Privacy Policy
Arai Shoji Co., Ltd.
Arai Shoji Co., Ltd. (hereinafter referred to as “the Company”) handles personal information in order to provide products and services that are convenient and beneficial to our customers. To protect personal information from risks such as leakage, loss, and falsification, and to safeguard the rights of the individuals concerned, the Company has established the following “Personal Information Protection Guidelines” and will take all necessary and appropriate measures to protect personal information.
This Privacy Policy also contains supplementary provisions applicable specifically to the processing of personal data of individuals located in EU member states, the United Kingdom, and the European Economic Area (EEA), including Iceland, Norway, and Liechtenstein, in accordance with the General Data Protection Regulation (GDPR). The supplementary provisions for EEA-located individuals are set forth in Sections 8 through 14 of this Policy.
1. Personal Information Protection Guidelines
- 1.The Company will comply with applicable domestic laws, regulations, and other standards concerning personal information, and will manage personal information appropriately.
- 2.The Company will establish rules and regulations regarding the proper handling of personal information, including acquisition, use, and provision, and ensure all employees adhere to them.
- 3.If the Company entrusts all or part of the handling of personal information to a third party, it will exercise necessary and appropriate supervision to ensure that the third party manages personal information securely.
- 4.The Company will implement appropriate and reasonable safety management measures for the personal information it holds and will strive to prevent leakage, loss, or falsification.
- 5.The Company will continuously review and improve its management systems and efforts for personal information protection.
2. Purpose of Use of Personal Information
The personal information held by the Company will be handled within the necessary scope to achieve the following purposes:
- 1.To operate auction venues and provide various services related to the auction business.
- 2.To provide various services related to the provision and sale of food and beverages.
- 3.To provide various services related to the pachinko and slot machine business.
- 4.For selection and communication related to recruitment activities.
- 5.To send materials and provide email distribution services.
- 6.To manage transactions, contracts, and provide after-sales services with customers.
- 7.To send direct mail and other various notifications for providing the Company’s products and services, as well as products and services that may be useful to customers.
- 8.To respond to inquiries made through the website or other channels.
- 9.For other purposes necessary for the Company’s business operations.
3. Provision of Personal Information to Third Parties
In principle, the Company will not provide personal information to third parties without obtaining the consent of the individual concerned. Personal information will only be provided to third parties when the recipient and the content of the information are specified, and the consent of the individual is obtained. However, the Company may provide personal information without the individual’s consent in the following cases, within the limits permitted by applicable laws and regulations:
- 1.When required by law.
- 2.When it is necessary to protect a person’s life, body, or property, and it is difficult to obtain the individual’s consent.
- 3.When it is particularly necessary for improving public health or promoting the sound development of children, and it is difficult to obtain the individual’s consent.
- 4.When it is necessary to cooperate with a national or local government agency or a party entrusted by them to perform duties prescribed by law and obtaining the individual’s consent would interfere with the execution of those duties.
- 5.When the following matters have been disclosed or made publicly available in advance:
-
- (1)That the provision to third parties is included in the purpose of use.
- (2)The items of personal data to be provided to third parties.
- (3) The means or method of providing personal data to third parties.
- (4) That the individual can request the cessation of provision of personal information to third parties.
However, the following cases do not fall under the definition of “third parties” as described above:
- a.When the Company entrusts all or part of the handling of personal information to a third party within the necessary scope to achieve the purpose of use.
- b.When personal information is provided due to business succession such as mergers, and the information is handled within the scope of the original purpose of use.
- c.When personal information is jointly used with specific parties, and the individual is notified in advance or made easily aware of the fact of joint use, the items of personal information to be jointly used, the scope of the parties jointly using the information, the purpose of use with the parties, and the name or designation of the party responsible for the management of the personal information.
