MHICA PRIVACY POLICY

Mitsubishi Heavy Industries Canada Aerospace Inc (“MHI Canada Aerospace Inc”) (“MHICA”) operates the https://www.mhica.ca  (the "Website"), recognizes that all personal information managed and used in its business activities must be handled and protected with the utmost care. Therefore, MHICA will follow the basic policy stated below.

1. MHICA will comply with the Act on the Protection of Personal Information and other relevant laws, regulations and guidelines set forth by Canadian governmental authorities or other applicable governmental authorities.
2. MHICA will not acquire or use any personal information through false or other improper means.
3. MHICA will use personal information only to the extent and for the purposes specified, which will be announced or noticed to the persons to whom the information pertains at or before the time of collection.
4. MHICA will endeavor to keep such personal information accurate and up-to-date.
5. MHICA will take necessary and appropriate measures to maintain the security of such personal information.
6. MHICA will furnish its employees and contractors handling such personal information with the necessary and appropriate guidance and supervision.
7. MHICA will not provide personal information to any unaffiliated third party without the consent of the person involved, other than (i) as required by applicable law, or (ii) to our service providers for legitimate business purposes.
8. If MHICA receives an inquiry from a person about the use or content of personal information related to that person, it will provide a reasonable response.
9. If MHICA receives any complaints regarding the handling of personal information, it will resolve such complaints in a timely and appropriate manner.
10. MHICA will establish rules and management systems for proper handling and protection of personal information and will thoroughly adhere to them.
11. MHICA will engage in a strong effort to further enhance personal information protection systems by regularly reviewing and updating all rules and procedures regarding the handling of personal information, including this policy.

For information regarding the business purposes, the practical handling method of personal information by MHICA, refer to the following:

1. Use of Personal Information

MHICA will acquire and use personal information only as needed or helpful for its business performance according to its business purposes. The business purposes of personal information are:

• To make applications for transactions between MHICA and its customers and other parties concerned with its businesses; obtain confirmation regarding customers and other parties concerned; review and assess such transactions; execute and manage agreements; and conduct termination and other proceedings following termination of agreements with customers and contractors.
• To issue notices regarding improvement of MHICA products and services and of associated products and services, and respond to customer inquiries regarding such products and services.
• To respond to inquiries about the products and services provided by parties having business relations with MHICA.
• To allow its shareholders to perform their rights and to perform obligations to its shareholders in accordance with the Companies Act; facilitate the implementation of various policies to ensure efficient communications with its shareholders; create data under certain standards in accordance with applicable laws and regulations; and other measures to facilitate the mutual understanding between MHICA and its shareholders.
• To confirm applications for and participation in various exhibitions and seminars, communicate with lecturers, and report on the results of studies and events to the persons involved, and also to provide visitors with access to MHICA's facilities.
• To make contact with the members of any organizations in which MHICA is a member, and issue various notices from MHICA according to the purposes of activity of such organizations.
• To send publications issued by MHICA to persons who request them, and to distribute e-mails to the applicants for the MHICA electronic mailing service.
• To communicate with journalists and analysts in publicity activities.
• To receive applications for employment, communicate with and issue the notification of employment to the applicants, and other issues concerning recruitment activities.
• To communicate and conduct transactions with public accountants, attorneys and patent attorneys concerned with the business activities of MHICA.
• To communicate with the officers, directors, employees or any related persons in the subsidiaries and affiliates of MHICA in the course of performance of business activities other than those as stated above.
• To issue notices to supporters of MHICA's amateur baseball, marathon and rugby teams regarding activities of the respective associations.
• To exchange necessary information between MHICA and its cooperative, non-regular, temporary, part-time and student workers in execution of contracts with them and performance of their works.
• To receive personal information provided for any order-based works and to complete such works within MHICA's scope of business.
• To personalize or improve MHICA’s website experience and to deliver content relevant to the interests of our website visitors, including targeted advertising through our website or third-party websites.
• To fulfill the reason the information was provided to MHICA.
• To conduct business activities incidental or related to the above business purposes.

MHICA may provide personal information to a third party with the approval of each respective individual, consign the handling of personal information to a third party, or share personal information with subsidiaries and/or affiliates of MHICA to the extent that such personal information is required for a business purpose as stated above.
(Please see the following “4. Provision of Personal Information to Third Parties” and “5. Joint Use of Personal Information”.)

If any personal information is acquired or used for any other business purposes than those described above, a notice or announcement will be issued separately.

