Personal Information Protection Policy

1．Philosophy on Personal Information Protection

Chuokaisan Co., Ltd. (hereinafter referred to as "the Company") is a company that, based on integrity, contributes to the improvement of a healthy and prosperous lifestyle culture through the storage business, strives for the stable development of the company, and seeks to ensure a life rich in humanity for the people engaged in the company's work. The Company regards the protection of personal information as one of the highest priorities of its corporate activities to maintain a relationship of trust with our customers, and we promote activities for the establishment of a Personal Information Protection Management System (PMS) daily. Furthermore, the Company complies with the Act on the Protection of Personal Information (hereinafter referred to as the "Personal Information Protection Act") and related guidelines, and establishes, executes, and maintains the following Personal Information Protection Policy (hereinafter referred to as "this Policy"). We comply with laws, national guidelines, and other norms regarding the handling of personal information, and establish this Policy to appropriately handle and reliably protect personal information. In this Policy, "Personal Information" means information about an individual that (1) can identify a specific individual by name, date of birth, and other descriptions (including all matters written or recorded in documents, drawings, or electromagnetic records, or expressed using voice, motion, or other methods) included in the information (including information that can be easily compared with other information, thereby identifying a specific individual), or (2) includes a personal identification code.

2．Appropriate Handling of Personal Information

The Company will acquire, use, and provide personal information appropriately, considering the content and scale of our business mentioned in the preceding section. This includes not handling personal information beyond the scope necessary to achieve the specified purpose of use, except in cases permitted by the Personal Information Protection Act or other laws, and not using personal information in a way that may promote or induce illegal or improper acts, and taking measures to ensure this.

3．Provision of Personal Information to Third Parties, etc.

The Company will not provide personal information to third parties, except with the consent of the individual, when required by law, or in other cases permitted by the Personal Information Protection Act.

4．Ensuring Accuracy and Security of Personal Information

To ensure the accuracy and safety of personal information, we will implement security measures for personal information to prevent and correct leakage, loss, or damage of personal information. Furthermore, in the event of such leakage, loss, or damage, if a report to the Personal Information Protection Commission, a report to JIPDEC, and notification to the individual is required based on the Personal Information Protection Act, etc., such reports and notifications will be made.

5．Supervision of Outsourced Parties

When entrusting the handling of all or part of personal information, the Company will select a party that meets sufficient personal information protection standards and take appropriate measures through contracts, etc.

6．Personal Information Protection Management System and Thorough to All Employees

We will appoint a Personal Information Protection Manager, clarify their role, establish a system capable of appropriately conducting personal information protection activities, and continuously implement improvements. Furthermore, we will provide education on personal information protection efforts to all employees (executives, employees, temporary staff, etc.) to ensure thorough awareness。

7．Response to Complaints and Consultations

The Company strives for an appropriate and prompt response to complaints and consultations regarding the handling of personal information. We also accept requests for disclosure, etc. (notification of purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, and suspension of provision to third parties) of retained personal data subject to disclosure. For complaints and consultations regarding personal information, please contact the "Personal Information Complaint and Consultation Desk" below。

8．Compliance with Laws and Regulations

The Company complies with laws, national guidelines, and other norms regarding personal information protection。

9．Continuous Improvement of Personal Information Protection Management System

The Company will formulate a management system for personal information protection to protect and appropriately utilize personal information, steadily implement it, and aim for continuous improvement。

10．Publication of Personal Information Protection Policy

The Company will publish the Personal Information Protection Policy in the company profile and on the Company's website, making it viewable at any time。

Established: June 20, 2017
Revised: September 30, 2022
Revised: July 24, 2023
Chuokaisan Co., Ltd. Representative Director Fumitoshi Tanaka

〈Handling of Personal Information by the Company〉

The Company handles personal information as follows。

1．Purpose of Use

The Company will not use personal information outside the scope of the purpose of use, except in cases permitted by the Personal Information Protection Act or other laws. Personal information such as name and address will be used for the following purposes:

