Additional Policy for handling EU Residents Data

Additional Policy for handling EU Residents Data（AR Tour Ocean）

arara Inc. (hereinafter referred to as the "Company") handles the customer personal data relating to identified or identifiable natural person (data subject) residing within the borders of the EU as follows in an application "AR Tour Ocean" provided by Company.
The provisions of §2 "Compliance",§３ "Acquisition of Personal Information", §４"Use of Personal　Information",　and §5 "Inquires" of the privacy policy （https://www.arara.com/privacypolicy/）shall be applied to the handling of EU resident data.

1.Legal Bases for Processing Personal Data under GDPR

Company is a data controller under the General Data Protection Regulation (hereinafter referred as the "GDPR"), and processes personal data concerning you.
Company only processes personal data only if/when there is a legal basis for processing personal data and shall handle EU resident data appropriately in accordance with the instructions of the data controller of such EU resident data under GDPR.

2.Transfer of Information Internationally

The Company is a Japanese company, headquartered in Japan. The database of Company is located in Tokyo and as such, upon receipt of your personal information, it will be transferred quickly and securely to our system.

3.Consent

When handling EU resident personal data as a data controller under GDPR, Company shall, except where there is a legal basis for doing so as stated above, clearly state the data subject's consent to the handling of the personal data, the purposes for which the EU resident data is to be handled and other matters to be notified under GDPR, and data subject's express consent shall be obtained for the handling of the data subject's consent.
Company shall keep records of consent to the handling of EU resident data obtained from the data subject, so that Company can present proof of such consent when requested.
If a data subject exercises any of the rights permitted under GDPR against Company in relation to the EU resident data handled by Company, Company shall respond in accordance with the provisions of GDPR.

4.Contact

Requests and enquiries concerning the exercise of rights granted to data subject under  GDPR in relation to EU resident data that Company handles as a data controller under  GDPR should be addressed to the following contact details. Please note that if you contact Company, Company confirm your identity or that of your representative upon the document submitted by you before responding to you.

  • Compalint and Inquiry Desk
    Aoyama Tower Building,
    2-24-15 Minami-aoyama Minato-ku, Tokyo 107-0062
    The complaint and inquiry desk person in charge
    arara inc.
    privacy@arara.com
■Personal Information Protection Manager
Executive officer in charge

Established on February 20, 2023