EXYOSE Inc. (hereinafter referred to as "EXYOSE") recognizes the importance of personal data protection and will comply with the General Data Protection Regulation (GDPR) and related laws and regulations (hereinafter referred to as "Laws"). We will appropriately handle personal data provided by customers located within the European Economic Area (EEA) and strive to protect customer privacy.
Please read this GDPR Privacy Policy in its entirety before using the website or receiving various services provided by EXYOSE.
Personal data refers to information (including "personal data" as defined by Article 4 of the GDPR) such as address, name, telephone number, email address, and other information that can identify the customer as a specific individual.
【Collection of Personal Data】
EXYOSE may collect the following personal data from customers:
■Name, address, date of birth, telephone number, email address, occupation, age, username
■Access history information, such as IP addresses and Cookie information associated with website access
■Information regarding transactions, such as purchase information, inquiry content, customer account information, order and contract information, delivery details, billing information, financial institution account information, transaction and contact history, and interactions on EXYOSE's website
■Terminal unique identifiers and location information
【Purposes and Legal Basis for Processing Personal Data】
EXYOSE primarily collects personal data from customers in the following cases. The purposes and legal basis for collecting and processing personal data are as follows:
■Registration procedures and provision of various services (Performance of a contract)
■Confirmation of orders for products and paid services, payment processing, and product shipping (Performance of a contract)
■When EXYOSE provides a service jointly with a business partner, to provide the minimal necessary user information to the business partner for the provision of that service when the customer uses the service (Performance of a contract)
■Application procedures for employment, determination of suitability for employment, and guidance for job seminars, etc. (Legitimate interest)
■Guidance on recommendations, new products, and various services based on usage history (Legitimate interest)
■Marketing research, planning, and research and development (Legitimate interest)
■Development of new products and services (Legitimate interest)
■Improving convenience, such as customizing advertisements and content displayed on websites and services for each customer (Legitimate interest)
■Provision of services, understanding, and analysis of usage status based on store visits, purchases, browsing, behavioral history, or location information (Legitimate interest)
■Creating statistical data by aggregating personal data, which cannot identify individuals, for marketing, development of new products/services, and improvement of our service quality (Legitimate interest)
【Sharing with External Parties】
EXYOSE may share personal data with the following business partners and third parties:
■Service Providers
EXYOSE may use third parties, such as marketing companies and IT service providers, to perform its operations. In this case, sharing personal data may be necessary to provide the services. Shared personal data will be used under the instruction of EXYOSE and in line with the original purpose.
■Legal Obligations
In accordance with Laws, EXYOSE may disclose personal data to public law enforcement agencies in response to legal requirements, court orders, or requests from government or law enforcement agencies (including requirements for national security or law enforcement measures, and requests from government agencies and courts in the countries where we operate). Where permitted by law, we may disclose personal data to third parties (including legal counsel) as necessary to establish, assert, or defend against legal claims, or to exercise rights, protect our property or the rights, property, or safety of others, or to support external audits, compliance, and corporate governance functions.
【Transfer of Personal Data to Third Countries Outside the EEA】
Where EXYOSE must internationally transfer the personal data of customers within the EEA to a third country outside the EEA, we will implement appropriate safeguards necessary for international data transfer.
【Note】
The website operated by EXYOSE may contain links to external websites. Please note that EXYOSE cannot be held responsible for the processing of your personal data on such external websites. Furthermore, third parties other than us may independently collect personal data through advertisements or other means. Please note that EXYOSE cannot be held responsible for the processing of your personal data in such cases either.
【Rights of Customers within the EEA】
Customers within the EEA have the following rights regarding their personal data held by EXYOSE:
■Right to access their personal data
■Right to request the rectification of inaccurate personal data
■Right to request the erasure of their personal data
■Right to request the restriction of processing of their personal data
■Right to receive their personal data in a structured, commonly used, and machine-readable format (Data Portability)
■Right to object to the processing of their personal data
■Right to withdraw consent related to their personal data at any time, where the processing of personal data is based on consent
【Contact Point for Inquiries, etc.】
Opinions, questions, and complaints regarding your personal data are accepted via the form below.
After receiving a request from a customer, EXYOSE will request the customer to present the necessary documentation specified by EXYOSE for identity verification and confirm that the request is made by the customer themself. EXYOSE will respond to the request upon completion of this verification. If the request is made by an agent other than the individual themself, a document proving the authority of representation must be submitted.
【Contact Information of the Data Protection Manager】
EXYOSE has appointed a Data Protection Manager to appropriately engage with issues concerning the protection of personal data. The contact information for the Data Protection Manager is as follows:
337-13 Ishiharada-cho, Kashihara, Nara, Japan
EXYOSE Inc., Personal Data Inquiry Section
【Handling of Personal Data of Individuals Under 16 Years of Age】
Please understand that consent from a parent or guardian may be obtained as necessary for the provision of personal data of individuals under 16 years of age.
【Retention Period】
EXYOSE will not retain personal data longer than is necessary for the purposes for which it was collected or to meet the requirements of applicable law.
【Cookies】
EXYOSE's website, like many other websites, may use Cookies and other automatic information collection programs, subject to consent where necessary.
A Cookie is a function that allows EXYOSE's website to store user information on the user's browser or hard drive. Using Cookies saves the user the trouble of manually re-entering information stored on the hard drive. Cookies also help improve the convenience of the website by recording when and how EXYOSE's website was used. You can disable the Cookie function through your browser settings, but please note that certain features of EXYOSE's website may not function.
EXYOSE's website may use IP addresses, conduct trend analysis, manage EXYOSE's website, track user movements and online activities, and collect demographic information such as age and gender for the same purposes as above.
EXYOSE may use Web Beacons on the website to access and set Cookies. We may also collect information on how users navigate the website. Information provided by Web Beacons includes the computer's IP address, the browser being used, and the time the website was viewed. It also includes information on when emails or newsletters were opened using a Web Beacon.
For details on how Cookies are used, please see the
Cookie Policy.
【Miscellaneous】
The Japanese text shall be the authoritative version of this GDPR Privacy Policy.
Please note that if you do not provide your own information in a timely and accurate manner, you may not receive adequate services.
You have the right to lodge a complaint with the data protection authority that has jurisdiction over your place of residence regarding the processing of personal data related to you.
【Changes to the Privacy Policy】
EXYOSE may change or update this GDPR Privacy Policy without restricting the individual rights stated in the Privacy Policy. If EXYOSE changes this GDPR Privacy Policy, the update date will be noted.
End
Revised on December 1, 2023
EXYOSE Inc.
