日本語
1. はじめに
1.1 octoScope Inc.を含み、またそれに限定されない、Spirent Communications plcとその関連企業（以下、「当社」）は、皆様のプライバシーを保護し尊重することにコミットしています。
1.2 このプライバシー保護声明は、その内部で参照されるすべての文書と合わせ、当社が収集する皆様についてのあらゆる個人情報データ、皆様が当社へ提供するデータが、当社によって処理される際の基本原則を設定します。以下を注意深くお読みいただければ、皆様の個人情報データと、当社がそれを処理する際の当社の見解と手法をご理解いただけます。
1.3 一般データ保護規則の目的に基づき、データ管理者はSpirent Communications plc（企業番号470,893）です。オフィスの登録所在地は次のとおりです：Spirent Communications plc, Origin One, 108 High Street, Crawley, West Sussex RH10 1BD, United Kingdom。
1.4 このプライバシー保護声明は適宜更新されることがあります。以降に当社が加えるすべての変更は、こちらの当社ウェブサイトに掲載されます。定期的に確認し、本方針の更新や変更の内容をご覧ください。
2. データ保護統括
2.1 当社のデータ保護統括の連絡先は次のとおりです：
2.1.1 メール：DataProtection@Spirent.com
2.1.2 電話番号：+44 (0) 1,293 767,676
2.1.3 宛先：Data Protection Lead, Spirent Communications plc, Origin One, 108 High Street, Crawley, West Sussex RH10 1BD, United Kingdom
2.2 データ保護統括は、当社組織と従業員についてデータ保護法を遵守する義務を知らせ、こうした法律の遵守性を監視し、データ保護の影響力評価についてアドバイスし、従業員を訓練して社内監査を実施し、当社が処理する個人情報データの所有主と監督当局との第一連絡先となる責任を負います。
2.3 個人情報データやプライバシー保護に関する事項、あるいは本プライバシー保護声明についてのあらゆる質問や懸念について、データ保護統括へお問い合わせいただけます。その際、メールの件名または本文の最上段にデータプライバシー保護要求（DATA PRIVACY REQUEST）の語句を記載してください。
3. データ処理の詳細
3.1 当社はSpirentの関係者（現行および過去の従業員と契約業者、顧客と潜在顧客、株主、その他Spirentと関わるすべての個人）にまつわる個人情報データを様々な方法と目的で処理します。
3.2 当社が個人情報データを処理するその他のカテゴリーの方々については、本プライバシー保護声明のスケジュールに掲載される、「データ処理の詳細」にて詳細情報が記載されます。以下に明確なスケジュールを示します：
3.2.1 顧客の担当者と潜在顧客
3.2.2 株主
3.2.3 サプライヤー
3.2.4 第三者から当社がデータを受け取る人々
3.3 皆様は複数のカテゴリにわたって当社と関わりを持たれる場合があります。このため、スケジュールのすべてに目を通し、当社が皆様の個人情報データを処理する方法の詳細をご確認ください。
4. データ主体としての権利
4.1 この4章は、一般データ保護規則の定義に基づき、データ主体として皆様が持つ権利を解説します。
4.2 皆様は以下の権利を所有します：
4.2.1 当社が所有する、皆様についての個人情報データへのアクセスを要求する権利
4.2.2 当社が所有する、皆様についての個人情報データの修正を要求する権利
4.2.3 当社が所有する、皆様についての個人情報データの削除を要求する権利
4.2.4 皆様の個人情報データ処理の制限を要求する権利
4.2.5 データ処理に反対する権利
4.2.6 データポータビリティの権利
上記の権利についての詳細情報は、ICOウェブサイト（https://ico.org.uk/）にて得られます。上記の権利のいずれかを行使される場合は、上記の2章に記載された連絡先を通じて、当社のデータ保護統括までご連絡ください。その際、メールの件名または本文の最上段にデータプライバシー保護要求（DATA PRIVACY REQUEST）の語句を記載してください。
4.3 皆様の同意に基づき当社が個人情報データを処理する場合、皆様はいつでもその同意を撤回する権利を有します。この権利を行使される場合は、上記の2章に記載された連絡先を通じて、当社のデータ保護統括までご連絡ください。その際、メールの件名または本文の最上段にデータプライバシー保護要求（DATA PRIVACY REQUEST）の語句を記載してください。4.4 皆様は監督当局へ苦情を申し立てる権利を有します。英国の監督当局は個人情報保護監督機関（ICO）です。詳細な連絡先はhttps://ico.org.uk/global/contact-us/をご覧ください。
SCHEDULES
Schedule 1
Data subject category: personal data relating to customer contacts and sales prospects
| Category of data subject | Customer contacts and sales prospects |
| Categories of personal data that we process | Name, Company name, Job function, Email address, Phone number, Country |
| Source of information | The personal data is collected either (a) directly from the data subject via an online form or (b) provided through a third party such as a trade show organiser or online media owner who has the consent of the data subject or other authority to share the relevant personal data with us. |
| Purposes of the processing | The personal data is collected for marketing purposes, and for communicating with actual or prospective customers for Spirent solutions, products and services. |
| Lawful basis of processing | The lawful basis of processing is that at least one of the following applies: (a) the data subject has given consent to the processing of his or her personal data for the purposes of receiving marketing communications from Spirent; (b) the processing is necessary for the purposes of the legitimate interests pursued by Spirent, including the conduct of direct marketing activities; and/or (c) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Recipients of the personal data | We do not share personal data with other data controllers outside the Spirent group. However, we do engage third parties such as Marketo and Salesforce to process personal data for Spirent in connection with our marketing activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law. |
| Overseas transfers | Personal data that is processed by Marketo and Salesforce may be stored in Cloud services where the data centres are located outside the EEA. This will only be done where we are satisfied that our contractual arrangements include sufficient safeguards for the rights and freedoms of data subjects. |
| Duration of processing | We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements. |
| Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data? | No. The personal data relating to customer staff will be needed for the purposes of the effective management of relationships with the customer as a business: it is not a pre-requisite of forming a contract with the data subject. |
| Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject? | Spirent undertakes a limited amount of automated decision-making, in order to target our mailing activities according to the data subject’s answers to technology and solution questions, job role, company and regional information. None of this automated decision-making will result in decision-making that has legal or similarly significant effects on the data subject. |
| Plans for further processing | None other than for the reason the data was collected. |
Schedule 2
Data subject category: shareholders
| Category of data subject | Shareholders |
| Categories of personal data that we process | Name, Address, Email address, Phone number, Country. Bank details are also required in order that dividend payments can be made directly to the shareholder’s account. |
| Source of information | The personal data is collected directly from the data subject or via their broker or share dealing service when they purchase shares in Spirent. |
| Purposes of the processing | The personal data is collected in order that Spirent can include the data subject on its share register, and send them information about their shareholdings, dividends, shareholder meetings and voting. |
| Lawful basis of processing | The lawful basis of processing is that at least one of the following applies: (d) the data subject has given consent to the processing of his or her personal data for the purposes of receiving shareholder communications from Spirent; (e) the processing is necessary for the purposes of the legitimate interests pursued by Spirent; and/or (f) the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Recipients of the personal data | We do not share personal data with other data controllers outside the Spirent group. However, we do engage share registrars to process personal data for Spirent in connection with its shareholders, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law. |
| Overseas transfers | Personal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects. |
| Duration of processing | We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements. |
| Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data? | Yes. If we do not receive the required shareholder data, we will be unable to record the individual as a shareholder and consequently unable to perform our other obligations as a company to the relevant shareholder. |
| Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject? | No. |
| Plans for further processing | None other than for the reason the data was collected. |
Schedule 3
Data subject category: personal data relating to Suppliers
| Category of data subject | Supplier staff, meaning the permanent, temporary or contract staff of organisations that provide goods or services to Spirent (including companies, partnerships, sole traders, independent contractors and freelance workers) (each a “Supplier”) |
| Categories of personal data that we process | Contact details for Supplier staff including: Name, Company name, Job function, Email address, Phone number, Country. Bank details may also be required in order that Spirent can pay Suppliers for any goods and services they provide. However, this is not generally regarded as personal data (except in the case of sole traders using personal bank accounts). |
| Source of information | The personal data is collected either (a) directly from the data subject during the course of our business dealings with the relevant Supplier or (b) from another contact within the relevant Supplier. If the relevant individual has accessed the Spirent website or clicked on a link in an email from Spirent, their personal data may also be collected automatically by means of website cookies. For more information about our use of cookies, please refer to our Cookie Policy which can be found on the Spirent.com website. |
| Purposes of the processing | The personal data about Supplier staff is collected and used for the purposes of doing business with the relevant Supplier, to enable Spirent to communicate with them. |
