Mitsubishi Estate Co., Ltd. (Hereinafter referred to as "our company") establishes the following privacy policy(Hereinafter referred to as "This Policy") regarding the handling of privacy information in the services provided using the Machi Pass.
Article1 (Privacy information)
- "Personal information" in the privacy information shall mean "personal information" defined by Article 2, Paragraph 1 of the Act on Protection of Personal Information(Hereinafter referred to as "Personal Information Protection Law".).
- In the privacy information, "Historical and characteristic information" refers to information other than the "Personal Information" specified above, such as the services you use and products you purchase, the history of the pages you view and advertisements, the search keywords you searched, the date and time of use, the method of use, your usage environment, the postal code and sex, your occupation, age, your IP address, cookies information, access log information, location information, and terminal identification information. When a user provides "Personal information" to our company and Mitsubishi Estate Group companies in order to use our group services, we may link that information with the user's "Historical and characteristic information", in which case we will treat that "Historical and characteristic information" as "Personal information".
Hereinafter, our company and Mitsubishi Estate Group companies are listed in [Securities report (https://www.mec.co.jp/en/ir/library/) ,Group company list (https://www.mec.co.jp/en/company/group/) or the organizational charts (https://www.mec.co.jp/en/company/organization/)] , and all companies of the Mitsubishi Estate Group are collectively referred to as the "our group corporation".
Hereinafter, all services operated by our company and our group corporation are referred to as "our group services".
Article2 (How Privacy Information Is Collected)
- Our company may ask you for personal information such as your name, gender, date of birth, address, email address, emergency contact information and credit card number when you register. In addition, we may collect transaction records including user's personal information between the user and our business partners (including information providers, advertisers, and advertising distribution partners, etc. Hereinafter referred to as "business partner") and information regarding payments from our business partners.
- Our company collects historical and characteristic information about you, such as the services and software you use, the history of the pages and advertisements you view, the search keywords you search, the date and time you use them, how you use them, your usage environment (this includes the communication status of the terminal when used through a mobile terminal, and various setting information when used.), your IP address, cookie information, access log, location information, and personal identification information. when you use the services of our company or its business partners or view their pages.
Article3 (Purpose of collecting and using personal information)
The purposes for which our company collects and uses personal information are as follows.
- For the purpose of providing information on the products, services, etc. of our company, our group corporation, and third parties that are affiliated with them
- For information and inquiries regarding our group services
- To respond to acts that violate our group service agreements, policies, etc. (hereinafter referred to as "Terms")
- To notify changes, etc. of the our group service agreement, etc.
- To improve our group services and develop new services
- To generate personally unidentifiable statistical data related to our group services
- To distribute and display advertisements and contents based on attribute information, terminal information, location information, and behavior history, and to provide services to our group services
- For other purposes incidental to the aforementioned purposes of use
Article4 (Provision of personal information to third parties)
Our company will not provide your personal information to any third party without your prior consent, except in the following cases:. However, this shall not apply to cases where which are permitted by the Personal Information Protection Act and other laws and regulations listed below.
- In accordance with laws and regulations
- Cases where it is necessary for the protection of a person's life, body, or property and it is difficult to obtain the consent of the person in question
- Cases in which the provision of personal information is particularly necessary for the improvement of public health or the promotion of the sound development of children, and in which it is difficult to obtain the consent of the person in question.
- Cases in which it is necessary to cooperate with a state organ or a local public entity, or a person entrusted by the state organ or the local public entity, in executing the affairs prescribed by laws and regulations, and obtaining the consent of the person in question is likely to hinder the execution of the affairs
- Cases in which personal information is provided as a result of business succession due to merger or other reasons, and in which it is handled within the scope of the Purpose of Use before succession
- Where the following matters have been announced or made public in advance:
(1) Including provision to a third party in the Purpose of Utilization(2) Items of data provided to third parties(3) Means or methods of provision to third parties(4) Suspension of provision of personal information to a third party at the request of the person
- Cases in which it is necessary to provide personal information obtained from the user to a third party to achieve the purpose described in the previous article
Article5 (Joint use)
Our company will share personal information and provide it to users of shared personal information as follows.
-
Items of shared personal information
Name, date of birth, e-mail address -
Scope of joint users
Our group corporation
[ Group companies listed in Securities report (https://www.mec.co.jp/en/ir/library/) , Group company list (https://www.mec.co.jp/en/company/group/) or the organizational charts (https://www.mec.co.jp/en/company/organization/)] -
Purpose of Use by Users
Article3 as described in (1) to (8) -
The name of the person responsible for the management of the said personal information
Mitsubishi Estate Co., Ltd.
Article6 (Safety Control Measures)
-
Our company take necessary and appropriate measures to prevent leakage, loss, or damage of personal information handled by us, and to otherwise manage personal information safely as described below.
