The Chain Museum (“Company”) stipulates the following privacy policy (“Policy”) regarding the handling of the information of users (including “Users” and “Participating Artists” as defined in the Terms of Service; hereinafter, “Users”) in connection with use of “ArtSticker” (“Services”) provided by the Company and external transmission of User Information. Except where otherwise provided herein, the terms used in this Policy will have the meanings ascribed to them in the Terms of Service.

1. Definitions

In this Policy, “Personal Information” shall mean personal information as defined in the Act on the Protection of Personal Information (the "Act”)

2. Obtained Information, Purposes of Use of Such Information, etc.

In the Services, the Company will obtain from Users the types of information indicated in each of the following items (“User Information”), in the cases indicated in such items, in order to use such information for the purposes indicated in such items.

3. Provision to Third Parties, etc.

1. 3.1. The Company will not provide User information that constitutes Personal Information to third parties, except in the cases indicated in the items below, in 3.2. or in 3.3..
   1. In cases where the User has consented in advance to provision to third parties;
   2. In cases where provision is pursuant to laws and regulations;
   3. In cases where provision is necessary for the protection of the life, body or property of any person and it is difficult to obtain the consent of the User in question;
   4. In cases where provision is particularly necessary for improvement of public health and hygiene or for the promotion of sound child-rearing and it is difficult to obtain the consent of the User in question;
   5. In cases where provision is necessary for cooperation with a national organ, local government, or person delegated by any such body in conducting administrative business as prescribed in laws or regulations, and where obtaining the consent of the User in question is likely to hinder the conduct of such administrative business;
   6. In cases where a third party will succeed to Company business as a result of a Business Transfer etc.; or
   7. In cases where a User has breached the Terms of Service for the Services and there is sufficient basis to judge that User information must be publicly disclosed to protect the Company’s rights, property, services or the like; in such a case, information will be disclosed to the minimum extent necessary to protect the Company’s rights, property, services or the like.
2. 3.2. In cases where the handling of User information is entrusted in whole or in part to an external company under a services agreement (including cases where the management and analysis of information is entrusted to a consignee for the purpose of storage on servers or Service quality improvements), the Company will provide appropriate oversight to ensure the execution of agreements concerning the handling of User information and to ensure security control for said User information by the consignee.
3. 3.3. If Users apply to register for "Startrail PORT" provided by Startbahn Inc. in conjunction with the Service, the Company will enter their e-mail address into its management system and provide it to Startbahn Inc..
4. 3.4. For the purpose of matching the identity of users of Services and users of services provided by Meta Platforms, Inc. (United States of America) and delivering advertisements of services or products provided by the Company on the services provided by Meta Platforms, Inc. to users of the Services, the Company shall provide to Meta Platforms, Inc. encrypted User IDs and browsing, clicks and other information related to Users' activities on Services. For information on Meta Platforms, Inc. please refer to the following.
   1. Country: United States of America
   2. System for the protection of personal data: https://www.ppc.go.jp/files/pdf/USA_report.pdf
   3. Personal information protection measures: The recipient is expected to take the same level of measures as those required of business operators handling personal information in Japan. Please also refer to the following regarding the handling of personal information by the recipient.
      Privacy Policy:
      https://www.facebook.com/about/privacy
      Terms of Use: https://www.facebook.com/legal/terms
      Meta Business Tools Terms of Use:
      https://www.facebook.com/legal/terms/businesstools
      Data Processing Agreement: https://www.facebook.com/legal/terms/dataprocessing/update
      Data Security Agreement:
      https://www.facebook.com/legal/terms/data_security_terms
   4. Opt-out:
      https://www.facebook.com/adpreferences/ad_settings/?entry_product=account_settings_menu
5. 3.5.The Company uses Enhanced conversions provided by Google LLC (United States of America). For the purpose of measuring the effectiveness of advertisement delivery by Google LLC, improving the effectiveness of such advertisement delivery, and delivering such advertisements in accordance with users’ interests, the Company shall provide to Google LLC names, email addresses, telephone numbers or addresses, after hashing them, for the purpose of matching the identity of users of the Services and users of the services provided by Google LLC. For information on Google LLC please refer to the following.
   1. Country: United States of America
   2. System for the protection of personal data: https://www.ppc.go.jp/files/pdf/USA_report.pdf
   3. Personal information protection measures: The recipient is expected to take the same level of measures as those required of business operators handling personal information in Japan. Please also refer to the following regarding the handling of personal information by the recipient.
      Overview of Services: https://support.google.com/adspolicy/answer/9755941?hl=en&ref_topic=7012636&sjid=12980100444976368503-APa
      Privacy Policy: https://policies.google.com/privacy?hl=en
      Terms of Use: https://support.google.com/google-ads/answer/9888656?hl=en
   4. Opt-out: https://support.google.com/ads/answer/2662922?hl=en

