Privacy Policy

Japan Cancer Society (hereafter referred to as “the Association”) retains the name, address, age, and other personal information of donors, individuals who have received cancer counseling, applicants to cancer seminars, public lectures, and other events, and those participating in Association events as volunteers.
The Association has established the following privacy policy (hereinafter referred to as “this Policy”). It will handle personal information in accordance with the relevant laws and regulations and this Policy, and will strive to appropriately protect and manage such information.
The meaning of terms used in this policy shall be governed by the Act on the Protection of Personal Information (hereinafter referred to as the “Personal Information Protection Act”).

1. Personal information that is acquired

(1) Personal information obtained and retained by the Association includes personal data such as address, name, age, telephone number, e-mail address, occupation, place of employment, telephone number of employer, amount of donation, credit card number, bank account number, history of cancer, and registered information in the Association’s services such as consultation details for cancer counseling.
(2) Personal information acquired and held by the Association includes “special care-required” personal information. When acquiring or holding such information, the Association will handle it with particular care in accordance with the provisions of the law. “Special care-required” personal information
refers to data that may be the basis for discrimination or prejudice such as religious beliefs, medical history, physical disabilities, intellectual disabilities, mental disabilities (including developmental disabilities), other physical or mental functional disabilities, results of medical examinations conducted by physicians, guidance or medical treatment or prescription for improvement of physical or mental conditions conducted by physicians.

2. Purpose of use

The Association will use personal information within the scope of the following purposes:
・Various activities related to the campaign for the fight against cancer promoted by the Association
・Activities that are part of the Association’s business, including requesting donations and fundraising, issuing membership cards, receipts, and tax deduction certificates, distributing newsletters and other materials, and organizing various events
・Preparation and publication of cancer-related materials in a format that does not identify individuals, such as cancer consultation statistics and awareness surveys conducted by the Association
・Publication of the donor’s name, city, town, and donation amount in the local edition of the Asahi Shimbun and on the Association’s website (Note: only if you wish to be listed)
・Distribution and display of optimal advertisements, content, etc. and provision of services based on analysis of attribute information, device information, location information and action history
・Other public relations, advertising and marketing
・Prevention of and response to fraud
・Responses to various inquiries
・To contact you by e-mail, mail, or telephone to request your consent to the handling of personal information
・To send notices of events conducted by the Association or information on the services of related organizations by e-mail or mail or to provide such information by telephone.
・To contact you if we need to contact you for any other reason
・Other uses within the scope of consent obtained from the member
・Other activities related to the purpose of use publicly announced or specified in advance at the time of acquisition

3. Prohibition of provision to third parties

The personal information collected will not be shared with third parties without consent except in the following cases:
① When it is specifically required or authorized by any laws or regulations of Japan
② When it is necessary for protecting the life, health, or property of an individual and consent of the data subject is difficult to obtain
③ When it is necessary for improving public health and sanitation, or promoting the sound upbringing of children, and the consent of the data subject is difficult to obtain
④ When it is required by public authorities or persons commissioned by public authorities to perform their duties and obtaining the prior consent of the data subject carries the risk of hindering the performance of those duties
⑤ For academic research on cancer countermeasures conducted by the Association, when the provision of personal information is unavoidable for the publication or teaching of the results of the academic research (except in cases where there is a risk of unjustified infringement on the rights and interests of individuals)
⑥ When it is necessary to provide personal information for academic research purposes related to cancer countermeasures conducted by the Association (including cases in which part of the purpose of providing personal information is for academic research purposes and excluding cases in which there is a risk of unjustified infringement of individual rights and interests)(only in cases where the Association and the third party receiving the personal information jointly conduct academic research)
⑦ When it is necessary for a third party receiving personal information to handle said personal information for academic research purposes (including cases where part of the purpose of handling such personal information is for academic research purposes and excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals)
⑧ In other cases as permitted by law

Handling of personal information for payment settlement services
The Association entrusts the following external company to the extent necessary for payment settlement for products and services and online fund-raising operations (hereinafter referred to as “Payment Settlement Operations”).

[Name of entrusted party]
GMO Payment Gateway, Inc. （https://www.gmo-pg.com/）
Personal information (transaction ID, name, date of birth, telephone number, e-mail address, amount, credit card number, and credit card validity period) necessary for Payment Settlement Operations will be provided to the entrusted party and, through the entrusted party, to the settlement provider, but will be used only for the purpose of such procedures and will not be used for any other purpose.

