MAYA Holdings, Inc. (hereinafter referred to as "our company"), regarding the handling of user
information including personal information about users in the application service "CASTELLINO"
(hereinafter referred to as "this application") provided by our company, is as follows. privacy
(hereinafter referred to as "this policy").
1. General rules
(1) The Company will comply with the Personal Information Protection Law, guidelines of government
agencies, and other related laws and regulations to protect user information.
(2) This policy applies to the use of this application (including services provided by our company
accompanying this application). In addition, if the Company stipulates the handling of user
stipulations shall also apply, and such stipulations shall conflict with this Policy. In such cases,
this policy shall take precedence.
(3) Affiliated services provided by affiliated partners and others provided by parties other than
For Services, the provisions of this Policy do not apply. For the handling of user information in
the relevant external service.
2. User Information Collected
In this policy, "user information" means information related to the identification of users, action
history on communication services, and other information generated or accumulated about users or
terminals, and based on this policy shall mean what we collect. User information collected by the
Company in this service is as follows.
・Information related to profile such as name (including user name), gender, occupation, etc.
・Contact information such as e-mail address, telephone number, address, etc.
・Information related to payment methods such as credit card information, bank account information,
electronic money information
・Log information and action history information
- Approximate geographic location (more than 3 square kilometers)
・Cookies and anonymous IDs
・Other information registered by customers
To improve the quality of service on the websites operated by the Company, the Company may use the
advertising technologies and analytical tools, etc. (hereinafter referred to as "Analytical Tools,
etc.") described below, which utilize cookies, etc.
Cookies are a technology that automatically identifies the user's device when the user browses the
Internet or uses a particular web service and allows the user to use the service as a continuation
previous visit without repeatedly entering the same information.
We may provide the provider of the analysis tool with information about the user that by itself
tool providers may offer you a means for you to opt-out of the collection and provision of
by the analysis tool, including the following methods:
4. Restrictions on the use of personal information and provision to third parties
We will not handle personal information beyond the scope necessary to achieve the purpose of use
obtaining the prior consent of the user. Even if personal information is acquired due to a merger or
other reason, we will not handle it beyond the scope of the purpose of use before the succession
obtaining the prior consent of the user. However, this shall not apply in the following cases.
(Including those outside Japan.)
(1) When required by law
(2) When it is necessary to protect human life, body, or property and it is difficult to obtain the
(3) When it is particularly necessary to improve public health or promote the healthy development of
children, and it is difficult to obtain the user's consent
(4) When it is necessary to cooperate with national institutions, local governments, or persons
entrusted by them in carrying out the affairs stipulated by laws and regulations, and the execution
said affairs with the consent of the user When there is a risk of interfering with
(5) When the Company's business that handles personal information is transferred due to a merger,
company split, business transfer, or any other reason.
5. purpose of use
The specific purposes of the use of user information related to the provision of this service are as
(1) To provide, maintain, protect and improve this service, such as identity verification, user
authentication, and recording of user settings related to this service
(2) For user traffic measurement and behavior measurement
(3) To provide guidance and respond to inquiries regarding the Service
(4) To respond to acts that violate our terms, policies, etc. (hereinafter referred to as "terms,
regarding this service
(5) To notify you of changes to the terms of service, etc.
6. Method of notification/publication or obtaining consent, method of requesting
suspension of use
Method of Notification, Publication or Obtaining Consent, and Request for Suspension of Use
A user may request the cessation of the collection or use of all or part of the user information by
making the prescribed settings for the Service, in which case the Company will promptly cease its
the Company's stipulations. In addition, since the collection or use of some items of user
is a prerequisite for the Service, the Company will stop the collection or use of such information
when the Application is deleted by the Company's prescribed method.
7. Disclosure of personal information
When a user requests disclosure of personal information based on the provisions of the Personal
Information Protection Law, we will disclose it to the user after confirming that it is a request
the user (the individual If the information does not exist, we will notify you to that effect.)
if the disclosure falls under any of the following, we may not disclose all or part of it, and if we
decide not to disclose it, we will notify you without delay.