4. Joint Use of Personal Information
The Company jointly uses personal information as follows:
4.1 Items of Personal Data to be Jointly Used
Name, business name, address, phone number, information directly related to odometer tampering, payment delay information, membership cancellation information, bankruptcy information, violation of the Secondhand Articles Dealer Act information, antisocial forces information.4.2 Scope of Parties Jointly Using the Information
Nippon Auto Auction Association, Arai Logistics Co., Ltd., MIRIVE Co., Ltd., Kyushu Central Auto Auction Co., Ltd., BAYAUC Co., Ltd.4.3 Purpose of Use by the Parties
To smoothly operate auctions and provide used car distribution services.4.4 Responsible Party for Joint Use Management
-
- For the personal information acquired by the Company:
Address: 17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
Representative Director: Ryōzō Arai - For the personal information acquired by the Nippon Auto Auction Association:
Address: 3-2-14 Nihonbashi KN Building 3F, Nihonbashi, Chuo-ku, Tokyo
President: Takeshi Kitaguchi - For the personal information acquired by Arai Logistics Co., Ltd.:
Address: 17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
Representative Director: Junichi Minagawa - For the personal information acquired by MIRIVE Co., Ltd.:
Address: 2631 Tanaka, Fukaya-shi, Saitama
Representative Director: Fumihiko Itō - For the personal information acquired by Kyushu Central Auto Auction Co., Ltd.:
Address: 726-2 Yoshio-cho, Kōriyama-shi, Miyazaki
Representative Director: Takashi Ōmine - For the personal information acquired by BAYAUC Co., Ltd.:
Address: 3-5-30 Nanko-higashi, Suminoe-ku, Osaka-shi, Osaka
Representative Director: Manabu Kobayashi
- For the personal information acquired by the Company:
5. Disclosure of Personal Information
The Company will respond within a reasonable scope, in accordance with the Personal Information Protection Law, to requests for notification of the purpose of use of personal information, disclosure, correction (correction, addition, or deletion of content), suspension of use (suspension or deletion of use), or suspension of third-party provision (collectively referred to as “Disclosure, etc.”) from the individual concerned.
6. Inquiries Regarding Personal Information
For inquiries regarding the disclosure of personal information, please contact the following:
254-0043
17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
Arai Shōji Co., Ltd., General Affairs Department
TEL: 0463-23-2011
FAX: 0463-23-2463
7. Cookies
The Company uses not only cookies that are essential for the operation of its website (essential cookies), but also cookies for the collection of analytical data, as well as for marketing and analysis purposes to improve the website’s functionality. For more details, please refer to the cookie banner on the Company’s website.
Supplementary Provisions for Individuals Located in the EEA
The following Sections 8 through 14 apply only to the processing of personal data of individuals located in EU member states, the United Kingdom, and the European Economic Area (EEA), including Iceland, Norway, and Liechtenstein. These supplementary provisions are established in accordance with the General Data Protection Regulation (GDPR) and are to be read in conjunction with Sections 1 through 7 above.
8. Definition of Personal Data
In these supplementary provisions, “personal data” refers to any information relating to an identified or identifiable natural person.
9. Name and Contact Information of the Data Controller
The name and contact information of the data controller are as follows:
254-0043
17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
Arai Shōji Co., Ltd.
TEL: 0463-23-2011
FAX: 0463-23-2463
E-mail: info@arai-group.co.jp
10. Types and Sources of Personal Data
10.1 Types of Personal Data
The Company may collect the following personal data from customers:
Contact Information: Name, business name, business address, region, country, department name, phone number, fax number, email address.
Transaction Information: Contract details.
Automatically Generated Information: Online identifiers (IP address, cookies, visit timestamps, etc.).10.2 Sources of Personal Data Collection
Information Collected Directly from Customers
The Company collects personal data such as name, business name, business address, region, country, department name, phone number, fax number, and email address from the following sources:
-
- (1)When customers fill out the “Contact” form.
- (2)When customers contact the Company via the website.
- (3)When customers contact the Company by email, phone, or in person.
- (4)When customers fill out an application form to use the Company’s services.
- (5)When customers send, transmit, or provide necessary documents or materials to the Company.
Please note that providing certain personal data to the Company may be required by law or contract or may be necessary for contract execution. If customers do not provide the required personal data in response to the Company’s request, they may not be able to enter into a contract with the Company or receive the Company’s products or services.
Automatically Collected Information
The Company automatically collects personal data such as IP address, cookies, and visit timestamps when customers visit the Company’s website.
11. Legal Basis for Processing of Personal Data
The legal basis for the processing of personal data is as follows:
- 1.When processing is necessary for the performance of a contract with the customer.
- 2.When processing is necessary for preparing to conclude a contract at the customer’s request.
- 3.When processing is necessary to comply with legal obligations to which the Company is subject.
- 4.When the customer has given consent to the processing of their personal data.
- 5.When processing is necessary to protect the vital interests of the customer or another natural person.
- 6.When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.
- 7.The Company’s legitimate interests, such as reviewing whether to enter into a contract with the customer, confirming and responding to communications or inquiries from the customer, sending information related to the services the customer is using, reviewing comments or complaints from the customer regarding the Company’s services, and improving the service content.
