Handling of Personal Information, etc.

GMO Payment Gateway Co., Ltd. (hereinafter referred to as "the Company") refers to all of the services provided by the Company, including services for the purpose of payment, finance In order to use this service with peace of mind, the handling of personal information and specific personal information provided by related parties is stipulated as follows. Here, the people concerned represent the following people.
Unless otherwise noted, "personal information" shall not include "specific personal information".

[To all concerned]

Businesses who are using or are considering using this service
(Hereinafter referred to as "business operator")
payment services such as credit card, convenience store storage, electronic money, Pay-easy, QR code payment (hereinafter referred to as "consumers")
Partner companies that are providing this service in partnership with our company, or are considering or wishing to partner with us
(Hereinafter referred to as "partner partner")
Those who wish to provide information on IR (hereinafter referred to as "investors")
Those who wish to be employed by our company (hereinafter referred to as "recruitment applicants")
Our officers and employees (hereinafter referred to as "employees")

1. Personal Information Protection Manager

The Company appoints the following persons as the person in charge of appropriately managing the personal information and specific personal information held by the Company.

Personal Information Protection Manager	Systems Division General Manager

2. 2. Purpose of use of personal information

We will handle personal information within the scope of the purpose of use of each of the following items, except when permitted by law. When providing personal information to a business consignee to the extent necessary to achieve the same purpose of use, we will carry out necessary and appropriate supervision for safety management at the business consignee.

(1) Purpose of use of personal information obtained from the person by a method other than direct writing

[Consumer's personal information acquired by consignment from a business operator]

For application procedures for this service and conclusion of contract
For the provision and implementation of this service
To respond to various inquiries and requests for materials related to this service
For contact from us in connection with the provision and maintenance of this service
For notification of changes, suspensions, contract cancellations, etc. of this service
For customer management to operate this service smoothly
To improve this service
For analysis as statistical data
To solve problems that occur with this service
To keep records of the progress of the provision of this service and other matters
For guidance aimed at promoting the use of this service
To track, improve and customize the Services, Content and Promotions
For devising and examining new services
In addition, for the performance of work incidental to or related to the above

[Personal information of the person in charge of the business operator provided by the partner]

For application procedures for this service and conclusion of contract
To respond to inquiries and requests for materials related to this service
For issuing and shipping usage statement information, invoice, payment notices, etc. related to this service
For notification of changes, suspensions, contract cancellations, etc. of this service
For questionnaires related to this service and information on holding campaigns, etc.
To mediate inquiries about this service of affiliated partners or to share information
In addition, for the performance of work incidental to or related to the above

(2) Purpose of use of personal information obtained directly from the person in writing

[Personal information of the person in charge provided by the business operator]

For application procedures for this service and conclusion of contract
To respond to inquiries and requests for materials related to this service
For issuing and shipping usage statement information, invoice, payment notices, etc. related to this service
For notification of changes, suspensions, contract cancellations, etc. of this service
For questionnaires related to this service and information on holding campaigns, etc.
To mediate inquiries about this service of affiliated partners or to share information
In addition, for the performance of work incidental to or related to the above

[Personal information of the person in charge of the partner provided by the partner]

To conclude a business alliance contract
For mediating inquiries from businesses
In addition, for the performance of work incidental to or related to the above

[Personal information provided by investors]

To respond to inquiries regarding IR information
For IR information from our company
In addition, for the performance of work incidental to or related to the above

[Personal information provided by applicants for employment]

For recruitment selection and contact regarding interviews and briefings, etc.
In addition, for the performance of work incidental to or related to the above

[Personal information obtained from employees]

For use related to employee welfare, etc.
For employee labor management

[Personal information provided by consumers using this service]