4. Security control measures

The Association will take necessary and appropriate measures, such as strict security measures, to prevent loss, damage, falsification, leakage or unauthorized access of personal information handled by the Association, in accordance with laws and regulations. For information on the security control measures taken by the Association, get in touch using the contact details listed under 8 below.

5. Request for disclosure

If a member or their representative requests the Association to notify the purpose of use, disclose (including disclosure of records of provision to third parties), correct, add, delete, suspend use, erase, or suspend provision to third parties (hereinafter collectively referred to as “disclosure or correction”) personal information held by the Association, the Association will respond appropriately in accordance with the Personal Information Protection Law and other relevant laws. If you wish to exercise any of these rights, please contact the Association by sending an e-mail to the Association’s e-mail address listed under 8 below.

6. Managing cookies

The Association’s website uses cookies and other similar technologies (hereinafter referred to as “cookies”) and uses information collected by cookies.
In addition, the Association’s website uses Google Analytics provided by Google. The Association may collect and analyze the browsing history of website visitors based on cookies set by the Association or Google, and receive the results for use in understanding usage and for the Association’s services. For information on how Google Analytics handles data visit their website （https://policies.google.com/technologies/partner-sites?hl=en)

7. Governing law and jurisdiction

(1) This Policy shall be governed by and construed in accordance with the laws of Japan (national laws and treaties).
(2) The Tokyo District Court shall have exclusive jurisdiction in the first instance over the use of personal information under this Policy and disputes related to this Policy.

8.Handling of Personal Information of Residents of the EEA

In addition to the main body of this “Privacy Policy”, this Section of “Handling of Personal Information of Residents of the EEA” shall apply to the handling of personal information of residents of the EEA where the General Data Protection Regulations (GDPR) is applicable. In the event of conflict or inconsistency between them, this Section shall prevail.

1. We may acquire the following personal data:
(1) IP address, cookie information or any other online identifier: or
(2) Location information.

2. We may acquire personal data when:
(1) you make donations to us;
(2) you register with us via online;
(3) you browse or use our website; or
(4) you send us inquiries or requests.

3. Purpose of use and Legal basis under GDPR for processing the personal data which we acquire and hold are as follows:
(1) Donor: Procedures of receiving donations and any communications related thereto
Legal basis: Consent of the data subject (GDPR Art.6(1) a) or Legitimate interest (GDPR Art.6(1) f)
(2) Charity runner: Registration, identification, examination and business communications
Legal basis: Consent of the data subject (GDPR Art.6(1) a) or Legitimate interest (GDPR Art.6(1) f)
(3) Response to inquiries and requests from the data subject
Legal basis: Consent of the data subject (GDPR Art.6(1) a) or Legitimate interest (GDPR Art.6(1) f)

4. When we transfer personal data to contractors, the personal data may be transferred to the counties outside the EEA. We will transfer personal data only to the extent:
(1) the transfer to a country may take place where the EU Commission has decided that the country ensures an adequate level of protection of personal information (GDPR Art. 45);
(2) the transfer to a third party with whom we executed the standard data protection clauses approved by the EU Commission (GDPR Art. 46(2)); or
(3) the transfer takes place on one of the conditions listed in GDPR49(1).

5. We will store personal data for the appropriate period determined based on the criteria of the respective statutory retention period. After expiration of the period, personal data which is no longer necessary will be deleted in

6. In addition to the matters provided in “Correction, deletion etc. of the personal information” of this Privacy Policy, a resident of the EEA has the rights to make the following requests in connection with his/her own personal data handled by us. Please contact us through the online form (https://www.goldribbon.jp/contact) to make such requests.
(1) access (disclosure);
(2) rectification;
(3) erasure;
(4) restriction of processing;
(5) data portability;
(6) object to processing; and
(7) withdrawal of data processing consent.

7. Lodging a complaint with a competent authority
A resident of the EEA has right to lodge a complaint on the processing of their personal data with a competent supervisory authority.
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

9. Contact

If you have any questions or concerns about our use of your personal information, including its disclosure and correction, then please contact us using the contact details below.
Contact: Japan Cancer Society
Telephone: 03-3541-4771
E-mail： office@jcancer.jp
You can also use these contact details to inform us if you no longer wish to receive any further information or notices from us.
(Revised) April 25, 2023