4. Disclosure, Deletion and Correction etc.

1. 4.1. When having received a request by a User to disclose personal data the business holds or records on provision of personal data to a third party under the provisions of the Act on the Protection of Personal Information, the Company shall disclose such data to the User without delay; provided, however, that in cases in which disclosing that data falls under any of each following, all or a part of it may not be disclosed:
   1. In cases where it cannot be confirmed that the User him/her/itself made the request;
   2. In cases where disclosure is likely to harm the life, body, property, or other rights or interests of the User him/her/itself or a third party;
   3. In cases where disclosure is likely to substantially impede the proper execution of Company business; or
   4. In other cases where provision will violate laws or regulations.
2. 4.2. Except in cases in which special procedures concerning correction of the content is prescribed by the provisions of other laws or regulations, when the Company has been requested to make a correction, addition, or deletion ("Correction " ) on the content of the personal data the business holds under the provisions of the Act on the Protection of Personal Information for the reason that the content of such data is not true, the Company must conduct necessary investigation without delay to the extent necessary to achieve the purpose of use after confirming that the request is made by the user, and based on its result, make corrections to the contents of the personal data the business holds and notify the User of the results.
3. 4.3. Except in cases in which special procedures concerning correction of the content is prescribed by the provisions of other laws or regulations, when the Company has been requested to cease to use or delete the personal data the business holds under the provisions of the Act on the Protection of Personal Information for the reason that the personal information has been handled beyond the scope of the purpose of use specified in advance without the consent of the person in question, that the personal information has been utilized in a way that there is a possibility of fomenting or inducing unlawful or unjust act or that the personal information has been obtained by deception or other wrongful means, the Company must conduct necessary investigation without delay , and based on its result, cease to use or delete the personal data the business holds to the extent necessary to redress and notify the User of the results. However, that this does not apply if ceasing to use or deleting the personal data the business holds would require a costly expenditure or prove otherwise difficult, and the businesses take the necessary alternative measures to protect the rights and interests of the identifiable person.
4. 4.4. When the Company has been requested to cease to provide a third party with the personal data the business holds for the reason that the personal information has been provided to a third party without obtaining the consent of the person or providing the information as required under the Act on the Protection of Personal Information, the Company must conduct necessary investigation without delay , and based on its result, cease to provide a third party with the personal data the business holds and notify the User of the results. However, that this does not apply if ceasing to use or deleting the personal data the business holds would require a costly expenditure or prove otherwise difficult, and the businesses take the necessary alternative measures to protect the rights and interests of the identifiable person. However, that this does not apply if ceasing to use or deleting the personal data the business holds or ceasing to provide a third-party with that personal data would require a costly expenditure or prove otherwise difficult, and the businesses take the necessary alternative measures to protect the identifiable person's rights and interests.
5. 4.5. When a User wishes to make a request pursuant to one or more of preceding paragraphs of this Article 4, said User shall contact the Help Desk set forth in the Article 8. When carrying out one or more of the procedures of preceding paragraphs of this Article 4, the Company will be entitled to request the submission of copies of documents etc. identifying the relevant User, within the limits necessary to confirm that the request was made by said User him/her/itself.

5. Personal Information Necessary for Account Maintenance etc.

Users cannot use the Services if they do not consent to provide Personal Information, such as an email address, which is essential for the maintenance of User accounts on the Services and for use of the Services.

6. Deletion of Accounts on Services

When a User has deleted an account on the Services, the Company will appropriately process the User information of said User in accordance with the Terms of Service, ancillary agreements, and this Policy.

7.Personal Information Handling Business Operator

3F Daikanyama Art Village, 17-10 Sarugaku-cho, Shibuya-ku, Tokyo
The Chain Museum Co., Ltd.
Chief Executive Officer: Masamichi Toyama

8. Inquiries

Please contact the following help desk with requests for disclosure, deletion and correction etc. of Personal Information subject to such process under the Act and any inquiries or claims related to Personal Information this Policy.

Personal Information Protection Officer: Information Security Officer, Administration Department

Help Desk: Head of Management Department of The Chain Museum KK (available on weekdays from 10:00am to 18:00pm, but not available during new year holidays)
＜toi@t-c-m.art＞
Please be advised that it may take some time to reply if there are many inquiries.

