inquiry
Privacy Policy
Sakura Enter Japan (hereinafter referred to as "our company") recognizes the importance of protecting personal information and complies with the Act on the Protection of Personal Information (hereinafter referred to as "Personal Information Protection Act"), and strives to handle and protect personal information appropriately in accordance with the following privacy policy (hereinafter referred to as "this Privacy Policy"). Unless otherwise specified in this Privacy Policy, the definitions of terms used in this Privacy Policy will follow those set forth in the Personal Information Protection Act.
1. Definition of Personal Information
In this Privacy Policy, "personal information" means personal information as defined in Article 2, Paragraph 1 of the Personal Information Protection Act.
2. Purpose of use of personal information
We will use personal information for the following purposes:
To provide our services, products, etc. (hereinafter referred to as "our services, etc.")
To provide information about our services, etc., and to respond to inquiries, etc.
To provide information about our services, etc.
To respond to any actions that violate our terms and conditions, policies, etc. (hereinafter referred to as "Terms, etc.") regarding our services, etc.
To notify you of changes to the terms and conditions of our services, etc.
To help improve our services, etc., and develop new services, products, etc.
To understand and analyze the acquired information such as browsing history, behavioral history, and purchase history, and to improve our services, add functions, and develop and advertise new products and services that meet your interests and preferences.
For employment management and internal procedures (personal information of executives and employees)
To manage shareholders, comply with procedures under the Companies Act and other laws and regulations (regarding personal information of shareholders, stock acquisition rights holders, etc.)
To create statistical data in relation to our services, etc., that has been processed into a format that does not identify individuals.
To provide information (including advertisements) from our company
For other purposes incidental to the above purposes of use
3. Changes to the purpose of use of personal information
We may change the purpose of use of personal information within the scope that is reasonably deemed relevant, and if we make any changes, we will notify or publicly announce the individual who is the subject of the personal information (hereinafter referred to as the "Person").
4. Restrictions on Use of Personal Information
Except as permitted by the Personal Information Protection Act and other laws and regulations, we will not handle personal information beyond the scope necessary to achieve the purpose of use without the consent of the individual, except in the following cases:
When required by law
When it is necessary to protect a person's life, body, or property, and it is difficult to obtain the individual's consent.
When it is particularly necessary for the improvement of public health or the promotion of healthy child development, and it is difficult to obtain the consent of the individual.
When it is necessary to cooperate with a national government agency, local government, or a person commissioned by them in carrying out duties prescribed by law, and obtaining the individual's consent may impede the performance of said duties.
When providing personal data to an academic research institution, etc., and the academic research institution, etc. needs to handle the personal data for academic research purposes (including when part of the purpose of handling the personal data is academic research purposes, excluding cases where there is a risk of unjustly infringing on the rights and interests of individuals).
5. Appropriate Acquisition of Personal Information
5.1
We will acquire personal information in a fair manner and will not acquire it through false pretenses or other illegal means.
5.2
We will not acquire sensitive personal information (as defined in Article 2, Paragraph 3 of the Act on the Protection of Personal Information) without the prior consent of the individual, except in the following cases:
If any of items 1 to 4 of paragraph 4 applies
When acquiring sensitive personal information from an academic research institution, etc., and it is necessary to acquire such sensitive personal information for academic research purposes (including cases where part of the purpose of acquiring such sensitive personal information is academic research purposes, excluding cases where there is a risk of unduly infringing on the rights and interests of individuals) (limited to cases where our company and the academic research institution, etc. conduct academic research jointly).
When the sensitive personal information has been made public by the individual, a national government agency, a local government, an entity listed in any of the items of Article 57, Paragraph 1 of the Personal Information Protection Act, or another entity specified by the rules of the Personal Information Protection Commission
When acquiring sensitive personal information that is obvious from its appearance by visually inspecting or photographing the individual
When sensitive personal information is provided in a manner that is not considered to be a third-party provision pursuant to the proviso of Section 7.1
6. Safety management of personal information
We provide necessary and appropriate supervision to our employees to ensure the safe management of personal information against risks such as loss, destruction, falsification, and leakage. Furthermore, when we outsource all or part of the handling of personal information, we provide necessary and appropriate supervision to ensure the outsourcee manages personal information safely. An overview of our safety management measures is as follows:
We comply with the Personal Information Protection Act and related laws and regulations, as well as applicable guidelines, and accept questions, consultations, and complaints regarding the handling of personal data at the point of contact specified in Section 15.
