PRIVACY POLICY
Thirty-Five Summers Co., Ltd. (hereinafter referred to as "the Shop" or "the Company") recognizes the social responsibility to appropriately protect the personal information of all individuals. Therefore, we will take all reasonable measures to handle and protect personal information, including individuals located in the European Economic Area (hereinafter referred to as "EEA"), in accordance with this Privacy Policy (hereinafter referred to as "this Policy") as set forth below, based on the General Data Protection Regulation No. 2016/679 (hereinafter referred to as "GDPR"). If obligations are imposed by the domestic laws of your location, such laws shall be deemed supplementary to this Privacy Policy.
1. Definitions
The following terms in this Policy shall have the meanings set forth below:
(1) Customer
Refers to an identifiable natural person to whom personal information belongs.
(2) Personal Information
Refers to any information that can identify an individual (including information that can be easily collated with other information, thereby identifying a specific individual).
(3) Applicable Laws
Refers to the GDPR and the Japanese laws on the protection of personal information.
(4) Processing
Refers to the operations performed on personal information, including but not limited to collection, recording, storage, editing, processing, modification, retrieval, reference, use, disclosure by transmission, distribution, provision of access by other means, deletion, or destruction, as well as recovery, regardless of whether it is manual or automatic.
(5) Customer Consent
Refers to a clear indication of the customer's intention based on prior information, indicating the customer's agreement to the handling of personal information related to themselves.
2. Collection of Personal Information
We collect personal information when customers engage in the following activities at the Shop:
(a) Registering online
(b) Purchasing products or making inquiries
(c) Browsing or using the Shop's website
(d) Subscribing to the Shop's email magazine
We collect personal information through lawful and fair means, specifying the purpose of use.
The types of personal information collected by the Shop include:
(a) Name (in Japanese and in Roman characters)
(b) Address
(c) Telephone number
(d) Email address
(e) Username and password
(f) Shipping information
(g) Transaction history and details with the Shop
(h) Customer's credit card, debit card, and other payment information
(i) Location data, behavioral data
(j) IP address, cookie information, and other online identifiers
(k) Information that, when combined, can identify a specific individual
3. Use of Personal Information
The purposes for which we use the personal information entrusted by customers to the Shop are as follows:
(a) Confirmation and inquiry of orders
(b) Confirmation and inquiry of product shipments
(c) Reply to inquiries
(d) Provision of aftercare and other support
(e) Sending marketing communications, displaying advertisements, and sending advertising emails
(f) Maintenance and improvement of services
(g) Analysis of usage trends
(h) Adjustment of advertisements and content displayed on the Shop's website for customers
(i) To assist in searching for the customer's nearest store
(j) Customer identification
Except in the following cases, the Shop will not disclose or provide personal information to third parties without the customer's consent:
(a) When required by law, or when it is necessary to cooperate with a national or local government agency or a person entrusted by such agency in performing duties prescribed by law
(b) When it is necessary to protect a person's life, body, or property, and obtaining the person's consent is difficult
(c) When sharing personal data with affiliated companies of the company operating the Shop, in compliance with the GDPR. In this case, the Shop will establish appropriate legal frameworks for the transfer and handling of data (GDPR Articles 26, 28, and 29). Additionally, when the Shop shares personal information with third parties outside the EEA, it will establish appropriate legal frameworks for the transfer of such personal information (which may include standard contractual clauses approved by the European Commission).
4. Legal Basis for Processing Personal Information
The legal basis for processing personal information is as follows:
(a) When the customer has consented to the processing of their personal information for specific purposes
(b) When processing is necessary for the performance of a contract to which the customer is a party, or to carry out procedures at the request of the customer prior to entering into a contract
(c) When processing is necessary to comply with legal obligations that the Company must adhere to
(d) When processing is necessary to protect the vital interests of the customer or another natural person
(e) When processing is necessary for the performance of tasks carried out in the public interest or in the exercise of official authority vested in the controller
(f) When processing is necessary for the legitimate interests pursued by the Company or by a third party
5. Management of Information Security and Storage Period
(1) The Company takes reasonable, organizational, physical, human, and technological measures to ensure the security of personal information entrusted by customers, and the Shop strives to prevent unauthorized access to personal data, as well as the risks of loss, alteration, leakage, etc., by handling personal data appropriately in accordance with relevant laws and regulations.
(2) The Company will retain personal information for the minimum period specified by applicable laws and regulations. After the minimum retention period has elapsed, or if there is no minimum retention period, personal information will be promptly deleted when it is no longer necessary for the purposes specified in Article 3.
