Privacy Policy
SmartHR, Inc. (hereinafter referred to as “SmartHR”) and its consolidated subsidiaries and equity method affiliates (hereinafter collectively referred to as the "SmartHR Group") fully acknowledge the importance and social responsibility of taking appropriate measures to protect privacy, taking care to ensure compliance with the Act on the Protection of Personal Information (Act No. 57 of 2003, hereinafter referred to as the “APPI”) and all other relevant laws and regulations. SmartHR Group and its officers and employees shall adhere to the provisions stipulated herein during the course of their work. For the purposes of this policy, use of the terms "personal information," "personal data," and "retained personal data" shall conform to the definitions of such terms in the APPI.
1.Handling of Personal Information
- SmartHR Group shall collect personal information in a fair and lawful manner and provide as much clarification as possible regarding the purpose of its use. Any personal information collected shall only be used to the extent necessary to achieve that specified purpose.
2.Appropriate Management of Personal Information
- SmartHR Group shall implement measures to ensure the security of personal information in its possession and shall endeavor to prevent and rectify any unauthorized access or damage to or the leak or loss of such information. For more details, refer to Section 7 “Security Control Measures" under "Handling of Personal Information at SmartHR" below.
3.Inquiries and Complaints Regarding Personal Information
- SmartHR Group shall respond appropriately and in a timely manner to any inquiries and complaints arising in connection to the personal information in its possession. Contact details for submitting such inquiries and complaints can be found in Section 9 “Contact Information" under "Handling of Personal Information at SmartHR Group" below.
4.Compliance with Laws and Regulations Regarding Personal Information
- SmartHR Group shall comply with all laws and regulations, national guidelines, and other norms regarding the handling of personal information.
5.Continuous Improvements
- SmartHR Group shall regularly conduct reviews of and make improvements to its personal information protection management system.
Handling of Personal Information at SmartHR
1.Collection of Personal Information
SmartHR collects personal information in the following scenarios:
- (i)when customers or their employees enter their own information in connection with their use of SmartHR’s services;
- (ii)when SmartHR collects information pertaining to a customer’s use of its services;
- (iii)when SmartHR receives information directly from a customer or through written documentation or other media; and
- (iv)via other legally compliant means, including when receiving information from a third-party who has obtained consent from a customer.
2.Purpose of Personal Information Utilization
(i)Personal Information Collected Directly by SmartHR
-
a.Personal information (e.g. name, affiliation, contact information) relating to the administrator or manager of a customer
-
- for the purpose of executing contractual procedures, customer management, and related operations;
- for the purpose of providing customer support;
- for the purpose of providing information on SmartHR Group’s services and other information it considers useful to its customers;
- for the purpose of providing functions to improve the convenience of its customers (e.g. recommendations based on a customer’s status and activity and log data from within SmartHR’s services);
- for the purpose of analyzing information such as browsing histories and usage logs to provide functions and recommendations to improve the convenience of its customers based on how often and for what purpose they use SmartHR’s services;
- for the purpose of investigating, reporting to, or otherwise contacting customers when necessary to ensure the security of SmartHR’s services or in the event of an incident or accident;
- for the purpose of notifying customers of maintenance-related information, changes to SmartHR’s terms and conditions, and other important information necessary for the operation of its services;
- for use by SmartHR Group companies, including to develop new services and conduct marketing activities;
- for the purpose of analyzing information such as browsing histories and usage logs to develop new services and functions based on how often and for what purpose customers use SmartHR’s services;
- for the purpose of requesting participation in interviews, questionnaires, campaigns, monitoring sessions, and other activities; and
- for the purpose of responding to inquiries and feedback regarding SmartHR or its services.
-
b.Personal information (e.g. name, affiliation, contact information) relating to individuals who request explanatory materials and those making inquiries regarding the free trial for SmartHR or regarding other SmartHR services;
-
- for the purpose of responding to such inquiries;
- for the purpose of providing information on SmartHR Group’s services and other information it considers useful to its customers;
- for the purpose of sending out questionnaires;
- for the purpose of providing functions to improve the convenience of its customers (e.g. recommendations based on a customer’s log data)
- for the purpose of analyzing information such as browsing histories and usage logs to provide functions and recommendations to improve the convenience of its customers based on how often and for what purpose they use SmartHR’s services;
- for the purpose of examining or analyzing the data necessary to improve SmartHR services or media management;
- for the purpose of analyzing information such as browsing histories and usage logs to gain an understanding of customer needs according to how often and for what purpose they use SmartHR’s services; and
- for the purpose of improving the quality of SmartHR’s responses to and properly understanding the content of inquiries received.
