​Privacy Policy

the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act"). (hereinafter referred to as "the Company") recognizes the importance of protecting the personal information of its customers and complies with the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act"). The Company will strive to handle and protect personal information appropriately in accordance with the following privacy policy (hereinafter referred to as the "Privacy Policy"). Unless otherwise specified in this Privacy Policy, the definitions of terms used in this Privacy Policy shall be in accordance with the provisions of the Personal Information Protection Law.

​

​

1. Definition of Personal InformationLegal

In this Privacy Policy, the term "personal information" shall mean personal information as defined in Article 2.1 of the Personal Information Protection Law.

​

2. Purpose of Use of Personal Information

We will use your personal information for the following purposes To provide JUSTY, JUSTY-B, and other services provided by our company (hereinafter referred to as "our services") and our products

To provide information about our services and to respond to inquiries, etc. Depending on the content of your inquiry, we may share the information you have provided to the hardware manufacturer.

To provide information on our products, services, etc.

To respond to any violation of the Company's terms and conditions, policies, etc. (hereinafter referred to as the "Terms and Conditions, etc.") regarding the Company's services. To respond to actions that violate the Company's terms, policies, etc. (the "Terms, etc.") regarding the Company's services

To notify you of changes to the Terms and Conditions of our services, etc.

To analyze information on customer use of our services for the purpose of improving our services, developing new services, etc.

To create statistical data related to our services in a format that does not allow individuals to be identified

For other purposes incidental to the above purposes of use

​

3. method of collecting personal information

3.1 In providing our services, we collect the following information from our customers by the following methods.

Information to be collected: name, address, e-mail address, telephone number

Method of collection

Input by the customer on our services

When you fill out an inquiry form regarding our services.

When you use our services.

​

3.2 We will retain the information specified in Section 3.1 (1) during the provision of our services and after the termination of our services. However, when there is no longer a need to use such information, we will endeavor to delete such information without delay.

Translated with www.DeepL.com/Translator (free version)

​

​

4. Changes to the Purposes of Use of Personal Information

We may change the purposes of use of personal information within the scope reasonably deemed to be relevant, and in the event of such change, we will notify the individual who is the subject of the personal information (hereinafter referred to as "the individual") or publicly announce such change. In the event of a change, we will notify the individual who is the subject of the personal information (hereinafter referred to as "the Individual") or make a public announcement.

Translated with www.DeepL.com/Translator (free version)

​

5. use of personal information

5.1With the exception of cases permitted under the Personal Information Protection Law and other laws and regulations, we will not handle personal information beyond the scope necessary to achieve the purpose of use without obtaining the consent of the individual. However, this does not apply in the following cases

​

When required by law

​

When it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the individual.

​

When it is especially necessary to improve public health or to promote the sound growth of children, and it is difficult to obtain the consent of the person in question

​

Cases in which the provision of personal data is necessary for cooperating with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and in which obtaining the consent of the individual is likely to impede the execution of the affairs concerned

​

Cases in which personal data is provided to an academic research institution, etc. and in which it is necessary for said academic research institution, etc. to handle said personal data for academic research purposes (including cases in which part of the purpose of handling said personal data is for academic research purposes, excluding cases in which there is a risk of unjustified infringement of individual rights and interests). 5.1 We have no legal obligation to disclose Personal Data to any third party.

​

5.2 We will not use personal data in a manner that may encourage or induce illegal or unjust acts.

​

​

6. proper acquisition of personal information

6.1We will acquire personal information in an appropriate manner and will not acquire personal information through deception or other wrongful means.