(1)	For management and shipping operations of stored items (issuance of waybills, product labels, delivery notes, etc.), contact and inquiry support, quote creation, invoice issuance, and other sales activities related to warehouse business, leasing business, and affiliated businesses.
(2)	For the provision of services (hereinafter referred to as "Company Services") and products (hereinafter referred to as "Company Products") provided by the Company, in addition to the businesses in the preceding item.
(3)	To operate the Company's systems, etc. used for the Company's tire storage service (including, but not limited to, the Tire Park Web management system, Tire Carte, and tire profile measurement devices).
(4)	To analyze acquired information such as browsing history and provide information about products, services, exhibitions, etc., offered by the Company and its partner businesses, according to hobbies and preferences.
(5)	To analyze information regarding the usage status of the Company Services, Company Products, and systems, etc. from items 1 to 3, and to utilize it for the development and improvement of Company Services, Company Products, and systems, etc. (including new services, new products, and new systems) (including use as AI training data, such as creating AI models and having third parties' AI models read it as training data, but not limited thereto).
(6)	To provide information to third parties when collaborating with them regarding the development and improvement, etc., mentioned in the preceding item.
(7)	To appropriately carry out and manage contract operations with business partners regarding Company Services, Company Products, and systems, etc.
(8)	To accurately grasp and respond to inquiries, consultations, and communications to the Company.
(9)	For billing, refund, payment, and related administrative processing for the Company's paid services.
(10)	For responding to acts that violate the Company's terms, policies, etc. (hereinafter referred to as "Terms, etc.") regarding Company Services and Company Products.
(11)	To notify changes, etc., to the Terms, etc., regarding Company Services and Company Products.
(12)	For confirming the operating status of Company Services and Company Products, measuring and analyzing usage status, and responding to and investigating and analyzing failures or defects.
(13)	To anonymize, utilize, and disclose personal information.
(14)	To create, utilize, and disclose statistical information from personal information.
(15)	For providing recruitment and application information, contacting, and conducting recruitment selection work for applicants to the Company.
(16)	For the following uses of the personal information of the Company's employees: ・Business contact, creation of employee rosters, various procedures required by law (including after the employee leaves the company), and other employment management. ・Personnel selection, and determination of assignment and transfer destinations. ・Determination and payment of compensation, tax processing, social insurance-related procedures, and provision of welfare benefits. ・Safety management measures in video and online monitoring, etc. ・Company PR or promotional activities, etc., in Company PR or promotional materials, etc. ・For proper health management (employee health information, such as health check-up results, will not be acquired, used, or provided except when based on laws and regulations).
(17)	To exercise the Company's rights or fulfill obligations based on the Companies Act and other laws and regulations, provide various conveniences to shareholders within the scope of laws and regulations from the Company, implement various measures to facilitate the relationship between shareholders and the Company, and manage shareholders by creating shareholder data based on predetermined standards under laws and regulations (regarding the personal information of our shareholders).
(18)	Other purposes incidental to the above purposes of use.

2．Outsourcing of Personal Information

The Company may outsource the personal information it handles to external parties to the extent necessary for the execution of the Company's business. When entrusting certain operations to selected vendors, the Company will entrust personal information after agreeing that the outsourced parties and partners will perform information management equivalent to that of the Company.

3．Security Management of Personal Information

The Company will exercise necessary and appropriate supervision over its employees to ensure the security management of personal information against risks such as loss, destruction, alteration, and leakage of personal information. Furthermore, when entrusting all or part of the handling of personal information, the Company will exercise necessary and appropriate supervision over the entrusted party to ensure the security management of personal information. The specific details of the security management measures regarding the Company's retained personal data are as follows:

Formulation of Basic Policy	This Privacy Policy is formulated as a basic policy regarding "compliance with relevant laws and guidelines," "inquiry and complaint handling contact," etc., to ensure the proper handling of personal data.
Establishment of Rules Regarding the Handling of Personal Data	Establishment of basic handling methods when acquiring, using, storing, etc., personal data.
Organizational Security Management Measures	1) The manager confirms that personal data is handled in accordance with the established handling methods. 2) Establishment of a reporting and communication system from employees to the manager.
Personnel Security Management Measures	1) Regular training for employees on points to note regarding the handling of personal data. 2) Inclusion of matters related to confidentiality of personal data in the work regulations.
Physical Security Management Measures	1) Implementation of measures to prevent viewing of personal data by employees not authorized to handle it and by individuals other than the person concerned. 2) Implementation of measures to prevent theft or loss of equipment, electronic media, and documents, etc., that handle personal data, and implementation of measures to prevent personal data from being easily identified when carrying such equipment or electronic media, including within the workplace.
Technical Security Management Measures	1) Clear identification of equipment that can handle personal data and the employees who handle such equipment, and prevention of unnecessary access to personal data. 2) Introduction of a mechanism to protect equipment that handles personal data from unauthorized access or malicious software from outside.
Understanding of External Environment	Since the business entrusted with the storage of personal data is a US business, and there is a possibility that personal data will be stored in the US, security management measures are implemented after understanding the system for the protection of personal information in the US.

