GDPR Privacy Policy
This Privacy Policy has been established by PACRAFT Corporation (the “Company”) and its Group companies (collectively, the “PACRAFT Group”) based on the EU General Data Protection Regulation (the “GDPR”) for the processing of personal data to which the GDPR applies. The Company and the PACRAFT Group are committed to ensuring that all officers and employees comply with this Privacy Policy and to exerting all possible efforts to process personal data accordingly.
For the purpose of this Privacy Policy, the “PACRAFT Group” means the companies listed at the following two links (PACRAFT Network in Japan, PACRAFT Global Network); provided, however, that Group companies within the European Economic Area (the “EEA”) are excluded from the PACRAFT Group, and the processing of personal data at the Group companies within the EEA shall follow the provisions stipulated by each such company.
Personal data to be collected
The PACRAFT Group may collect personal data in the following categories for the purposes specified in this Privacy Policy.
- Personal data of clients (name, contact information (including, but not limited to, e-mail address, telephone number, and fax number; the same applies hereinafter), place of work, job position, organization, and the like)
- Personal data of job applicants (name, contact information, school/university, address, date of birth, age, nationality, academic background, career history, and the like)
- Personal data of shareholders (name, contact information, shareholding status, address, and the like)
- Personal data of persons who enter offices of the PACRAFT Group (name, contact information, place of work, job position, organization, information collected through security systems (recorded videos of security cameras, etc.), and the like)
- Location data
- Online identifiers (IP addresses and cookie identifiers)
Purposes of processing personal data and their legal bases
- The PACRAFT Group will process personal data for the following purposes on the following legal bases.
Purposes of processing (1) Personal data of clients - To respond to inquiries or questions
- To invite to events, exhibitions, etc. and communicate in relation to their operation
- To introduce, and communicate in relation to, new products of PACRAFT Group
- To ship or provide purchased products or services, and make confirmation and other communications necessary for offering products or services
- To conduct payment operations in relation to the sale or provision of products or services
- To go through the signing up procedure for e-mail distribution services or other services available on the PACRAFT Group’s websites, distribute electronic contents, and make confirmation and other communications in relation to those services
- To create data through de-identification of personal data
- To communicate on the occasion of clients’ use of facilities arranged by the PACRAFT Group and provide information about facility use
- To communicate with or respond to clients (including prospective corporate clients; the same applies hereinafter) in the course of business, and provide related administrative services
- To consider acceptance of assigned employees or other personnel exchanges
- To respond to whistleblowing and the like, and accordingly conduct internal investigations and make internal reports
- To check how products of PACRAFT Group are used
- To receive feedback on usage of products of PACRAFT Group and provide support services
- To conduct internal investigation, consideration, report, and approval of transactions with clients
- To process personal data for the above purposes in collaboration among member companies of the PACRAFT Group
(2) Personal data of job applicants - To provide recruitment information to job applicants, conduct screening and selection of prospective employees, and reimburse expenses incurred by them
(3) Personal data of shareholders - To conduct shareholder administration and give notifications to shareholders pursuant to the Companies Act and other relevant laws and regulations of Japan
(4) Personal data of other related persons - To consider acquisition, joint venture or other corporate combination
- To exchange information and have interactions at exhibitions, seminars or other events
- To make inquiries or ask questions in connection with business operations
- To provide services available on the PACRAFT Group’s websites
- To process personal data for the above purposes at each member company of the PACRAFT Group
- The PACRAFT Group processes personal data on legal bases such as consent of data subjects, legitimate interests pursued by the PACRAFT Group or third parties, necessity of preparation for conclusion of, and performance of, contracts between data subjects and the PACRAFT Group, or necessity of compliance with the legal obligations of the PACRAFT Group.
- In the case where the processing of personal data by the PACRAFT Group is conducted on the basis of consent of a data subject, the data subject may at any time withdraw the consent; provided, however, that the withdrawal of consent does not affect the legality of processing the personal data conducted on the basis of the consent prior to the withdrawal.
