PRIVACY POLICY

This page describes how AKTIO Corporation will handle personal data.

Basic Policy on Personal Data Protection (Privacy Policy)

AKTIO Corporation (hereinafter referred to as the "Company") may ask you to provide your personal data in the course of providing rental products and services for you. The Company hereby establishes a privacy policy pursuant to laws and regulations regarding the protection of personal data in the effort to handle your personal data properly.

  1. Compliance with laws and regulations regarding the protection of personal data In the interest of compliance in the area of personal data protection, the Company will observe relevant laws and regulations and other rules for the protection of personal data in good faith.
  2. Acquisition and use of personal data The Company will establish internal rules regarding the protection of personal data pursuant to which the Company will obtain and use personal data in an appropriate and reasonable way. Personal data provided by you will be handled only to the extent necessary to achieve the notified or announced purposes of use.
  3. Ensuring and establishing the accuracy and security of your personal data The Company will keep your personal data accurate and updated, manage it in a secured way, and implement and continuously improve necessary and reasonable information security measures to prevent its loss, unauthorized alteration, leakage, and the like.
  4. Provision of your personal data to third parties The Company will not provide your personal data to third parties without your prior consent except as otherwise provided for by laws and regulations.
  5. Disclosure, correction, and deletion of your personal data. The Company will respond to requests and inquiries about the disclosure, correction, and deletion of your personal data in an appropriate and reasonable way.
  6. The establishment and continuous improvement of a management framework for protecting personal data In order to ensure that all its employees are aware how important it is to protect personal data and that personal data will be protected in an appropriate and reasonable way, the Company will establish and continuously improve a management framework for protecting personal data.

Naohito Konuma
President and COO
AKTIO Corporation

Purposes of use of your personal data

  1. The scope of use of your personal data The Company will use your personal data registered in writing or online by you or obtained over the telephone or the like from you within the following scope.
    1. The provision of rental products and associated services
    2. The selling and buying of merchandise
    3. Repair services
    4. Services provided on the Company's website
  2. The purposes of use of your personal data The Company will use your personal data for the following purposes.
    1. To provide you with rental and repair services.
    2. To hand over rented cars to you.
    3. To conduct merchandise selling or buying transactions with you.
    4. For the services provided online.
    5. To verify your identity.
    6. To comply with the obligatory conditions attached to our business license.
    7. To provide information about the Company's services, merchandise, and the like related to its transactions with you.
    8. For use in conjunction with information necessary for the Company's business management, such as market research, analysis, credit control, and auditing.
    9. To respond to inquiries and requests for informational documents and the like.
    In the fulfillment of the purposes of use described above, the Company may share your provided personal data with group companies and the like and entrust it to outsourcing contractors. If the Company is required to provide your data by law or otherwise, the Company may provide it to the public authorities concerned.
  3. The sharing of your personal data The Company will share its "retained personal data" with its group companies. The Company will also share its "retained personal data" with Universal Co., Ltd. to the extent necessary to provide insurance services incidental and related to the Company's business conduct.
  4. Use of the website The Company's website uses cookies in order to deliver greater convenience to you. You can configure your web browser to reject cookies or give warnings when cookies are received. Please note, however, that if you reject cookies, you may not be able to use all or some of the services provided on the Company's website.
    [Cookie]
    String information or a mechanism for user management and identification that is normally used in Internet web access.

Procedures for accepting "disclosure requests"

Pursuant to the Act on the Protection of Personal Information, the Company will respond to requests regarding the notification of the purposes for which its "retained personal data" will be used, and the disclosure, correction, and use suspension of such data, as follows.

