the processing.
Right to object. You have the right to object at any time to our processing of your personal information if such processing is (1) based on our legitimate interest (including us making a profile of you based on your consent); (2) for direct marketing purposes; or (3) necessary for the performance of a task carried out in the public interest or exercise of official authority vested in us. We shall cease to process your personal information based on your objection, unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms or if we need your personal information in legal proceedings.
Data portability. We are required to inform you of your right to receive your personal information from us so that you can transmit that personal information to another service provider. For KFS that means that at your request we shall supply you with your personal information related to your user account. It does not include any device data, including data that was transmitted to us in a log file.
Consent withdrawal. If you have supplied us with your personal information based on your consent, you have the right to withdraw such consent at any time. You may do so by unsubscribing from the service that you have subscribed to if applicable. You may also do so by sending us an email to the applicable privacy email address as stated below. We shall then permanently remove your personal information from our database.
Lodging a complaint. You have the right to lodge a complaint with a supervisory authority, in particular in the country of your residence, about our processing of your personal information.
At Kyocera we have a network of privacy professionals available, including a Data Protection Officer, to assist you with your queries. If you wish to exercise any of your rights, or you have a question about this document, please contact us via email, or send us a letter to the address below:
Kyocera Document Solutions (U.K.) Ltd
Attn: Data Protection Officer
75-77 London Road,
Reading, RG1 5BS
Please note that in exercising your rights, we may ask you to complete a request form. We shall then inform you of the process of handling your request. Exercising your right is free of charge and we are determined to answer your request without undue delay.
In the event that we modify this document, we will publish it on our website with a revised publication date and, if applicable, notify you of the changed document via your user account.
Kyocera Document Solutions (U.K.) Limited
Attn.: Data Protection Officer
75-77 London Road,
Reading RG1 5BS