We will determine the handling method, responsible person, person in charge and their duties for each stage of the process, such as acquisition, use, storage, provision, deletion and disposal.
We will appoint a person responsible for handling personal data, and the person responsible will confirm that personal data is being handled in accordance with the established handling methods.We will also establish a system for employees to report to the person responsible if they become aware of any actual or potential violations of laws, regulations, internal rules, etc. Furthermore, the person responsible will regularly inspect the status of handling of personal data.
We will provide necessary training to employees regarding the handling of personal data. In addition, we will include matters regarding confidentiality of personal data in our work regulations.
We will implement measures to ensure that personal data cannot be easily viewed by anyone other than employees who are authorized to handle personal data and the individual himself/herself. Furthermore, in order to prevent theft or loss of devices, electronic media, documents, etc. that handle personal data, we will store electronic media on which personal data is recorded or documents containing personal data in lockable cabinets, filing cabinets, etc. Furthermore, if an information system that handles personal data is operated solely with devices, we will secure such devices with security wire, etc. In addition to the above, we will take necessary measures to prevent theft or loss of devices, electronic media, documents, etc. that handle personal data, and will implement measures to prevent personal data from being easily identified when such devices, electronic media, etc. are carried, including when moving within the business premises.
We will clarify the devices that can handle personal data and the employees who handle those devices, and prevent unnecessary access to personal data. We will also introduce a system to protect devices that handle personal data from unauthorized external access or malicious software.
When personal data is deleted or when devices and electronic media on which personal data is recorded are disposed of, the person in charge will confirm this.
7. Third party provision
7.1
Our company will not provide personal information to third parties without the prior consent of the individual, except in cases falling under any of the items in paragraph 4. However, the following cases do not fall under the provision to third parties as defined above.
When personal information is provided in connection with the Company outsourcing all or part of the handling of personal information to the extent necessary to achieve the purpose of use.
When personal information is provided in connection with business succession due to a merger or other reason.
When jointly using personal information in accordance with the provisions of the Personal Information Protection Act
7.2
Notwithstanding the provisions of Section 7.1, except in cases falling under any of the items of Section 4, when providing personal information to a third party (excluding those who have established a system that complies with the standards specified in the rules of the Personal Information Protection Commission pursuant to Article 28 of the Personal Information Protection Act) in a foreign country (excluding countries designated in the rules of the Personal Information Protection Commission pursuant to Article 28 of the Personal Information Protection Act), the Company shall obtain the prior consent of the individual to allow the provision to a third party in a foreign country and shall take other measures pursuant to the Personal Information Protection Act.
7.3
When we provide personal information to a third party, we will create and store records in accordance with Article 29 of the Personal Information Protection Act.
7.4
When we receive personal information from a third party, we will make the necessary checks in accordance with Article 30 of the Personal Information Protection Act, and will create and store records of such checks.
7.5
Notwithstanding the provisions of Section 7.1, we may provide user information to affiliated companies in accordance with the terms of use of our services and other special provisions.
8. Personal Information
When the Company obtains personal information (as defined in the Personal Information Protection Act; the same applies hereinafter) from a third party and uses it as personal data, the Company will take measures such as obtaining the individual's consent in advance for the Company to obtain such personal information as personal data, and will use it within the scope of the purposes of use set out in Paragraph 2.
When providing personal information to a third party, if it is anticipated that the third party will use the personal information as personal data, we will confirm that the third party has obtained the individual's prior consent to obtaining the personal information as personal data.
9. Disclosure of Personal Information
When the Company is requested by an individual to disclose their retained personal data or records of provision to a third party pursuant to the provisions of the Personal Information Protection Act, the Company will disclose the data to the individual without delay after confirming that the request is made by the individual themselves (if the retained personal data or records of provision to a third party do not exist, the Company will notify the individual to that effect). However, this does not apply if the Company is not obligated to disclose the data under the Personal Information Protection Act or other laws and regulations.
10. Correction of personal information
If the Company is requested by an individual to correct, add to, or delete (hereinafter referred to as "Corrections, etc.") the content of their personal information pursuant to the provisions of the Personal Information Protection Act because the personal information is not true, the Company will, after confirming that the request is made by the individual himself/herself, conduct the necessary investigation without delay to the extent necessary to achieve the purpose of use, and based on the results of the investigation, correct the content of the personal information and notify the individual to that effect (if it decides not to make Corrections, etc., the Company will notify the individual to that effect), provided, however, that this does not apply if the Company is not obligated to make Corrections, etc. under the Personal Information Protection Act or other laws and regulations.
