INFORMATION NOTICE FOR ALL CUSTOMERS – MOBILE
WORLD CONGRESS BARCELONA 27
Information you enter in this form and information obtained in connection with Mobile World Congress 27
(“MWC”) will be processed by SoftBank Corp. (“SoftBank”) as a controller.
Please read this INFORMATION NOTICE before submitting a form. By selecting the collection-and-use
agreement checkbox, you agree to SoftBank's collection and use of your personal data for the purposes
applicable to your form and choices, as explained below. This agreement supports our personal
information management requirements, including JIS Q 15001. Where the EU or UK GDPR applies, the legal
bases are set out in the addendum; this agreement does not waive your rights or automatically make
consent the GDPR legal basis for every processing activity. Separate consent is requested for optional
news communications and non-essential cookies, where applicable.
1. Purpose of use, categories of personal data collected, and legal bases
If the data protection laws or regulations applicable to the processing of your personal data require a
legal basis, SoftBank will process your personal data based on one or more of the following legal bases
for the purposes set forth below:
(1) Legitimate interests: Where it is necessary for us to process your personal data to
pursue our legitimate interests or those of a third party, and your interests or fundamental rights do
not prevail over the aforementioned interests;
(2) Consent: Where we obtain your consent to the processing of your personal data; and
(3) Legal obligation: Where it is necessary for us to process your personal data for
purposes of compliance with legal obligations to which we are subject.
The purposes and categories of personal data processed are as follows. SoftBank will obtain your separate
consent before carrying out the processing described in (5) below.
SoftBank will process your personal data in accordance with applicable personal data protection laws or
regulations.
Providing your personal data is voluntary and is not a statutory requirement. Information marked required
in the relevant form is necessary for the relevant inquiry, meeting request or subscription. Without
that information, we may be unable to process the request or deliver the communications. Leaving
optional fields blank does not prevent submission. You may decline optional news communications and
still submit an inquiry or meeting/interview request. If you do not agree to collection and use for the
applicable request, please do not submit the form; you may contact Section 9 to discuss your request.
2. Disclosure of personal data
(1) SoftBank may entrust all or part of the handling of your personal data to service
providers to fulfil the applicable purposes in Section 1. These include cloud services used to collect
and store form responses, including Google Forms, and any service providers used for email delivery,
request administration or other applicable support. We select and supervise entrusted service providers
and require appropriate personal data protection measures.
(2) SoftBank may disclose your personal data to third parties, including public
authorities, if such disclosure is required to cooperate with relevant governmental authorities and
agencies, or to establish, exercise, or defend against legal claims.
3. How long SoftBank will keep your personal data
SoftBank will only retain your personal data as long as there is a statutory or legal requirement to do
so or doing so is necessary to meet the above mentioned purposes. This will usually require us to retain
your personal data for a set period of time after any relationship has ended for accounts and records
purposes, and SoftBank will retain your personal data for at least one year.
4. Sources of personal data
SoftBank obtains your personal data from you directly.
5. Cross-border transfer of personal data
Your personal data may be transferred to, and stored by, recipients outside your resident country. Where
we transfer your personal data outside your resident country, we will ensure that:
(1) the recipient destination guarantees an adequate level of protection for the rights
and freedoms that you possess in respect of your personal data in your resident country;
(2) the recipient enters into a data transfer agreement as required by the data
protection laws or regulations of your resident country; or
(3) we take other measures as required by data protection laws or regulations of your
resident country.
More details of the protection given to your personal data when it is transferred outside your resident
country can be obtained by contacting us using the details set forth in Section 9 below.
6. Use of cookies
For details of use of cookies and change your settings for use of cookies, please use the cookie setting
button set in our websites.
7. Your rights
You have a number of legal rights in relation to your personal data that we process. These rights may
vary depending on where you are located and which data protection laws or regulations apply to the
processing of your personal data, but typically include the following:
(1) right to obtain information regarding the processing of your personal data and to
access your personal data;
(2) right to request that we rectify your personal data if it is inaccurate or
incomplete;
(3) right to request that we erase your personal data in certain circumstances;
(4) right to request that we restrict our processing of your personal data in certain
circumstances;
(5) right to receive your personal data in a structured, commonly used, and
machine-readable format and/or to request that we directly transmit such personal data to a recipient
where this is technically feasible;
(6) where the processing is based on consent, the right to withdraw your consent to our
processing of your personal data at any time. Please note, however, that we may still be entitled to
process your personal data if we can rely on other legal bases for doing so. The withdrawal of your
consent shall not affect the lawfulness of processing performed based on the consent before your
withdrawal;
(7) right to object to our processing of your personal data in the case of processing of
personal data based on a legitimate interest; and
(8) right not to be subject to a decision based solely on automated processing,
including profiling, if that decision produces legal or similarly significant effects concerning you.
You may exercise any of your rights by contacting us using the details set forth in Section 9 below. You
may refuse or withdraw consent to process cookies by using the cookie setting button set in our
websites. You also may lodge a complaint with a competent data protection authority if you believe that
we have infringed any of your rights.
If your personal data can no longer be processed as necessary for your request following the exercise of
your rights, we may be unable to continue responding to that inquiry, arranging the requested meeting or
handling the relevant media request. This does not determine your eligibility to attend MWC. Declining
or stopping optional news communications does not prevent inquiry or meeting/interview request handling.
