CSR Information

1. Data Processing

Nintendo respects the privacy rights of its online visitors and recognises the importance of protecting their personal data. Certain information is transmitted to Nintendo's servers by the internet browser of each online visitor when they access the website, including the date and time of access, names of requested files, the referral-webpage, the status (e.g. transaction completed), the internet browser and operation system used, the IP address of the device and the size of transmitted data.

1. 1.1 Nintendo uses this information in order to set up the connection of your device with Nintendo services and to enable you to use the website. If you are located in a country of the European Union or in the UK, the legal basis for this processing is the provision of the service you have requested (Art. 6 para. 1 (b) GDPR).

2. 1.2 The information is further stored in connection logs for the purpose of ensuring the security and proper functioning of the website.
   If you are located in a country of the European Union or in the UK, the legal basis for this processing is Art. 6 para. 1 (f) GDPR. The legitimate interest Nintendo pursues is the protection of Nintendo systems.

   If you are located in a country of the European Union or in the UK, you have the right to object, on grounds relating to your particular situation, at any time to such processing. To exercise this right you may at any time contact Nintendo as provided for in Section 7 of this Privacy Policy.

3. 1.3 Nintendo may also use the information for statistical purposes in an anonymised form.

2. Cookies and Similar Technologies

1. 2.1 General Information
   Nintendo may place cookies on its website. Cookies are small files downloaded to your device. Cookies could be used to ensure the safety and smooth functionality of our website (security cookies and session cookies) and to collect information about the preferences of our online visitors in order to make our online offers more attractive for our users (tracking cookies). Most browsers are automatically set to accept cookies. You can disable all cookies in your browser or set your browser to alert you when cookies are being sent. However, if you do disable cookies, you may not be able to use all functions of this website.

2. 2.2 Security and Session Cookies
   Nintendo employs security and session cookies that are necessary to provide you with the services you have requested. For example, Nintendo employs session cookies to store your selections whilst you navigate to different pages and to provide access to secure areas of the website. If you are located in a country of the European Union or in the UK, the legal basis for using security and session cookies is the provision of the service you have requested (Art. 6 para. 1 (b) GDPR).

3. 2.3 Tracking Cookies
   Nintendo employs the following tracking cookie:

   Google Analytics

   With your consent, if you are located in a country of the European Union or in the UK, this website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google Ireland"). Google Analytics uses cookies, which are text files placed on visitors' computers, to help Nintendo analyse how visitors use the website. The information generated by the cookie about the visitors' use of the website will generally be transmitted to and stored by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google") on servers in the United States.

   On this website, IP anonymisation has been activated. The IP addresses of users from European Union member states, or from other states contracting to the Agreement on the European Economic Area, will be shortened. Only in exceptional cases will a complete IP address be transferred to a Google server in the United States and shortened there. On behalf of Nintendo, Google Ireland will use this information for the purpose of evaluating the website for Nintendo, in order to compile reports on website activity, and to provide other services relating to website activity and internet usage for Nintendo.

   Google Ireland will not associate the IP address transferred in the context of Google Analytics with any other data held by Google Ireland. For further information please visit https://support.google.com/analytics/answer/6004245?hl=en.

   If you are located in a country of the European Union or in the UK, the legal basis for enabling Google Analytics is your consent (Art. 6 para. 1 (a) GDPR). If you are located in a country of the European Union or in the UK, Google Analytics will only be activated if you explicitly allow it. If you permitted the use of Google Analytics, you can disable Google Analytics at any time by updating your cookie settings. Alternatively, Google Analytics can be deactivated by downloading and installing a browser plug-in through the following link: http://tools.google.com/dlpage/gaoptout?hl=en.

   If you are located in a country of the European Union or in the UK, the legal basis for the subsequent processing of the data collected via Google Analytics such as usage, analysis and storage is Art. 6 para. 1 (f) GDPR. The legitimate interest Nintendo pursues is the improvement and optimization of the website and the advertisement strategy for the benefit of the website visitors.

   If you are located in a country of the European Union or in the UK, you have the right to object, on grounds relating to your particular situation, at any time to such processing. To exercise this right, you may at any time download and install the aforementioned browser plug-in or you may at any time deactivate the use of non-essential cookies in the cookie settings.

   This website uses “Google Signals”. Google Signals is an update provided by Google Ireland as part of Google Analytics and enables a cross device tracking only of those users who are logged into their Google account and who have activated “Ads Personalization” in their Google account settings. When using Google Signals aggregated data from website users who are logged into their Google account and who have activated “Ads Personalization” in their Google account is included in Google Analytics reports. The aggregated data Google Signals generates for Nintendo, does not allow Nintendo to draw conclusions as to the identity of any such user. On an aggregate basis, Google Signals provides Nintendo with information about how a visitor interacts with this website from multiple browsers and multiple devices.

   Google account users can control their advertisement experience and can deactivate “Ads Personalization” at any time in their Google account settings.