11. Suspension of use of personal information, etc.
If the Company is requested by an individual to cease use or delete (hereinafter referred to as "Suspension of Use, etc.") their personal information pursuant to the provisions of the Personal Information Protection Act because their personal information is being handled beyond the scope of the purpose of use previously announced or because it has been obtained by deception or other wrongful means, or if the Company is requested to cease provision (hereinafter referred to as "Suspension of Provision") pursuant to the provisions of the Personal Information Protection Act because their personal information has been provided to a third party without their consent, and if it is found that the request is justified, the Company will, after confirming that the request is made by the individual themselves, cease use, etc. or provision of the personal information without delay and notify the individual to that effect. However, this does not apply if the Company is not obligated to cease use, etc. or provision pursuant to the Personal Information Protection Act or other laws and regulations. If an individual requests that we suspend use, etc. or stop providing their personal information pursuant to the provisions of the Personal Information Protection Act on the grounds that we no longer need to use their personal information, that there has been a leakage, loss, or damage of personal data as stipulated in the Personal Information Protection Act, or that there has been an event related to ensuring the security of personal data that identifies the individual and that is specified in the rules of the Personal Information Protection Commission as having a high risk of harming the rights and interests of individuals, or that there is a risk that the handling of retained personal data that identifies the individual may harm the individual's rights or legitimate interests, and if it is found that the request is justified, we will, after confirming that the request is made by the individual themselves, suspend use, etc. or stop providing their personal information without delay and notify the individual to that effect. However, this does not apply if we are not obligated to suspend use, etc. or stop providing their personal information under the Personal Information Protection Act or other laws and regulations.
12. Handling of Anonymously Processed Information
12.1
When creating anonymously processed information (meaning that defined in Article 2, Paragraph 6 of the Personal Information Protection Act, and limited to that which constitutes the anonymously processed information database, etc. defined in Article 16, Paragraph 6 of the same Act; the same applies hereinafter), the Company will process personal information in accordance with the standards set forth in the rules of the Personal Information Protection Commission.
12.2
When we create anonymously processed information, we will take measures to ensure its safety in accordance with the standards set forth in the rules of the Personal Information Protection Commission.
12.3
When we create anonymously processed information, we will make public the items of information about individuals contained in that anonymously processed information in accordance with the rules of the Personal Information Protection Commission.
12.4
When providing anonymously processed information (including information created by the Company and information provided by a third party; the same applies hereinafter unless otherwise specified) to a third party, the Company will publicly announce in advance the items of information about individuals contained in the anonymously processed information to be provided to a third party and the method of providing the information, in accordance with the rules of the Personal Information Protection Commission, and will clearly indicate to the third party that the information provided is anonymously processed information.
12.5
When handling anonymously processed information, in order to identify the individual whose personal information was used to create the anonymously processed information, the Company will not (1) compare the anonymously processed information with other information, or (2) obtain information regarding descriptions, etc. or individual identification codes deleted from the personal information or the method of processing performed pursuant to the provisions of Article 43, Paragraph 1 of the Personal Information Protection Act ((2) applies only to anonymously processed information provided by a third party).
12.6
The Company will take necessary and appropriate measures for the safe management of anonymously processed information, handle complaints regarding the creation or other handling of anonymously processed information, and take other measures necessary to ensure the proper handling of anonymously processed information, and will endeavor to make the details of such measures public.
13. Use of Cookies and Other Technologies
Our services may use cookies and similar technologies. These technologies help us understand how our services are being used and contribute to improving our services. Users who wish to disable cookies can do so by changing their web browser settings. However, disabling cookies may prevent you from using some of the features of our services.
14. Use of External Services
We may use the access analysis services "Google Analytics" and "Google Analytics Advertising Features" provided by Google.
The functions to be used are as follows:
・Google Analytics Remarketing
・Google Display Network Impression Report
・Google Analytics reports on user demographics and interest categories
15. Name and address of the business operator handling personal information and the name of its representative
桜エンタージャパン
address
CEO 保田 久美子
16. Contact Us
For requests for disclosure, opinions, questions, complaints, and other inquiries regarding the handling of personal information, please contact the following office by phone or email.
Sakura Enter Japan Personal Information Inquiry Desk
Phone number: 090-1265-0299
E-mail: sakurasakukumi00024@gmail.com
(Please note that reception hours are from 9:00 to 18:00 on weekdays.)
17. Continuous Improvement
We will review the operational status regarding the handling of personal information from time to time, strive for continuous improvement, and may change this Privacy Policy as necessary.
Established on September 18, 2022