GDPR PRIVACY POLICY
This GDPR PRIVACY POLICY (this “Privacy Policy”) states the policy for Processing of Personal Data obtained from persons (the “User” or “Users”) residing in EU that use the product or service (the “Service”) of our company (the “Company”). Upon the User’s agreement to this Privacy Policy, the User shall be deemed to have given a voluntary and express consent to the subject matters of the User’s consent stipulated in this Privacy Policy (including, without limitation, the purposes of Processing of Personal Data and transfer of Personal Data to third countries).
1. Definitions
The following terms as used herein shall have the meanings as set forth below. Definitions of the terms that are not defined herein shall be subject to the applicable definitions provided in GDPR.
- “EU” means European Union that includes the member states of European Union, as well as Iceland, Lichtenstein and Norway under Agreement on the European Economic Area (EEA).
- “GDPR” means REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC(General Data Protection Regulation).
- “Applicable Privacy Laws” means applicable privacy laws including GDPR and domestic laws related thereto of relevant countries.
- “Personal Data” means “personal data” as defined in GDPR.
- “Processing” means “processing” as defined in GDPR.
- “Controller” means “controller” as defined in GDPR.
- “Representative” means “representative” as defined in GDPR.
2. Scope of this Privacy Policy
This Privacy Policy shall be applied to the Processing of the Personal Data of the Users in relation to the Service that shall be governed by the Applicable Privacy laws.
3. Users under the age of 16
If any User under the age of 16 uses the Service, it shall make sure to obtain the guardian’s consent to this Privacy Policy or to give the consent to this Privacy Policy under the guardian’s permission thereto.
4. Controller
The Controller for the Processing of the Personal Data shall be the Company, whose contact details are as follows.
Prometech Software, Inc., Corporate Planning Department Hongo Daiichi bldg. 8F, 3-34-3, Hongo Bunkyo-ku, Tokyo E-mail: web@prometech.co.jp |
5. Representative of Controller
The Representative of the Controller and its contact details are as follows.
Particleworks Europe S.r.l. CEO Massimo Galbiati Via della Stazione 27, fraz. Mattarello, 38123 TRENTO | Italy E-mail: info@particleworks-europe.com |
6. Personal Data to be Collected
6.1
The Company may obtain the following Personal Data from the Users.
(1) Name and address
(2) Email address
(3) User name and password
(4) IP address, information of browser and OS, cookie information, history information of website access
(5) Telephone number and FAX number
(6) Name of company, university, department, or position which the Users belong to
(7) Address of company or university which the Users belong to
(8) Contents of the inquiries on web sites
6.2
The Company may collect the Personal Data in the following cases.
(1) When the User subscribes for the Service
(2) When the User otherwise uses the Service
(3) When the Company receives from affiliated parties information regarding transaction record or payment between the User and the Company
or the affiliated parties
(4) When the Users make inquiries on web sites
The Company may obtain the following Personal Data from the Users.
(1) Name and address
(2) Email address
(3) User name and password
(4) IP address, information of browser and OS, cookie information, history information of website access
(5) Telephone number and FAX number
(6) Name of company, university, department, or position which the Users belong to
(7) Address of company or university which the Users belong to
(8) Contents of the inquiries on web sites
6.2
The Company may collect the Personal Data in the following cases.
(1) When the User subscribes for the Service
(2) When the User otherwise uses the Service
(3) When the Company receives from affiliated parties information regarding transaction record or payment between the User and the Company
or the affiliated parties
(4) When the Users make inquiries on web sites
7. Purpose and legal basis of Data Processing
7.1
The Company shall process the Personal Data only for the purposes as set forth below.
(1) Performance of contract, or response to requests of Users prior to executing contract
The Company may process the Personal Data of the User entering into a contract with the Company regarding the Service, for the purpose of performing the contract. The Company may also process the Personal Data of the User prior to entering into such contract, for the purpose of taking steps in response to the Users requests.
(2) Communication and others
The Company may use the Personal Data of the User for the purpose of (i) communication regarding the Service, (ii) notification of information important for the User’s account and/or use of the Service, (iii) responding to complaints, and (iv) providing any other customer services. In addition, the Company saves and uses relevant Personal Data for the purpose to release the User from entering the account information each time when it uses the Service, and to otherwise facilitate the use of the Service. Such Processing of the Personal Data is necessary for performance of contracts or legitimate interests pursued by the Company, namely, for performing the Company’s normal operation.