8. Security control measures
In order to prevent the leakage, etc., of your personal data, we take necessary and appropriate safety
management measures such as access control, take-out restrictions, and measures to prevent unauthorized
access from the outside.
In order to make security measures effective, we thoroughly comply with a personal data protection
management system and carry out risk assessments on a regular basis. When a risk is discovered, we take
appropriate measures and conduct monitoring to minimize the risk. There is also a system in place to
internally audit whether your personal data is properly protected.
9. Inquiries
The identity and contact details of SoftBank are indicated below. If you have any questions or complaints
about this INFORMATION NOTICE, your rights, or any other matters relating to the protection of your
personal data, please contact us at the following:
Personal Information Protection Manager: CISO
Organisation: SoftBank Corp.
Contact: MWC inquiry contact listed in Section 9
SoftBank Corp.
1-7-1, Kaigan, Minato-Ku, Tokyo 105-7529, Japan
Email address:
[GRP-mwc-pj@g.softbank.co.jp ]
ADDENDUM FOR CUSTOMERS IN THE EEA AND THE UK
This addendum is issued to data subjects in the European Economic Area (“EEA”), which comprises the
Member States of the EU, Norway, Iceland and Liechtenstein as well as the United Kingdom (“UK”). This
addendum provides additional information for the data subjects in the EEA and the UK, asks additional
consent from them, and supersedes the INFORMATION NOTICE, if there is any conflict between the both.
SoftBank will process your personal data SoftBank collects in relation to MWC in the following manner in
accordance with the applicable data protection laws and regulations of EU and EU Member States, in
particular, the General Data Protection Regulation 2016/679, and the UK General Data Protection
Regulation (the last two are hereinafter collectively referred to as the “GDPR”).
1. Purposes to process your personal data and legal basis for processing of
personal data
For purposes (1), (2), (4) and (5) in Section 1, the GDPR legal basis is legitimate interests in
receiving and responding to inquiries and requests, arranging requested meetings, and managing the
related form functionality and communications, subject to assessment of necessity and the balance with
your interests and rights. If purpose (3) is carried out, the proposed basis is legitimate interests in
improving our products and services and conducting research, subject to a separate assessment of the
actual processing. For non-essential cookies under (6), the basis is consent. For purpose (7), we rely
on an applicable legal obligation under the relevant EU/Member State or UK law, or legitimate interests
in establishing, exercising or defending legal claims, as applicable.
The collection-and-use agreement requested for our personal information management requirements,
including JIS Q 15001, is distinct from GDPR consent relied on for optional news communications or
non-essential cookies. It does not change processing based on legitimate interests into processing based
on consent. Your objection and other GDPR rights continue to apply. We will not switch the legal basis
for processing previously based on consent merely because you withdraw that consent.
2. Transfers of personal data outside the EEA or the UK
Your personal data may be transferred to third parties outside the EEA or the UK. When we transfer your
personal data to a third party outside the EEA or the UK, we ensure that:
(1) The recipient destination countries or regions has been subject to a finding from
the European Commission or has been designated by the government of the UK as ensuring an adequate level
of protection for the rights and freedoms that you possess in respect of your personal data; or
(2) The recipient third party enters into with us standard data protection clauses that
have been approved by the European Commission or the government of the UK.
By contacting us at contact details set forth in Section 9 of the INFORMATION NOTICE, you can confirm
further details of the protection afforded when your personal data is transferred outside the EEA or
outside the UK.
3. How to contact SoftBank via its data protection representative
SoftBank, which processes the personal data of individuals in the European Union, European Economic Area
and UK, has appointed DataRep as its Data Protection Representative for the purposes of GDPR.
If SoftBank has processed or is processing your personal data, you may be entitled to exercise your
rights under GDPR in respect of that personal data. For more details on the rights you have in respect
of your personal data, please refer to the national Data Protection Authority in your country or the
European Commission in the EU (for EEA residents, please see
https://ec.europa.eu/info/law/law-topic/data-protection/data-protection-eu_en).
SoftBank takes the protection of personal data seriously, and has appointed DataRep as their Data
Protection Representative in the European Union and the UK so that you can contact them directly in your
home country. DataRep has locations in each of the 27 EU countries, the UK, and Norway & Iceland in
the European Economic Area (EEA), so that SoftBank’s customers can always raise the questions they want
with them.
If you want to raise a question to SoftBank , or otherwise exercise your rights in respect of your
personal data, you may do so by:
• Send an email to DataRep at datarequest@datarep.com , with the subject line "Inquiry
regarding exercising rights regarding personal data"
• contacting us on our online webform at www.datarep.com/data-request ,or
• mailing your inquiry to DataRep at the most convenient of the addresses in the
subsequent pages.
PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for
‘DataRep’ Please refer clearly to SoftBank in your correspondence. On receiving your correspondence,
SoftBank is likely to request evidence of your identity, to ensure your personal data and information
connected with it is not provided to anyone other than you. If you have any concerns over how DataRep
will handle the personal data we will require to undertake our services, please refer to our privacy
notice at www.datarep.com/privacy-policy .
Signed on behalf of the Representative:
Tim Bell, Managing Director