- If it intends to process collected personal data for a purpose other than those specified above, the PACRAFT Group will make the purpose public by revising this Privacy Policy.
Disclosure of personal data
The PACRAFT Group may disclose personal data to member companies of the PACRAFT Group and third parties (for example, outsourcing companies and service providers).
Security management for personal data
In the processing of personal data, the PACRAFT Group will conduct appropriate data management, endeavor to prevent unauthorized external access, loss, corruption, falsification, leakage, and other risks to personal data, and take appropriate and reasonable security measures. If an accident should occur, the PACRAFT Group will take corrective measures promptly.
Storage of personal data
The PACRAFT Group will store personal data in a way that ensures security appropriately. The PACRAFT Group will store personal data only for the period necessary to achieve its purposes of use specified in this Privacy Policy and will erase it promptly when it becomes no longer needed. A specific storage period is to be determined in consideration of the purposes of collection and processing of personal data, the nature of the personal data, and the necessity of storage of personal data under law or for business purposes.
Rights of a data subject
- With respect to personal data processed by the PACRAFT Group, a data subject has the following rights:
- Right of access (demand of disclosure of purposes, type, to whom it is provided, storage period, from where it is collected, and the like);
- Right to rectification or erasure;
- Right to restriction of processing;
- Right to object to processing;
- Right to data portability (its transfer or copy) so that it can be used for a service other than that of the PACRAFT Group; and
- Right to withdraw consent at any time.
- When you intend to exercise any of the above rights, please refer to “Inquiries.”
- If you have an objection against the processing of personal data by the PACRAFT Group, you may at any time file an objection with the competent agency having jurisdiction over data protection.
Inquiries
For inquiries and questions about personal data, please click the link below and contact us.
Inquiry
Miscellaneous provisions
- This Privacy Policy may be revised or amended from time to time by the PACRAFT Group without notice.
- If a data subject does not give consent to disclosure of personal data, the data subject may not be able to receive services provided by the PACRAFT Group, or to access and/or use some functions of the PACRAFT Group’s websites, and therefore the data subject’s customer satisfaction may be adversely affected.
GDPR Privacy Policy for Personal Data of NTS Group Members
This Privacy Policy has been established by PACRAFT Corporation (the “Company”) and its Group companies (collectively, the “PACRAFT Group”) based on the EU General Data Protection Regulation (the “GDPR”) for the processing of personal data of employees and other personnel* (“NTS Group Members”) to which the GDPR applies. The Company and the PACRAFT Group are committed to ensuring that all officers and employees comply with this Privacy Policy and to exerting all possible efforts to process personal data accordingly.
* “NTS Group Member” means an officer, employee or any other person who is currently engaged in business operations of the PACRAFT Group or a person who was engaged in business operations of the PACRAFT Group in the past (a retiree). For the purpose of this Privacy Policy, the “PACRAFT Group” means the companies listed at the following two links (PACRAFT Network in Japan, PACRAFT Global Network); provided, however, that Group companies within the European Economic Area (the “EEA”) are excluded from the PACRAFT Group, and the processing of personal data of NTS Group Members at the Group companies within the EEA shall follow the provisions stipulated by each such company.
Personal data to be collected
The PACRAFT Group may collect personal data of the following categories of officers and employees, as well as retirees, for the purposes specified in this Privacy Policy.
Name, job position, date of birth, age, current address, family origin, parents’ address, place of residence registration, contact information, emergency contact information, My Number (social security and tax number), driver’s license, nationality, passport, status of residence, permanent resident certificate, pension-related information, family situation, marriage status, residence condition, academic background, qualifications, career history, transfer status, personnel evaluation, account information, securities holdings, income, face photo, fingerprint data, video, online identifiers (IP addresses and cookie identifiers), other information required by instructions of administrative organs and provisions of laws, regulations, ordinances, and the like, and other information of a similar nature
Purposes of processing personal data and their legal bases
- The PACRAFT Group will process personal data for the following purposes.
