i. Sharing Your Data

We may share your data (including personal location information) with our subsidiaries, affiliates and counterparties (such as distributors and dealers) in your country and contractors within the scope necessary to achieve the purpose of use.

[Provision of Personal data to Third Parties]

Third Party Recipients

HANKOOK MOTOR TRADING CO.,LTD.

Items of Personal data Provided

The items set out in section 1

Purposes of use

The purposes set out in section 2

[Outsourcing of the Processing/Storage of Personal data to Third Parties located outside Korea]

We use your personal data for the following purposes.

Third party recipient

Amazon Web Service Inc.
(https://aws.amazon.com/jp/contact-us/)

Purposes of use of third party recipients

Data Hosting and computing

Items of personal data to be transferred

The items set out in section 1

Countries where the personal data is to be transferred and the date, time, methods of transfer

Ireland

Timing and method of transfer of Personal Data

This application will send your personal data using communication network such as mobile network or Wi-fi when you use this application.

Periods of retention of the third party recipient

Until the end of the service

When sharing personal location information with a third party designated by the customer, we will immediately notify to your device, which is used to collect personal location information, regarding the information receiver, sharing date and time, and reason of sharing. If any of the following items apply, notification will be sent to the device or email address specified in advance by customer.

• If the device collecting the personal location information does not have function to receive text message, voice message, or video.
• If the customer requested in advance to receive notification by means of online posting, etc.

We will provide your personal location information with a third party as follow:

• Information receiver: [email address specified by the customer as a contact address for malfunction information]
• Purpose of sharing: [to notify malfunction information]

ii. Your Rights

To the extent permitted under applicable law, you may exercise your rights to make requests to us for the perusal, correction, deletion, and suspension of the processing of your personal information in writing to the email address listed below in the “Contact Information” section and we will promptly respond to any such requests from you. Where we are using your information on the basis of your consent, you have the right to withdraw this consent at any time. You may also exercise the foregoing rights to your personal information through a duly appointed legal representative.

iii. Retention and Destruction of Your Data

We will retain your data (including personal location information) for the period necessary to fulfill the purposes outlined in this Privacy Policy unless a longer retention period is required or permitted by law.

We will destroy your personal information without delay once it is no longer necessary, either because the relevant retention period has expired or the purpose(s) for which it was collected has been achieved. If saved in electronic form, the personal information will be destroyed by technical methods which ensure that the data cannot be restored or recovered thereafter.

iv. The Provider of This Application and Contact information

The Provider of this Application／Data Controller:

Yamaha Motor Co., Ltd.
2500 Shingai, Iwata-Shi, Shizuoka-Ken, 438-8501, Japan

If you have any queries about use of this Application and/or the processing of your data (including personal location information), please contact us from the contact form in this Application or to the contact information.

v. Records and Retention Period for Fact Confirmation when Processing/Sharing Personal Location Information

We will automatically record and retain records regarding the process, sharing or fact confirmation of personal location information in order to handle complaints in accordance with the Location Information Protection Act, and such records shall be stored for six (6) months or more.

vi. Matters and Exercising Method of Rights/Obligations of Legal Representatives stipulated in Article 26, Paragraph 1 of the Location Information Protection Act

This Application Policy does not stipulate matters and exercising method of rights/obligations of legal representatives stipulated in Article 26, Paragraph 1 of the Location Information Protection Act since we do not process/share personal location information of child of eight years old or younger.

vii. Administrator for Personal Location Information Management

Administrator of personal location information management is LM Connectivity Group.

i. Information we collect about you

The information collected will be stored in the storage in charge of Yamaha Motor Co., Ltd., located in Japan. And it is shared with YAMAHA MOTOR DEL PERÚ S.A., with RUC N ° 20383929050, located at Av. Republica de Panama N ° 4344-4352, district of Surquillo, Lima – Peru who is the owner of "Personal Data Bank" called "Customer Bank" of Yamaha Motor del Perú S.A. (Code No. 01719) ”for an indefinite period of time or until your consent is revoked.

ii. Purpose of use

As part of the activities carried out by us and our group companies, you are informed that personal data will be processed for the following purposes:

• To perform and provide this Application (including ancillary and related services)
• To comply with laws, regulations and other rules.
• For internal evaluation of this Application.
• To gather and analyze information for the purpose of quality improvement, development and enhancement of our products and services.
• To respond to inquiries, requests and complaints.
• For the protection and safety of property and rights.
• To protect the network and information asset.