-
c.Personal information (e.g. name, affiliation, contact information) relating to individuals participating in events, seminars, and communities hosted by SmartHR (including the viewing of such events, seminars, and community gatherings in video form)
-
- for the purpose of operating and managing events, seminars, and community gatherings hosted by SmartHR (including the provision of participant information to third-party co-hosts and sponsors);
- for the purpose of providing information on services, products, events, seminars, and community gatherings hosted by SmartHR Group or its partners;
- for the purpose of sending out or administering questionnaires, or sending payments or delivering goods to respondents thereto;
- for the purpose of examining or analyzing the data necessary to improve the events, seminars, and communities hosted by SmartHR, to improve its existing services, and to develop new services; and
- for the purpose of analyzing information such as browsing histories and usage logs to gain an understanding of customer needs according to how often and for what purpose they use SmartHR’s services and to analyze data for the purpose of improving new services and developing new features based on such analyses.
-
d.Personal information (e.g. name, affiliation, contact information) relating to SmartHR business partners
-
- for the purpose of selecting business partners, conducting contractual procedures, managing business partners, and performing related tasks;
- for the purpose of providing information on SmartHR’s services and other information it considers useful to its customers;
-
e.Personal information (e.g. name, affiliation, contact information) of visitors to SmartHR
-
- for the purpose of facilitating correspondence with SmartHR representatives and to control access within its offices
-
f.Personal information (e.g. name, affiliation, work history) of individuals (hereinafter referred to as “Candidates”) who participate in or apply to participate in SmartHR’s recruitment activities, including recruitment-related information sharing sessions and career fairs hosted by SmartHR Group without limitation to the recruitment selection process
-
- for the purpose of determining whether Candidates fit the criteria for attributes such as personality, skills, and experience as required by SmartHR Group in its recruitment selection process (e.g. document screening, interviews, reference checks);
- for the purpose of confirming the stated accomplishments of Candidates who have previously applied to SmartHR Group;
- for the purpose of contacting Candidates for reasons such as scheduling interviews;
- for the purpose of preparing statistical data necessary to formulate future recruitment policies at SmartHR Group; and
- for the purpose of providing Candidates with information about employment opportunities and recruitment-related events at SmartHR Group.
(ii)Personal Information Obtained by SmartHR Through Contracted Services
-
a.Personal information entrusted to SmartHR as part of providing services to customers, for the purpose of partially or fully managing the handling of such information
-
- for the purpose of using, within the scope permitted under applicable laws, either partially or fully, the personal information entrusted to SmartHR as part of providing services to customers, including to perform its duties or to execute or manage other contractually obligated matters that may arise.
3.Provision of Personal Information
(i)Provision of Personal Information to Third Parties
Upon obtaining consent from customers, SmartHR may provide personal data belonging to those customers to advertisement distributors (including those located outside Japan) as detailed below for the purpose of delivering more relevant advertising and to facilitate the delivery, measure the effectiveness, and analyze the performance of ads on its platform.
-
a.SmartHR provides personal data to the following advertisement distributors (subject to change):
- Meta Platforms, Inc.Opens external site in a new window or tab.
(USAOpens external site in a new window or tab.・
CaliforniaOpens external site in a new window or tab.) -
Google, LLCOpens external site in a new window or tab.
(USAOpens external site in a new window or tab.・
CaliforniaOpens external site in a new window or tab.) - LY CorporationOpens external site in a new window or tab. (Japan)
-
X Corp.Opens external site in a new window or tab.
(USAOpens external site in a new window or tab.・
CaliforniaOpens external site in a new window or tab.) -
LinkedIn CorporationOpens external site in a new window or tab.
(USAOpens external site in a new window or tab.・
CaliforniaOpens external site in a new window or tab.)
- Meta Platforms, Inc.Opens external site in a new window or tab.
-
b.SmartHR provides the following personal data to advertisement distributors:
- hashed email addresses and other information obtained directly by SmartHR as stipulated in 2(i) above which has been processed into a format that cannot be reverted to its original form
SmartHR shall not provide any other personal information to third parties without a customer’s consent, except in the following cases:
- when required by laws and regulations;
- when it is necessary for the protection of the life, body, or property of the concerned individual and it is difficult to obtain their consent;
- when especially necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the concerned individual; or
- when necessary to cooperate with a state organ, a local government, or an individual or business operator entrusted by either of the former bodies to execute the affairs prescribed by laws and regulations and obtaining the consent of the concerned individual is likely to impede the execution of such affairs.
(ii)Joint Utilization of Personal Information
SmartHR may share personal data as defined below with its group affiliates within the scope of the purposes of utilization outlined below. The person responsible for managing this data shall be as stipulated in Section 8 “Personal Information Protection Supervisor" below.
