5. How do we transfer your personal data internationally?

Your personal data will be transferred to recipients in a location outside of the Economic European Area (EEA) or the United Kingdom (UK). When your personal data is transferred outside the EEA/UK, we are required to ensure that it is subject to an equivalent level of protection as it would within the EEA/UK. We take the steps necessary to ensure that your data is kept securely and handled in accordance with this Privacy Policy and applicable laws.

Transfers to third countries based on the official unchanged standard contractual clauses

We transfer personal data to countries that are not considered to provide an adequate level of protection according to the applicable data protection laws. When we do so, we have taken appropriate (supplemental) safeguards to ensure an equivalent level of data protection by concluding Standard Contractual Clauses approved by the European Commission or the UK Secretary of State, with the receiving party located in such third country (in accordance with article 46.2© of the General Data Protection Regulation) or (for UK customers) clause 17C of the Data Protection Act 2018 and Article 46 of the UK General Data Protection Regulation of issued by the Information Commissioner under section 119A of the Data Protection Act 2018).

Transfers to our group head offices and other group companies in japan

We transfer personal data to our parent company Yamaha Motor Co., Ltd. and group companies established in Japan. Japan is a country recognized by the European Commission and the UK Secretary of State as providing an appropriate level of data protection, in accordance with article 45 of the General Data Protection Regulation (see here for the European Commission's adequacy decision for Japan) and s17A Data Protection Act 2018 for UK customers. This means that the mandatory rules on protecting your personal data of the EU/UK, including the adequacy decision, and Japan continue to apply if we transfer your personal data to our head offices and group companies in Japan.

Next to this, we have taken additional measures for the transfer of personal data to Japan by concluding the Standard Contractual Clauses approved by the European Commission or UK Secretary of State/Information Commissioner with our head offices and group companies in Japan (in accordance with article 46.2(c) of the General Data Protection Regulation and the other mentioned regulations above). As such, our group companies in Japan are also contractually bound to provide an equivalent level of data protection when processing your personal data. Your personal data is accordingly protected equivalent to the protection offered in the EU/UK if your personal data are transferred to Japan.

Transfers to adequate countries

Depending on you location and the services you use, we also transfer personal data recognized by the European Commission and the UK Secretary of State as providing an appropriate level of data protection, such as the United Kingdom/EEA (see here a list of adequacy decisions taken by the European Commission/Secretary of State).

You can contact us using the contact details, if you would like to receive more information on the measures taken to safeguard your information to the extent they are transferred outside the EEA/UK.