Privacy Policy
This English version is provided for reference only. In the event of any discrepancy between this version and the Japanese version, the Japanese version shall prevail.
This Privacy Policy ("Policy") sets forth the basic principles regarding the handling of personal information by Corrado Co., Ltd. ("we," "us," or "our") in connection with the various services we operate. We are deeply aware of the importance of personal information and are committed to its appropriate management and protection in compliance with the Act on the Protection of Personal Information of Japan ("APPI") and other applicable laws, regulations, and guidelines.
Collection of Personal Information and Purposes of Use
In providing our services and operating our business, we collect personal information from users ("Users") only to the extent necessary. We will clearly identify the purpose of collection and will collect personal information through lawful and fair means, without using deception or other improper methods.
Purposes of use:
Providing and operating our services
Performing identity verification and authentication
Processing fees and payments
Responding to inquiries and requests
Marketing and advertising activities
Improving our services and developing new features
Responding to system failures and incidents
Security measures:
We will keep personal information accurate and up-to-date and will implement reasonable and appropriate security measures to protect personal information from risks such as unauthorized access, loss, destruction, alteration, and leakage.
Outsourcing and Joint Use of Personal Information
We may entrust the handling of personal information to third parties to the extent necessary to achieve the stated purposes of use. In such cases, we will rigorously examine the qualifications of the contractors, conclude confidentiality agreements, and exercise appropriate supervision. We may also engage in joint use of personal information as permitted by law.
Provision to Third Parties
We will not provide personal information to third parties except as permitted by law or with the User's express consent.
Where personal information is transferred to third parties located outside of Japan, we will comply with applicable cross-border transfer requirements under the APPI, including providing the necessary information about the transfer destination and the measures taken to protect personal information.
Disclosure, Correction, and Other User Rights
Where a User requests disclosure, correction, addition, or deletion of their own personal information, we will respond to such requests to the extent provided by law. However, we may decline to do so where the request would significantly impair the proper conduct of our business or would violate any applicable law.
Users located in jurisdictions that grant additional rights regarding personal data (such as the right of access, rectification, erasure, restriction of processing, data portability, or objection) may exercise such rights to the extent applicable law requires us to recognize them. To exercise any of these rights, please contact us using the contact details provided below.
Suspension of Use of Personal Information
Upon a User's request, we will appropriately suspend the use of, or delete, the relevant personal information.
Retention of Personal Information
We will retain personal information only for as long as necessary to fulfill the purposes of use described above, or for any longer period required by applicable laws and regulations (including, but not limited to, tax, accounting, and consumer protection laws). Once the retention period expires and there is no legitimate basis to retain the information, we will delete or anonymize it.
Rights of Users in the European Economic Area (GDPR)
If you are located in the European Economic Area ("EEA") or the United Kingdom, the General Data Protection Regulation ("GDPR") and equivalent UK data protection law apply to our processing of your personal information. This section sets out the additional information required under those laws.
Data Controller. Corrado Co., Ltd. is the data controller of your personal information. Contact details are provided at the end of this Policy.
Lawful Bases for Processing. We process your personal information on the following lawful bases under Article 6 of the GDPR:
Performance of a contract (Art. 6(1)(b)): to provide the Service, process applications, and handle payments.
Legitimate interests (Art. 6(1)(f)): to improve the Service, prevent fraud, ensure security, and conduct our business operations.
Consent (Art. 6(1)(a)): for marketing communications and any other processing where consent is required.
Compliance with legal obligations (Art. 6(1)(c)): to comply with tax, accounting, and other legal duties applicable to us.
Your Rights. Subject to the conditions and limitations set out in the GDPR, you have the right to:
Access the personal information we hold about you
Request rectification of inaccurate or incomplete information
Request erasure of your personal information ("right to be forgotten")
Request restriction of processing
Receive your personal information in a portable format (data portability)
Object to processing based on our legitimate interests, including direct marketing
Withdraw consent at any time, where processing is based on your consent
Right to Lodge a Complaint. You have the right to lodge a complaint with a data protection supervisory authority in the EEA member state of your habitual residence, place of work, or place of the alleged infringement. A list of EU supervisory authorities is available at edpb.europa.eu. UK residents may complain to the Information Commissioner's Office (ICO).
International Data Transfers. Your personal information is processed and stored in Japan. The European Commission has recognized Japan as providing an adequate level of protection for personal data through its adequacy decision of 23 January 2019, meaning that no additional safeguards are required for transfers from the EEA to Japan. Where additional transfers occur to other jurisdictions, we will rely on appropriate safeguards such as Standard Contractual Clauses or other measures permitted under the GDPR.
Automated Decision-Making. We do not use your personal information for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.
To exercise any of these rights, please contact us using the details at the end of this Policy. We will respond within one month of receiving your request, in accordance with the GDPR.
Rights of California Residents (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act ("CCPA") as amended by the California Privacy Rights Act ("CPRA") provides you with specific rights regarding your personal information.
Categories of Personal Information. The categories of personal information we collect are described in the "Collection of Personal Information" section above. We collect this information for the purposes of use also described above.
No Sale or Sharing of Personal Information. We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising as those terms are defined under the CCPA.
Your CCPA Rights. Subject to applicable conditions and limitations, you have the right to:
Know what personal information we collect, use, and disclose
Delete personal information we hold about you
Correct inaccurate personal information
Opt out of any future sale or sharing (we do not currently engage in either)
Limit the use of sensitive personal information
Non-discrimination for exercising your CCPA rights
To exercise any of these rights, please contact us using the details at the end of this Policy. You may also designate an authorized agent to make a request on your behalf, subject to our verification of the agent's authority.
Use of Cookies and Similar Technologies
We may use cookies and similar technologies on our websites to improve usability, analyze access trends, and operate our services effectively. Users may disable cookies through their browser settings; however, please note that some features of our services may not function properly as a result.
Revisions to this Privacy Policy
We may review and revise this Policy from time to time as appropriate. Any revisions will be posted on our website.
Contact Information
For inquiries regarding this Privacy Policy, please contact us using the details below.
Corrado Co., Ltd.
Address: Wizard Building 4F, 1-4-3 Sengen-cho, Nishi-ku, Yokohama, Kanagawa, Japan
Email: gemix.jp-support(at)corrado.co.jp
Established: January 1, 2024