​

6.2We will not acquire personal information requiring special consideration (as defined in Article 2.3 of the Personal Information Protection Law) without obtaining the prior consent of the individual, except in the following cases 6.2 We will not acquire any personal information (as defined in Article 2.3 of the Personal Information Protection Law) without the prior consent of the individual, except in the following cases

​

Cases falling under any of Items 1 through 4 of Paragraph 5.1

​

Cases in which the Company acquires the Required Personal Information from an academic research institution, etc. and it is necessary to acquire such Required Personal Information for academic research purposes (including cases in which part of the purpose of acquiring such Required Personal Information is for academic research purposes, excluding cases in which there is a risk of unreasonably infringing on the rights and interests of individuals) (limited to cases where the Business Operator Handling Personal Information and the relevant academic research institution, etc. jointly conduct academic research)

​

Cases where said Personal Information Required is disclosed by the Individual Concerned, a national agency, a local government, an academic research organization, etc., a person listed in each item of Article 57, Paragraph 1 of the Personal Information Protection Act, or any other person specified by the Rules of the Personal Information Protection Commission

​

Cases in which the Required Personal Information is obtained by visually observing or photographing the person and is obvious from the external appearance of the person

​

Where the Company receives provision of the Required Personal Information from a third party, and such provision by the third party falls under any of the items of Paragraph 9.1.

​

6.3When we receive personal information from a third party, we will confirm the following matters in accordance with the Rules of the Personal Information Protection Committee. However, this excludes cases in which the provision of personal information by the third party falls under any of the items in Section 5.1 or Section 9.1.

​

The name and address of the third party, and in the case of a juridical person, the name of its representative (in the case of an organization that is not a juridical person and has a designated representative or administrator, the name of its representative or administrator)

​

History of acquisition of the relevant personal information by the third party

​

​

7. security control of personal information

We will exercise necessary and appropriate supervision over our employees to ensure the safe management of personal information against risks such as loss, destruction, falsification, and leakage of personal information. In addition, when we outsource all or part of the handling of personal information, we will provide necessary and appropriate supervision to ensure that the outsourced company manages personal information safely. Specific security control measures for personal data held by the Company are as follows

​

Formulation of basic policy

​

In order to ensure the proper handling of personal data, we have established this Privacy Policy as our basic policy regarding "compliance with relevant laws, regulations, guidelines, etc." and "point of contact for questions and complaint handling.

8. reporting, etc. in case of leakage

In the event of leakage, loss, damage, etc. of personal information handled by the Company, the Company will report to the Personal Information Protection Committee and notify the individual in accordance with the provisions of the Personal Information Protection Law.

​

​

9. provision to third parties

9.1 We will not provide personal information to any third party without obtaining the prior consent of the individual, except in cases falling under any of the items in Section 5.1. However, the following cases do not fall under the provision of personal information to third parties as stipulated above.

​

Cases in which personal information is provided in conjunction with the outsourcing of all or part of the handling of personal information within the scope necessary for the achievement of the purpose of use

​

Cases in which personal information is provided as a result of the succession of business due to merger or other reasons

​

Cases in which personal information is jointly used in accordance with the provisions of the Personal Information Protection Law

9.2 Notwithstanding the provisions of Section 9.1, except in cases falling under any of the items of Section 5.1, we will not provide Personal Information to any third party (except for countries designated by the Rules of the Personal Information Protection Commission under Article 28 of the Personal Information Protection Law) located in a foreign country (except for countries designated by the Rules of the Personal Information Protection Commission under Article 28 of the Personal Information Protection Law). (excluding those who have established a system that conforms to the standards designated by the Rules of the Personal Information Protection Commission based on Article 28 of the Personal Information Protection Law). In the event that personal information is to be provided to a third party located in a foreign country (excluding countries designated by the Personal Information Protection Commission in accordance with Article 28 of the Personal Information Protection Law), the Company shall obtain the prior consent of the individual to allow the provision of the personal information to the third party located abroad.

​

9.3 When obtaining the consent of the individual to provide personal information to a third party in a foreign country in accordance with Section 9.2, the following information shall be provided to the individual. However, in cases where the first item cannot be specified, the following information shall be provided in lieu of the first and second items: the fact that the first item cannot be specified and the reason why it cannot be specified, and any information that can be used as a reference for the person in lieu of the first item.

​

Name of the foreign country

​

Information on the system for the protection of personal information in the foreign country

​

Information on measures taken by the third party to protect personal information (if such information cannot be provided, a statement to that effect and the reason)

​

9.4When we provide personal information to a third party, we will create and preserve records in accordance with Article 29 of the Personal Information Protection Law.