It is stated that the authorization to the general conditions of this Policy is a necessary element for the use of the application and fulfillment of the aforementioned purposes. Additionally, if you expressly authorize it, your information may be used for the fulfillment of the following additional purposes:

• For direct marketing analysis and offers.
• To provide information on products and services related to Yamaha Motor Group.
• To operate, manage and provide various information for events and campaigns.

iii. Sharing your data

We will share the personal data with YAMAHA MOTOR DEL PERÚ S.A., with RUC N ° 20383929050, located at Av. Republica de Panama N ° 4344-4352, district of Surquillo, Lima – Peru who is the owner of "Personal Data Bank" called "Customer Bank" of Yamaha Motor del Perú S.A. (Code No. 01719) ”. In the event that new transfers are made, we undertake to notify you of such transfers in accordance with this Privacy Policy.

iv. Exercise of the rights of the owner of personal data

If you wish to exercise the rights provided in the personal data protection laws and regulations in Peru, you may send a communication to the address protecciondedatos@yamaha.com.pe or physically to the address Av. Republica de Panama 4344 - Surquillo , Lima addressed to Head of Processes and IT Data Protection.

i. Legal basis for processing your personal data, and categories of personal data

We use your personal data for the following purposes.

1) When processing is required for a contract

2) When processing is required for the pursuit of legitimate interests

We obtain and process the following categories of your personal data for the following purposes because it is necessary to do so in order to pursue our legitimate interests (for details regarding the balancing test for legitimate interests, please inquire using the contact address at “vi. Contacting us”).

3) When your express consent is obtained in advance

If our processing of your personal data is conducted based on your consent, you may withdraw that consent at any time. Withdrawal of your consent does not affect the legality of personal data processing that we have conducted based on consent given before that withdrawal. You may withdraw your consent through services and the like you use or by contacting us using the contact details at “v. Your rights”.

4) When processing is required to meet our legal obligations under EU or Member State law

Personal data obtained by us includes information directly provided by you to us, information provided through a third party, such as counterparties, contractors, business partners, and social media providers (including Facebook and Google), and information provided through products and services provided by our group.

ii. Transfer of personal data outside your country or region

Your personal data obtained by us may be transferred, stored and processed outside the EEA. In each case, your personal data must be protected safely at a level of security equivalent to that used for its protection within the EEA. We take all measures (including execution of the standard contractual clauses (Article 46, paragraph 2, item (c) and paragraph 5 of the GDPR) as approved by the European Commission) reasonably necessary to ensure your data is safely stored and processed in accordance with the provisions set forth in this Privacy Policy and the GDPR and other applicable laws and regulations. Please contact us at any time if you would like to know more about details regarding the safeguards we have in place for transfers of personal data outside the EEA.

iii. Direct marketing

If you do not wish to receive information that we provide to you in relation to our products, services, and the like (direct marketing), we refrain from conducting direct marketing addressed to you. If you do not wish to receive direct marketing, please contact us through the services, etc. you use or by contact us using the contact details at “v. Your rights”.

iv. Automated decision-making

We do not conduct decision-making that is based on automated processing (including profiling) which produces a legal or similar material effect on you.

v. Your rights

You have the rights set out below in relation to your personal data used for this Applications.

If we receive any request from you in relation to the following, we will faithfully and appropriately deal with that request in accordance with the laws and regulations.

• Right to access personal data: You have the right to obtain confirmation from us regarding whether any of your personal data is being processed, and if your personal data is being processed, you will have the right to access your personal data and certain information in connection to that personal data.
• Right to rectify personal data: If your personal data held by us is incorrect, you will have the right to demand that we rectify the personal data.
• Right to erase personal data (right to be forgotten): If you satisfy certain conditions, you will have the right in some cases to demand erasure of your personal data held by us.
• Right to restrict processing of personal data: If you satisfy certain requirements, you will have the right in some cases to restrict the processing of your personal data held by us.
• Objections against processing of personal data: If you satisfy certain conditions, you will have the right in some cases to object to our processing of your personal data.
• Right to data portability of personal data: If you satisfy certain conditions, you will have the right in some cases to receive in a structured, commonly used, and machine-readable format the personal data that you have provided to us and will have the right to transmit that data to another controller without hindrance from us.

You can correct a part of your data on this Application. If you have any other requests regarding the processing of your data, please contact us through contact form in this Application.

vi. Contacting us

If you have any demands, inquiries or requests regarding the processing of personal data, please contact the following address in writing. You can also contact our group’s data protection officer.

