Personal Information
1. Definition of Personal Information
“Personal information” means information about an individual that falls under any of the following items:
(1) Information that can identify a specific individual based on the name, date of birth, and other descriptions (meaning all matters (excluding personal identification codes) written or recorded in documents, drawings, or electromagnetic records, or expressed using voice, movement, or other methods) contained in the information (including information that can be easily collated with other information and thereby identify a specific individual). It also includes personal information that
the Company has obtained or is planning to obtain and that the Company plans to handle as personal data.
(2) Anything that includes a personal identification code specified by law (such as a driver’s license number, passport number, or fingerprint recognition data).
2. Acquisition and Use of Personal Information
(1) Personal information accompanying this service
We may ask for your personal information when you obtain an ID or other information that we provide in connection with your use of the Service, when you use the Service, or when you answer a questionnaire, etc. We will use your personal information primarily for the following purposes.
- To provide the Service
- To bill for paid services in this service
- To analyze browsing history, purchase history, and other information, and to customize the information on Excite’s pages, the Service, and advertising delivery according to your hobbies and preferences.
- To further enhance the content and services provided by this service
- To conduct surveys regarding customers’ hobbies, preferences, etc.
- To serve as a reference for compiling statistical data regarding this service
With your permission, to send e-mail newsletters to your e-mail address or to send direct mail by post, etc. - To be used for business purposes such as shipping products, gifts, etc.
For us to contact you - To operate the services that we have been entrusted with operating
- To respond to customer inquiries and to verify customer identity
(2) Personal information acquired outside of this service
Personal information obtained outside of this service will be used for the following purposes.
- To recruit employees, select employees, and provide information related to recruitment
- To manage the business operations and carry out sales activities in our company’s business activities
- To contact shareholders about general shareholders’ meetings, dividends, etc., pay dividends, and respond to inquiries, etc.
- To carry out employee labor management, employee benefits, personnel evaluation, and various notifications required by law
- To inform the parties listed in properly obtained third-party information about our services, campaigns, etc.
- We take necessary measures through our personal information protection management system to prevent personal information from being used for purposes other than those intended.
(3) Use of pseudonymized information
We may process the acquired personal information, etc. into pseudonymized information that makes it impossible to identify the individual, such as the customer, and use this information.
When creating pseudonymized information (meaning that defined in Article 2, Paragraph 5 of the Personal Information Protection Act; the same applies below), we process personal information in accordance with the standards set out in the Personal Information Protection Act, the Rules of the Personal Information Protection Commission, and other laws and regulations.
Except as required by law, we will not provide pseudonymized information to third parties.
When we handle pseudonymized information, we do not compare it with information that identifies the individual contained in the personal information used to create the pseudonymized information.
The Company will endeavor to take necessary and appropriate measures for the safe management of pseudonymized information, handle complaints regarding the creation or other handling of pseudonymized information, and take other measures necessary to ensure the proper handling of pseudonymized information.
3. Provision of personal information to third parties
We will not provide personal information to third parties without your consent, except in the following cases:
- When entrusting all or part of the handling of personal information to a third party within the scope necessary to achieve the purpose of use set forth in the preceding paragraph
- When required by law
- When it is necessary for the protection of a person’s life, body, or property, and it is difficult to obtain the individual’s consent
- When it is particularly necessary for the improvement of public health or the promotion of healthy child development, and it is difficult to obtain the individual’s consent
- When it is necessary to cooperate with a national government agency, local government, or a person commissioned by them in carrying out duties prescribed by law, and obtaining the individual’s consent is likely to impede the performance of said duties
- When the third party is an academic research institution, etc., and the third party needs to handle the personal data for academic research purposes (including cases where part of the purpose of handling the personal data is academic research purposes, excluding cases where there is a risk of unjustly infringing on the rights and interests of individuals).