| Lawful basis of processing | The lawful basis of processing is that at least one of the following applies: (g) the data subject has given consent to the processing of his or her personal data for the purposes of communicating with Spirent on behalf of the Supplier; (h) the processing is necessary for the purposes of the legitimate interests pursued by Spirent, including the procurement of and payment for goods and services from Suppliers; and/or (i) in the case of sole traders and partnerships, the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Recipients of the personal data | We do not share personal data with other data controllers outside the Spirent group. However, we may engage third parties to process personal data for Spirent in connection with our procurement activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law. |
| Overseas transfers | Personal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects. |
| Duration of processing | We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements. |
| Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data? | No. |
| Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject? | No. |
| Plans for further processing | None other than for the reason the data was collected. |
Schedule 4
Data subject category: people whose data we receive from third parties
| Category of data subject | Individuals who are not themselves stakeholders in Spirent (such as current and former staff, customers, suppliers or shareholders of Spirent), but whose details we have been given for specific purposes such as being an emergency contact or providing employment references. |
| Categories of personal data that we process | Basic contact details including: Name and address, Company name (if relevant), Job function (if relevant), Email address, Phone number, Country |
| Source of information | The personal data is collected only where a member of Spirent staff or a job applicant has provided the relevant details. |
| Purposes of the processing | Where personal data relates to emergency contacts, it will be used only for the purpose of contacting the data subject in the event of an accident or emergency affecting the individual concerned. Where personal data relates to referees, it will be used only to verify the employment history and experience, and the referee’s impressions of the individual concerned. |
| Lawful basis of processing | The lawful basis of processing is that at least one of the following applies: (j) the processing is necessary for the purposes of the legitimate interests pursued by Spirent; (k) the processing is necessary for the performance of a contract with the data subject, or in order to take steps at the request of the data subject prior to entering into a contract; and/or (l) to help us to comply with legal obligations such as (in the case of emergency contacts) ensuring the safety of our staff. |
| Recipients of the personal data | We do not share personal data with other data controllers outside the Spirent group. However, we may engage third parties to process personal data for Spirent in connection with our business activities, under written contracts that comply with the controller-processor requirements mandated by applicable data protection law. |
| Overseas transfers | Personal data may be processed outside the EEA, subject to appropriate safeguards for the rights and freedoms of data subjects. |
| Duration of processing | In the case of emergency contacts, the personal data will remain on file until it is updated by the relevant Spirent staff member. (Spirent staff are asked periodically to validate their emergency contact details.) In all other cases, we will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. The appropriate retention period for any given type of personal data depends on a range of factors, including the nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which it was collected, and the applicable legal requirements. |
| Is the provision of this personal data a statutory or contractual requirement, or a requirement necessary to enter into a contract? If so, is the data subject obliged to provide the personal data in question? What are the possible consequences of failure to provide such data? | No. |
| Is there any automated decision-making done using the personal data (including profiling)? If so, (a) what logic is involved, and what are the significance and envisaged consequences of the processing for the data subject? | No. |
| Plans for further processing | None other than for the reason the data was collected. |