CARNIVAL recognizes that protecting the personal information and specific personal information of customers, users, and employees is an important social responsibility in the course of business. We have established the following personal information and specific personal information protection policy and declare that the entire company will work to ensure the proper handling of such information.
The Universe Group jointly uses personal data among group companies as follows for the execution of business management operations as a group, guidance and provision of products and services to customers, and decision making. You must to do something before you go on.
(1) Items of personal data
Personal data held by Universe Group companies:
name, address, phone number, e-mail address, gender, date of birth and other information written on the application form, etc.
Information related to transactions, such as content related to member evaluation
(2) Scope of joint use of group companies
Universe Group companies and affiliated companies
Personal information is information that can identify a specific individual, and refers to information such as the customer's name, age, address, telephone number, email address, and workplace. In addition, information that cannot identify an individual by itself but can identify an individual by comparing it with other information is also defined as personal information.
Personal information and specific personal information, etc. will be acquired and provided by appropriate means only to the extent necessary for entrusted work and employment and personnel management of employees.In addition, we will not handle personal information beyond the scope necessary to achieve the specified purpose of use (unintended use), and will take measures to achieve it.
We will take reasonable safety measures through education, audits, and improvements regarding risks such as unauthorized access to personal information and specific personal information, etc., or loss, destruction, falsification, and leakage of personal information, and establish a personal information and specific personal information protection system. continuously improve.
We will comply with applicable laws and regulations and other norms regarding personal information and specific personal information held by our company.
We will respond appropriately and promptly to questions and complaints regarding personal information and specific personal information.
Based on social needs, individual requests, and the latest IT technology trends, we will review the personal information and specific personal information protection system in a timely and appropriate manner, and will continue to improve it.
April 2021, 7 (established)
CARNIVAL
Representative Ryota Yamazaki
CARNIVAL handles personal information and specific personal information, etc. that we use for business as follows, based on the "Personal Information and Specific Personal Information Protection Policy".
Purpose of use of personal information such as personal information and specific personal information
(1) Personal information handled by the Company will be acquired for the purpose of business that falls under any of the following, and will be handled appropriately within the scope of the purpose of use.
Personal information name Purpose of use
Customer's personal information Disclosure of personal information to companies posting job advertisements based on the customer's own consent
Responses to customer inquiries and consultations
Personal authentication for customers in all matching services operated by our company, including CARNIVAL and THE SALON
Surveys, campaigns, and other communications for providing information to customers
Countermeasures against nuisance/illegal use/prevention of trouble
Personal information of business partners Sending estimates and purchase orders to business partners
Personal information of job applicants Contact regarding interviews for recruitment selection
Notification of acceptance or rejection of employment screening
Personal information of employees Personnel and labor management (specified in a separate consent form)
Personal information obtained from inquiries Contact for inquiries
Personal information acquired in consignment work For contract performance in consignment work
(2) The specific personal information, etc. handled by the Company will be handled appropriately within the scope of specific affairs related to social security, taxation, and disaster countermeasures.
(3) When we acquire personal information as personal data, we will handle it appropriately within the scope of the following purposes of use.
Purpose of use of personal information
None
Provision of personal information and specific personal information to third parties
(1) We will not disclose or provide personal information to third parties for the purpose of carrying out business, except for the following ① to ⑦.
(XNUMX) When consent is obtained from the individual concerned
(XNUMX) When permitted by laws and regulations, etc.
(XNUMX) When it is necessary to cooperate with a national agency, a local public entity, or a person entrusted by them in carrying out the affairs stipulated by laws and regulations, and obtaining the consent of the person concerned interferes with the execution of the affairs when there is a risk of
④ When it is necessary for the protection of human life, body or property and it is difficult to obtain the consent of the person.
⑤ When it is particularly necessary to improve public health or promote the sound development of children, and it is difficult to obtain the consent of the individual.
⑥Regardless of whether or not the customer is a member, when the customer violates laws and regulations, harms the interests of the Company or others, acts contrary to public order and morals, or otherwise violates the terms of use of the Company's services. if necessary measures are taken against
In order to prevent the recurrence of troubles and non-payment of fees, and to protect the fairness and interests of all users, the Company will subscribe the customer's name, telephone number, email address, transaction history, and other information separately determined by the Company. We will provide it to the Association of Association of Dating Clubs.
⑦When personal data is provided along with business succession due to merger or other reasons
When personal information is provided to or received from a third party (excluding national institutions, local governments, independent administrative agencies, etc., and local independent administrative agencies, hereinafter the same shall apply in this section), In accordance with the Personal Information Protection Act, we will create records of necessary matters and store them for the period stipulated by the Personal Information Protection Commission regulations.
⑧When the business operator handling personal information is an academic research institution, etc., and the provision of the personal data is unavoidable for the purpose of publishing the results of academic research or teaching unless there is.)
(XNUMX) When the entity handling personal information is an academic research institution, etc., and it is necessary to provide the personal data for academic research purposes (part of the purpose of providing the personal data is for academic research purposes). (including cases where there is a risk of unjustly infringing on the rights and interests of an individual) (limited to cases where the business operator handling personal information and the third party jointly conduct academic research).
⑩ When the third party is an academic research institution, etc. and the third party needs to handle the personal data for academic research purposes (part of the purpose of handling the personal data is for academic research purposes) excluding cases where there is a risk of unjustly infringing on the rights and interests of an individual, including in some cases.)
(2) The Company may provide Specific Personal Information, etc. only in cases where each item of Article 19 of the Number Act applies, and will not provide Specific Personal Information, etc. in any other cases.
Management of subcontractors, etc.