​

9.5When we receive personal information from a third party, we will perform the necessary confirmation in accordance with Article 30 of the Personal Information Protection Law, and create and preserve records of such confirmation.

​

​

10. disclosure of personal information

10.1 When we receive a request for disclosure of personal information from an individual in accordance with the provisions of the Personal Information Protection Law, we will disclose the information to the individual without delay after confirming that the request is made by the individual himself/herself (if the relevant personal information does not exist, we will notify the individual to that effect). (If such personal information does not exist, the Company will notify the individual to that effect. However, this does not apply to cases in which we are not obligated to disclose the information under the Personal Information Protection Law or other laws and regulations. Please note that a fee (2,000 yen per case) will be charged for the disclosure of personal information.

​

10.2 The preceding paragraph shall apply mutatis mutandis to records of provision of personal information to third parties created in accordance with Section 9.4 and records of provision of personal information from third parties created in accordance with Section 9.5, which relate to personal information that identifies the person in question.

​

11. correction of personal information

If the Company is requested by an individual to correct, add, or delete his/her personal information (hereinafter referred to as "correction, etc.") in accordance with the provisions of the Personal Information Protection Law on the grounds that such personal information is not true, the Company shall correct, add, or delete such personal information in accordance with the provisions of the Law. If the Company receives a request for correction, addition, or deletion of personal information (hereinafter referred to as "Correction, etc."), the Company will, after confirming that the request is made by the person himself/herself, conduct the necessary investigation without delay to the extent necessary to achieve the purpose of use, correct the content of the personal information based on the results, and notify the person to that effect (if the Company decides not to make a correction, it will notify the person to that effect). (If we decide not to make such corrections, we will notify the individual to that effect.) (If the Company decides not to make such corrections, the Company will notify the individual to that effect. However, this shall not apply to cases in which the Company is not obligated to make such corrections, etc. under the Personal Information Protection Law or other laws and regulations.

​

12. Suspension of Use of Personal Information, etc.

If we receive a complaint from an individual that (1) his/her personal information is being handled in a manner that exceeds the scope of the purpose of use publicly announced in advance, or is being used in a way that encourages or may encourage illegal or unjust acts, or (2) his/her personal information has been obtained through deception or other wrongful means, we will suspend its use or delete it (hereinafter referred to as "Suspension of Use, etc.") in accordance with the provisions of the Personal Information Protection Law. (2) If a request for suspension of use or deletion (hereinafter referred to as "suspension of use, etc.") is made pursuant to the provisions of the Personal Information Protection Law on the grounds that the personal information is being used in a manner that promotes or may promote or induce illegal or unjust acts, or on the grounds that the personal information was obtained through deception or other wrongful means (2) if you request us to stop providing your personal information to a third party without your consent in accordance with the provisions of the Personal Information Protection Law (hereinafter referred to as "stop providing"), or (3) if you request us to stop providing your personal information to a third party in accordance with the provisions of the Personal Information Protection Law because your personal information has been provided to such a third party without your consent. (3) When we no longer need to use the personal information of the person in question, when the situation stipulated in the main clause of Article 26, Paragraph 1 of the Personal Information Protection Law concerning the personal information of the person in question arises, or when there is a risk that the rights or legitimate interests of the person in question may be harmed by the handling of the personal information of the person in question. In cases where the suspension of use or provision of personal information is requested in accordance with the provisions of the Personal Information Protection Law, and the request is found to be reasonable, the Company will, after confirming that the request is made by the person himself/herself, suspend the use or provision of the personal information without delay and notify the person to that effect. However, this shall not apply in cases where we are not obligated to suspend the use or provision of personal information under the Personal Information Protection Law or other laws and regulations. 

​

13. provision of personally identifiable information to third parties

13.1 We will not provide Personal Information to any third party unless such third party has agreed to provide Personal Information to us (meaning the information defined in Article 2.7 of the Personal Information Protection Law, and limited to the information that constitutes the Personal Information Database, etc. defined in Article 16.7 of the said Law; the same shall apply hereinafter). The same shall apply hereinafter). ) as personal data, we will not provide such personally-related information to such third party without first confirming the following matters in accordance with the Rules of the Personal Information Protection Commission, except in the cases listed in each item of Section 5.1.