For conducting transactions, confirming, notifying, collecting payments, etc. in a safe manner
For managing transaction history
For application procedures for this service and conclusion of contract
For the provision and implementation of this service
To respond to various inquiries and requests for materials related to this service
For contact from us in connection with the provision and maintenance of this service
For notification of changes, suspensions, contract cancellations, etc. of this service
For customer management to operate this service smoothly
To improve this service
For analysis as statistical data
To solve problems that occur with this service
To keep records of the progress of the provision of this service and other matters
For guidance aimed at promoting the use of this service
To track, improve and customize the Services, Content and Promotions
For devising and examining new services
In addition, for the performance of work incidental to or related to the above

3. 3. Purpose of use of specific personal information

The Company shall handle specific personal information within the scope of the purpose of use of each of the following items, except when permitted by law. When providing personal information to a business consignee to the extent necessary to achieve the same purpose of use, we will carry out necessary and appropriate supervision for safety management at the business consignee.

(1) Purpose of use of specific personal information obtained directly from the person in writing

[Specific personal information of shareholders, etc.]

For payment record preparation work related to distribution of dividends and surplus
In addition, for the performance of work incidental to or related to the above

[Specific personal information of employees, their spouses, relatives, etc. obtained from employees]

For office work to create a withholding slip
For those who are members of the employee stockholding association, to provide the employee stockholding association with the payment record preparation work (only for officers and employees)
For health insurance / welfare annuity insurance notification, application / billing work
For employment insurance / workers' accident compensation insurance notification, application / billing work (only for officers and employees)

4. Handling of anonymously processed information

Condo Pay by GMO that we hold as anonymously processed information after taking appropriate protective measures so that the personal information used for identifying a specific individual and creating it cannot be restored. We will continuously create it and provide it to third parties.

(1) Items of personal information included in anonymously processed information

Condo Pay following information obtained by using this payment by GMO

sex
Age (age)
Purchase goods
Purchase date and time
Behavior history (date and time when the site was viewed, page viewed, etc.)

(2) How to provide anonymously processed information to a third party

Provided on recording media
Provided by email

5． Handling of pseudonym processing information

When creating kana processing information, we may acquire kana processing information and deletion information, etc.

(1) When creating pseudonym processing information

The Company will create the product after appropriate processing in accordance with the standards stipulated by laws and regulations.
In accordance with the standards stipulated by laws and regulations, the Company shall provide information deleted in the process of creation and information on processing methods (hereinafter also referred to as "deleted information, etc."). safety control measures will be taken to prevent leakage of the

(2) When acquiring pseudonym processing information and deletion information, etc.

The Company will take safety management measures to prevent the leakage of deleted information, etc. in accordance with the standards stipulated by laws and regulations.
In particular, when acquiring kana processing information, which is personal information, the Company will promptly announce the purpose of use in "2.Purpose of Use of Personal Information" unless it is announced in advance.

6． Handling of personal information

We may obtain personal information as personal data when provided by a third party of the provider. At this time, the Company will use personal data for the purposes described in "2.Purpose of Use of Personal Information".
Please refer to [Link] for information on the handling of cookies when browsing our website.

7． Joint Use of Personal Information

We may share personal information as follows.

(1) Personal information of employees

Scope of joint users:
Each company in the GMO Internet Group (if changed due to merger, establishment, etc., it means the changed one)

Shared personal information:
Name, address, e-mail address, telephone number, department, company, and other matters necessary to achieve the purpose of use

Purpose of joint use:
To achieve the purpose of use specified in 2.

Person responsible for the management of personal information to be shared:
GMO Payment Gateway, Inc.
〒150-0043 1-2-3 Dogenzaka, Shibuya-ku, Tokyo Shibuya Fukuras (General reception 15F)
President & Chief Executive OfficerIssei Ainoura

(2) Business card information obtained directly from the person

Scope of joint users:
GMO Payment Gateway, Inc., GMO Epsilon, Inc., GMO Payment Service, Inc.

Personal information to be shared:
Information on business cards (name, address, e-mail address, telephone number, title, designation, etc., department, company, and other information on business cards)

Purpose of joint use:
To provide information on services and various campaigns, etc.
To provide service guidance and intermediary services for our business partners
For sales of products and services of joint users

8. Measures taken for the safe management of personal information

The main contents of the Company's security management measures for personal information, etc. are as follows.

