Privacy Statement for Vulnerability Inquiry Form

Information Notice about Personal Data
For residents of Europe, the Middle East, Africa and Russia who are filing an
inquiry form regarding a vulnerability in an Epson production system

(For EEA residents: Granted in compliance with Article 13 of the EU General Data Protection Regulation)

- Version 1.0, March 29, 2024 -

Thank you for using the vulnerability inquiry form for Epson production systems. This Service is exclusively for individuals who wish to inquire about vulnerabilities in Epson products (production systems).

The personal data that Epson holds (and will hold in the future) about you is:

  • Data that you have provided (and may in the future provide) to Epson in connection with the Service (basic information about you).
  • Data gathered from Epson's own systems about your use of the Service and about Epson's interactions with you. This includes information gathered through cookies* and similar tools.

A list of the personal data that Epson may hold for you to use this Service is shown at the end of this notice). Epson does not ask you to provide any further personal data.

The primary purpose for which Epson will use this data is to deliver the Service. The legal basis for processing of personal data for the Service is that it is necessary for the legitimate business interests of Epson.

If, in the future, Epson wishes to process your data for some other purpose, it will first provide you with information about that other purpose. We will also notify you if other information in this notice changes.

"Epson" (the controller of the information) is:

Seiko Epson Corporation
Manufacturing Solutions Operations Division
MS Planning and Design Department
6925 Toyoshinatazawa, Azumino-shi, Nagano-ken, Japan
For inquiries concerning personal data related to a vulnerability inquiry form for an Epson production system, click here

Epson's European representative is:

Epson Europe B.V.
Personal Data Administration
Azie Building, Atlas Arena,
Hoogoorddreef 5, 1101BA Amsterdam Zuid,
The Netherlands
E-mail: EDPO@epson.eu

Epson will not perform automated profiling.

Epson will hold your personal data for one year after closing your case. After that time, the data will be anonymised.

Epson uses third parties (within Japan) to perform some processing activities on its behalf. 'Processing' refers to anything Epson does with the data about you, including gathering it, holding it, using it and disclosing it. Some or all of your personal data may be disclosed to them, but they are only permitted to use the disclosed data for the purposes for which Epson holds your data and in accordance with Epson's directions.

In addition to third party processors, Epson may disclose limited personal data about you (your name, contact details and products) to Epson group companies within Europe so that they are aware of who is using the Service. However, they will not send any electronic marketing communications to you unless you have consented to this.

Epson is based, and operates the Service, in Japan. By entering information into the Service website you are transmitting your data to a country outside the EU. Epson will not transfer any of your data to any other country outside the EEA.

If you are an individual resident within the EEA, Epson is subject to the legal requirements contained in the EU GDPR. As a "data subject" you have statutory rights to request from Epson access to and rectification or erasure of personal data or restriction of processing concerning yourself or to object to processing as well as the right to data portability and the right to lodge a complaint with a supervisory authority.

Epson's European Data Protection Officer may be contacted by writing to "The EDPO, Epson Europe B.V. Azie Building, Atlas Arena, Hoogoorddreef 5, 1101BA Amsterdam Zuid, The Netherlands" or, using E-mail: EDPO@epson.eu

Details of the categories of Personal information provide by you which may be held by Epson.

Information you entered on the "Inquiry form regarding a vulnerability in Epson's production systems ":

  • Name
  • Country you live in
  • Company you work for
  • E-mail
  • Product/Model or software name
  • Details of vulnerability

Epson also collects statistical information about your visits to or use of the Service. Epson uses logs, IP address, User-Agent headers, first-party cookies and session cookies.

*Cookies are data files that are placed on a device when it is used to visit a website. These cookies may be used for many purposes, including tracking user preferences and web pages visited while using the Service. You may disable cookies using your browser's preferences. However, some features of the Service may not function properly or may operate slowly if you disable the cookies. In addition, please be aware that if you choose to block cookies, some advertising preferences that are dependent on cookies may not be able to be respected.

Google Inc.'s Google Analytics is used to collect and analyze usage history etc. Google Analytics uses first party cookies to record information about your access. Please refer to Google Inc.'s privacy policy for the privacy policy of Google Analytics used by the Service: https://policies.google.com/privacy

Production Systems Network Top

Official Account