​

The consent of the individual concerned has been obtained to the effect that the third party is permitted to receive the personally identifiable information from us and to acquire it as personal data that identifies the individual concerned.

​

In the case of provision to a third party located in a foreign country, when the consent of the individual set forth in the preceding item is to be obtained, the system concerning the protection of personal information in the foreign country, measures to be taken by the third party to protect personal information, and other information that should be of reference to the individual are provided to the individual in advance, as prescribed by the Rules of the Personal Information Protection Commission. 13.2We will not disclose personal information to any third party.

​

13.2When we provide personally identifiable information to a third party, we create and preserve records in accordance with Article 31 of the Personal Information Protection Law.

​

13.3When we receive personally identifiable information from a third party, we shall perform the necessary confirmation in accordance with Article 31 of the Personal Information Protection Law, and shall create and maintain records of such confirmation.

​

14. handling of pseudonymized processed information

14.1 We will not use any pseudonymized processed information (meaning those stipulated in Article 2.5 of the Personal Information Protection Law, and limited to those that constitute the Pseudonymized Processed Information Database, etc. stipulated in Article 16.5 of the same law. The same shall apply hereinafter). 14.1When we create the Pseudonymized Personal Information (which means the information defined in Article 2, Paragraph 5 of the Personal Information Protection Law), we shall process the personal information in accordance with the standards defined in the Rules of the Personal Information Protection Commission.

​

14.2 When we create Processed Pseudonymized Information, or when we delete the Processed Pseudonymized Information and the Deleted Information, etc. (meaning those set forth in Article 41.2 of the Personal Information Protection Law. The same shall apply hereinafter). ), we shall take measures for the secure management of the Deleted Information, etc. in accordance with the standards set forth in the Rules of the Personal Information Protection Commission as necessary to prevent the leakage of the Deleted Information, etc.

​

14.3We will not use any pseudonymized information (limited to information that is personal information). The same shall apply hereinafter in this Section 14.3). 14.3 SBI shall comply with the following provisions with respect to Pseudonymous Processed Information (limited to Personal Information).

​

Notwithstanding the provisions of Section 5.1, SAMTECH will not handle Processed Pseudonym Information beyond the scope necessary to achieve the Purposes of Use, except as otherwise required by law.

With respect to the application of Paragraph 3 to Pseudonymous Processed Information, the terms "change to the extent reasonably deemed relevant" and "notify or publicly announce" in Paragraph 3 shall be deemed to be replaced with "change" and "publicly announce," respectively.

​

Notwithstanding the provisions of Sections 9.1 through 9.3, we will not provide Personal Data that is Pseudonymous Processed Information to any third party, except as required by law. However, the cases listed in each item of Section 9.1 do not fall under the provision of personal data to third parties as stipulated above.

​

In handling Processed Pseudonymized Personal Data, we will not compare such Processed Pseudonymized Personal Data with other information in order to identify the individual whose personal information was used to create such Processed Pseudonymized Personal Data.

​

In handling Processed Pseudonym Information, we will not use the contact information or other information contained in said Processed Pseudonym Information to make telephone calls, send postal or letter mail, send telegrams, send faxes or electromagnetic transmissions, or visit the residence of a person.

The provisions of Sections 8 and 10 through 12 shall not apply to Pseudonymous Processed Information.

​

14.4We shall not use any Pseudonymous Processed Information (except for Personal Information). The same shall apply hereinafter in this Section 14.4). 14.4With respect to Pseudonymous Processed Information (excluding information that is Personal Information.

​

We will not provide Processed Pseudonym Information to any third party, except as required by law. However, the cases listed in each item of Section 9.1 do not fall under the provision to a third party as stipulated above.

​

We will exercise necessary and appropriate supervision over our employees to ensure that the pseudonymized information is safely managed against risks such as leakage of the pseudonymized information. In addition, when we outsource all or part of the handling of processed pseudonym information, we will provide necessary and appropriate supervision to ensure that the outsourced company manages the personal information safely.