9. External Transmission of User Information

1. 9.1. In order to measure the frequency of use etc. of Services with the aim of improving Services etc., the Company will use Google Analytics and Firebase Analytics, an external service, and collect anonymous traffic data (cookies, etc.). These acts will not result in the identification of individual Users. With respect to information collected on Google Analytics and Firebase Analytics and the handling thereof, please refer to the privacy policy and the “HOW GOOGLE USES INFORMATION FROM SITES OR APPS THAT USE OUR SERVICES” page below of said company.
   https://policies.google.com/technologies/partner-sites?hl=en
2. 9.2. On the Services, modules provided by the below-named third parties (including domestic and international third parties) may be installed and User Information including site visit/behavior history information may be acquired via cookies etc. and used, for purposes including delivery of ads on the Company’s behalf and measurement of the ad publication efficacy of ads about the Company or the Services which are published in third-party media. The User Information acquired and used by third parties via modules provided by such third parties shall be subject to the provisions of the privacy policies etc. of such third parties. In some cases, Users may be entitled to use opt-out methods on the services provided by third parties to halt the use of acquired site visit/behavior history information for ad delivery.
   1. Module Name(s): Yahoo! JAPAN Ads
      Provider(s): Yahoo Japan Corporation
      Terms of Use: https://about.yahoo.co.jp/en/common/terms/
      The Privacy Policy: https://about.yahoo.co.jp/en/common/terms/#cf2nd
      Opt-out: https://accounts.yahoo.co.jp/privacy/optout/ads
   2. Module Name(s): Google Ads
      Provider(s): Google LLC
      The provisions of the privacy policies etc.:https://policies.google.com/privacy?hl=en
      The provisions of the privacy policies etc.:https://policies.google.com/technologies/partner-sites?hl=en
      Opt-out:https://adssettings.google.com/authenticated
      Other: Google and other third-party advertisement distributors use cookies to deliver ads based on information about past access to the websites of the Services.
   3. Module Name(s): Facebook Ads
      Provider(s): Meta Platforms, Inc.
      Data Policy: https://m.facebook.com/privacy/explanation/
      Opt-out: https://www.facebook.com/adpreferences/ad_settings/?entry_product=account_settings_menu
      
   4. Module Name(s):Criteo Ads
      Provider(s): Criteo SA
      The provisions of the privacy policies etc.:https://www.criteo.com/jp/privacy/
      Opt-out: https://www.criteo.com/jp/privacy/disable-criteo-services-on-internet-browsers/
      
3. 9.3. In order to statistically analyze the usage of the Service, or for Microsoft Corporation to provide advertisements, the Company uses Microsoft Clarity, which is an external service. Microsoft Corporation collects User traffic data ( cookies, etc.) via a module installed on the Service. With respect to the information collected by Microsoft Corporation and the handling thereof, please refer to the following privacy statement of Microsoft Corporation.
   https://privacy.microsoft.com/ja-jp/privacystatement
4. 9.4. In order to understand the occurrence of errors when the Users use the Services, to improve the situation where errors related to the Services occur, and to stabilize the provision of the Services, the Company uses Sentry, which is an external service provided by Functional Software, Inc. Functional Software, Inc. collects information regarding the Users' usage of the Services (IP address, type of device used, browser information, operating system, access, activity history, time spent, mouse clicks and page transition history) and information related to errors that occur during use of the Services through modules installed on the Services in order to provide the Company with information regarding the occurrence of errors. With respect to the information collected by Functional Software, Inc. and the handling thereof, please refer to the following privacy statement of Functional Software, Inc..
   https://sentry.io/privacy/
5. 9.5. For the purpose of use described in 2(16), the Company uses "Channel Talk" provided by Channel Corporation, an external service, to provide a service with a chat function called Art Concierge on the Services. Channel Corporation uses information related to the User's usage of Channel Talk(IP, connection time, cookies, browser type, device information (model, OS, model name)), e-mail address, and cell phone number to improve the Service, to authenticate members, to provide the Services, to communicate announcements, to confirm the intent of the User, to secure communication channels for handling complaints, and to inform the User of the latest information on new services, events, etc. (IP, connection time, cookies, browser type, device information (model, OS, model name)), e-mail address, and cell phone number. With respect to the information collected by Channel Corporation, Inc. and the handling thereof, please refer to the following privacy statement of Channel Corporation.
   https://channel.io/ja/privacy