Privacy Policy for GDPR

1. Purposes of Use of Personal Information

We will always process your personal data based on one of the legal basis provided for in the GDPR. Furthermore, we will always process your sensitive personal data, subjected to the special rules provided for in the GDPR.
According to Article 6 1 (f) of GDPR, we may collect and process your personal data for the purposes detailed below, which are required so that we can pursue our justifiable interests or providing you with adequate services and products:

• to optimize our web site content for you;
• to provide you with appropriate information on products and services;
• to provide, improve, and develop our products, services, and advertisements;
• to inform you about changes to our service(s);
• to manage your account;
• to notify you about our policies and terms;
• to promote safety and security, such as by monitoring fraud and investigating suspicious or potentially illegal activity or violations of our terms or policies;
• to analysis, audits;
• to ensure business continuity.

Also, in case of obtaining your express prior consent, according to Article 6 1 (a) of GDPR, we may also collect and process your personal data for the following purposes:

• to provide you with information which we feel may be of your interest;
• to share your personal data with third-party partners who may send you marketing communications in relation to their products and services;
• for making business analysis.

You can withdraw your consent at any time. However, regarding the legality of processing personal data based on the consent before withdrawal is not affected by the withdrawal of consent.
We will not process your data in a way that is incompatible with these purposes. If we intend to process personal data originally collected for the original purpose for another purposes, we will ensure that we definitely inform you of this. We will keep your personal data for as long as it is necessary for us to comply with our legal obligations, ensure the provision of appropriate services and maintain our business activities.

2. Items of Personal Data to be Acquired/ Used

For the purposes specified under this Privacy Policy, we may collect the following categories of personal data:

※We use Google Analytics, a web analysis service of Google. Google Analytics collects, records, and analyzes your visits to our site based on our cookies.
Information collected, recorded, and analyzed by Google Analytics does not include any information that identifies a particular individual. These data are managed by Google in accordance with the company's privacy policy.
You can also stop being collected your data using our Google Analytics by disabling Google Analytics in the add-on sets of your browser. You can disable Google Analytics by downloading and installing Google Analytics Opt Out Add-On on the Download page of the Opt Out Add-On from Google and changing the add-on sets of your browser.
Please refer to Google Analytics website for explanations of the terms of use of Google Analytics and to the company website for explanations of Google's privacy policy.
＜Google Analytics Terms of Service＞
https://www.google.com/analytics/terms/
＜Google Privacy Policy＞
https://policies.google.com/privacy?hl=en
＜Google Analytics Opt-out Browser Add-on＞
https://tools.google.com/dlpage/gaoptout?hl=en

We can acquire such personal data either directly from you when you fill out the forms displayed on the Website or indirectly where such personal data is provided to us by your electronic communication terminal equipment or your Internet browser. We thoroughly ensure that the personal data processed serves the purpose.

3. Personal Data of Child

We only process information about children under the age of sixteen (16) in accordance with the provisions of Article 8-1 of the GDPR if and to the extent that consent is given or authorized by the holder of parental responsibility. In other cases, we do not knowingly collect and process it. As soon as we discover that we have directly collected and processed the personal information of children under the age of sixteen (16) or under the minimum age equivalent to the GDPR as required by EU Member State Law, we will take steps to erase the information. If you become aware of it, please contact with us immediately using the contact information provided in this Privacy Policy.

4. Cookies

Cookies are data files that are placed on a computer when it is used to visit a Website. These cookies may be used for many purposes, including without limitation, tracking user preferences or web pages visited while using the Website. Most web browsers are set to accept cookies by default. If you prefer, you can usually set your browser to remove or reject cookies, but note that doing so does not necessarily affect third party flash cookies used in connection with our Websites. Please note that if you choose to remove or reject cookies, this could affect the availability and functionality of our Websites. In addition, please be aware that if you choose to block cookies, some advertising preferences that are dependent on cookies may not be able to be respected.

5. Personal Information Sharing

We may share your personal data with third parties in accordance with the GDPR. If we share your personal data with a data processor, we properly transfer and process your personal data in accordance with the GDPR. In addition, if we share your personal data with organizations outside the EEA (European Economic Area), we will comply with the GDPR and, if necessary, we will transfer and processing with reference to the Standard Contract Clauses between controllers (2004/9 15/EC) and the Standard Contract Clauses between controllers and processors (2010/87/EU).

• Reorganization

  In the event that we undergo a reorganization or are sold to a third party, any personal information we hold about you may be transferred to that reorganized entity or third party in compliance with applicable law.

• Internet Service Providers

  We may share your personal data with companies which provide services for us, such as hosting, maintenance, support services, email services, marketing, auditing, fulfilling your orders, processing payments, data analytics, providing customer service, and conducting customer research and satisfaction surveys.