6. Outsourcing
In order to fulfill the purposes set forth in this Policy, including providing services through the Shop, the Company may entrust all or part of the handling of personal information to third parties. When entering into contracts for outsourcing, the Company will carefully consider whether the third party is suitable as the outsourcing destination. In the contract for such outsourcing, the Company will specify security measures, confidentiality, conditions for subcontracting, and other matters related to the proper handling of personal information, and will appropriately supervise the outsourcing destination through monitoring of the outsourcing business status.
7. Customer Rights
Based on applicable laws, including GDPR, customers have the following rights. When asserting these rights, please notify us by email or mail at the contact information below. Additionally, if you are registered as a user, you can correct your personal information through the "My Account" menu on our site.
When responding to requests regarding their personal information, the Company will verify the identity of the individual and respond reasonably and appropriately within a reasonable scope. However, depending on the applicable laws, you may not be able to exercise certain rights (e.g., under Japan's Act on the Protection of Personal Information, the right to data portability is not recognized at the time of this Policy revision). Furthermore, the deletion or termination of use of all or part of personal information may result in the Company being unable to provide satisfactory services to customers. Additionally, due to specific legal obligations, the Company may be unable to delete or terminate the use of information it holds.
(1) Types and Contents of Rights
1. Right to withdraw consent
If the processing of personal information is based on the customer's consent, the customer has the right to withdraw their consent at any time.
2. Right of access
Customers have the right to request access to their personal information. The Company will provide a copy of the information upon request.
3. Right to rectification
Customers can request the correction of incomplete or inaccurate personal information.
4. Right to erasure
Customers have the right to request the deletion of their personal information if the Company is processing it without legitimate reasons.
5. Right to restriction of processing
Customers have the right to request the Company to restrict the processing of their personal information.
6. Right to data portability
Customers have the right to receive their personal information in a structured, commonly used, and machine-readable format.
7. Right to object
Customers have the right to object to the processing of their personal information by the Company. The Company will cease processing the objected personal information unless there are compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the customer or for the establishment, exercise, or defense of legal claims.
8. Right to lodge a complaint with a supervisory authority
Customers have the right to lodge a complaint with a supervisory authority at any time. However, we would appreciate it if you could contact us first before contacting the supervisory authority.
(2) Costs for Exercising Rights
The administrator may charge a fee for exercising the above rights based on applicable laws.
(3) Cases of Refusal to Respond
If a customer's request is clearly unfounded or excessive, or if the same or similar request is repeated, the Company may charge a reasonable fee or refuse to respond to the request.
8. Use of Cookies
In order to provide better service to customers, the Company may use cookies and other similar technologies (hereinafter referred to as "cookies, etc.") for the following purposes: to provide our services, to ensure the proper operation of those services, to analyze our business and marketing activities, and to track and optimize the use of the Shop's website or services by customers. Through these technologies, for example, customers do not need to re-enter necessary data into forms each time they use the Shop's website. The information stored in cookies, etc., is used to identify customer preferences and adjust content according to their areas of interest.
When customers access the Shop, a pop-up will appear in their browser allowing them to choose whether to consent to the use of cookies. Customers can block or allow cookies by selecting on the pop-up. Additionally, customers can block these cookies, etc., or display warnings in their browser settings. However, please note that restricting certain cookies, etc., may prevent some parts of the Shop's site from functioning properly.
Furthermore, when customers browse the Shop's site, the Shop may allow third parties to provide advertisements and collect certain anonymous information. These third parties may use the information collected during customers' browsing of the Shop's site and other websites to provide advertisements for products and services that match their interests, using cookies, etc., primarily to obtain the above information, recognize users, or associate them across different devices or browsers, and to provide targeted advertising more effectively.
※ Cookies are pieces of information sent from a server computer to a customer's browser and stored on the hard disk of the computer the customer is using.
9. Use of SSL
To ensure security when entering personal information, we use SSL (Secure Sockets Layer) technology to prevent interception, interference, or tampering with this information.
※ SSL is a function that prevents eavesdropping and tampering with data by encrypting information. Using SSL allows for safer transmission of information.
10. Contact Information (Administrator)
For questions, complaints, or if you wish to exercise your rights as described in Article 7 of this Policy, please contact us at the following address.
Data Administrator: Thirty-Five Summers Co., Ltd.
Address: Please refer to the notation based on the Specified Commercial Transactions Act.
Email: store@35summers.com
11. Changes to the Privacy Policy
The Shop may change the personal information collected, purposes of use, or this Policy for compliance with legal amendments or other reasons. The latest version of this Policy will always apply to the personal information collected by the Shop. By accessing the Shop's website or using its services after this Policy has been revised, you are deemed to have agreed to the revised Policy. Any revisions to this Policy will be posted on this page and will take effect on the date of posting.