(1) When there is a risk of harming the life, body, property, or other rights and interests of the
or a third party
(2) When there is a risk of a significant hindrance to the proper implementation of our business
(3) In the event of any other violation of laws and regulations
8. Correction and suspension of the use of personal information
(1) When a user requests the correction of the content of personal information in accordance with
provisions of the Personal Information Protection Law because the information is untrue, or when a
requests suspension of the use of personal information in accordance with the provisions of the
Information Protection Law because the information is handled beyond the scope of the purpose of use
previously announced or that the information was collected through deception or other wrongful
will conduct the necessary investigation after confirming the user's request. In the case of a
for suspension of use in accordance with the provisions of the Personal Information Protection Law,
will conduct the necessary investigation after confirming that the request was made by the user, and
based on the results, we will correct the content of the personal information or suspend its use,
notify the user to that effect. If we decide not to correct or suspend the use of personal
we will notify the user to that effect.
(2) If the Company is requested by the user to erase the user's personal information, and if the
Company determines that it is necessary to respond to the request, after confirming that the request
from the user, We will delete personal information and notify the user to that effect.
However, this shall not apply in the following cases.
・When necessary to comply with a legal obligation
・When there is a legitimate business purpose
・When necessary for the proof, exercise, or defense of legal claims
(3) The provisions of (1) and (2) of "8. Correction and Suspension of Use of Personal Information"
not apply to cases in which we are not obligated to correct or suspend the use of personal
under the Personal Information Protection Law or other laws and regulations.
9. Foreign Privacy Rights
In other countries, when data subject products and services are provided in that country or living
not only the Personal Information Protection Act of Japan but also the laws of that region may be
9-1. GDPR data protection rights
GDPR is an abbreviation for "General Data Protection Regulation", also known as "General Data
Protection Regulation", which is the EU version of the law on personal information protection.
If you are a resident of the EEA (including EU Member States and Iceland, Norway, and
your personal information will be subject to additional complementary rules under the GDPR if you
the GDPR requirements. (described in the URL below) We may require proof of EEA residency or a
of attorney before responding to requests made under this section.
Users are deemed to have agreed to this policy. Therefore this Policy Please read "11. Privacy
Change Procedure" carefully before using the app. Since Japan has received the adequacy
of GDPR, there is no need for procedures under cross-border transfer regulations, but in the case
data acquisition by third party provision (mainly google analytics), it shall comply with that
9-2. About CCPA Privacy Rights
CCPA is an abbreviation for "California Consumer Privacy Act", which is a law that defines the
collection and processing of personal information from individuals residing in the state of
California, the USA as California Consumer Privacy Act.
If you are a California resident and you meet the CCPA requirements, you have the following rights
under the CCPA with respect to your personal information:
We may require proof of California residency or a power of attorney before responding to requests
under this section.
(1) Right to access information regarding the handling of personal information
Regarding the personal information of the user that we have collected in the past 12 months, the
can request disclosure of the following information.
・Categories of personal information we collect about you
・Categories of information sources about the personal information
・Purpose of collecting the personal information
・Categories of third parties with whom the personal information was shared
・Categories related to personal information of users disclosed by the Company for business
and such information categories for third parties who disclosed for business purposes
・The categories of sources from which the company collected personal information
(2) Right to delete personal information
Under the CCPA, you may request that we delete the personal information we have collected from
(3) Right to Opt-Out of the buying and selling of Personal Information
You may request that we stop selling your personal information or that we do not sell your
information in the future. However, we do not sell the personal information of California
(4) Refusal of discriminatory treatment
In exercising or exercising the above rights, the Company shall not
We will not treat you unfairly or discriminate against other users.
10. Contact point and manager
If you have any comments, questions, complaints, or other inquiries regarding the handling of user
information regarding this application and this policy, please contact the following contact point.
New Business Development Team
MAYA Holdings, Inc.
*On Saturdays, Sundays, national holidays, year-end and New Year holidays, and Golden Week, we
respond on the next
business day or later.
We may change this policy as necessary without notice to users, except as otherwise provided by law
after they are posted on this page. Therefore, we encourage you to periodically check this page for
[Established August 2, 2022]