(3) Marketing
If the Company contacts the User by email for the purpose of marketing, the Company shall obtain the User’s prior consent. Such Processing of the Personal Data is (i) necessary for legitimate interests pursued by the Company, namely, to communicate with the User and provide similar products or services, or (ii) based on the User’s prior consent.
7.2
In cases where the Company intends to further process the Personal Data for a purpose other than that for which the Personal Data were collected, the Company shall provide the User prior to that further Processing with information on that other purpose.
The Company shall process the Personal Data only for the purposes as set forth below.
(1) Performance of contract, or response to requests of Users prior to executing contract
The Company may process the Personal Data of the User entering into a contract with the Company regarding the Service, for the purpose of performing the contract. The Company may also process the Personal Data of the User prior to entering into such contract, for the purpose of taking steps in response to the Users requests.
(2) Communication and others
The Company may use the Personal Data of the User for the purpose of (i) communication regarding the Service, (ii) notification of information important for the User’s account and/or use of the Service, (iii) responding to complaints, and (iv) providing any other customer services. In addition, the Company saves and uses relevant Personal Data for the purpose to release the User from entering the account information each time when it uses the Service, and to otherwise facilitate the use of the Service. Such Processing of the Personal Data is necessary for performance of contracts or legitimate interests pursued by the Company, namely, for performing the Company’s normal operation.
(3) Marketing
If the Company contacts the User by email for the purpose of marketing, the Company shall obtain the User’s prior consent. Such Processing of the Personal Data is (i) necessary for legitimate interests pursued by the Company, namely, to communicate with the User and provide similar products or services, or (ii) based on the User’s prior consent.
7.2
In cases where the Company intends to further process the Personal Data for a purpose other than that for which the Personal Data were collected, the Company shall provide the User prior to that further Processing with information on that other purpose.
8. Provision of Information to Third Party
The Company may provide the Personal Data of the Users to the following parties, to the extent necessary for pursuing the purpose of Processing. As set forth in Section 9.2, such third parties may include parties residing or located in countries outside EU.
(1) Group companies of the Company
(2) Accountants, lawyers and other professional advisers
(3) Providers of the services related to the Service, including, without limitation, data storage, maintenance and payment service
(1) Group companies of the Company
(2) Accountants, lawyers and other professional advisers
(3) Providers of the services related to the Service, including, without limitation, data storage, maintenance and payment service
9. Transfer of Personal Data to Third Countries
9.1
When the Company receives Personal Data from the User, the Personal Data are transferred from EU region to Japan.
9.2
In addition to the foregoing, the Company may, to the extent necessary for pursuing the aforementioned purposes of Processing, transfer Personal Data of the Users to countries outside EU, including, without limitation, Japan, and further process the same. The User may not have the right as a data subject same as that under GDPR in countries outside EU, and the Company shall take steps regarding the User’s Personal Data in accordance with the Applicable Privacy Laws, by means such as execution of standard contractual clauses under GDPR.
9.3
Upon the Users agreement to this Privacy Policy, the User shall be deemed to have given a voluntary and express consent to the transfer of Personal Data to third countries set forth in this Section 9.
9.4
Japan, to which the transfer stipulated in this Section 9 is made, has obtained an adequacy decision by European Commission.
When the Company receives Personal Data from the User, the Personal Data are transferred from EU region to Japan.
9.2
In addition to the foregoing, the Company may, to the extent necessary for pursuing the aforementioned purposes of Processing, transfer Personal Data of the Users to countries outside EU, including, without limitation, Japan, and further process the same. The User may not have the right as a data subject same as that under GDPR in countries outside EU, and the Company shall take steps regarding the User’s Personal Data in accordance with the Applicable Privacy Laws, by means such as execution of standard contractual clauses under GDPR.
9.3
Upon the Users agreement to this Privacy Policy, the User shall be deemed to have given a voluntary and express consent to the transfer of Personal Data to third countries set forth in this Section 9.
9.4
Japan, to which the transfer stipulated in this Section 9 is made, has obtained an adequacy decision by European Commission.
10. Storage Period
The Company shall store the Personal Data of the Users to the extent necessary for the purpose of Processing thereof, and delete the Personal Data when the storage becomes unnecessary for such purpose.
11. Cookies
Cookies or similar technologies may be used in the Company’s service. Such technologies help the Company to recognize the status of use of the Company’s service, etc. and contribute to improvement of the service. When a User intends to disable cookies, the User may disable cookies by changing the web browser’s settings. Please note that when cookies are disabled, a part of the service may be unavailable.
