GDPR Privacy Policy

(1) Applicable privacy laws and regulations

EU General Data Protection Regulation (GDPR)
UK Data Protection Act
Law Concerning the Protection of Personal Information in Japan

(2) GDPR

EU general data protection regulations

(3) EU

The European Union, which includes Iceland, Liechtenstein and Norway, based on the European Union member states and the European Economic Area (EEA) agreement.

(4) Administrator

Natural persons, corporations, government authorities, institutions, and others who determine the purpose and means of processing personal data alone or in collaboration with others. On this privacy policy, it means us.

(5) Personal data

Means information about an identified or identifiable natural person (“Data Subject”). An identifiable natural person is, in particular, by reference to an identifier such as name, identification number, location data, online identifier, or the physical, physiological, genetic, mental, economic, and cultural nature of the natural person. A person who can be identified directly or indirectly by referring to one or more elements that indicate physical or social identity.

(6) Data subject

An identified or identifiable natural person whose personal data is processed by the processing administrator

(7) Processor

A natural person or corporation, public institution, department or other organization that handles personal data on behalf of the administrator

(8) Acquirer

It means a natural person or corporation, public institution, department or other organization that receives disclosure of personal data regardless of whether it is a third party or not. However, a public institution that can obtain personal data within the framework of a special investigation in accordance with EU law or the national law of a member state is not considered an acquirer. The handling of the data by public authorities shall be in accordance with the purpose of the handling and shall comply with applicable data protection provisions.

(9) Third party

A natural person or corporation, public institution, department or other organization other than the data subject, administrator, processor, and the person who is authorized to handle personal data under the direct approval of the administrator or processor.

(10) Processing restrictions

Mark personal data stored in records to limit its processing in the future

(11) Processing

It shall be available for collection, recording, editing, composition, record keeping, modification or modification, search, reference, use, disclosure by transmission, distribution, or otherwise, whether by automatic means or not. Performing or performing a group of tasks performed on personal data or a group of personal data, such as things, alignment or combination, restriction, erasure or destruction.

(12) Profiling

Analyzing or predicting certain personal aspects associated with a natural person, in particular aspects of the natural person’s ability to perform, financial status, health, personal preferences, interests, credibility, behavior, location and mobility. Automatic processing of personal data in any form, consisting of the use of personal data to do so

(13) Consent of data subject

It means an unambiguous, unambiguous, representation of the data subject’s intent, freely given, specified, and pre-explained, by which the data subject, by its statement or explicit positive action. A statement of consent to the handling of personal data related to you

(1) Classification by duration

1. Session cookie

   Cookies that are cleared when the user closes the browser

2. Persistent cookie

   Cookies that remain on the user’s computer / device for a predefined period of time

(2) Classification by attribution

1. First type cookie

   Cookies set by a web server and sharing the same domain

2. Third-party cookies

   A cookie stored by a domain other than the domain of the page you visited. This cookie occurs when a web page references a file such as JavaScript that is outside its domain.

(1) Purpose of processing

We process personal data only for the following purposes:

A. Personal information about customers and business partners

1. Entry / exit management to our facilities
2. Business partner information management, payment, income processing
3. Various communications, business negotiations, contract conclusions, etc. necessary for business
4. Response to various inquiries

B. Personal information of recruitment applicants

1. Providing and contacting recruitment applicants with recruitment information, etc.
2. Hiring business management at our company

C. Personal information about employees, etc.

1. Personnel / labor management
2. Payment of remuneration, salary, bonus, etc.
3. Social insurance, tax procedures, etc.
4. Contact and provide to labor unions, health insurance unions, corporate pension funds, affiliated companies, seconded companies, etc.
5. Procedures for retirement
6. Contact in case of emergency
7. Notification / report to government offices
8. Notification / report / contact to customers and business partners in charge of business
9. For other procedures and communication necessary for business

(2) Source of personal data

We will acquire personal data from the following sources for the purpose of processing (1) above.

1. Obtained directly from the data subject (example: personal data described in the application form, etc.)
2. Obtained indirectly from the data subject (example: IP address obtained when browsing our site)
3. Public information (information on the Internet)
4. Social media (example: Twitter, LinkedIn, Facebook)
5. Survey report provided by a third party

(3) Types of personal data to be acquired

1. Personal attribute information
2. Personal purchase history of personal data processed by our company
3. Products and services provided
4. Financial information
5. Educational background
6. Employee information

(4) Provision and sharing of personal data

We may need to share your personal data with the following third parties for the purpose of processing (1) above. If this is required, we will comply with applicable privacy laws.

• Our group companies
• Professional specialists such as lawyers, tax accountants, and certified public accountants
• Financial institutions
• Current, past and future employees
• Service providers / suppliers

(1) Information rights

When collecting personal data from a data subject, the administrator must provide certain information to the data subject when obtaining the personal data.

(2) Access right

The administrator must provide a copy of any requests for access to the personal data being processed by the data subject.

(3) Right to correct

The data subject can ask the administrator to correct inaccurate personal data.

(4) Right to erase (right to be forgotten)

In certain cases, the data subject has the right to obtain the deletion of personal data about himself from the administrator without delay.

(5) Processing restriction right

When the data subject is fixed. You have the right to have the administrator limit the processing.

(6) Right to notify regarding correction, deletion, and processing restrictions of personal data

In the cases of (3) to (5) above, the administrator will notify the acquirer of personal data of this process, and if the data subject requests it, will notify the acquirer.

(7) Data portability rights

The data subject has the right to receive personal data about him in a structured, commonly used and machine readable format. You also have the right to transfer such data to another administrator without the intervention of the administrator to whom your personal data was provided.

(8) Right of objection

The data subject reserves the right to object to the processing of its personal data based on the need for processing for the purpose of legitimate interests pursued by the administrator or a third party.

(9) Right not to receive automated processing including profiling

The data subject reserves the right not to make decisions based solely on automated processing such as profiling that has a legal effect on itself or has a similar significant impact on the data subject. In addition, we do not perform automated processing including profiling for personal data of the data subject.