Table of contents:
Summary
The Datenschutzerklärung site provides essential information regarding data protection and the handling of personal data as per the General Data Protection Regulation (GDPR). It introduces Ryusei Hosono of DOITSUYA COMPANY LIMITED as the responsible entity for data processing, located in Machida-shi, Japan. The site details data collection practices during informational visits, explaining that technical data such as visited pages, access times, and browser information are logged for operational stability and functionality. To ensure secure transmission of personal data, the website employs SSL/TLS encryption. Furthermore, it utilizes a hosting provider that processes all visitor data within the European Union and has established a data processing agreement to protect user information from unauthorized access. The page also references the use of a content delivery network provided by BUNNYWAY d.o.o. for enhanced content distribution.Privacy Policy
1) Introduction and Contact Details of the Controller
1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when using our website. Personal data includes all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ryusei Hosono, DOITSUYA COMPANY LIMITED, 3-4-13 N21 Bldg., 194-0021 Nakamachi, Machida-shi, Japan, Tel.: 815054793719, E-Mail: [email protected]. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When you merely use our website for informational purposes, i.e., if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to the site’s server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/referrer from which you accessed the page
- Browser used
- Operating system used
- IP address used (possibly in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.
3) Hosting & Content Delivery Network
3.1 For the hosting of our website and the presentation of the site content, we use a provider who provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website are processed on these servers.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
3.2 Bunny
We use a content delivery network from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
This service allows us to deliver large media files such as graphics, site content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
3.3 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, site content, or scripts more quickly via a network of regionally distributed servers. Processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the level of data protection in Europe.
4) Contacting Us
When contacting us (e.g. via contact form or e-mail), personal data are collected. Which data are collected when using a contact form is apparent from the respective contact form. These data are used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal retention obligations to the contrary.
5) Comment Function
As part of the comment function on this website, in addition to your comment, details on the time the comment was created and the commentator name you chose are stored and published on this website. Furthermore, your IP address is logged and saved. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties or posts unlawful content by submitting a comment. Your e-mail address is required so that we can contact you if a third party objects to your published content as being unlawful.
The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
6) Online Marketing
6.1 Amazon
We participate in the affiliate program of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg
In this context, we have placed links on our website that lead to offers on the provider’s websites or those of third parties (“partner sites”).
To measure the success of an affiliate link, evaluate orders generated via such a link, and process the corresponding commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. In this context, the provider regularly processes the IP address and, if applicable, further device information.
All the processing described above, in particular reading or storing information on your device, only takes place if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.
6.2 Booking.com
We participate in the affiliate program of the following provider: Booking.com B.V. Herengracht 597, 1017 CE Amsterdam, Netherlands
In this context, we have placed links on our website that lead to offers on the provider’s websites or those of third parties (“partner sites”).
To measure the success of an affiliate link, evaluate orders generated via such a link, and process the corresponding commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. In this context, the provider regularly processes the IP address and, if applicable, further device information.
All the processing described above, in particular reading or storing information on your device, only takes place if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.
7) Site Features
7.1 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider in the process.
If playback of embedded videos via the plugin is started, the provider also uses cookies to collect information about user behavior, to create playback statistics, and to prevent abusive behavior.
If you are logged in to a user account with the provider during your website visit, your data will be directly associated with your account when you click on a video. If you do not want the assignment to your account, you must log out before clicking the playback button.
All of the abovementioned processing, especially the setting of cookies for retrieving information on your device, will only take place if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time with future effect by disabling this service via the “cookie consent tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision of the European Commission, ensures compliance with the level of data protection in Europe.
7.2 FontAwesome
This site uses web fonts called Web Fonts from the following provider for consistent font display: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA
When you open a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In this process, certain browser information, including your IP address, is transmitted to the provider.
The processing of personal data in the course of connecting to the provider of the fonts will only take place if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service via the “cookie consent tool” provided on the website. If your browser does not support web fonts, a standard font will be used from your computer.
For data transfers to the USA, the provider refers to the standard contractual clauses of the European Commission which are intended to ensure compliance with the level of data protection in Europe.
7.3 Applications for Job Vacancies via E-Mail
On our website, we publish currently vacant positions in a separate section, for which interested parties can apply via e-mail to the provided contact address.
Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address and contact options, as well as performance-related evidence and, if applicable, health-related information. Further details about the application can be found in the respective job advertisement.
After receiving the application by e-mail, the data will be stored and evaluated solely for the purpose of processing the application. For queries, we will use either the applicant’s e-mail address or telephone number. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), according to which going through the application process is considered an initiation of an employment contract.
If, within the scope of the application process, special categories of personal data in the sense of Art. 9 para. 1 GDPR (e.g., health data such as information about disability status) are requested from applicants, processing is carried out according to Art. 9 para. 2 lit. b GDPR in order for us to exercise rights arising from labor law and the law on social security and social protection and to fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special data categories may also be based on Art. 9 para. 1 lit. h GDPR if it takes place for the purposes of preventive health care or occupational medicine, for assessing the working capacity of the applicant, for medical diagnosis, care or treatment in the health or social sector, or for managing systems and services in the health or social field.
If the applicant is not selected or withdraws their application prematurely, their transmitted data, including all electronic correspondence and the application e-mail, will be deleted at the latest after 6 months following notification thereof. This period is determined by our legitimate interest in answering follow-up questions regarding the application and, where applicable, to fulfill our obligations to provide evidence under equal treatment regulations for applicants.
If the application is successful, the provided data will be further processed on the basis of Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of implementing the employment relationship.
8) Data Subject Rights
8.1 The applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), for which reference is made to the cited legal basis for the respective exercise conditions:
- Right to access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent given according to Art. 7 para. 3 GDPR;
- Right to complain according to Art. 77 GDPR.
8.2 RIGHT TO OBJECT
WHERE WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING IS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
9) Duration of Storage of Personal Data
The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – the respective legal retention period (e.g. commercial and tax law retention periods).
Where personal data are processed on the basis of an explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, such data are stored until you revoke your consent.
If there are statutory retention periods for data that are processed under contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, these data are routinely deleted after expiry of the retention periods, provided they are no longer required for the performance of the contract or initiation of a contract and/or there is no continued legitimate interest on our part in retaining them.
Where personal data are processed on the basis of Art. 6 para. 1 lit. f GDPR, such data are stored until you exercise your right to object in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing on the basis of Art. 6 para. 1 lit. f GDPR, such data are stored until you exercise your right to object under Art. 21 para. 2 GDPR.
Unless otherwise provided in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.