개인정보처리방침

1. INTRODUCTION
2. DEFINITIONS
3. SCOPE OF THIS PRIVACY POLICY
4. PROCESSING OF PERSONAL DATA
5. PROTECTION AND MANAGEMENT OF PERSONAL DATA
6. TRANSFERS OF PERSONAL DATA TO THIRD PARTY
7. EXTERNAL DATA TRANSMISSION AND USE OF COOKIES AND SIMILAR TECHNOLOGIES
8. RIGHTS OF DATA SUBJECTS
9. CONTACT INFORMATION
10. UPDATES TO THIS PRIVACY POLICY

A. INTRODUCTION

This privacy policy describes how and why we process and securely retain any personal data about data subjects that may be collected when you visit the website of Nichinan Lumber Business Cooperative Association.

Our association will comply with the EU General Data Protection Regulation (GDPR) and other laws and regulations regarding the protection of personal data of data subjects residing in the EEA. We also establish an organization-wide system, implement and continue measures to improve this Privacy Policy on a regular basis.

B. DEFINITIONS

The definitions of terms used in this privacy policy set forth by our association are as follows:

Privacy Policy

Our association’s policy as set forth by the “GDPR Privacy Policy“, which is available on our website.

Data Subject

Any natural person identified or identifiable by personal data processed by our association through the use of our website. It refers to individuals who can be identified by referencing personal data as described in “D. PROCESSING OF PERSONAL DATA.”

Personal Data

Any information about an identified or identifiable natural person that is processed by our association. This refers to information that can be used to identify an individual as described in “D. PROCESSING OF PERSONAL DATA.”

Processing

Any operation or set of operations which is performed on personal data, whether or not by automated means.

This refers to operations that include collecting, recording, editing, structuring, storing, modifying or altering, restoring or retrieving, referencing, using, disclosing by transmission, dissemination or otherwise making available, aligning or combining, restricting, erasing, and destroying.

C. SCOPE OF THIS PRIVACY POLICY

This privacy policy shall apply to any data subjects using our website or any providers of personal data (including data subjects) processed by our association through our website.

D. PROCESSING OF PERSONAL DATA

Our association may process personal data provided directly from data subjects or through our website. The personal data to be processed and the purposes for which they are processed are as follows.

The purpose of processing personal data will always be clearly defined and will never be used for any other purposes.

Personal Data to be Processed

Our association may process the following personal data via e-mail or this website.

Information provided by the data subject

Information regarding name, gender, age and date of birth, home address, e-mail address (personal/business), telephone number (personal/business), organization, position, nature of business, and so forth.

Information automatically collected by using our website

Information about IP addresses, cookies or similar identifiers, geographic location (location information), browser type and version, operating system, access source, visit duration, page views, and so forth.

*For more information on cookies, please refer to “G. COOKIES.”

Information provided by data sources other than the data subject

Our association may receive, process or transfer personal data from third parties other than the data subject. (Third parties include the data subject’s employer, organizations, groups or associations to which the data subject belongs or is enrolled, business partners, family members, and so forth.)

Purpose of Processing Personal Data

Personal data processed by our association will only be processed for the following purposes:

• To provide products or services and information regarding such
• To improve or develop products or services
• To provide information of interests to the data subject
• To carry out the business of our association and operations related thereto, and to ensure business continuity
• To perform analysis for the business of our association
• To analyze the usage of our website
• To inform data subjects about our association’s policies and terms
• To respect the rights of the data subject and obtain his or her consent
• To respond to consultations, inquiries, claims, requests, complaints, and others from data subjects
• For a specific reason as directed by the data subject

Whenever our association processes the above-mentioned personal data from a data subject through our website, our association will notify the data subject of the processing of the personal data upon accessing our website and will process the personal data upon confirmation of this privacy policy and the consent or choice of the data subject.

If the data subject is under 16 years of age, the personal data will be processed with the consent of the data subject’s parent or guardian.

E. PROTECTION AND MANAGEMENT OF PERSONAL DATA

Data Protection/Management Policy

Our association believes that it is our responsibility as a legal entity to ensure adequate security in the processing and storage of personal data.

Our association will take appropriate security measures and respond to the risk of leakage, loss, or unauthorized access to personal data with the greatest possible care.

Personal data and databases related to personal data, which are protected and managed by our association, may only be processed or transferred by the following persons with the direct authorization of our association.

• Public organization
• Financial institutions
• Medical institutions
• Subcontractors
• Officers, advisors, employees, and others belonging to our association
• Other business-related organizations

In addition, we have established a strict control system to prevent unauthorized processing or transfer within the organization.

Duration of Data Protection/Management

Our association retains personal data only for the period necessary to achieve the purposes of processing as described in “D. PROCESSING OF PERSONAL DATA.” Except where the retention of personal data is required by law (or where tax law requires retention for a certain period of time), our association will take measures to erase or anonymize the personal data in a secure manner within a reasonable period of time after the retention period has expired. Data subjects may also request that our association delete or return personal data.

Data Protection/Management Methods and Security Measures

• Personal data and related databases that are protected/managed by our association are stored on terminals and backup media protected by anti-virus software, firewalls and UTM, and on servers with equivalent security measures.
• Our website uses constant SSL encryption for transmission, allowing the processing or transfer of personal data through our website to be handled in a more secure environment.

Disclaimer

• Although our association strives to protect personal data by using the above means, it cannot guarantee that personal data will not be compromised, lost, altered, or illegally accessed and so forth.
• Every effort is made to provide the most accurate information on our website at the time of publication. However, please note that our association is not responsible or liable for any loss, damage, or other harm caused by the information provided or the links provided.

