GDPR PRIVACY POLICY

In this Policy, "personal data" refers to any information relating to an identified or identifiable natural person.

The name and contact information of the data controller are as follows:

254-0043
17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
Arai Shōji Co., Ltd.
TEL: 0463-23-2011
FAX: 0463-23-2463
E-mail: info@arai-group.co.jp

The Company may collect the following personal data from customers:
Contact Information: Name, business name, business address, region, country, department name, phone number, fax number, email address
Transaction Information: Contract details
Automatically Generated Information: Online identifiers (IP address, cookies, visit timestamps, etc.)

The Company collects personal data from the following sources:
Information Collected Directly from Customers: Name, business name, business address, region, country, department name, phone number, fax number, email address, etc.

• （1）When customers fill out the "Contact" form
• （2）When customers contact the Company via the website
• （3）When customers contact the Company by email, phone, or in person
• （4）When customers fill out an application form to use the Company’s services
• （5）When customers send, transmit, or provide necessary documents or materials to the Company

Please note that providing certain personal data to the Company may be required by law or contract or may be necessary for contract execution. If customers do not provide the required personal data in response to the Company’s request, they may not be able to enter into a contract with the Company or receive the Company’s products or services.

Automatically Collected Information: IP address, cookies, visit timestamps, etc. The Company automatically collects personal data when customers visit the Company's website.

• （1）Purpose
  The personal data held by the Company will be processed within the necessary scope to achieve the following purposes:
• • ①To operate auction venues and provide various services related to the auction business
  • ②To provide various services related to the provision and sale of food and beverages
  • ③To provide various services related to the pachinko and slot business
  • ④For selection in recruitment activities and related communications
  • ⑤To send materials and provide email distribution services
  • ⑥To manage transactions and contracts with customers, and to provide after-sales services
  • ⑦To send direct mail or provide various notifications for the introduction of the Company’s products and services, and other products and services that may be useful to customers
  • ⑧ To respond to inquiries made through the website, etc.
  • ⑨For other purposes necessary for the Company’s business operations
• （2）Legal Basis
  The legal basis for the processing of personal data is as follows:
• • ①When processing is necessary for the performance of a contract with the customer
  • ②When processing is necessary for preparing to conclude a contract at the customer’s request
  • ③When processing is necessary to comply with legal obligations to which the Company is subject
  • ④ When the customer has given consent to the processing of their personal data
  • ⑤When processing is necessary to protect the vital interests of the customer or another natural person
  • ⑥When processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller
  • ⑦The Company’s legitimate interests, such as reviewing whether to enter into a contract with the customer, confirming and responding to communications or inquiries from the customer, sending information related to the services the customer is using, reviewing comments or complaints from the customer regarding the Company’s services, and improving the service content
  • ⑧The Company’s legitimate interest in using essential cookies to provide and maintain the Company’s website, and using other cookies to enhance the functionality of the website

The Company jointly uses personal information as follows:

• 1Items of Personal Data to be Jointly Used
  Name, business name, address, phone number, information directly related to odometer tampering, payment delay information, membership cancellation information, bankruptcy information, violation of the Secondhand Articles Dealer Act information, antisocial forces information.
• 2Scope of Parties Jointly Using the Information
  Nippon Auto Auction Association, Arai Logistics Co., Ltd., MIRIVE Co., Ltd., Kyushu Central Auto Auction Co., Ltd., BAYAUC Co., Ltd.
• 3Purpose of Use by the Parties
  To smoothly operate auctions and provide used car distribution services.
• 4Responsible Party for Joint Use Management
• • ・For the personal information acquired by the Company:
    Address: 17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
    Representative Director: Ryōzō Arai
  • ・For the personal information acquired by the Nippon Auto Auction Association:
    Address: 3-2-14 Nihonbashi KN Building 3F, Nihonbashi, Chuo-ku, Tokyo
    President: Juichi Arai
  • ・For the personal information acquired by Arai Logistics Co., Ltd.:
    Address: 17-2 Beniya-cho, Hiratsuka-shi, Kanagawa
    Representative Director: Junichi Minagawa
  • ・For the personal information acquired by MIRIVE Co., Ltd.:
    Address: 2631 Tanaka, Fukaya-shi, Saitama
    Representative Director: Fumihiko Itō
  • ・For the personal information acquired by Kyushu Central Auto Auction Co., Ltd.:
    Address: 726-2 Yoshio-cho, Kōriyama-shi, Miyazaki
    Representative Director: Takashi Ōmine
  • ・For the personal information acquired by BAYAUC Co., Ltd.:
    Address: 3-5-30 Nanko-higashi, Suminoe-ku, Osaka-shi, Osaka
    Representative Director: Takahiro Kashihara

The Company will promptly dispose of customers' personal data after a period that is reasonably necessary for the purpose has passed.

