1. Definition of Personal Information

The Website, etc., consists of all texts, data, information, software, graphics, photos provided by the Company and its affiliates, as well as all services, plugins, software, applications provided by the Company's website and services.

2. Personal Information Administrator

Personal information provided or collected by the Company is primarily managed by the Company.

3. General Provisions

The Company may collect information directly from customers or automatically through the use of the Website, etc., and may combine automatically collected information with other information, including publicly available information.

To protect yourself or your information, it is recommended to provide only the information necessary for using the Website, etc.

Metoche is not intended for children under 13 years of age, and does not intentionally collect personal information from children under 13 years of age. If personal information is provided by a child under 13 years of age, it will be promptly removed from the system.

4. Automatically Collected Information

Like many websites, the Company and other companies, agents, or contractors (hereinafter referred to as "Service Providers") may receive and store certain types of information using cookies, web beacons, and other technologies when interacting with the Company through computers or mobile devices, following opt-out settings. These technologies enable customization and improvement of customer experiences on the Website, etc., and adjustment of marketing messages. The types of information collected include:

• • Log Data: When using Metoche, the Company's servers automatically record information (referred to as "Log Data"), including information sent from the browser each time a customer accesses the Website, etc. This Log Data may include web addresses accessed or attempted to be accessed, device models, operating systems, browser types, unique device identifiers, IP addresses, mobile network carriers, time zones, or locations. Whether some or all of this information is collected often depends on the type of device used and its settings.
• • Cookie Data: Depending on how customers access the services or opt-out settings, the Company may use "cookies" (small text files sent from the computer each time you access the Website, etc., specific to Metoche accounts or browsers) or similar technologies to record log data. When using cookies, the Company may use "session" cookies (which persist until the browser is closed) or "persistent" cookies (which persist until the browser deletes them). Among the cookies used, some are associated with Metoche accounts (including personal information such as provided email addresses), while others are not associated.
• • Other Website Analytics Services: Following customer opt-out settings, the Company provides Metoche with certain analysis and visitor interaction services related to the operation of the Website, etc., including the collection and tracking of specific data and information about visitors' characteristics and activities on Metoche using service providers such as Google Analytics. Related cookies can be opted out using the opt-out functions of each website.

5. Purpose of Personal Information Use

We may use information collected about customers, including personal information, for the following purposes:

• • Provision of Metoche Services: We will use customer information for the operation of the Website, etc., including facilitating scheduling, managing accounts, responding to inquiries, and providing other customer services and support.
• • Improvement of Our Products: We conduct research and analysis on customer usage or interests regarding our products, services, content, or those provided by third parties to enhance our products and develop new ones.
• • Communication with Customers:
  • ◦ Service-Related Communications: We may send service and management emails to ensure the proper functioning of services. We also notify calendar schedules through designated emails or notification feeds. These messages are considered part of the service and are necessary to receive.
  • ◦ Promotions: We may send emails about new product features, other news related to Metoche, or topics we believe are relevant to customers.
  • ◦ Response to Customers: We use customer information to respond to inquiries and feedback from customers.
  • ◦ Administration: We may contact customers regarding changes to this Policy, security, or other important service-related matters.
• • Protection of Rights and Interests: We use customer information to protect our rights and interests, as well as those of our users and others, and to fulfill the terms set forth in this Policy or our Terms of Use.
• • Compliance with Legal Obligations: We may use customer information to comply with applicable laws or regulations, fulfill legal obligations, or participate in legal proceedings in which we are involved, including responding to requests from law enforcement or other government authorities.
• • Other: We may use customer information to manage business operations or perform specific functions as explained to customers at the time of collection and subject to their consent.

6. Sharing of Personal Information

Information about customers is an integral part of our business, and we do not sell customers' personal information to third parties. We only share the following personal information:

• • Service Providers or Government Agencies: We may contract with service providers to provide services on our behalf or assist in providing services to customers.
• • Affiliated Companies: We may disclose information to current or future affiliated or subsidiary companies for investigations, marketing, and other purposes in accordance with this Policy.
• • Legal Proceedings: We may disclose customer data if we believe disclosure is reasonably necessary to comply with laws, regulations, or government requests; to enforce applicable terms and conditions or policies; to protect the public, individuals, or our rights, property, or safety; to detect, prevent, or address fraud or suspected fraud; or as part of legal proceedings in which we are involved.