In order to achieve the purpose of use indicated in paragraph 1, the Company may entrust entrusted personal information and specific personal information, etc. to a consignment company that has concluded a contract with the Company.Entrusting companies shall be required to properly handle, manage and protect personal information, and shall be prohibited from disclosing/providing personal information to third parties and using it for purposes other than those specified in Clause 1.
Management of personal information and specific personal information, etc.
(1) Formulation of basic policy
In order to ensure the proper handling of personal data, we have formulated a basic policy on "compliance with related laws and regulations, guidelines, etc." and "point of contact for inquiries and complaints."
(2) Development of disciplines related to the handling of personal data
Formulate personal data handling rules for each stage of acquisition, use, storage, provision, deletion, disposal, etc., regarding the handling method, responsible person, person in charge, and their duties, etc.
(3) Systematic security control measures
In addition to appointing a person responsible for the handling of personal data, clarifying the scope of personal data handled by employees who handle personal data and the scope of personal data handled by such employees, responsibility in the event that facts or signs of violation of laws and handling regulations are grasped Developing a system for reporting and contacting
In addition to conducting regular internal audits on the handling of personal data, we also undergo external examinations for the JAPHIC mark based on the guidelines for the Act on the Protection of Personal Information (Personal Information Protection Commission).
(4) Personnel security control measures
Provide regular training to employees on matters to consider regarding the handling of personal data
Matters related to confidentiality of personal data are stated in the work regulations
(5) Physical security control measures
In the area where personal data is handled, we will control the entry and exit of employees and implement measures to prevent unauthorized persons from viewing personal data.
Take measures to prevent theft or loss of equipment, electronic media, documents, etc. that handle personal data, and when carrying such equipment, electronic media, etc., including movement within the office, personal data cannot be easily identified. implement measures to prevent
(6) Technical safety control measures
Implement access control to limit the scope of the person in charge and the personal information database, etc. handled
Introduce a mechanism to protect information systems that handle personal data from unauthorized external access or unauthorized software
(7) After withdrawal from this service, the registered information will be hidden on the member page, but it will be saved for a certain period of time as a backup.This is intended to prevent disadvantages for members in the event of operational errors, and to conduct investigations when fraudulent acts are discovered.In addition, for the purpose of preventing confusion in service operation, we will retain your name, contact information, date history, etc. even after you withdraw.
Use of statistical data
Based on the collected personal information, we may create statistical data processed so that individuals cannot be identified.
We shall be able to use the statistical data as shown above without any restrictions.
Procedures for Inquiries and Disclosure of Personal Information and Specific Personal Information, etc.
(1) Regarding personal information and specific personal information, etc., the person or his/her representative may notify the purpose of use, disclose, record provision to a third party, correct/add or delete content, suspend use, erase, and/or third party. We will respond in good faith to any request for suspension of provision of personal information (hereinafter referred to as "disclosure, etc.").
(2) When making inquiries, we may confirm whether you are the person or his / her agent.
(3) If we are unable to verify the identity of the person himself/herself or his/her agent, we may not be able to respond to inquiries, requests for disclosure, etc.
(4) We will reply to the disclosure request of personal information and specific personal information from the person or his / her agent, and the disclosure reply of personal information from our company within a reasonable period.
[Procedures for disclosure, etc.]
(1) Please send an e-mail to the following consultation desk with the following information.
①E-mail address at the time of registration
② Phone number at the time of registration
③ Real name
(XNUMX) Regarding the content of the request for disclosure, etc., please select the item you wish to request from the following, and describe the content and items of the personal information to be disclosed that is the subject of the request.
Notification of purpose of use
Disclosure
Third party provision record
Correction of contents
Add content
Delete
Refusal of provision to third parties
Denial of use
Other
*If the contents of the application include "correction of contents" or "addition of contents", please describe in detail how to make the corrections and additions.
⑤ If you contact us from an email address other than the email address you registered with, please attach the following.
・Scan data of an identification card (public identification card such as a driver's license, passport, etc.) that shows your name
*If you make an inquiry from the email address you registered with, we will confirm your identity if the email address matches.
*Deletion of personal information within 6 months after withdrawal cannot be accepted from the viewpoint of crime prevention.
(2) If the inquiry is from a representative, please indicate so. We will also ask you to send us the original power of attorney and seal certificate to confirm that you are the agent. If your inquiry is from a representative, the original document will be required, so please send it by mail.
(3)Personal information received in this disclosure application procedure will be used to contact the customer who made the inquiry and to verify the identity of the customer.We will not use it for any other purpose.The personal information received will be stored for one year after the response to the request for disclosure, etc., and then destroyed.
*The procedure for disclosure of specific personal information is the same as above, but from the viewpoint of compliance with the number law, the specific personal information protection manager will determine whether disclosure is possible before disclosure.
[Shipping fee and collection method for "request for disclosure, etc."]
After confirming the contents of the application, we will inform you of the transfer account if we judge that it is possible to correspond.
After confirming the payment of 1,100 yen (please bear the handling fee), we will respond to information disclosure, deletion, etc.
Contact point for disclosure, etc. of personal information and specific personal information, etc., and complaints and consultations
Contact: CARNIVAL Personal Information Inquiry Desk
Email: houmu@carnival2019.jp
Mail: We will inform you by e-mail.
About Authorized Personal Information Protection Organization
Our company is a target business operator of the JAPHIC Mark Certification Organization, an authorized personal information protection organization based on the Act on the Protection of Personal Information.
Please click here for inquiries regarding complaints and consultations regarding personal information.
https://japhic.or.jp/office/info
*This is not the point of contact for inquiries regarding our products and services.
CARNIVAL
Ryota Yamazaki