12. Disclosure, Modification, Deletion, etc. of Personal Data
12.1
If a User that is the subject of the Personal Data requires any of the following, please notify the contact address of the Company of that effect. The Company will properly respond to that request pursuant to the User’s right under the Applicable Privacy Laws.
(1) Access to Personal Data
(2) Modification of Personal Data
(3) Deletion of Personal Data
(4) Restriction on Processing of Personal Data
(5) Objection to Processing
(6) Exercise of right to data portability
12.2
For the request under Section 12.1, please submit the following documents by mail or email.
(1) Request form specified by the Company
(2) Document for identification of the User as specified by the Company
(3) Document for identification of the representative of the User as specified by the Company
12.3
To avoid undue modification, divulge, etc. of the Personal Data of the User by a third party, the Company will response to the request by mail or email, only if the identity confirmation is made by the submitted documents. Although the Company will make effort to promptly respond, please note that it may takes time until response, for the confirmation of the applicable registered Personal Data and for assuring accuracy.
12.4
The Company will not return the request form or identification documents received from the User or its representative. Please understand that the Company will keep the request form properly, and delete the identification documents in an appropriate manner when the purpose of use thereof is achieved.
If a User that is the subject of the Personal Data requires any of the following, please notify the contact address of the Company of that effect. The Company will properly respond to that request pursuant to the User’s right under the Applicable Privacy Laws.
(1) Access to Personal Data
(2) Modification of Personal Data
(3) Deletion of Personal Data
(4) Restriction on Processing of Personal Data
(5) Objection to Processing
(6) Exercise of right to data portability
12.2
For the request under Section 12.1, please submit the following documents by mail or email.
(1) Request form specified by the Company
(2) Document for identification of the User as specified by the Company
(3) Document for identification of the representative of the User as specified by the Company
12.3
To avoid undue modification, divulge, etc. of the Personal Data of the User by a third party, the Company will response to the request by mail or email, only if the identity confirmation is made by the submitted documents. Although the Company will make effort to promptly respond, please note that it may takes time until response, for the confirmation of the applicable registered Personal Data and for assuring accuracy.
12.4
The Company will not return the request form or identification documents received from the User or its representative. Please understand that the Company will keep the request form properly, and delete the identification documents in an appropriate manner when the purpose of use thereof is achieved.
13. Withdrawal of Consent
For the Processing of the Personal Data based on the User’s consent, the User shall have the right to withdraw the consent for the Personal Data at any time.
14. Lodgment of Complaint with Supervisory Authority
In addition to the aforementioned rights, the User may lodge a complaint with a supervisory authority at any time. However, the Company appreciates a notification to the Company prior to contacting the supervisory authority, so that the Company may have the opportunity to respond to the complaint of the User.
15. Necessity of Provision of Personal Data
Since the Personal Data to be provided by the User are necessary for the Company to provide the Service, the Service may be unavailable to the User that does not provide the data.
16. Behavior targeting
Google Analytics may be used in the Service, and Cookies or similar technologies may be used to use Google Analytics. Such technologies help the Company to recognize the status of use of the Service, etc. and contribute improvement of the Service. Google Analytics’ system to collect and process data may be confirmed on the website of Google Analytics as following URL.
www.google.com/policies/privacy/partners/
www.google.com/policies/privacy/partners/
17. Inquiries
For questions or complaints, or for the exercise of the rights under Sections 12 and 13, please contact the following contact addresses.
〒113-0033 Hongo Daiichi bldg. 8F, 3-34-3, Hongo Bunkyo-ku, Tokyo Prometech Software, Inc. corporate planning department E-mail: web@prometech.co.jp (The hours for inquiries are from10:00 to 17:00 on weekdays (excluding Saturday, Sunday and holidays) Japan time and calendar) |
18. General Provisions
18.1
The Company shall retain the right to regularly amend this Privacy Policy. The User shall regularly check and confirm the applicable provisions at its responsibilities.
18.2
In the event of conflict between the Applicable Privacy Laws and any provision of this Privacy Policy, the provision shall be deemed replaced by a provision of the same meaning that reflects the original intention, to the maximum extent permitted by laws. In that case the remaining provision hereof shall continue to be applied without change.
The Company shall retain the right to regularly amend this Privacy Policy. The User shall regularly check and confirm the applicable provisions at its responsibilities.
18.2
In the event of conflict between the Applicable Privacy Laws and any provision of this Privacy Policy, the provision shall be deemed replaced by a provision of the same meaning that reflects the original intention, to the maximum extent permitted by laws. In that case the remaining provision hereof shall continue to be applied without change.