Toko Co., Ltd. (hereinafter referred to as “Toko”) is committed to protecting your personal information.
We provide the rules on the processing of personal data as follows. We shall comply with the laws and regulations applicable to us, including the Act on the Protection of Personal Information (Act No. 57 of 2003, hereinafter referred to as the “PIPA”) and other international regulations including the GDPR and CCPA.
By using our website, you are deemed to have consented to the collection, use, processing, and disclosure of your personal data in accordance with this Privacy Policy. We reserve the right to modify this Privacy Policy at any time. You are deemed to have consented to the modified Privacy Policy if you continue using our website after modifications.

Article 1 (Definitions)

1. Controller: Any natural or legal person, public authorities, or other bodies who, alone or jointly with others, determines the purposes and means of processing personal data. In this Privacy Policy, “controller” means Toko.
2. Personal Data: Information relating to an identified or identifiable natural person, directly or indirectly, through identifiers such as names, identification numbers, location data, and online identifiers.
3. Processor: Any natural or legal person, public authorities, or other bodies that handle personal data on behalf of a controller.
4. Recipient: Any natural or legal person, public authorities, or other body to whom personal data is disclosed, except public authorities under specific legal frameworks.
5. Third Party: Any natural or legal person, public authorities, or other bodies besides you, the controller, or the processor, involved in personal data processing without direct authorization.
6. Restriction on Processing: Marking personal data to limit its future processing.
7. Processing: Any operation performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, alignment, combination, restriction, erasure, or destruction.
8. Profiling: Any automated processing of personal data to evaluate certain personal aspects relating to a natural person, including preferences, behaviors, or locations.

Article 2 (Purposes of Processing of Personal Data)

1. Purpose of Processing We process personal data for the following purposes:
   • Your Personal Data
     • Service provision, product planning, research, development, testing, and experiments.
     • Facility access control, business transactions, and necessary communications.
     • Responding to inquiries.
   • Job Applicants
     • Contact and provision of employment information and recruitment management.
   • Employees
     • Human resources, labor management, payment processing, legal reporting, and necessary communications.
2. Acquisition Sources of Personal Data
   Personal data may be acquired directly from you, publicly available sources, social media, or third-party surveys.
3. Types of Acquired Personal Data
   • Personal attributes, purchase history, provided products/services, financial and educational information, and employee data.
4. Provision and Sharing of Personal Data
   We may share personal data with the following third parties, only as necessary and in compliance with applicable laws:
   • Group companies, professional advisors, financial institutions, and service providers.

Article 3 (Legal Basis for Processing of Personal Data)

Processing is legally based on:

• Your consent for one or more specific purposes, which can be withdrawn.
• Contractual necessity, legal obligations, protection of vital interests, public interest, or legitimate interests (e.g., responding to inquiries and preventing misuse).

Article 4 (Your Rights)

Under applicable privacy laws, you have the following rights:

1. Right to Information: Obtain information regarding processing from the controller.
2. Access Right: Request access to your processed personal data, which will be provided as a copy.
3. Right to Rectification: Request correction of inaccurate data.
4. Right to Erasure: Request erasure of your personal data in certain cases.
5. Right to Restriction on Processing: Request limited processing in certain cases.
6. Right to be Informed of Data Changes: Be informed of any rectification, erasure, or restriction of processing.
7. Right to Data Portability: Receive your data in a structured, machine-readable format and transmit it to another controller. For details on exercising this right, please contact our DPO.
8. Right of Objection: Object to data processing based on legitimate interests.
9. Right Against Automated Processing: You have the right to avoid decisions based solely on automated processing, including profiling, that significantly affects you.

Article 5 (Safety Management Measures)

As the controller, we have implemented sufficient technical and organizational safeguards to protect personal data. If you have concerns regarding data transfer methods, we will implement alternative protective measures.

Article 6 (Cookies)

Our website uses cookies. Cookies are text files stored in your computer system through your internet browser to uniquely identify your browser. Cookies enable us to provide user-friendly services and optimize our website’s information and advertisements based on your preferences.
Types of Cookies:

• By Duration:
  • Session Cookies: Deleted when you close your browser.
  • Persistent Cookies: Remain for a defined period.
• By Ownership:
  • First-Party Cookies: Set by our web server.
  • Third-Party Cookies: Stored by domains outside our website.
    You may restrict or delete cookies anytime via your browser settings, although this may impact website functionality.

Article 7 (Cross-Border Data Transfer)

To achieve processing purposes, we may transfer your data outside Japan with adequate protective measures in compliance with this Policy and relevant privacy laws. By agreeing to this Policy, you consent to such transfers.

Article 8 (Retention Period of Personal Data)

Personal data will be retained as long as necessary to fulfill processing purposes or as required by law.

Article 9 (Notification Obligation in Case of Data Breach)

In the event of a data breach, we will promptly notify the relevant supervisory authority and affected users.

Article 10 (Children)

We shall not collect or process any personal information on children under 16 without parental consent. If we find data on a child under 16, we will delete it promptly.

Article 11 (Right to File a Complaint to Supervisory Authority)

You have the right to file a complaint directly with the supervisory authority in your region.

Article 12 (Opt-Out Right)

We do not sell your personal data. If any sale of personal data were to occur, users would have the right to opt out.

Article 13 (Data Protection Officer)

For further information or questions about your rights and data processing, please contact our Data Protection Officer (DPO): General Affairs Department
Toko Co., Ltd.
5-27-10 Hongo, Bunkyo-ku, Tokyo 113-0033, Japan
Tel: +81-(0)3-3815-5811
E-mail: info@toko-tool.co.jp