4．Disclosure to Third Parties

The Company does not disclose the personal information it handles to third parties. However, in cases where provision is necessary to protect human life or human rights, when provision is required by law, or in other cases permitted by law, the Company may disclose the information without the customer's consent.
When the Company provides personal information to a third party, it will create and store records in accordance with Article 29 of the Personal Information Protection Act.
When the Company receives personal information from a third party, it will conduct the necessary confirmation in accordance with Article 30 of the Personal Information Protection Act, and create and store records related to said confirmation.

5．Provision of Personal Related Information to Third Parties

When a third party is expected to acquire personal related information (meaning that stipulated in Article 2, Paragraph 7 of the Personal Information Protection Act and limited to that which constitutes a personal related information database, etc., stipulated in Article 16, Paragraph 7 of the same Act; the same applies hereinafter) as personal data, the Company will not provide said personal related information to the third party without confirmation based on the Personal Information Protection Act or other laws, except in cases permitted by the Personal Information Protection Act or other laws。

6．Handling of Pseudonymized Information

When creating pseudonymized information (meaning that stipulated in Article 2, Paragraph 5 of the Personal Information Protection Act and limited to that which constitutes a pseudonymized information database, etc., stipulated in Article 16, Paragraph 5 of the same Act; the same applies hereinafter), the Company will process the personal information in accordance with the standards stipulated by the Personal Information Protection Commission Rules.
When the Company creates pseudonymized information or acquires pseudonymized information and deletion information, etc. pertaining to said pseudonymized information (meaning that stipulated in Article 41, Paragraph 2 of the Personal Information Protection Act; the same applies hereinafter), the Company will take measures for the security management of deletion information, etc., in accordance with the standards stipulated by the Personal Information Protection Commission Rules as necessary to prevent the leakage of deletion information, etc.

7．Handling of Anonymously Processed Information

When creating anonymously processed information (meaning that stipulated in Article 2, Paragraph 6 of the Personal Information Protection Act and limited to that which constitutes an anonymously processed information database, etc., stipulated in Article 16, Paragraph 6 of the same Act; the same applies hereinafter), the Company will process the personal information in accordance with the standards stipulated by the Personal Information Protection Commission Rules.
When the Company creates anonymously processed information, it will take security management measures in accordance with the standards stipulated by the Personal Information Protection Commission Rules.
When the Company creates anonymously processed information, it will publicly announce the items of information concerning individuals included in said anonymously processed information, as stipulated by the Personal Information Protection Commission Rules.
When the Company provides anonymously processed information (including that created by the Company and that received from a third party; the same applies hereinafter unless otherwise specified) to a third party, it will publicly announce the items of information concerning individuals included in the anonymously processed information provided to the third party and the method of provision, in advance, as stipulated by the Personal Information Protection Commission Rules, and clearly indicate to the third party that the information provided is anonymously processed information.

8．Disclosure, Correction, and Deletion of Personal Information

If the individual wishes for notification of the purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, and suspension of provision to a third party, and disclosure of third-party provision records regarding their personal information, the Company will promptly respond within a reasonable scope and method after confirming the identity of the individual. Please contact the "Personal Information Complaint and Consultation Desk" below for inquiries.

9．Use of Google Analytics

The Company uses Google Analytics, receives its analysis results from Google, and grasps the user's visit status to the Company's services. The data acquired by Google Analytics is collected anonymously and does not identify individuals.
Furthermore, that information is managed based on the privacy policy, etc., established by Google (Google: www.google.com/intl/ja/ policies/privacy/partners/). Google Analytics can be deactivated by downloading and installing the "Google Analytics Opt-out Add-on" from the Google Opt-out Add-on download page (https:// support.google.com/analytics/answer/181881?hl=ja) and changing the browser add-on settings.

10．Certified Personal Information Protection Organization

A Certified Personal Information Protection Organization is an organization certified by the competent minister based on Article 47 of the Personal Information Protection Act, whose purpose is to ensure the proper handling of personal information through complaint handling regarding the handling of target personal information and providing information to target businesses.