- Please note that when providing personal information to advertisers etc. based on your consent, any inquiries regarding the handling of the personal information or requests for deletion, suspension of use, etc. will be handled by the receiving company.
4. Acquisition of personal information
We may manage personal information such as informative data issued by our partners (including, but not limited to, web page browsing history, search history, purchase history in shopping services operated by our partners, behavioral history such as location information, cookies, advertising IDs, etc.) by linking it to personal information, etc. held by our company, and use it for the purposes described in “2. Acquisition and Use of Personal Information”.
5. Disclosure of personal information
If you wish to request notification of the purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, suspension of provision to a third party, or disclosure of records of provision to a third party (hereinafter referred to as “Disclosure, etc.”) regarding personal information provided by you, please make a request to our company here . However, this only applies if you are unable to receive measures equivalent to or greater than Disclosure, etc. through the registration information management screen, etc. of the relevant Service provided on the Service. Informative data is not subject to the Disclosure, etc. in this section.
Based on the above request, we will send you detailed information on how to make a request and a form to fill out the “Personal Information Inquiry Application Form.” Based on the request made through this form, and only if we can confirm that the request is made by the customer himself/herself, in order to prevent personal information leaks, we will disclose the customer’s personal information within a reasonable period of time. Please note that in order to respond to the request, we may ask you to submit the following identity verification documents.
<Identification documents>
– If you are requesting it yourself: A copy of your driver’s license, passport, or health insurance card
– If a request is made by a representative, in addition to the above, a power of attorney or official document certifying legal representation, and identification documents of the representative
However, regarding personal information provided by customers, the personal information for which disclosure, etc. is available is limited to the following information (excluding information whose existence or non-existence would harm the public interest or other interests):
Personal information stored in a database for which we have the authority to respond to requests for disclosure, etc. from customers.
Personal information recorded on paper in a searchable state for which we have the authority to respond to requests for disclosure, etc. from customers.
Safety management measures for personal information, etc.
Regarding the handling of personal information, we implement management and safety control measures in accordance with the guidelines of the Personal Information Protection Act and the requirements of the Privacy Mark.
Organizational safety management measures
- Appointment of a person responsible for handling personal information (personal information protection officer)
- Establish rules for personal information and operate in accordance with those rules
- Record and organize the personal information handled in a ledger
- Conducting risk analysis and safety inspections regarding the handling of personal information, etc.
- Establishment of a reporting and communication system to the person in charge when accidents involving personal information, or facts or signs of violations of laws or regulations are identified
Personnel safety measures
- Regular training for employees regarding the handling of personal information, etc.
- Collecting pledges from employees
- Conclusion of personal information protection agreements with companies that handle personal information
Physical Security Measures
- Manage entrance and exit to work areas
- Prescribes rules for managing databases that contain personal information
- Prescribes rules for sending and receiving data files that contain personal information
Technical security measures
- Introduction of a mechanism to detect unauthorized access to databases that contain personal information
- VPN communication to databases containing personal information
- Setting access rights to personal information etc. for employees according to their duties
- Acquisition of access logs for databases that contain personal information
- Automatic application of antivirus software to employee PCs
Understanding the external environment
Our company’s on-premise servers or cloud servers in domestic regions are used for in-house database servers that contain personal information.
*Personal information is generally stored in Japan, but if it is stored abroad, we will implement safety management measures after understanding the systems for protecting personal information in that country.
Changes to this policy
If there are any changes to this policy, we will announce it on this page, so we recommend that you check this page from time to time for the latest information on changes. Please note that we cannot be held responsible for any troubles arising from failure to check.
Protection of personal information by third-party companies
Third-party companies linked to our site may obtain customer information through their services or sweepstakes or sales promotion activities. We are not responsible for the protection of customer personal information, etc., by these third-party companies.
In order to improve customer convenience, our services may provide services that use Google Ink. APIs, etc. For information on the application of Google’s privacy policy, please see below.
Google Privacy Policy https://policies.google.com/privacy