(1) In the areas where personal data is handled, our company control the access of employees and restrict the equipment they may bring into the office, and take measures to prevent unauthorized persons from viewing personal data.(2) Our company take measures to prevent theft or loss of equipment, electronic media, and documents that handle personal data, and our company take measures to prevent personal data from being easily discovered when such equipment, electronic media, etc. are carried around, including within our business locations.(3) Access control is implemented to limit the scope of persons in charge and personal information databases handled.(4) Our company have implemented mechanisms to protect the information systems that handle personal data from unauthorized external access or unauthorized software. - In having our employees handle personal information, our company have established rules and regulations concerning the handling of personal information to ensure the safe management of such personal information, regularly inspect the handling status, and conduct necessary and appropriate supervision, such as periodic training of such employees.
- In the event that all or part of the handling of personal information is entrusted to a subcontractor, our company will conduct necessary and appropriate supervision, including periodic inspections of the handling status of personal information at the subcontractor, to ensure the safe management of entrusted personal information.
- When handling personal information in foreign countries, our company regularly collect and understand information on the personal information protection systems of those countries and take safety management measures accordingly.
Article7 (Disclosure of personal information)
-
When requested by a person to disclose his or her personal information, our company shall disclose the information without delay to the person. However, if the disclosure falls under any of the following, the disclosure may not be made in whole or in part, and if our company decides not to disclose, our company will notify the decision without delay. A fee of 1,000 yen (excluding tax) will be charged for each disclosure of personal information. If you are interested, please contact the Contact Center (mec-auth@mec.co.jp) by email.
(1) Cases where there is a risk of harm to the life, body, property, or other rights or interests of the person or a third party(2) Cases in which there is a risk of significant hindrance to the proper implementation of our company's business(3) Other cases where the designated examining body is in violation of laws and regulations. - In principle, we will not disclose information other than personal information, such as historical information and personal information, regardless of the provisions of the preceding paragraph.
Article8 (Correction, etc. of Personal Information)
Our company shall, pursuant to the provisions of the Personal Information Protection Act, amend, add, or delete (Hereinafter referred to as "Correction, etc.".) the contents of Personal Information from Users on the grounds that the Personal Information is not true. When requested, after confirming that the request was made by the user himself/herself, the necessary investigation will be conducted without delay within the scope necessary for the achievement of the Purpose of Use, and based on the results of the investigation, the content of the personal information will be corrected, etc., and this will be notified to the user (If the Company decides not to make any correction, etc., our company will notify the person to that effect.). However, this does not apply if our company is not obligated to make corrections under the Personal Information Protection Act and other laws and regulations.
Article9 (Deletion and Suspension of use of personal information)
User is able to ask us to delete user's Personal Data .If you have deletion request, please contact id-helpdesk@mec.co.jp. Our company shall stop or erase the use of the personal information when requested from the person in accordance with the Personal Information Protection Act (Hereinafter referred to as "Suspension of Use, etc.".). or suspension of provision of such information in accordance with the provisions of the Personal Information Protection Act (Hereinafter referred to as "suspension of service".) When requested to do so, after confirming that the request was made by the person himself/herself, the personal information will be suspended from use or provision without delay and the person will be notified of the suspension. However, this does not apply if our company is not obligated to stop using or providing personal information in accordance with the Personal Information Protection Act and other laws and regulations.
Article10 (Links to other sites)
The websites of our company and our group company have links to other companies' websites. Our company assumes no responsibility for the handling of privacy information on the linked website.
Article11 (Handling cookies)
Some of the websites operated by our company and our group cooperation send and receive information called cookies for the purpose of providing services to users. We use cookies mainly for the following purposes.
- For the purpose of customizing the content distribution and display information, etc., of such as advertisements, emails, etc., according to various input aids and individual use in the services and mail distribution for members of websites, smartphone applications, etc.
- To use it as statistical data without identifying the individual.
*Cookies are used only to provide services to users and analyze usage, they are not used for any other purpose. Cookie information may be stored and referenced through a third party based on the consignment to the third party to whom the distribution of advertisements is entrusted. If you do not want to provide this information, you may choose not to allow users to use cookies, but this may prevent you from receiving some of the services on the website.
Article12 (About Access Logs)
Web sites operated by our company and our group corporation log the computer information of the users who access them. We use the access log mainly for the following purposes.
- To determine the cause of a web server problem and resolve it.
- To improve the website to make it more satisfying.
- To use information such as website usage as statistical data without identifying individuals.
- To customize content distribution and display information such as advertisements and e-mails in websites, services for members, mail distribution, etc.
Article13 (Change Privacy Policy)
- Our company may change the contents of this policy without notifying the user.
- Except as otherwise provided by our company, the revised Privacy Policy shall become effective upon posting on our company website.
Article14 (Contact Information)
If you have any questions about this policy, please contact the following.
- Address: 1-1-1 Otemachi, Chiyoda-ku, Tokyo
- Company Name: Mitsubishi Estate Co., Ltd.
- Machi Pass HelpDesk
Article15 (Name and Address of the Company, Name of Representative)
The name and address of the Company and the name of its representative are as follows.
- Address: 1-1-1 Otemachi, Chiyoda-ku, Tokyo
- Company Name: Mitsubishi Estate Co., Ltd.
- Representative: Atsushi Nakajima, Representative Executive Officer and President
Supplementary Provisions
Enacted and enforced on (14), (Sep), 2020
Revised and enforced on (18), (Jun), 2021
Revised and enforced on (01), (Apr), 2022