Privacy Policy
-For Customers and Other Stakeholders Located in the EEA and the UK -
Last Updated: 9/11/2023
We, Kuretake Co., Ltd. ("Kuretake" or "we"), are committed to cautious processing and appropriate management of personal data entrusted from our customers and other stakeholders in each step of the planning, development, design, production and sales of calligraphy supplies, stationery and craft supplies, industrial products and cosmetics.
This privacy policy ("Privacy Policy") illustrates how we process the personal data of those located in the European Economic Area ("EEA") consisting of the EU member states, Norway, Iceland and Liechtenstein and the United Kingdom("UK"), in which we operate and provide services.
Please refer to our Privacy Policy on our website for information on how we process the personal data of our customers and other stakeholders located outside of the EEA and the UK.
(1) Collection and Use of Your Personal Data
When you use our services, we may ask you to provide us with your personal data. The personal data provided by you will be used only within the scope necessary to achieve one or more of the following purposes, and will not be used for any other purposes without your consent.
(2) Technologies Related to Personal Information Used on Our Website
When you visit our website, we use cookies for the purpose of authenticating your user information, checking your login status, and improving your customer experience. In addition, for the purpose of improving the usability of our website for you, our website may record access logs such as the IP address of the accessing customer, access date and time, link origin, accessed file, and browser used, etc. Such records include logs automatically stored on the server and logs stored by Google Inc. Such access logs are recorded using logs automatically stored on the server, technology called "web beacons" and cookies from Google Analytics, a service provided by Google, Inc. In addition, this website uses content sharing functions provided by social media such as Twitter and Instagram, as well as the video distribution function of YouTube. For this reason, cookies issued by these social media and other third parties are used to track information provided by you or derived from your usage history. We may also analyze your interests based on your activity history on this website, such as the date and time of access and the files accessed, for the purpose of providing you with useful information.
(3) Legal Basis for Processing Your Personal Data
(4) Joint Use of Your Personal Data
We may share your personal data with the parties listed in (1) above.
When we provide your personal data to third parties, we oblige such handlers to treat your personal data in accordance with data protection laws, including GDPR so that your information will be protected and only be used in accordance with our instructions and not for the handler's own purposes.
(5) Transfer of Your Personal Data
Your personal data collected and stored by us may be transferred to, and stored by, third parties outside the EEA and the UK. If we transfer your personal data to a third party outside the EEA and the UK, we will ensure that:
-
the third country has been declared as offering an adequate level of protection for the rights and freedom you have with respect to your personal data, through a decision ("Adequacy Decision") by the European Commission or the UK Government; or
-
the recipient of the personal data has entered into the standard data protection clauses with us that has been approved by the European Commission or the UK government.
You may obtain further details about the protection afforded to your personal data when transferred outside the EEA and the UK (including a copy of the standard data protection clauses we have entered into with the recipients of your personal data) by contacting us at the contact details set out in paragraph 12 below.
(6) Retention Period of Your Personal Data
We will retain your personal data for the duration necessary for carrying out the purposes stated in Paragraph 1. After the fulfillment of such purposes, your personal data may be stored by us for up to 60 months only for essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our contracts, and then deleted, provided, however, we may retain your personal information for a longer period if required by then applicable laws and regulations.
(7) Security Measures
We, in light of appropriate date protection, take the following security measures for this website to prevent unauthorized access to, leakage of, falsification and other types of mishandling of your personal data.
-
External access to the server is permitted only through the minimum protocol necessary to provide the service.
-
Defense against unauthorized access is afforded by virus detection system and other means.
-
Communication is protected by SSL encryption protocol.
-
We further take appropriate organizational and technical measures for services other than this website, depending on the types of the services.
(8) Scope of our Privacy Policy
We cannot manage your personal information on websites that are not under our control, such as websites of companies, organizations, and individuals that are linked to this website. Since some linked websites may collect your personal information on their own, we recommend that you treat your own personal information with care and check the privacy policies of the respective websites.
(9) Precedence among Policies
In addition to this Privacy Policy, we may establish other policies that provide more detailed information about the services we provide. In the event that an individual privacy policy is established separately from this general Privacy Policy, the individual privacy policy shall take precedence over this Privacy Policy in the event that there are any differences in the content.
(10) Your Rights
You have the following legal rights in relation to your personal information we process.
(i) Right to Withdraw Consent
You have the right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still continue to process your personal data if we are able to rely on other legal grounds.
(ii) Right of Access
You have the right to obtain information regarding our processing of personal data pertaining to you and the right to access your personal data processed by us.
(iii) Right to Rectification
When your personal data processed by us is inaccurate or incomplete, you have the right to request that we rectify such information.
(iv) Right to Erasure
You have the right to request we erase your personal data in certain circumstances.
(v) Right to Restriction of Processing
You have the right to restrict our processing of your personal data in certain circumstances.
(vi) Right to Object
You have the right to object to our processing of your personal data in certain circumstances (including where personal data is processed in direct marketing).
(vii) Right to Data Portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format in certain circumstances and to transfer your personal data directly to third parties to the extent technically feasible.
Please note that this right is only granted to personal data that you have provided to us.
(viii) Right to Lodge a Complaint to a Supervisory Authority
You may exercise the above rights by contacting our contact person in Paragraph 12. You may also lodge a complaint with the competent data protection authority if you believe that your rights have been infringed by our data processing.
(11) Changes to the Privacy Policy
When any changes are made to this Privacy Policy, the revised version and the revision date will be published on this website.
(12) Contact
If you have any questions about this Privacy Policy, exercise of your rights or any other matter relating to the protection of your personal data, please contact the following:
Data Protection Team, General Affairs Department, Kuretake Co., Ltd.
Address: 576, 7-chome, Minamikyobate-cho, Nara 630-8670, Japan
E-mail address: privacy_overseas@kuretake.co.jp
Observing Articles 27 and 37 of the GDPR, we have not appointed a representative or data protection officer in the EEA and the UK.