PRIVACY POLICY

Basic Policy on the Protection of Personal Information

CFT² (hereinafter, ‘we’ or ‘our organization’) has established the following basic policy on the protection of personal information and will promote the protection of personal information accordingly.

1. Compliance with laws and standards

We comply with the laws and other standards applicable to the personal information we hold.

2. Acquisition of personal information

We acquire personal information by lawful and fair means.

3. Use of personal information

For the personal information we acquire, we specify and disclose the purposes of use to the individual concerned. We also use acquired personal information for our business within the scope of those purposes.

4. Security management of personal information

We strive to prevent the loss, destruction, alteration, leakage, and unauthorized access of personal information. To this end, we implement organizational, personnel, physical, and technical security measures.

5. Provision of personal information to third parties

Except where we have obtained the individual’s consent or where based on laws or regulations, we do not provide personal information to third parties without a legitimate reason.

6. Handling of complaints and inquiries regarding the handling of personal information

We respond appropriately to complaints and inquiries regarding the handling of personal information.

7. Continuous improvement of personal information protection efforts

In response to changes in laws, standards, and the like, we review our personal information protection systems and strive for their continuous improvement.

Notice Concerning the Handling of Personal Information under the Act on the Protection of Personal Information

On our website, we handle personal information as follows, in accordance with the Act on the Protection of Personal Information.

1. Purposes of use of personal information

We use your personal information for the following purposes.

(1) We use your name, address, telephone number, email address, affiliated company or organization, occupation, the content of your messages, and the like for the following purposes:

・to respond to your inquiries;
・to provide our products and services;
・to provide information about our products, services, and the like;
・to send materials you have requested;
・to arrange business meetings with you.

(2) We analyze acquired information such as browsing history and behavioral history, and use it for the following purposes:

・to display advertisements for products and services matched to your interests and preferences;
・to provide information on products and services matched to your interests and preferences.

2. Provision of personal information to third parties

Except in the following cases, we do not provide the personal information we hold to third parties without the individual’s consent:

・where we provide it to a subcontractor or business partner within the scope necessary for operations;
・where the business is succeeded under laws or regulations due to a merger, corporate split, business transfer, or other cause;
・where provision is required in accordance with laws or regulations.

3. Joint use of personal information

With your consent, we may jointly use the personal information we hold together with our member organizations and their subsidiaries, as follows.

Personal information that may be jointly used: name, email address, address, telephone number, affiliated company or organization, occupation, the content of messages, and the like.

Companies with which information is jointly used: the member organizations identifiable at the URL linked below: https://www.cft2.net/english/about/

Purpose of joint use: the same as in 1. Purposes of Use of Personal Information

4. Outsourcing of personal information processing

When we outsource the processing of the personal information we hold, we conclude the necessary contracts and carry out appropriate management and supervision.

5. Response to requests for disclosure and the like

When an individual requests the disclosure or correction of their personal information, we respond promptly. Inquiries are accepted through the inquiry desk on our website.

6. Voluntary nature of providing personal information

Providing your personal information to us is voluntary. However, if you do not provide the required information, we may be unable to respond appropriately to your inquiry or provide other related services.

7. Use of cookies

We may use cookies on our website. Cookies are a mechanism that stores information from your visits to a website in the web browser you use. We use cookies for the purpose of improving the convenience of the website. For details, please refer to our separately established Cookie Policy.

8. Inquiry desk

If you have any questions about this Policy or any questions or concerns regarding our handling of personal information, specific personal information, or related information, please contact us using the contact form available here.
For information about our organization (including member organizations), please see here.

Notice Concerning the Handling of Personal Information under the GDPR

On our website, for the personal information of persons residing in the European Economic Area (EEA), we handle it as follows in accordance with the EU General Data Protection Regulation (GDPR), in addition to the Handling of Personal Information under the Act on the Protection of Personal Information.

1. Legal basis for handling personal information

We treat the obtaining of consent as the legal basis, and handle personal information within the scope of the consent you have given.

2. Transfer of personal information to third countries outside the EU

Where it is necessary for the purposes for which personal information is used, we may transfer personal information to service providers and recipients located in countries outside the EEA. Such transfers to third countries will be made only in compliance with applicable data protection laws (Articles 45 and 46 of the GDPR). Where personal information is transferred to a country that has not received an adequacy decision from the European Commission, we implement appropriate safeguards by entering into Standard Contractual Clauses (SCCs).

3. Retention period of personal information

We manage your personal information only for the period necessary to comply with legal obligations and to fulfill the purposes of use. Personal information that is no longer needed is deleted or erased without prior or subsequent consent.

4. Your rights

(1) With respect to the personal information we hold, you have the following rights:

・the right of access to information (GDPR Article 15);
・the right to rectification of information (GDPR Article 16);
・the right to erasure of information, the right to be forgotten (GDPR Article 17);
・the right to restriction of processing (GDPR Article 18);
・the right to object to processing (GDPR Article 21);
・the right to data portability (GDPR Article 20).

(2) Insofar as the processing of your personal information is carried out with your consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal.

(3) You have the right to lodge a complaint with a data protection supervisory authority regarding our handling of your personal information.