• Business Partners

  Subject to your prior agreement, your personal data may be transferred to, stored, and further processed by business partners that work with us to provide our products and services or help us market to customers. Our sharing your personal data with the partners will be limited to provide or improve our products, services and advertising.

• Data disclosure based on laws and regulations

  We may disclose your personal data if we legally have the right or are required to do so (e.g., if required by law or a court order).
  
  In addition, we may also disclose your personal data in the following cases.

  • Protection of our rights
  • Request for remedies
  • Enforcement of our Terms of Service
  • Fraud investigation
  • When we judge that disclosure of information is reasonably necessary to protect our business or you

• Data Transfers

  Such the above disclosures may involve transferring your personal data out of the European Union to the other countries including Japan. These countries may change due to changes in the business environment
  Such transfer may take place for the purpose of contacting with business partners. For each of the transfer, we make sure that we provide an adequate level of protection to the data transferred.

6. Processing Record of Personal Data

Whether we are as a data controller or as a data processor, we record personal data processing records in accordance with the GDPR regulations and record the information necessary to cooperate with regulatory authorities.

7. Security Measures

We will take appropriate security measures to protect your personal data and prevent unauthorized use, loss or alteration of your personal data.
However, you should be kept in mind that provision of information through the internet is not entirely secure at all. Please note that we cannot guarantee the security of information you submit via our websites whilst it is in transit through the internet and any such submission is at your own risk.
Unless it is permitted in a law, we will only retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Privacy Policy, and if applicable, to the extent required by statutory retention requirements is required or permitted by law.

8. Your Rights

You have some or all of the following rights to the personal data we collect and process by us.

• You have the right to obtain from us the necessary information regarding our data processing activities that concern you.
• You have the right to confirm with us as to whether or not personal data concerning you are being processed, and, where that is the case, and obtain from us the copy of your personal data or access to the personal data and certain related information.
• You have the right to obtain from us the correction of inaccurate personal data concerning you without delay, and to complete any incomplete personal data. You may also have the right to obtain from us the erasure of personal data concerning you without delay, in the event that it meets the GDPR requirement.
• You may have the right to obtain from us the limiting to processing of personal data, in the event that it meets the GDPR requirement.
• You may have the right to put up opposition, on grounds relating to your particular situation, at any time to processing of personal data concerning you, in the event that it meets the GDPR requirement. At any time object, on grounds relating to your particular situation, that your personal data shall be subject to a processing. In this case, please provide us with information about your particular situation. After the assessment of the facts presented by you , we will either stop processing your personal data or present you our compelling justifiable grounds for an ongoing processing; and/or take legal actions in relation to any potential breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators.
• You may have the right to receive your personal data in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without our hindrance, in the event that it meets the GDPR requirement.
• You may have the right not to be subject to automated decision-making based on the processing of your personal data, including profiling that has a legal or equivalent effect on you or has significant impact, in the event that it meets the GDPR requirement.

If you intend to exercise such rights, please refer to the contact section.

If you are not satisfied with the way in which we have proceeded with any request, or if you have any complaint regarding the way in which we process your personal data, you may lodge a complaint with a Data Protection Supervisory Authority.

9. Notification to the Competent Supervisory Authorities

In case of breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed, we have the mechanisms and policies in place in order to identify it and assess it promptly. Depending on the outcome of our assessment, we will make the requisite notifications to the supervisory authorities and communications to the affected data subjects, which might include you.

10. Links to Other Sites

We may provide hypertext links from the website on which this Privacy Policy is posted to third-party websites or other sources of information on the internet. However, we do not handle or manage the protection of personal data of third parties, we cannot be held responsible them. Therefore, please make sure the policy regarding the protection of personal data of the third party and confirm the collection method, processing method, etc. of your personal data.

11. Amendments to this Privacy Policy

We reserve the right to change this Privacy Policy from time to time by updating our websites . Any changes to this Privacy Policy will become effective upon posting of the revised Privacy Policy. If we make changes which we believe are significant, we will inform you through the Website to the extent possible and seek your consent where applicable.12. Contacting Us.

12. Contacting Us

Please submit any questions, concerns or comments you have about this Privacy Policy or any requests concerning your personal data to us:

2-7, Moto Akasaka 1-chome, Minato-ku, Tokyo 107-0061, Japan
MN Inter-Fashion Ltd., Representative Office for Personal Information Protection
Tel: +81-3-6771-9760
Contact us at:
MNIF-GDPR-TKZFA@mn-interfashion.com

The Information you provide when contacting us will be processed to handle your request and will be erased when your request has been answered. Alternatively, we will restrict the processing of the respective Information in accordance with statutory retention requirements.