  1. The scope of data that may be covered by such requests Such requests may be made only for the data subject's address and name and other personally identifiable data which is included in retained personal data defined in the Act on the Protection of Personal Information, and was collected and is retained by the Company.
  2. Where to send a request for disclosure or the like A request should be sent by mail in an envelope, with the Company-designated request form and the fee for the requested data (if the request is for the notification of the purposes of use or the disclosure of the data) in it. On the cover address of the envelope, please write "data disclosure request enclosed" in red. [Delivery Address]
    Personal Data Protection Representative, General Affairs Department, AKTIO Corporation Asahi Building 7F, 3-12-2, Nihonbashi, Chuo-ku, Tokyo 103-0027
    * The fee includes postage for simple registered mail or the like and a reply processing fee. (Please enclose 500-yen worth of postage stamps.)
    * Postage for mailing to the Company and the like should be borne by the requester.
    * Please note that the Company will not receive requests face-to-face at its facilities.
  3. Documents (forms) that must accompany the request
    1. In the case of a request by the data subject
      In order to make a request, print out the applicable Company-designated request form set forth below, complete it, and send it by mail with your personal authentication documentation (see Note 1) in it.
      1. Request for disclosure
      2. Request for correction, etc.
      3. Request for the notification of the purposes of use
      4. Request for use suspension
      * (Note 1) Personal authentication documentation
      Any request must be accompanied with a copy of any of the documents set forth below so that the Company can confirm that the request has been made by the data subject himself or herself or by his or her duly authorized agent.
      A copy of the driver's license, passport, insurance card, pension book, residence certificate, residence card, or other document issued by a public organization that contains the current address.
      • Please note that requests not on the Company-designated form will not be accepted.
      • If you cannot print out the Company-designated form, please call the representative specified above.
      • The personal authentication documentation mailed should be redacted as appropriate with the "registered domicile" and the like blacked out.
    2. In the case of a request by an agent If the request is made by the data subject's statutory or voluntary agent, the following documents should be included in addition to the document referred to in the preceding paragraph.
      1. If the request is made by a statutory agent
        • A document showing his or her power of legal representation (such as a certified transcript of the data subject's family register): One copy
        • (A copy of the statutory agent's driver's license, passport, insurance card, pension book, residence certificate, or other document issued by a public organization that contains the agent's current address): One copy
      2. If the request is made by a voluntary agent
        • A power of attorney granted by the data subject to the agent: One copy (This must bear the data subject's officially registered seal.)
        • The data subject’s officially registered seal certificate: One copy
        • Personal authentication documentation for the agent: One copy
          (A copy of the voluntary agent's driver's license, passport, insurance card, pension book, residence certificate, or other document issued by a public organization that contains the agent's current address)
  4. The fee for processing a request for the notification of the purposes of use or data disclosure, and how it should be paid
    1. 500 yen per request (to cover the expenses for sending a written reply by simple registered mail or the like)
      * The fee is required only for requests for the notification of the purposes of use and data disclosure and is not required for other requests, such as correction and use suspension.
    2. 500-yen worth of postage stamps should be sent together with the request form.
  5. How the Company will respond to a request for the notification of the purposes of use or data disclosure The Company will send a written reply by simple registered mail to the address indicated in the request form. In the case of a request for data disclosure or the like, please give the Company three weeks after receiving all required documents and initiating the disclosure process to send a reply.
  6. Non-disclosure of "retained personal data" The Company will refuse to disclose its retained personal data in the following cases. In this case, the Company will send a notice of refusal. If the Company refuses to disclose, the prescribed fee will nevertheless be collected.
    1. The Company cannot confirm that the request has been made by the data subject for some reason, such as the address indicated in the request form or personal authentication documentation being different from the one registered with the Company.
    2. A request has been made by an agent, but the Company cannot verify his or her power of representation.
    3. Any of the requested documents submitted is incomplete.
    4. A request for disclosure or the like has been made but it is not about the Company's "retained personal data."
    5. Meeting the request may put the data subject or any third party's life, body, property, or other rights at risk.
    6. Meeting the request may have substantially detrimental effects on the proper conduct of the Company's business.
    7. Meeting the request would require the Company to violate any other laws or regulations.

page TOP