-For Customers and Other Stakeholders Located in the EEA and the UK -
Last Updated: 9/11/2023
We, Kuretake Co., Ltd. ("Kuretake" or "we"), are committed to cautious processing and appropriate management of personal data entrusted from our customers and other stakeholders in each step of the planning, development, design, production and sales of calligraphy supplies, stationery and craft supplies, industrial products and cosmetics.
(1) Collection and Use of Your Personal Data
When you use our services, we may ask you to provide us with your personal data. The personal data provided by you will be used only within the scope necessary to achieve one or more of the following purposes, and will not be used for any other purposes without your consent.
(2) Technologies Related to Personal Information Used on Our Website
(3) Legal Basis for Processing Your Personal Data
(4) Joint Use of Your Personal Data
We may share your personal data with the parties listed in (1) above.
When we provide your personal data to third parties, we oblige such handlers to treat your personal data in accordance with data protection laws, including GDPR so that your information will be protected and only be used in accordance with our instructions and not for the handler's own purposes.
(5) Transfer of Your Personal Data
Your personal data collected and stored by us may be transferred to, and stored by, third parties outside the EEA and the UK. If we transfer your personal data to a third party outside the EEA and the UK, we will ensure that:
the third country has been declared as offering an adequate level of protection for the rights and freedom you have with respect to your personal data, through a decision ("Adequacy Decision") by the European Commission or the UK Government; or
the recipient of the personal data has entered into the standard data protection clauses with us that has been approved by the European Commission or the UK government.
You may obtain further details about the protection afforded to your personal data when transferred outside the EEA and the UK (including a copy of the standard data protection clauses we have entered into with the recipients of your personal data) by contacting us at the contact details set out in paragraph 12 below.
(6) Retention Period of Your Personal Data
We will retain your personal data for the duration necessary for carrying out the purposes stated in Paragraph 1. After the fulfillment of such purposes, your personal data may be stored by us for up to 60 months only for essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our contracts, and then deleted, provided, however, we may retain your personal information for a longer period if required by then applicable laws and regulations.
(7) Security Measures
We, in light of appropriate date protection, take the following security measures for this website to prevent unauthorized access to, leakage of, falsification and other types of mishandling of your personal data.
External access to the server is permitted only through the minimum protocol necessary to provide the service.
Defense against unauthorized access is afforded by virus detection system and other means.
Communication is protected by SSL encryption protocol.
We further take appropriate organizational and technical measures for services other than this website, depending on the types of the services.
We cannot manage your personal information on websites that are not under our control, such as websites of companies, organizations, and individuals that are linked to this website. Since some linked websites may collect your personal information on their own, we recommend that you treat your own personal information with care and check the privacy policies of the respective websites.
(9) Precedence among Policies
(10) Your Rights
You have the following legal rights in relation to your personal information we process.
(i) Right to Withdraw Consent
You have the right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still continue to process your personal data if we are able to rely on other legal grounds.
(ii) Right of Access
You have the right to obtain information regarding our processing of personal data pertaining to you and the right to access your personal data processed by us.
(iii) Right to Rectification
When your personal data processed by us is inaccurate or incomplete, you have the right to request that we rectify such information.
(iv) Right to Erasure
You have the right to request we erase your personal data in certain circumstances.
(v) Right to Restriction of Processing
You have the right to restrict our processing of your personal data in certain circumstances.
(vi) Right to Object
You have the right to object to our processing of your personal data in certain circumstances (including where personal data is processed in direct marketing).
(vii) Right to Data Portability
You have the right to receive your personal data in a structured, commonly used and machine-readable format in certain circumstances and to transfer your personal data directly to third parties to the extent technically feasible.
Please note that this right is only granted to personal data that you have provided to us.
(viii) Right to Lodge a Complaint to a Supervisory Authority
You may exercise the above rights by contacting our contact person in Paragraph 12. You may also lodge a complaint with the competent data protection authority if you believe that your rights have been infringed by our data processing.
Data Protection Team, General Affairs Department, Kuretake Co., Ltd.
Address: 576, 7-chome, Minamikyobate-cho, Nara 630-8670, Japan
E-mail address: email@example.com
Observing Articles 27 and 37 of the GDPR, we have not appointed a representative or data protection officer in the EEA and the UK.