- 8.The Company’s legitimate interest in using essential cookies to provide and maintain the Company’s website, and using other cookies to enhance the functionality of the website.
12. Retention Period of Personal Data
The Company will promptly dispose of customers’ personal data after a period that is reasonably necessary for the purpose of processing has passed.
13. Rights of Data Subjects
In addition to the rights described in Sections 5 and 6 above, individuals located in the EEA have the following rights under the GDPR:
13.1 Right of Access
Customers have the right to access their personal data. Additionally, customers can receive a copy of their personal data held by the Company (though it may not necessarily be in written form).
13.2 Right to Rectification
Customers have the right to request the correction of inaccurate personal data concerning themselves.
13.3 Right to Erasure
- (1)The personal data is no longer necessary for the purposes for which it was collected or processed.
- (2)The processing of the personal data is based on the customer’s consent, and the customer has withdrawn that consent, and the Company can no longer process the data based on any other legal grounds.
- (3)The customer objects to the processing of their personal data, and there is no overriding legal basis for the processing of that data.
- (4)The personal data has been processed unlawfully.
- (5)The personal data must be erased to comply with a legal obligation to which the Company is subject.
- (6)The personal data was collected in relation to the provision of information society services under GDPR Article 8.1.
However, the Company is not required to comply with a deletion request in the following circumstances:
- (i)To exercise the right to freedom of expression and information.
- (ii)To comply with legal obligations related to processing.
- (iii)For reasons of public interest in the area of public health.
- (iv)For archiving in the public interest, scientific research, historical research, or statistical purposes.
- (v)For the establishment, exercise, or defense of legal claims.
13.4 Right to Restrict Processing
Customers may request the restriction of processing of their personal data if any of the following conditions are met:
- (1)If concerns have been raised regarding the accuracy of the personal data and the Company needs time to verify the accuracy of the data.
- (2)If the processing of personal data is unlawful, and the customer opposes the deletion of the data and instead requests the restriction of its use.
- (3)If the Company no longer needs the personal data for the purposes of processing, but the customer requires it for the establishment, exercise, or defense of legal claims.
- (4)If the customer disputes whether the legitimate interests of the Company override the customer’s legitimate interests and has objected to the processing of the data.
However, the restriction of processing does not apply in the following cases:
- (i)When the customer has given consent.
- (ii)For the establishment, exercise, or defense of legal claims.
- (iii)For the protection of the rights of other natural or legal persons.
- (iv)For important public interest reasons in the EU or member states.
13.5 Right to Data Portability
If the processing of personal data is based on the customer’s consent or the performance of a contract, and such processing is carried out by automated means, the customer has the right to receive the personal data they provided in a structured, commonly used, and machine-readable format. Additionally, the customer has the right to request the transfer of their personal data to another controller.
13.6 Right to Object
The customer has the right to object at any time to the processing of their personal data based on grounds related to their particular situation, including profiling under Article 6(1)(e) or (f) of the GDPR. The Company will not process the customer’s personal data unless it can demonstrate compelling legitimate grounds for processing that override the customer’s interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
Additionally, when personal data is processed for direct marketing purposes, the customer has the right to object at any time to the processing of their personal data for such marketing purposes.13.7 Right to Object to Profiling
The customer has the right not to be subject to decisions based solely on automated processing, including profiling, which have legal effects concerning the customer or significantly affect them. However, this right does not apply in any of the following cases:
- (1)When it is necessary for the performance of a contract between the customer and the Company, or for entering into a contract.
- (2)When the Company is subject to EU law or national law of a member state, and such laws prescribe adequate safeguards to ensure the security of the customer’s rights and freedoms as well as their legitimate interests.
- (3)When the customer has given explicit consent.
13.8 Right to Withdraw Consent
If the processing of personal data is based on consent, the customer has the right to withdraw their consent regarding the processing of their personal data at any time.
13.9 Right to Lodge a Complaint with a Supervisory Authority
If the customer believes that their personal data is being processed in violation of applicable data protection laws, they have the right to file a complaint with the supervisory authority in their area of residence regarding data protection issues. However, the Company would like the opportunity to address the customer’s concerns before they lodge a complaint with the supervisory authority. Therefore, we kindly ask that you contact us at the contact information provided in Section 9 of this Policy.
14. Contact Information (for EEA-Located Individuals)
If you have any questions regarding the processing of your personal data or wish to exercise your rights under the GDPR, please contact:
Arai Shōji Co., Ltd.
TEL: 0463-23-2011
FAX: 0463-23-2463
E-mail: info@arai-group.co.jp