F. TRANSFERS OF PERSONAL DATA TO THIRD PARTY

Our association will not transfer the personal data of data subjects to third parties except as provided in this privacy policy. In addition, personal data will not be transferred to third parties without the direct consent of the data subject.

Personal data processed by our association may be processed or transferred to the following third parties when deemed necessary based on the purposes of processing as described in “C. PROCESSING OF PERSONAL DATA.”

• Countries and regions where our association operates
• Countries and regions where our association provides products or services
• Natural persons or legal entities residing in the above, public institutions, financial institutions, medical institutions, subcontractors, and other business-related organizations

Please note that personal data may be transferred to countries or regions that do not meet the personal data protection standards under the GDPR or SCC/SDPC or that are not subject to sufficiency certification.

G.External Data Transmission and Use of Cookies and Similar Technologies

We may use cookies, JavaScript, and other technologies to ensure the proper functioning of this website, improve usability, understand and analyze usage, prevent unauthorized access and spam, and otherwise maintain security.

Cookies are small text files stored in a user’s browser or similar software when the user visits a website. They record information such as how the website is used.
Cookies alone do not directly identify an individual, but they may be treated as personal information when combined with other information.

These technologies may also transmit information about website usage, devices, browsers, and related matters to the servers of the external service providers listed below.

Google reCAPTCHA

We may use Google reCAPTCHA, provided by Google LLC, to prevent misuse by bots, spam, and similar threats and to maintain the security of this website.
When Google reCAPTCHA is used, information necessary for risk analysis is transmitted to and processed by Google LLC. Depending on the reCAPTCHA configuration in use, this may include the following:

• IP address
• Browser information, such as the User-Agent
• Tokens generated by reCAPTCHA
• The cookie required for reCAPTCHA risk analysis (_GRECAPTCHA)
• Information about the network environment and related matters

External Service Provider Receiving the Information

For information about how Google reCAPTCHA handles information, please refer to the following:

• Google Cloud reCAPTCHA Frequently Asked Questions
• Google Cloud Data Processing Addendum

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC, to understand and analyze how this website is used and to help improve our content and services.

When Google Analytics is used, the following information is transmitted to and processed by Google LLC:

• Identifiers stored in Google Analytics cookies, such as _ga
• Information about user counts and sessions
• Approximate location information
• Browser and device information
• Information about how this website is used
• The IP address used for communication

In Google Analytics 4, IP addresses are used to determine information such as location, but individual IP addresses are not logged or stored within Google Analytics.

External Service Provider Receiving the Information

For information about how Google Analytics handles information, please refer to the following:

• Google Analytics Terms of Service
• Google Analytics Privacy Controls

Google Signals

If Google signals is enabled in Google Analytics for this website, Google may associate information collected through Google Analytics with information that Google holds about users who are signed in to their Google accounts.

This may allow us to analyze usage across multiple devices and browsers and to use aggregated reports on user demographics, interests, and related information.
Google does not provide us with information that directly identifies individual users of Google accounts.

The Google signals setting controls whether the association between data sourced from Google Analytics and information about users signed in to Google is used in behavioral reporting within Google Analytics.

For details, please refer to the following:

• Updates to Google Analytics Data Controls

Managing and Disabling Cookies and Similar Technologies

You can restrict the storage of cookies or delete them through your browser settings.

If you do not wish to have your data collected by Google Analytics, you can use the Google Analytics Opt-out Browser Add-on provided by Google.

• Google Analytics Opt-out Browser Add-on

If you disable cookies, JavaScript, or other technologies, some features of this website may not function properly.

H. RIGHTS OF DATA SUBJECTS

Data subjects have the following rights with respect to the processed personal data and may exercise these rights at any time against our association:

Right of Access

Data subjects may request confirmation from our association as to whether or not personal data has been processed. If the personal data has been processed, a copy of personal data and all the necessary information about the processing may be obtained.

Right of Rectification

Data subjects may request our association to rectify the content of inaccurate or incomplete personal data.

Right to Erasure

Data subjects may request our association to delete personal data. This right also allows for the request for deletion of personal data that our association is processing or protecting/managing without legitimate reason.

Right to Restrict Processing

Data subjects may request our association to restrict the processing or transfer of personal data.

Right to Data Portability

Data subjects may request transfer of personal data processed by our association to the data subject or to a designated third party.

Right to Object

Data subjects may object to our association processing his or her personal data only if the purpose of the processing differs from that specified by our association.

Rights in Relation to Automated Individual Decision-Making, Including Profiling

Data subjects are not subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning his or her personal data or similarly significantly affects him or her.

How to Exercise Your Rights

Data subjects may exercise the above-mentioned rights by contacting the department in charge of these issues.

When our association receives a request for the exercise of the above-mentioned rights, we will contact the data subject within one month of receipt of the request, in principle, after confirming the identity of the data subject, unless it falls under one of the exceptional circumstances stipulated in the GDPR or other regulations.

I. CONTACT INFORMATION

f you have any questions, requests, complaints or consultations regarding your personal data, or if you wish to exercise any of your rights “H. RIGHTS OF DATA SUBJECTS” under this privacy policy, specified in “,” please contact us via the following methods.

J. UPDATES TO THIS PRIVACY POLICY

Our association may periodically modify this privacy policy.

This privacy policy was last updated on February 28, 2022.

President Seiji Takamine, Nichinan Lumber Business Cooperative Association

Date of Enactment: February 28, 2022
Date of Last Revision: February 28, 2022