For customers who reside in the EEA
Yamaha Motor Co., Ltd.
2500 Shingai, Iwata-shi, Shizuoka-ken, 438-8501, Japan

Data Protection Officer Email:

i. Supplements for the U.S.(California and Viginia)

This Notice at Collection explains how Yamaha collect and use your personal information. Additionally, this provides you the information about your privacy rights and Yamaha’s obligation in accordance with California Consumer Privacy Act of 2018 (CCPA), the California Privacy Rights Act of 2020 (CPRA), and Virginia Consumer Data Protection Act (VCDPA). CPRA and VCDPA will become effective on January 1st, 2023.

ii. California and Virginia Notice at Collection

Yamaha or our service providers may collect the below categories of information for the following business or commercial purposes. Your personal data may be used for the following purposes in combination with the information we obtained separately.

• To perform and provide this Application (including supplemental and related services)
• To gather and analyze information such as market research for the purpose of quality improvement and product development.
• To respond to inquiries, requests and complaints
• For internal evaluation of this Application
• For direct marketing analysis and offers
• To provide information on products and services related to Yamaha Motor group
• To operate, manage and provide various information for events and campaigns
• For protection and safety of property and rights
• To protect network and information asset
• To comply with laws, regulations, and other rules

Categories of personal information Yamaha collect the purpose of use are illustrated below

iii. California Privacy Rights

Rights based on CPRA will be only effective after January 1st, 2023.

Rights for California Users

California Users are entitled to following Rights:

iv. Virginia Privacy Rights

FOR VIRGINIA RESIDENTS ONLY

This Section is Effective from January 1st, 2023

Rights for Virginia Users

Virginia Users are entitled to following Rights:

v. For California and Virginia Users

To Exercise your Rights

If you are a California or Virginia resident, you can exercise any of your rights described in this Notice and any of your legally granted rights by using Contact Information provided in this notice. We will not discriminate against you for exercising your rights. There will be no charge to exercise your rights, unless your requests are manifestly unfounded or excessive, especially when the requests are repetitive. *Any rights based on CPRA and VCDPA are effective from January 1st, 2023.

Change in this Notice at Collection/Privacy Policy

We may amend, revise, add to, or delete the contents of this Application policy due to changes to the specifications of this Application privacy policy and/or required by amendment to laws and regulations. Changes to this Application Privacy Policy will be notified to you through this Application.

Contact Information

If you have any questions or comments about this notice, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California or Virginia law, please do not hesitate to contact us at:

Yamaha Motor Corporation USA

6555 Katella Ave

Cypress, CA 90630

• Call us at 800-962-7926
• Submit this form:https://yamaha-motor.com/data-privacy-request-form

If you have any queries about use of this Application and/or the processing of your personal information, please contact Yamaha Motor Corporation USA.

The provider of this Application
Yamaha Motor Co., Ltd.
2500 Shingai, Iwata-Shi, Shizuoka-Ken, 438-8501, Japan

i. Notice for Processing Sensitive Data

This Application will collect GPS Data from your smartphone.

ii. Notification for Marketing and Advertising

We may contact you by application message, email, SMS, or any other means of communication you have provided for marketing and advertising purpose. This includes maintenance reminder based on milage of your vehicle.

iii. Legal Basis

Legal Basis for processing your personal data is based on your consent. Consent means any freely given, specific, informed and unambiguous indication of your wishes by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to you. You have the right to withdraw your consent, unless otherwise provided by law.

iv. Retention Period

We start processing your data when you consented to this Privacy Policy and Terms of Use. We retain your data until three months after you have terminated your Yamaha Motor ID.

v. Undesirable consequences and damages that may occur

You should not expect undesirable consequences and damages based on this processing. However, like any web-based services, it is true that there is a risk of data leak or breach. To ensure your data security, we implement and keep up-to date technical and organizational security measures. In case of data leak or breach, we will notify you and applicable authority following guidance of the law and conduct investigation for the assessment and future prevention.

vi. Rights and obligations of the data subject

You also have a right to file complaints, claim damages, and self-protection. If you have any queries about use of this Application and/or the processing of your data, please contact us from the contact form in this Application or to the contact information.

i. Legal basis for processing your personal data, and categories of personal data

We use your personal data for the following purposes.

1) When processing is required for a contract

2) When processing is required for the pursuit of legitimate interests

We obtain and process the following categories of your personal data for the following purposes because it is necessary to do so in order to pursue our legitimate interests (for details regarding the balancing test for legitimate interests, please inquire using the contact address at “vi. Contacting us”).

