Mizuho OSI respects your privacy and commits to protecting it through our compliance with the practices explained in this Privacy Policy. Mizuho OSI does not sell your personal  Information.

This Privacy Policy describes how we collect, use, maintain, protect and disclose the personal information we may collect from you or that you may provide when you visit our website, contact us via email, fax or phone, or any other method of communication such as social media. Please see the ‘Jurisdiction Specific Terms’ for additional information for individuals located in the European Union (“EU”) and the United Kingdom (“UK”).

Mizuho OSI collects and uses different types of personal information about you which includes:

• your first and last name, address, e-mail, and phone number
• personal information you provide when you send us feedback or contact us via email. We will collect your name and email address, as well as any other content included in the email, in order to send you a reply.
• Your email address if you sign up for our newsletter.
• If you apply for a job with us, we may collect your professional credentials and skills, educational and work history, LinkedIn profile page, personal website, authorization to work in the U.S., immigration status, criminal history, and other information that may be included on a resume or curriculum vitae as well as in a cover letter. This may also include diversity information that you voluntarily provide.
• Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, browser type and version, time zone setting, browser plug-in types and versions, or operating system and platform. Please see our separate Cookie Policy for further information. https://widget.clym-sdk.net/cookies

Sensitive Personal Information

Sensitive Personal Information is personal information, but which is considered more sensitive and includes, amongst other things, SSN, financial information, driver license numbers, biometric information, precise geolocation, and racial and ethnic origin.

Mizuho OSI may collect SPI such as –

• SSN, driving license number and health related information when you apply to work with us
• Any SPI you have provided the information as part of your communications with us.

How do we collect your data?

Mizuho OSI collects your personal information when you provide it to us. This could be when you contact us with a query or when you sign up to our newsletter.

Other data are collected automatically by our IT systems when you visit the website. These data are primarily technical data such as the browser and operating system you are using or when you accessed the page. These data are collected automatically as soon as you enter our website. If you are resident within the UK or the EU you will be asked to consent to any cookies being used.  Our Cookie Policy provides more detailed information on this processing.

What do we use your data for?

Mizuho OSI uses your personal information to respond to any questions you may have, to manage an ongoing relationship with you as a client, to process your applications to work with us, to provide you with services you have requested and to ensure the proper functioning of our website.

What rights do you have regarding your personal information?

Your California Privacy Rights

If you are a California resident you have the following rights under the California Consumer Privacy Act of 2018 (“CCPA”) and the California Privacy Rights Act of 2020 which significantly amends and expands the CPPA:  

• Right to Access/Know any or all of the following information relating to your personal information that we have collected and disclosed in the last 12 months (upon verification of your identity) –
  • The specific personal information we have collected about you
  • The categories of personal information we have collected about you
  • The categories of sources of the personal information
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed
  • The categories of personal information we have sold or shared and the categories of third parties to whom the information was sold/shared
  • The business or commercial purposes for collecting, selling or sharing the personal information
• Right to Request Deletion of Personal Information. You have the right to request the deletion of your Personal Information collected or maintained by us as a business.
• Right to Opt-Out of the Sale of Personal Information. You have the right to opt-out of the sale of your Personal Information by us as a business however we do not sell personal information.
• Right to Opt-In to personal information sales to third parties for consumers under the age of 16. However, we do not sell personal information of minor consumers.
• Right to Non-Discrimination for the Exercise of Your Privacy Rights. You have the right not to receive discriminatory treatment by us for the exercise of your privacy rights conferred by the CCPA/CPRA.
• Authorized Agent. You may designate an authorized agent to make a request under the CCPA on your behalf by us with a copy of your power-of-attorney document granting that right.
• Financial Incentives. We do not provide any financial incentives tied to the collection, sale, or deletion of your Personal Data.

In addition to the rights mentioned above, the CPRA grants California residents with the following additional rights:

• The right to opt out of sharing of personal information to third parties now or in the future
• The right to request rectification/correction of inaccurate personal information, considering the natre and purposes of the processing of the information
• The right to limit use and disclosure of sensitive personal information to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer.

Please note that if exercising these rights limits our ability to process personal information (such as a deletion request) we may no longer be able to provide you with our products and services or engage with you in the same manner.