2. Possession of Personal Information

MHICA possesses and will possess personal information including, without limitation, names, addresses, telephone numbers, FAX numbers, e-mail addresses, gender, ages, memberships, departments and titles of its customers, suppliers and other related companies.

MHICA does not acquire and possess any personal information that is not intended for the business purposes listed above. (See “1. Use of Personal Information”.)

3. Personal Information Management

MHICA will take necessary and appropriate measures to ensure the security of the personal information possessed by it and endeavor to maintain the contents of such personal information are accurate and up-to-date to the extent necessary for business purposes.

Personal information which is no longer necessary for business purposes will be disposed of in an appropriate manner.
MHICA takes the following main security control measures:

• Formulation of a basic policy
  To ensure proper handling of personal data, MHICA formulates a basic policy regarding compliance with related laws, regulations, guidelines, etc., a contact point for handling questions and complaints, and other matters.
• Establishment of rules regarding the handling of personal data
  MHICA formulates personal information protection rules that stipulate the responsible persons of the company and each department including their duties, as well as the way to handle personal data for each stage, including acquisition, use, management, provision and responding to requests from the concerned individual.
• Organizational security control measures
  • MHICA appoints the person and department responsible for protecting personal information for the company and assign a responsible person in each department to monitor employees, and maintains an organization for reporting to and notifying the responsible person in case of a violation or suspected violation of laws or the personal information protection rules.
  • In cases where all or part of the handling of personal data is entrusted to a subcontractor, MHICA selects the subcontractor in accordance with the personal information protection rules and concludes an agreement with the subcontractor that stipulates the matters concerning the protection of personal data.
• Personnel-based security control measures
  • MHICA incorporates personal information protection into company-wide periodic training, and appropriately conducts training in accordance with the needs of each department.
  • MHICA obtains confidentiality pledge covering personal information and stipulates in the employment rules that improper handling of personal information results in disciplinary action.
• Physical security control measures
  • MHICA establishes security measures and controls the entry and exit of persons for each factory, building, department and area, and implements measures for preventing unauthorized or unrelated persons from viewing or handling personal data.
  • MHICA implements measures for preventing the theft, loss of devices, electronic media, paper-based documents, etc. that contain personal data.
• Technology-based security control measures
  • MHICA controls the file server access for each department to limit the scope of the access so that only related departments can access to particular personal data.
  • MHICA introduces mechanisms for protecting information systems that handle personal data from external unauthorized access or malware.
• Understanding of the external environment
  In cases of handling personal data in a country outside Japan, MHICA confirms the legal systems regarding the protection of personal information in that country and implements security control measures.

4. Provision of Personal Information to Third Parties

MHICA will not provide the personal information of any person to any unaffiliated third party without such person's approval, except in the following cases:

• With respect to the provision of personal information (excluding special care-required personal information, improperly acquired personal information and personal information provided by a personal information handling business operator) to third parties, the matters stipulated for the provision of personal information in the Personal Information Protection Act are noticed or easily known to such person and also reported to The Personal Information Protection Commission, provided that the provision of the personal information will be suspended upon the individual’s request;
• The work of handling personal information is entrusted, in whole or in part, to any third party to the extent necessary for MHICA's business purposes.
  • Provided, that an agreement protecting the confidentiality of personal information shall be entered into by and between MHICA and such entrusted company and that MHICA will provide necessary and appropriate supervision of such entrusted company;
• MHICA will share the personal information of any specific person with one or more of its subsidiaries and/or affiliates to the extent necessary for business purposes and such disclosure of personal information to any third party is otherwise authorized or required under any applicable law or regulation.
   

5. Activities of MHICA

MHICA), a group company of Mitsubishi Heavy Industries, is a Tier 1 manufacturer of major aircraft structures and assemblies, based in Mississauga, Ontario, Canada.

How We Handle Personal Information on Our Website

In obtaining the personal information of a visitor to the MHICA Website, MHICA uses a Secure Socket Layer (SSL) and other encrypting means to protect the personal information inputted through a communications link or otherwise observed through visitor Website activity. The SSL is a general technology used for security of communications on Webnet, which can encrypt the input data before it is transmitted over the Internet and prevent the input data from being intercepted or tapped. If you use any browser that is not compatible with the SSL, you would not be able access to this page, such as from the intranet of your company due to firewall or other software settings.
 

Links to Other Sites

Our site may contain links to other sites that are not operated by us. If you click on a third party’s link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party’s site or services.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• By email: [email protected]
• By phone number: 905-612-8131
• By mail: 6390 Northwest Drive, Mississauga, ON, L4V 1S1 CANADA.