3. User Communications

When you send an email or other communication to Nintendo, Nintendo uses those communications in order to process your inquiries and respond to your requests.

If you are located in a country of the European Union or in the UK, the legal basis for this processing is the provision of the service you have requested (Art. 6 para. 1 (b) GDPR).

4. Who Has Access to Your Information

Nintendo may share your information with other entities of the Nintendo group to be used in accordance with this Privacy Policy; in particular, with:

• its European affiliates such as Nintendo of Europe AG and its branches in France, the Netherlands, Belgium, Italy, Germany, Austria, Switzerland and the United Kingdom, and Nintendo Iberica, S.A.U.
• Nintendo Australia Pty Limited, located in Australia. The level of data protection provided under Australian law is lower than the level provided in the European Community.
  If Nintendo shares your information with Nintendo Australia Pty Limited appropriate safeguards for an adequate level of data protection are provided for by standard data protection clauses that have been adopted by the European Commission and that have been entered into between Nintendo and Nintendo Australia Pty Limited.

If you are located within the European Union or in the UK, the legal basis for Nintendo sharing your information with other entities of the Nintendo group is Art. 6 para. 1 (f) GDPR. Nintendo has a legitimate interest in sharing your information for internal administrative purposes, in particular to offer the website services and to deal with any inquiries in an efficient and high-quality manner.

If you are located within the European Union or in the UK, you have the right to object, on grounds relating to your particular situation, at any time to such sharing. To exercise this right you may at any time contact Nintendo as provided in Section 7 of this Privacy Policy.

In compliance with applicable data protection requirements, Nintendo may also use third-party data processors and may share your information with such third-party data processors acting on Nintendo's behalf or other entities of the Nintendo group to provide services in connection with the website. Where such third-party processors or other entities of the Nintendo group are located outside the European Union respectively the European Economic Area, such third-party processors or other entities of the Nintendo group are either located in a third country where the European Commission has decided that this country ensures an adequate level or appropriate safeguards for an adequate level of data protection are provided for by standard data protection clauses that have been adopted by the European Commission and that have been entered into between Nintendo and the third-party data processor respectively between Nintendo and the other Nintendo group entity.

5. Storage Time

Nintendo will only store your information as long as necessary to fulfil the purposes for which the information is collected and processed or - where the applicable law provides for longer storage and retention periods - for the storage and retention period required by law. After that your personal data will be deleted. In particular, if you exercise a right to object to the processing of your personal data, Nintendo will delete your personal data that Nintendo processed for the purpose to which you objected without undue delay, unless another legal basis for processing and retaining this data exists or unless applicable law requires us to retain the data.

6. Your rights under GDPR

If you are located in a country of the European Union or in the UK, you may in particular, without limitation, have the following rights under applicable European data protection law:

• Right of access: You have the right to obtain confirmation from Nintendo as to whether or not Nintendo processes personal data from you and you also have the right to at any time obtain access to our personal data stored by Nintendo. To exercise this right you may at any time contact Nintendo as provided in Section 7 of this Privacy Policy.
• Right to rectification of your personal data: If Nintendo processes your personal data, Nintendo shall endeavour to ensure by implementing suitable measures that your personal data is accurate and up-to-date for the purposes for which Nintendo collected your personal data. If your personal data is inaccurate or incomplete, you have the right to obtain the rectification of such data. To exercise this right you may at any time contact Nintendo as provided in Section 7 of this Privacy Policy.
• Right to erasure of your personal data or right to restriction of processing: You may have the right to obtain the erasure of your personal data or the restriction of processing of your personal data. To exercise this right you may at any time contact Nintendo as provided in Section 7 of this Privacy Policy.
• Right to data portability: You may have the right to receive the personal data concerning you and which you have provided to Nintendo, in a structured, commonly used and machine-readable format or to transmit those data to another controller. To exercise this right you may at any time contact us as provided in Section 7 of this Privacy Policy.
• Right to object: You have the right to object to the processing of your personal data as further specified in this Privacy Policy.
• Right to lodge a complaint with supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority located in the European Union. You may contact the Hesse Data Protection Supervisor.

7. Nintendo’s European Representative and Contact

If you are located in a country of the European Union or in the UK and if you have any questions about this Privacy Policy and Nintendo's data processing activities or if you want to exercise any of your rights under GDPR, please contact:

Nintendo's European representative Nintendo of Europe AG, Attn.: Legal Department, Goldsteinstrasse 235, 60528 Frankfurt am Main, Germany, or via email at privacyinquiry.ncl@nintendo.de.

Please that Nintendo’s representative in the United Kingdom is Nintendo UK, The Quadrant, 55-57 High Street, Windsor, SL4 1LP.

8. Nintendo’s Data Protection Officer:

Nintendo Co., Ltd., 11-1, Attn.: Data Protection Officer, Hokotate-cho, Kamitoba, Minami-ku, Kyoto, 601-8501, Japan, dataprotectionofficer@nintendo.co.jp.