Purposes of processing - To communicate and make arrangements in the course of business operations
- To conduct reassignment, personnel evaluation, commendation, disciplinary action, or other operations for human resources management
- To conduct workforce management
- To conduct operations for work safety, sanitation, healthcare administration, and the like
- To pay salaries, bonuses, and the like, and reimburse expenses
- To communicate with and disclose information to affiliated companies, assignee companies, and the like
- To provide various information and conduct public relations activities regardless of whether internally or externally using documents, e-mail, videos, social media, and the like
- To make emergency contact, and give notice on drills and share the results
- To conduct sales and support activities using communication means such as sounds, images, videos and the like
- To reply to requests of surveys from other companies
- To register biological information (vein patterns, etc.) in biometric devices, track behavior, and record security videos
- To respond to whistleblowing and the like, and accordingly conduct internal investigations and make internal reports
- To conduct internal audits and make internal reports
- To utilize personal data as authentication data for the Company’s systems
- To conduct internal training
- To conduct reassignment (including temporary assignment and employment transfer), personnel evaluation, commendation, disciplinary action, or other operations for human resources management within the entire PACRAFT Group
- To conduct operations for employee shareholding plans
- To give notifications and make reports to public offices
- To go through procedures for tax affairs, employment insurance, social insurance and other statutory or regulatory affairs
- To pay retirement benefits and conduct other operations for retirees
- The PACRAFT Group processes personal data on the legal bases of consent of data subjects, legitimate interests pursued by the PACRAFT Group or third parties, necessity of preparation for conclusion of, and performance of, contracts between data subjects and the PACRAFT Group, or necessity of compliance with the legal obligations of the PACRAFT Group.
- In the case where the processing of personal data by the PACRAFT Group is conducted on the basis of consent of a data subject, the data subject may at any time withdraw the consent; provided, however, that the withdrawal of consent does not affect the legality of processing the personal data conducted on the basis of the consent prior to the withdrawal.
- If it intends to process collected personal data for a purpose other than those specified above, the PACRAFT Group will make the purpose public by revising this Privacy Policy.
Disclosure of personal data
The PACRAFT Group may disclose personal data to member companies of the PACRAFT Group and third parties (for example, outsourcing companies and service providers).
Security management for personal data
In the processing of personal data, the PACRAFT Group will conduct appropriate data management, endeavor to prevent unauthorized external access, loss, corruption, falsification, leakage, and other risks to personal data, and take appropriate and reasonable security measures. If an accident should occur, the PACRAFT Group will take corrective measures promptly.
Storage of personal data
The PACRAFT Group will store personal data in a way that ensures security appropriately. The PACRAFT Group will store personal data only for the period necessary to achieve its purposes of use specified in this Privacy Policy and will erase it promptly when it becomes no longer needed. A specific storage period is to be determined in consideration of the purposes of collection and processing of personal data, the nature of the personal data, and the necessity of storage of personal data under law or for business purposes.
Rights of a data subject
- With respect to personal data processed by the PACRAFT Group, a data subject has the following rights:
- Right of access (demand of disclosure of purposes, type, to whom it is provided, storage period, from where it is collected, and the like);
- Right to rectification or erasure;
- Right to restriction of processing;
- Right to object to processing;
- Right to data portability (its transfer or copy) so that it can be used for a service other than that of the PACRAFT Group; and
- Right to withdraw consent at any time.
- When you intend to exercise any of the above rights, please refer to “Inquiries.”
- If you have an objection against the processing of personal data by the PACRAFT Group, you may at any time file an objection with the competent agency having jurisdiction over data protection.
Inquiries
Any inquiries or questions regarding personal data of PACRAFT Group Members can be directed to the following:
General Affairs & Personnel Department, PACRAFT Corporation, or General administration & human resources department of each Group company.
Miscellaneous provisions
This Privacy Policy may be revised or amended from time to time by the PACRAFT Group without notice.
Please click here for Personal data inquiries.
