ArtX Inc. (hereinafter referred to as "Company") exercises the utmost care in protecting user information. The Company may collect information regarding customers who use the website operated by the Company (hereinafter referred to as "Site") or the services provided by the Company (hereinafter referred to as "Service") when they use the Site or the Service. The Company establishes the following policy (hereinafter referred to as "Notice") regarding information about customers located within the European Economic Area (hereinafter referred to as "EEA") and the United Kingdom, where the European Union General Data Protection Regulation (hereinafter referred to as "GDPR") and the UK General Data Protection Regulation apply. The Company will strive to prevent the leakage, misuse, or falsification of customer information in accordance with this Notice.
This Notice applies only to customers located within the EEA and the UK. In the event of any conflict between this Notice and the 'Privacy Policy', this Notice shall take precedence.
The following terms are defined as follows in this Notice.
"Site"
means the website operated by the Company under the following URL. However, the URL may be changed at the Company's discretion.
https://artx.com
https://cloud.artx.com
"Service"
means the collective term for the services provided by the Company.
"Personal Data"
means any information relating to an identified or identifiable individual users acquired through the Site and the Service.
"User"
means any individual using the Site or the Service.
"Applicable Laws"
means privacy-related laws and regulations in the EEA and the UK, including the European Union General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), and related local implementing laws and regulations.
The Company is the controller responsible for the processing of personal data, and its contact details are as follows:
ArtX Inc.
Fujiwara Building 2F, 1-10-11 Ebisu Nishi, Shibuya-ku, Tokyo 150-0021 Japan
Email Address: [email protected]
The Company uses and processes the Users' Personal Data within the scope of the purposes of use listed below.
| Purpose of Use | Legal Basis |
|---|---|
| (1) Processing related to the commencement of use of the Service (confirmation of application, membership registration procedures, etc.) | Performance of a Contract, Legitimate Interests |
| (2) Email delivery related to the Service | Performance of a Contract, Legitimate Interests |
| (3) Responding to the User inquiries regarding the Site or the Service | Performance of a Contract, Legitimate Interests |
| (4) Processing order information for transactions conducted through the Service | Performance of a Contract, Legitimate Interests |
| (5) Conducting surveys and analyses regarding the Site or the Service, or reporting the results thereof | Legitimate Interests, Given Consent |
| (6) Claims or payment demands related to the Site or the Service | Performance of a Contract, Legitimate Interests |
| (7) Provision of information, advertising, or promotion related to the Site or the Service | Legitimate Interests |
| (8) Consideration and development of new services | Legitimate Interests |
| (9) Market analysis using user behavior history and attribute information, and advertising/marketing to the Users based on the results | Legitimate Interests, Given Consent |
| (10) Anonymization of statistically processed information | Legitimate Interests |
The Company has legitimate interests in using the Personal Data to effectively provide the Service and conduct its business.
The Company handles the Users' Personal Data necessary for the purposes specified in Article 3. This Personal Data includes the following:
Information about the User, such as name, address, contact information (phone number, fax number, email address), and employer information (company name, department, position, address, phone number)
Information about the User's clients and the artworks handled
Access logs (IP address, cookies, etc.) and information regarding the User's actions on the Site when using it
The Company does not collect sensitive personal data or personal data related to criminal offenses, in principle. Furthermore, the Company does not intend to collect personal data from minors. However, this does not apply when the requirements of the Applicable Laws are met.
The Company actively collects the Personal Data directly from Users through their use of the Service, responses to their inquiries, and similar means.
The Company passively collects certain information, such as cookies, in connection with access to this website.
The Company may acquire derived data corresponding to Users' Personal Data by analyzing their Personal Data.
Provision of the Personal Data is necessary for browsing the Site and using the Service. If you do not provide your Personal Data, all or part of the Service may be unable to be provided.
To achieve the purposes stated in Article 3, the Company may disclose or provide the Personal Data to the following affiliated companies of ours: ArtX Inc.
When transferring the Personal Data to any country/region other than Japan outside the United Kingdom and the EEA, the Company will do so in accordance with the Applicable Laws. In such cases, unless the European Commission has determined that the country/region ensures an adequate level of data protection, the Company will, in general, transfer the Personal Data after concluding Standard Data Protection Clauses as appropriate safeguards, in accordance with the provisions of the Applicable Laws.
The Company shall retain the Users' Personal Data for the period necessary to achieve the purposes for which it is used and processed. The Company will delete the User Information once five (5) years have passed since the User's last access to the Site. However, the Company may extend this retention period if reasonably necessary to comply with the Applicable Laws or to protect our legitimate interests.
The use of cookies and similar technologies on the Site shall be governed by the "Cookie Policy" separately established by the Company.
The Users may exercise their rights regarding their Personal Data, including disclosure, correction or addition, deletion, etc. (hereinafter collectively referred to as "Disclosure"), and request the following actions from the Company. When a request is made by a User or his/her authorized representative, the Company will confirm that the request is from the User oneself and respond without delay in accordance with the Company's prescribed procedures.
Disclosure (Right to Access): the Company will disclose the retained Personal Data that identifies the individual.
Correction or Addition: if requested to correct or add to retained Personal Data identifying the individual on the grounds that it is not factual, the Company will promptly correct it or add it within the scope necessary to achieve the purpose of use.
Deletion: the Company will delete retained Personal Data identifying the individual if there is any reason for deletion provided in the Applicable Laws, such as when retention is no longer necessary for the purpose of use, provided however, this does not apply if any of the grounds for retention specified by the Applicable Laws exist, such as exercising freedom of expression or complying with legal obligations related to processing.
Restriction of Data Processing: if the suspension of use, erasure, or cessation of provision to third parties of retained Personal Data identifying the individual is requested for legitimate reasons, the Company will cease processing such Personal Data and retain them only for the storage, unless exceptions under the Applicable Laws apply.
Withdrawal of Consent: if the processing of the Personal Data is based on consent of a User and the User expresses his/her intention to withdraw that consent, the Company will cease processing the Personal Data based on that consent.
Objection: if an objection is raised against the processing of the Personal Data for direct marketing purposes, the Company will promptly cease such processing. If an objection is raised against the processing of the Personal Data based on the authority granted to the controller or on legitimate interests, the Company will cease such processing unless there are legitimate grounds for continuing it.
Data Portability: the Company will transfer the Personal Data to the User or a third party designated by the User in a structured, commonly used, and machine-readable format, provided that the Company processes such Personal Data using automated means and the processing is based on the User's consent or the performance of a contract.
For specific methods to request the Disclosure as described in the preceding paragraph, please contact the inquiry point listed in the following article.
The User has the right to lodge a complaint with the supervisory authority in the United Kingdom or the EEA where the User resides or works, or where the alleged infringement occurred, regarding the Company's handling of the Personal Data. For information on complaint procedures, please contact the relevant supervisory authority.
The contact information for inquiries regarding this Regulation is as follows:
ArtX Inc.
Privacy Policy Officer
Fujiwara Building 2F, 1-10-11 Ebisu Nishi, Shibuya-ku, Tokyo 150-0021 Japan
Email Address: [email protected]
In case of any revision of this Regulation, the Company will announce it in advance on the Site.