How to Exercise Your California Consumer Rights

To exercise any of your rights mentioned above, please submit a request by contacting us

on [email protected] or our toll free number 1 888-899-0452.  You can also click on the following link <INCLUDE HERE LINK TO THE ‘DO NOT SELL OR SHARE MY PERSONAL INFORMATION’

We will need to verify your identity before processing your request.  In order to verify your identity, we will generally require sufficient information from you so that we can match it to the information we maintain about you in our systems. Sometimes we may need additional personal information from you to be able to identify you. We will notify you. 

We may decline a request to exercise the right to know and/or right to deletion under the CCPA as well as your right to rectification under the CPRA, particularly where we cannot verify your identity or locate your information in our systems or as permitted by law.

You may choose to designate an authorized agent to make a request under the CCPA or CPRA on your behalf. No information will be disclosed until the authorized agent’s authority has been reviewed and verified. Once an authorized agent has submitted a request, we may require additional information (i.e., written authorization from you) to confirm the authorized agent’s authority. 

Individuals who are dissatisfied with Mizuho’s handling of requests can, of course, file a complaint with the Office of the Attorney General (for CPPA/CPRA complaints) Consumer Complaint Against A Business/Company | State of California – Department of Justice – Office of the Attorney General or, from 2023, with the California Privacy Protection Agency California Privacy Protection Agency (CPPA).

Minors Under Age 16

Our services are intended for business use, and we do not expect them to be of any interest to minors. We do not intentionally collect any personal information of consumers below the age of 16. We do not sell the personal information of California consumers.

Retention of personal information

Mizuho OSI only retains personal information as long as is necessary and which is set out in our retention schedule. SPI will be kept in line with our retention periods such as, for example, when you apply to work with Mizuho  we will keep that information for the time required by legal standing and our retention schedule.

Disclosures/Sharing/Selling

Mizuho OSI does not sell any personal information. We do not sell or share the personal information of consumers under 16 years of age.

We may share your personal information internally with our corporate group. We may also share with the following –

• Business partners, suppliers, service providers, sub-contractors, and other organizations we use to support our business We contractually require these third parties to keep that personal information confidential and use it only for the contracted purposes.
• Third parties to market their products or services to you if you have consented to/not opted out of these disclosures. We contractually require these third parties to keep that personal information confidential and use it only for the contracted purposes.
• To comply with any court order, law, or legal process, including responding to any government or regulatory request. 
• To enforce or apply our terms of use and other agreements.
• To protect the rights, property, or safety of our business, our employees, our customers, or others. This includes exchanging information with other companies and organizations for the purposes of cybersecurity, fraud protection, and credit risk reduction.

Data Security

The security of your personal information is very important to us. We use a number of physical, electronic, and administrative safeguards designed to protect your personal information.

Unfortunately, the transmission of information via the internet is not completely secure and we cannot guarantee the security of your personal information transmitted to our Website. Any transmission of personal information is at your own risk. We are not responsible for the circumvention of any privacy settings or security measures contained on the Website.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as the inquiries you send to us as the site operator. You can recognize an encrypted connection in your browser’s address line when it changes from “https://” to “https://” and the lock icon is displayed in your browser’s address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

About this website

Contact form
Should you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We do not share this information without your permission.

We will retain the data you provide on the contact form until you request its deletion, revoke your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

To inform you about important changes such as those within the scope of our site or technical changes, we will use the email address specified during registration. We will continue to store the data collected during registration for as long as you remain registered on our website. Statutory retention periods remain unaffected.

Newsletter

If you would like to receive Mizuho OSI’s  newsletter, we require a valid email address as well as confirmation that you agree to receive this newsletter. No additional data is collected or is only collected on a voluntary basis. We only use this data to send the requested information and do not pass it on to third parties.

The data provided when registering for the newsletter will be used to distribute the newsletter until you cancel your subscription when said data will be deleted. Data we have stored for other purposes (e.g. email addresses for the members area) remain unaffected.