​

In handling Processed Pseudonymized Information, the Company shall not obtain deleted information, etc. or collate such Processed Pseudonymized Information with other information in order to identify the individual whose personal information was used to create such Processed Pseudonymized Information.

​

In handling Processed Pseudonymized Information, we will not use the contact information or other information contained in such Processed Pseudonymized Information to call, send by mail or letter, send a telegram, send by fax or electromagnetic method, or visit a residence.

​

15. handling of anonymized processed information

15.1 We will not disclose anonymously processed information (meaning those defined in Article 2, Paragraph 6 of the Act on the Protection of Personal Information, and limited to those that constitute the Anonymous Processed Information Database, etc. defined in Article 16, Paragraph 6 of the said Act. The same shall apply hereinafter).

​

15.1 When we create Anonymous Processed Information (which means the information defined in Article 2, Paragraph 6 of the Act on the Protection of Personal Information, and is limited to the information that constitutes the Anonymous Processed Information Database, etc. defined in Article 16, Paragraph 6 of the Act), we shall process personal information in accordance with the standards set forth in the Rules of the Personal Information Protection Commission.

​

15.2When we create Anonymous Processed Information, we will take measures for security control in accordance with the standards set forth in the Rules of the Personal Information Protection Commission.

​

15.3When we have created anonymized Processed Information, we will disclose the items of information about individuals contained in such anonymized Processed Information in accordance with the Rules of the Personal Information Protection Commission.

​

15.4We will not disclose anonymized Processed Information (including those created by us and those provided by third parties) to third parties. 15.4When we provide anonymized Processed Information (including information created by us and information provided by third parties; the same shall apply hereinafter unless otherwise specified) to third parties, we will disclose the items of personal information included in such anonymized Processed Information. 15.4When we provide anonymized Processed Information (including information prepared by us or provided by a third party) to a third party, we will, in accordance with the Rules of the Personal Information Protection Commission, publicly announce in advance the items of information concerning individuals contained in the anonymized Processed Information to be provided to the third party and the method of providing such information, and clearly indicate to such third party that the information to be provided is anonymized Processed Information. 15.5 We will not provide anonymized information to any third party.

​

15.5 In handling anonymized Processed Information, in order to identify the individual whose personal information is used to create the anonymized Processed Information, we will (1) check the anonymized Processed Information against other information, and (2) obtain information regarding descriptions or personal identification codes deleted from the relevant personal information or the processing methods used pursuant to Article 43.1 of the Personal Information Protection Law. 15.6We will not (1) compare anonymized information with other information, or (2) obtain information regarding descriptions, etc. or personal identification codes deleted from the relevant personal information or the processing methods used in accordance with Article 43.1 of the Personal Information Protection Law (2) only with respect to such anonymized information provided by a third party.

​

15.6 We shall take necessary and appropriate measures for the secure management of anonymized Processed Information, handle complaints regarding the creation or other handling of anonymized Processed Information, and take other necessary measures to ensure the proper handling of anonymized Processed Information, and shall make efforts to publicly disclose the details of such measures.

​

16. use of cookies and other technologies

16.1 Our Services may use cookies and similar technologies. If you wish to disable cookies, you may do so by changing the settings on your web browser. However, if you disable cookies, you may not be able to use certain functions of our services.

​

16.2 We may use Google Analytics, which may use cookies and similar technologies to collect data. Please click here to learn more about how Google Analytics collects and processes statistical information.

​

17. inquiries

For requests for disclosure, opinions, questions, complaints, and other inquiries regarding the handling of personal information, please contact the following

​

1-22-11-2F Ginza, Chuo-ku, Tokyo 104-0061, Japan

Legal AI inc. (CEO : Kaoru Watanabe)

E-mail: support@legal.ai

​

​

18. continuous improvement

We will review the operation of our handling of personal information from time to time and strive for continuous improvement, and may change this Privacy Policy from time to time as necessary.

[Established July 1, 2023]