7. Customer Preference

• • Account: Customers can log in to their accounts and review or update account information to ensure the accuracy and completeness of personal data. Customers can also request access to and correction, modification, or deletion of their personal data collected by us. We will make every effort to respect customer requests while complying with legal and contractual obligations.
• • Email: Customers can opt out of receiving promotional emails from us by following the opt-out link included in the email. However, if customers opt out of receiving marketing communications, they may still receive service-related emails that cannot be opted out of. Customers also have the option to delete their accounts if they do not wish to receive service-related emails.
• • Cookies: Customers can refrain from providing or withdraw consent for cookies by using browser settings or limited opt-out functions within Metoche. Please note that cookies are necessary for authentication of Metoche users and for certain operations within Metoche, so disabling cookies may affect the usability of the Website, etc.
• • Additional Rights: Depending on applicable law, customers may have additional rights regarding their personal data, such as the right to lodge complaints with regional data protection authorities, subject to compliance with local laws.

8. Security

We take reasonable measures to protect the personal information we collect.

We place great importance on the security of personal data provided by customers. We endeavor to protect personal data from loss, misuse, unauthorized access, or disclosure. However, given the nature of communication and information technology, we cannot guarantee absolute security against access, alteration, or destruction of personal data due to breach of our physical, technical, and administrative security measures.

To protect against unauthorized access to devices and accounts, customers should select unique and complex passwords unknown to others or easily guessed, and keep login and password information private. We are not responsible for any activities on customers' accounts resulting from loss, theft, leakage, or unauthorized password activity.

We retain collected personal data to the extent reasonably necessary to achieve the purposes for which the data was collected, and only for legal and contractual obligations.

9. Third-Party Links

Our website may contain links to third-party websites and applications. Additionally, in accordance with your opt-out settings, we may provide advertisements on this website using third-party advertisers, advertising networks, and other advertising, marketing, and promotional companies. Accessing and using such linked websites and applications are not governed by these Terms but rather by the privacy policies of those third parties. We do not endorse these parties, their content, or the products and services they provide, and we do not assume responsibility for the management of information on such third-party websites or applications.

10. Special Provisions Regarding GDPR

This section applies only when GDPR (General Data Protection Regulation of the EU, hereinafter referred to as "GDPR") is applicable to the processing of personal data by our company.

• (1) Compliance with GDPR: We recognize the importance of personal data protection and commit to complying with the provisions and obligations set forth in GDPR when processing personal data.
• (2) Limited Processing for Service Provision: We shall only process personal data to the extent necessary for the provision of our services and shall not use it for any other purposes.
• (3) Obligations in Processing Personal Data for Service Provision:
  • (I) Written Instructions: Except where required by the domestic law of the EU or EU member states, we will handle personal data based solely on written instructions from customers (including instructions based on this Policy and those transmitted electronically). In the event we determine that such instructions violate GDPR, we shall promptly notify the customer. Furthermore, unless prohibited by the domestic law of the EU or EU member states based on the grounds of significant public interest, we shall notify customers of the legal requirements before processing.
  • (II) Minimum Access and Confidentiality: Officers and employees handling personal data shall be kept to a minimum and shall enter into confidentiality agreements.
  • (III) Technical and Organizational Measures: We shall implement appropriate technical and organizational measures for the protection of personal data as specified in Article 32 of GDPR and define the specific contents of such measures.
• (4) Consent for Subprocessors: Customers consent to our engagement of other processors ("subprocessors") for specific processing tasks. In such cases, we shall notify customers of any addition or change to subprocessors and customers may raise objections in writing within 14 days of such notification. Failure to object within this period permits us to engage the subprocessor for specific processing tasks.
• (5) Support for Data Subjects' Rights: We shall assist customers by taking appropriate technical and organizational measures, considering the nature of processing, to fulfill the obligations of controllers in responding to requests exercising data subjects' rights. Upon receipt of requests relating to data subjects' rights, we shall promptly notify customers.
• (6) Support for GDPR Obligations: We shall support customers in fulfilling their obligations under Articles 32, 33, 34, 35, and 36 of GDPR, considering the nature of processing and the information available to us.
• (7) Deletion or Return of Personal Data: Except where required by the domestic law of the EU or EU member states, we shall delete or return all personal data upon the customer's request after the termination of our service provision and delete any existing copies. Failure to notify us of deletion or return preferences at least 5 business days before the termination date implies consent for deletion. The method of return shall involve customer-initiated data backups, and we shall not provide returns.
• (8) Audit Support: We disclose all necessary information on our systems to support customers conducting audits related to security and compliance. We promptly respond to requests for audits from supervisory authorities such as data protection committees.

11. Governing Law and Jurisdiction

By using any of Metoche's services, customers agree that Japanese law governs these Terms regardless of the principles of conflicts of law. Tokyo District Court shall have exclusive jurisdiction as the court of first instance for any disputes related to these Terms.

12. Changes

These Terms are effective as of the above-mentioned effective date. They may be amended if significant changes in the handling of information at Metoche occur, or to clarify privacy notices or rectify administrative errors. Changes will be posted on this page, so please check regularly. Continued use of Metoche after such changes implies agreement to the revised Terms.

13. Contact

For questions or comments regarding these Terms, please contact us at support@metoche.com.