-
a.Personal information relating to the administrator or manager of a customer
- Personal data categories: name, affiliation, contact information, etc.
- Purpose of utilization: as stipulated in 2(i)a. above
-
b.Personal information relating to individuals who request materials and those making inquiries into free trials or other SmartHR services
- Personal data categories: name, affiliation, contact information, etc.
- Purpose of utilization: as stipulated in 2(i)b. above
-
c.Personal information relating to individuals participating in events, seminars, and communities hosted by SmartHR
- Personal data categories: name, affiliation, contact information, etc.
- Personal data categories: name, affiliation, contact information, etc.
Purpose of utilization: as stipulated in 2(i)c. above
-
d.Personal information relating to SmartHR business partners
- Personal data categories: name, affiliation, contact information, etc.
- Purpose of utilization: as stipulated in 2(i)d. above
-
e.Personal information relating to Candidates
- Personal data categories: name, contact information, work history, etc.
- Purpose of utilization: as stipulated in 2(i)f. above
(iii)Supervision of Outsourcing Partners
When partially or completely outsourcing (including instances perceivable as subcontracting from the customer’s perspective with the same interpretation applying hereafter) the handling of personal data to third party outsourcing partners, SmartHR shall exercise all necessary and appropriate supervision over such partners to ensure that any outsourced personal data is managed securely.
4.Disclaimer Regarding Personal Information Obtained by Third Parties
SmartHR assumes no responsibility for personal information obtained by third parties in the following cases:
- (i)when personal information is disclosed to a third party by the concerned individual through their use of a feature or other part of SmartHR’s services;
- (ii)when identifying information (e.g. email addresses, passwords) necessary for logging in to SmartHR’s services is obtained by a third party by any means other than directly from the concerned individual themself; or
- (iii)when no intentional or negligent act has been committed on the part of SmartHR.
5.External Transmission of User Information
SmartHR uses cookies and other tags and information collection modules to transmit user information externally for purposes such as advertising, marketing, and analyzing access to its services. For details on the kinds of user information transmitted externally, refer to “About Externally Transmitted Information (Japanese Only)”.
6.Disclosure, etc. of Retained Personal Information
- (i)Pursuant to the provisions of the APPI, individuals may submit a request for SmartHR to provide notice of how their personal data is being used, that such data be disclosed, corrected, annotated, or modified; that the use of such data or its provision to third parties be suspended; or that such data be erased (hereinafter collectively referred to as requests for “Disclosure”). Upon receiving a request for the Disclosure of retained personal data in accordance with the APPI, SmartHR shall comply with such request without delay after confirming the request was made by the concerned individual themself and notify them to that effect (including notifying the individual that it has no such retained personal data or has decided to not comply with their request for the Disclosure of such data for legitimate reasons). However, SmartHR shall not disclose any personal data entrusted to it by a customer of its services in response to an individual’s request for Disclosure unless the customer has provided SmartHR with the necessary authorization to do so.
- (ii)Notwithstanding the provisions of the preceding paragraph, SmartHR shall only cease collecting or using some items of retained personal data, for which such collection and use are a prerequisite for using its services, when a customer terminates the use of its services in accordance with the prescribed procedures.
- (iii)SmartHR charges a JPY 1,000 fee per request for the disclosure of retained personal data and the notification of the purpose of its use.
- (iv)Requests for the Disclosure of retained personal data must be made in the form specified by SmartHR, and requests in any other form will not be accepted. For specific instructions, please contact SmartHR as outlined in Section 9 "Contact Information" below.
- (v)Personal information obtained in the course of receiving a request for the Disclosure of retained personal data shall be handled appropriately only to the extent necessary to respond to such request.
7.Security Control Measures
SmartHR shall implement rigorous technical and organizational measures to prevent unauthorized access to personal data (including personal information that it has obtained or expects to obtain and that it intends to handle as personal data with the same interpretation applying for the remainder of this section), to safeguard personal data from leakage, loss, or damage, or to otherwise ensure its secure management. In order to continually enhance its protection of personal data, SmartHR pledges to review and improve its internal rules and regulations in accordance with changes in applicable laws, regulations, and social norms. In addition, personal data shall only be retained by SmartHR for the period necessary to achieve the purpose of its use.
8.Personal Information Protection Supervisor
The following individual shall be responsible for the management of personal information entrusted to SmartHR:
SmartHR Personal Information Protection Supervisor
9.Contact Information
SmartHR, Inc.
Sumitomo Fudosan Roppongi Grand Tower
3-2-1 Roppongi, Minato-ku, Tokyo 106-6217, JAPAN
Please send any inquiries in accordance with instructions on the Contact Us page of the English version of SmartHR’s official website.
Masato Serizawa
SmartHR CEO