3) When your express consent is obtained in advance

If our processing of your personal data is conducted based on your consent, you may withdraw that consent at any time. Withdrawal of your consent does not affect the legality of personal data processing that we have conducted based on consent given before that withdrawal. You may withdraw your consent through services and the like you use or by contacting us using the contact details at “v. Your rights”.

4) When processing is required to meet our legal obligations under EU or Member State law

Personal data obtained by us includes information directly provided by you to us, information provided through a third party, such as counterparties, contractors, business partners, and social media providers (including Facebook and Google), and information provided through products and services provided by our group.

ii. Transfer of personal data outside your country or region

Your personal data obtained by us may be transferred, stored and processed outside the EEA. In each case, your personal data must be protected safely at a level of security equivalent to that used for its protection within the EEA. We take all measures (including execution of the standard contractual clauses (Article 46, paragraph 2, item (c) and paragraph 5 of the GDPR) as approved by the European Commission) reasonably necessary to ensure your data is safely stored and processed in accordance with the provisions set forth in this Privacy Policy and the GDPR and other applicable laws and regulations. Please contact us at any time if you would like to know more about details regarding the safeguards we have in place for transfers of personal data outside the EEA.

iii. Direct marketing

If you do not wish to receive information that we provide to you in relation to our products, services, and the like (direct marketing), we refrain from conducting direct marketing addressed to you. If you do not wish to receive direct marketing, please contact us through the services, etc. you use or by contact us using the contact details at “v. Your rights”.

iv. Automated decision-making

We do not conduct decision-making that is based on automated processing (including profiling) which produces a legal or similar material effect on you.

v. Your rights

You have the rights set out below in relation to your personal data used for this Applications.

If we receive any request from you in relation to the following, we will faithfully and appropriately deal with that request in accordance with the GDPR and other applicable laws and regulations after confirming that the person making the request is you or a person delegated by you to act on your behalf.

• Right to access personal data: You have the right to obtain confirmation from us regarding whether any of your personal data is being processed, and if your personal data is being processed, you will have the right to access your personal data and certain information in connection to that personal data.
• Right to rectify personal data: If your personal data held by us is incorrect, you will have the right to demand that we rectify the personal data.
• Right to erase personal data (right to be forgotten): If you satisfy certain conditions, you will have the right in some cases to demand erasure of your personal data held by us.
• Right to restrict processing of personal data: If you satisfy certain requirements, you will have the right in some cases to restrict the processing of your personal data held by us.
• Objections against processing of personal data: If you satisfy certain conditions, you will have the right in some cases to object to our processing of your personal data.
• Right to data portability of personal data: If you satisfy certain conditions, you will have the right in some cases to receive in a structured, commonly used, and machine-readable format the personal data that you have provided to us and will have the right to transmit that data to another controller without hindrance from us.

You can correct a part of your data on this Application. If you have any other requests regarding the processing of your data, please contact us through contact form in this Application.

vi. Contacting us

If you have any demands, inquiries or requests regarding the processing of personal data, please contact the following address in writing. You can also contact our data protection officer.

Yamaha Motor Co., Ltd.
2500 Shingai, Iwata-shi, Shizuoka-ken, 438-8501, Japan

Data Protection Officer Email:

i. Notification for Marketing and Advertising

We may contact you by application message, email, SMS, or any other means of communication you have provided for marketing and advertising purpose. This includes maintenance reminder based on milage of your vehicle.

iii. Legal Basis

Legal Basis for processing your personal data is based on your consent. Consent means any freely given, specific, informed and unambiguous indication of your wishes by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to you. You have the right to withdraw your consent, unless otherwise provided by law.

iii. Retention Period

We start processing your data when you consented to this Privacy Policy and Terms of Use. We retain your data until three months after you have terminated your Yamaha Motor ID.

iv. Undesirable consequences and damages that may occur

You should not expect undesirable consequences and damages based on this processing. However, like any web-based services, it is true that there is a risk of data leak or breach. To ensure your data security, we implement and keep up-to date technical and organizational security measures. In case of data leak or breach, we will notify you and applicable authority following guidance of the law and conduct investigation for the assessment and future prevention.

v. Rights and obligations of the data subject

You also have a right to file complaints, claim damages, and self-protection. If you have any queries about use of this Application and/or the processing of your data, please contact us from the contact form in this Application or to the contact information.