The Company uses not only cookies that are essential for the operation of its website (essential cookies), but also cookies for the collection of analytical data, as well as for marketing and analysis purposes to improve the website's functionality. For more details, please refer to the cookie banner.

Customers have the following rights:

• （1）Right of Access
  Customers have the right to access their personal data. Additionally, customers can receive a copy of their personal data held by the Company (though it may not necessarily be in written form).
• （2）Right to Rectification
  Customers have the right to request the correction of inaccurate personal data concerning themselves.
• （3）Right to Erasure
  Customers may request the deletion of their personal data if any of the following conditions are met:
• • ①The personal data is no longer necessary for the purposes for which it was collected or processed.
  • ②The processing of the personal data is based on the customer's consent, and the customer has withdrawn that consent, and the Company can no longer process the data based on any other legal grounds.
  • ③The customer objects to the processing of their personal data, and there is no overriding legal basis for the processing of that data.
  • ④The personal data has been processed unlawfully.
  • ⑤The personal data must be erased to comply with a legal obligation to which the Company is subject.
  • ⑥The personal data was collected in relation to the provision of information society services under GDPR Article 8.1.
    However, the Company is not required to comply with a deletion request in the following circumstances:
    (i) To exercise the right to freedom of expression and information.
    (ii) To comply with legal obligations related to processing.
    (iii) For reasons of public interest in the area of public health.
    (iv) For archiving in the public interest, scientific research, historical research, or statistical purposes.
    (v) For the establishment, exercise, or defense of legal claims.
• （4）Right to Restrict Processing
  Customers may request the restriction of processing of their personal data if any of the following conditions are met:
• • ①If the concerns have been raised regarding the accuracy of the personal data and the Company needs time to verify the accuracy of the data.
  • ②If the processing of personal data is unlawful, and the customer opposes the deletion of the data and instead requests the restriction of its use.
  • ③If the Company no longer needs the personal data for the purposes of processing, but the customer requires it for the establishment, exercise, or defense of legal claims.
  • ④If the customer disputes whether the legitimate interests of the Company override the customer's legitimate interests and has objected to the processing of the data.
    However, the restriction of processing does not apply in the following cases:
    (i) When the customer has given consent.
    (ii) For the establishment, exercise, or defense of legal claims.
    (iii) For the protection of the rights of other natural or legal persons.
    (iv) For important public interest reasons in the EU or member states.
• （5）Right to Data Portability
  If the processing of personal data is based on the customer’s consent or the performance of a contract, and such processing is carried out by automated means, the customer has the right to receive the personal data they provided in a structured, commonly used, and machine-readable format. Additionally, the customer has the right to request the transfer of their personal data to another controller.
• （6）Right to Object
  The customer has the right to object at any time to the processing of their personal data based on grounds related to their particular situation, including profiling under Article 6-1 (e) or (f) of the GDPR. The Company will not process the customer's personal data unless it can demonstrate compelling legitimate grounds for processing that override the customer’s interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
  Additionally, when personal data is processed for direct marketing purposes, the customer has the right to object at any time to the processing of their personal data for such marketing purposes.
• （7）Right to Object to Profiling
  The customer has the right not to be subject to decisions based solely on automated processing, including profiling, which have legal effects concerning the customer or significantly affect them. However, this right does not apply in any of the following cases:
• • ①When it is necessary for the performance of a contract between the customer and the company, or for entering into a contract.
  • ②When the Company is subject to EU law or national law of a member state, and such laws prescribe adequate safeguards to ensure the security of the customer's rights and freedoms as well as their legitimate interests.
  • ③When the customer has given explicit consent.
• （8）Right to Withdraw Consent
  If the processing of personal data is based on consent, the customer has the right to withdraw their consent regarding the processing of their personal data at any time.
• （9）Right to Lodge a Complaint with a Supervisory Authority
  If the customer believes that their personal data is being processed in violation of applicable data protection laws, they have the right to file a complaint with the supervisory authority in their area of residence regarding data protection issues. However, the Company would like the opportunity to address the customer's concerns before they lodge a complaint with the supervisory authority in their area. Therefore, we kindly ask that you contact us at the contact information provided in Section 2 of this policy.

If you have any questions or wish to exercise your rights, please contact the administrator (Arai Shōji Co., Ltd., TEL: 0463-23-2011, FAX: 0463-23-2463, Email: info@arai-group.co.jp).