Jurisdiction Specific Terms

European Union and the United Kingdom

Role under the GDPR. For the purposes of the “GDPR” (i.e., the General Data Protection Regulation 2016/679 (“EU GDPR”) and the UK GDPR which supersedes the EU GDPR (“UK GDPR”)) in respect of the processing of your personal information processed in relation to this website, Mizuho OSI is the controller; a controller when we use your personal information for our own purposes, as set out in this Privacy Policy.

Personal data. For users in the EU and/or the UK, references to your “personal information” in this Privacy Policy should be understood to include a reference to your “personal data” (as defined in the EU GDPR and UK GDPR). Essentially, personal data is information about an individual, from which that individual is either directly identified or can be identified.

Legal bases for processing. In respect of each of the purposes for which we use your personal information, the EU GDPR and UK GDPR requires us to ensure that we have a “legal basis” for that use. Our legal bases for processing your personal information described in this Privacy Policy are listed below.

• Where we need to perform a contract, we are about to enter into or have entered into with you (“Contractual Necessity”).
• Where it is necessary for our legitimate interests and your interests and fundamental rights do not override those interests (“Legitimate Interests”).
• Where we need to comply with a legal or regulatory obligation (“Compliance with Law”).
• Where we have your specific consent to carry out the processing for the purpose in question (“Consent”).
  

We have set out below, in a table format, the legal bases we rely on in respect of the relevant purposes for which we use your personal information – for more information on these purposes, what they cover, and the data types involved, see ‘Types of Data We May Collect About You’ and ‘How We Use Your Personal Information’.

 

Purpose	Legal basis
Job Applications	Contract
Service delivery	Legitimate Interests
Security	Compliance with Law Legitimate Interests
Service personalization	Legitimate Interests Consent
Interest-based advertising	Legitimate Interests Consent
Service analytics	Consent
Compliance with law and co-operation with authorities	Compliance with Law
Protection and enforcement of rights	Compliance with Law Legitimate Interests
Further uses	The original legal basis relied upon, if the relevant further use is compatible with the initial purpose for which the personal information was collected. Consent, if the relevant further use is not compatible with the initial purpose for which the personal information was collected.

 

 

We may share your personal information with third parties who are based outside the EEA/EU and/or the UK. In such circumstances, this processing will involve a transfer of your personal information outside of the EEA/EU and/or the UK. We endeavor to ensure that people to whom we provide your personal information hold it subject to the standards required by EEA/EU and/or UK data protection legislation. So, whenever we transfer your personal information out of the EEA/EU and/or UK, we ensure a similar degree of protection is afforded to it by making sure at least one data transfer mechanisms in the EU GDPR and the UK GDPR has been implemented (e.g., the European Commission’s Standard Contractual Clauses (EU) or an International Data Transfer Agreement (UK)).

Your Rights. If you are in the EU or the UK, you have the following rights in relation to how we collect, use, and disclose personal information in our capacity as a controller-

• Right to Access. You have the right to request access to your personal information held by us.
• Right to Rectification. You have the right to request rectification of inaccurate personal information and, taking into account the purpose of processing, to ensure it is complete.
• Right to Erasure (or “Right to be Forgotten”). You have the right to have your personal information erased or deleted in certain circumstances.
• Right to Restrict Processing. You have the right to request restriction of processing of your personal information.
• Right to Data Portability. You have the right to transfer your personal information to another supplier/organization, when possible.
• Right to Object. You have the right to object to the processing of your personal information such as direct marketing.
• Right Not to be Subject to Automated Decision-Making. You have the right not to be subject to automated decision-making, including profiling, which produces legal effects.

If you would like to exercise any of your data protection rights or complain about the handling of your personal data you can make your request directly via our website https://www.mizuhosi.com/  Alternatively, you can contact us on [email protected] or 1 888-899-0452.

Retention. We retain personal information for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements. Our retention periods are documented in our Retention Schedule.

Complaints. If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us or submit a complaint to the data protection regulator in your jurisdiction.  

• For users in the EU – the contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en
• For users in the UK – the contact information for the UK data protection regulator is below:

The Information Commissioner’s Office 
Water Lane, Wycliffe House Wilmslow – Cheshire SK9 5AF
Tel. +44 303 123 1113

Website: https://ico.org.uk/make-a-complaint/  

Privacy Policy Last Review –

January 2023