Name of the Certified Personal Information Protection Organization the Company belongs to: Japan Institute for Promotion of Digital Economy and Community
Contact for resolution of complaints: Personal Information Protection Complaint Consultation Office
Address: Roppongi First Building, 1-9-9 Roppongi, Minato-ku, Tokyo 106-0032
Phone number: 03-5860-7565 0120-700-779

〈About Retained Personal Data Subject to Disclosure by the Company〉

(Matters to be "in a state known to the person concerned" based on the Personal Information Protection Act and JIS
(Including cases where a response is made without delay at the request of the person concerned)

1．Name and Address of Personal Information Handling Business Operator and Name of Representative

Chuokaisan Co., Ltd.
8-18-7 Kokubo, Kofu-shi, Yamanashi 400-0043
Representative Director Fumitoshi Tanaka

2．Job Title, Department, and Contact Information of Personal Information Protection Manager

Personal Information Protection Manager: Koichi Yawata (Contact information is the same as the "Personal Information Complaint and Consultation Desk")

3．Purpose of Use of All Retained Personal Data Subject to Disclosure

The purpose of use of personal information handled by the Company is the same as the purpose of use stipulated in "1. Purpose of Use" under 〈Handling of Personal Information by the Company〉。

4．Contact for Complaints Regarding the Handling of Retained Personal Data Subject to Disclosure

Same as the "Personal Information Complaint and Consultation Desk"

5．Name of the Certified Personal Information Protection Organization the Company Belongs to and Contact for Resolution of Complaints

Same as the "Personal Information Complaint and Consultation Desk"

6．Procedure for Responding to Requests for Disclosure, etc.

(1)	Contact for Requests for Disclosure, etc. ・Same as the "Personal Information Complaint and Consultation Desk"
(2)	Format of Documents to be Submitted for Requests for Disclosure, etc., and other Methods for Requests for Disclosure, etc. ・Please send the following to the Company's "Personal Information Complaint and Consultation Desk." We will respond as quickly as possible. ・Please note that by sending the documents, you are deemed to have consented to their use for the personal information disclosure procedure. 1．Company-designated "Application Form for Request for Disclosure, etc." If you do not have it, please contact us. We will send it to you. 2．Identity Verification Documents (1) In the case of application by the person concerned ・Not required (we may contact you later to confirm your identity) (2) In the case of application by an agent ・All of the following applicable documents: 3．The Above "Identity Verification Documents" (1) In the case of a parent (or minor ward) - one set each ・A copy of a public certificate confirming the person's address and permanent domicile. ・One copy of the complete family register (all matters certificate). ・A copy of a public certificate confirming the agent's address and permanent domicile. (2) In the case of an adult guardian (statutory agent of an adult ward) - one set each ・A copy of a public certificate confirming the person's address. ・One copy of the "Certificate of Registered Matters" (showing that the person is the statutory agent of the adult ward). ・A copy of a public certificate confirming the agent's address. (3) In the case of an agent by power of attorney - one set each ・A copy of the person's seal registration certificate. ・Company-designated power of attorney (stamped with the seal used for the person's seal registration certificate). (If you do not have the Company-designated power of attorney, please contact us. We will mail it to you immediately.) ・A copy of a public certificate confirming the agent's address (attorneys may use their registration number).

・What is a "Public Certificate"?

Refers to a driver's license, various health insurance cards/pension books, resident basic register card with photo, passport, alien registration certificate, seal registration certificate, copy of resident register, copy of family register, copy of alien registration ledger, etc. Note that, in principle, the submitted documents will not be returned。

・Notes

The Company is not responsible for the loss or failure to arrive of documents during mailing or delivery due to accidents. Please fill in all necessary items. Documents with deficiencies may be returned. We may not be able to respond to requests for disclosure, etc., in cases such as those falling under the exceptions of the Personal Information Protection Act. Depending on the content, it may take some time. Personal information collected in connection with a request for disclosure, etc., will be handled only within the necessary scope of the request for disclosure, etc. The submitted documents will be appropriately disposed of by the Company. As a result of "correction, etc." or "suspension of use, etc.," the corresponding service may become unavailable. Please understand this in advance。

〈Personal Information Complaint and Consultation Desk〉

Chuokaisan Co., Ltd. General Affairs Department

8-18-7 Kokubo, Kofu-shi, Yamanashi 400-0043
Email: privacy@seasonbox.jp
Reception hours: 9:00 - 16:00 (Excluding Saturdays, Sundays, national holidays, and year-end/New Year holidays)