(1) Formulation of basic policy

In order to ensure the proper handling of personal information as an organization, we have established a basic policy on information security, a policy on the protection of personal information, and a policy on the protection of specific personal information.

(2) Establishment of rules regarding the handling of personal information

For each stage of acquisition, use, storage, provision, deletion, disposal, etc. of personal information, the handling method, the person in charge, and the duties of the person in charge are stipulated.

(3) Organizational security control measures

We have taken necessary measures to establish an organizational structure, operate in accordance with the rules regarding the handling of personal information, develop a means to confirm the status of the handling of personal information, develop a system to respond to cases such as leaks, grasp the status of handling, and review safety management measures.

(4) Personnel Security Control Measures

We provide regular training to our employees on matters to keep in mind regarding the handling of personal information. In addition, we obtain a written pledge that includes matters regarding the confidentiality of personal information at the time of joining the company and at the time of retirement.

(5) Physical Security Control Measures

We take necessary measures to establish areas where personal information is handled, control access to rooms, prevent loss or theft of equipment and electronic media, prevent leakage when carrying electronic media, delete personal information, and dispose of equipment, electronic media, etc.

(6) Technical security control measures

With regard to information systems, we take necessary measures to prevent access control, identification and authentication of accessors, prevention of unauthorized access from the outside, and prevention of leakage associated with the use of information systems.

(7) Understanding the external environment

In order to deal with external threats and risks, we have established a specialized organization to update and strengthen security measures in a timely manner. The Company does not handle personal information in foreign countries.

9. Complaints and Consultation Desk for Personal Information, Records of Provision to Third Parties, and Specific Personal Information

Customer consultation desk

For complaints, consultations, or requests for disclosure of personal information, records of provision to third parties, or specific personal information, please contact the following contact point.

name	GMO Payment Gateway, Inc. "Personal Information Inquiry Section"
address	Shibuya Fuclas Building, 1-2-3 Dogenzaka, Shibuya-ku, Tokyo 150-0043 (15th floor, general reception)
telephone number	03-3464-2740
E-MAIL	privacy@gmo-pg.com

Name of the authorized personal information protection organization and contact information for resolving complaints

Name of Authorized Personal Information Protection Organization	Japan Institute for Promotion of Digital Economy and Society
Where to contact for the resolution of complaints	Personal Information Protection Complaint Counseling Room
address	Inside Roppongi First Building, 1-9-9 Roppongi, Minato-ku, Tokyo 106-0032
telephone number	03-5860-7565

10. Procedures for Requesting Disclosure of Personal Information, Records of Provision to Third Parties, and Specific Personal Information

(1) Customer's rights regarding personal information, records of provision to third parties, and specific personal information

When we receive a request for notification or disclosure of the purpose of use, correction, addition, deletion, suspension or deletion of use or provision, or disclosure of records of provision to a third party (hereinafter collectively referred to as "disclosure, etc.") of personal information provided to us or records of provision to third parties and specific personal information (hereinafter collectively referred to as "personal information, etc."), we will respond in good faith in accordance with laws and regulations.

(2) Procedure

Procedures for complaints, consultations, or disclosure of personal information, etc., will be provided at the Customer Service Desk. In addition, a document that can confirm the identity of the person or his or her agent is required for the procedure.

(3) Fee

For requests for notification or disclosure of the purpose of use of personal information, etc., a fee of 1,000 yen will be set per request.

11. Voluntary Provision of Personal Information and Specific Personal Information

Providing personal information is voluntary. However, please note that if you do not provide the necessary information, it may hinder the achievement of the above purpose of use.

GMO Payment Gateway, Inc.
President & Chief Executive Officer Issei Ainoura
Last revised: April 15, 2024

If you have any questions or consultations about our services, please contact us.
Please feel free to contact us from the following.