Personal Information Protection Policy
ANDPAD Inc. (hereinafter referred to as the “Company”) is fully aware of its social mission regarding protection of all personal information handled by the Company, and complies with all laws and regulations regarding protection of personal information.
Personal information shall be obtained, used, and provided only to the extent necessary for the Company’s legitimate business operations and for staff employment and other personnel management. The Company shall not handle the personal information beyond the extent necessary to achieve those specified purposes of use (a unintended use), and shall take measures to not make any unintended use.
The Company will comply with laws, regulations, national guidelines, and other rules regarding protection of personal information.
With respect to the risks such as leakage, loss, damage of personal information, the Company will take reasonable security measures, appropriately allocate business resources for prevention, establish a personal information security system, which will be reviewed on an ongoing basis. If any problem is found in such system, the Company will promptly take corrective measures.
The Company will respond promptly, sincerely, and appropriately to complaints and consultations regarding the handling of personal information.
The management system for the protection of personal information will be reviewed in a timely and appropriate manner in light of changes in the environment surrounding the Company, and improvements thereto will be furthered on an ongoing basis.
Privacy Policy
The Company sets forth this Privacy Policy (hereinafter referred to as the "Privacy Policy") regarding the handling of personal information of customers. The term "customer" herein refers not only to individuals with whom the Company has a business relationship (including officers and employees of corporate customers) but also broadly includes individuals who make inquiries to the Company. The terms used in this Policy shall be interpreted in accordance with the Act on the Protection of Personal Information of Japan (the "Personal Information Protection Act").
Article 1. Acquisition of Personal Information
The Company acquires customers' personal information through methods such as information provided by customers in relation to the use or consideration of the use of the cloud-based construction project management service "ANDPAD" and other services provided by the Company or its subsidiaries and affiliates (collectively, the "Group"), or services linked to those of the Group (collectively, the "Services"). The Company shall acquire personal information in an appropriate manner and shall not acquire it through deceit or other wrongful means.
Article 2. Purpose of Use of Personal Information
1.
The Company shall use acquired personal information within the scope necessary to achieve the following purposes:
(1)
Personal information of customers: The Company shall use acquired personal information of customers for the following purposes.
(a)
To prepare for and conduct transactions and to provide, operate, and maintain the Services.
(b)
To communicate necessary matters for the preparation and conduct of transactions.
(c)
To register and manage transaction status.
(d)
To communicate administrative matters related to the Services.
(e)
To customize service content according to customers' usage.
(f)
To investigate, prevent, and respond to system failures and security issues.
(g)
To introduce and propose products and services provided by the Company or third parties based on analysis of service usage.
(h)
To plan, develop, and improve products and services including analysis of recorded calls for customer service improvement and customization of service based on compliance requirements.
(i)
To conduct marketing activities, including invitations to seminars and events.
(j)
To utilize for information analysis, research, development, and publication, including training data for AI development.
(k)
To respond to customer inquiries.
(l)
To perform operations related or incidental to the above.
(2)
Personal information of ANDPAD users: The personal information obtained in connection with the application and use of "ANDPAD" shall be used for the purposes set forth in (1) above and the purposes defined in the Terms of Use (https://andpad.jp/terms).
(3)
Personal information of job applicants and candidates: The company shall use acquired Personal information of job applicants and candidates for the following purposes.
(a)
To contact, correspond with, and manage recruitment activities.
(b)
To plan, notify, and operate recruitment-related events.
(c)
For selection purposes in recruitment.
(d)
For communication regarding procedures for onboarding.
(e)
To analyze job suitability post-employment.
(f)
For analysis of trends in applications and recruitment.
(g)
To perform operations related or incidental to the above.
2.
Except for cases permitted under the Personal Information Protection Act, the Company shall obtain the prior consent of the client in case of using personal information beyond the purposes of use described in the preceding clause.
Article 3. Provision and Deposition of Acquired Personal Information to Third Parties
1.
The Company shall not provide personal information obtained from clients to third parties without obtaining the prior consent of the client, except in the following cases:
(1)
When disclosed to affiliated service providers, partner financial institutions, contractors, etc., within the scope necessary to achieve the purposes set forth in the Terms of Use.
(2)
In case based on laws and regulations;
(3)
In case it is necessary for the protection of a person’s life, body, or property and it is difficult to obtain the client’s consent;
(4)
In case it is especially necessary to improve public wellbeing or to promote the sound growth of children, and it is difficult to obtain the client’s consent;
(5)
In case it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by laws and regulations, and obtaining the client’s consent may impede the execution of such affairs;
(6)
In case the recipient is an academic research institution or the equivalent, and the academic research institution needs to handle the personal information provided for academic research purposes;
(7)
In case a succession of the Company’s business, including the provision of personal information, is carried out due to a merger, corporate separation, transfer of business, or other reasons;
(8)
In case the personal information is provided in connection with the Company’s entrustment of the handling of personal information within the scope necessary for achieving the purpose of use;
(9)
In case personal information is provided for joint use in accordance with the Personal Information Protection Law;
(10)
In other cases permitted by the Personal Information Protection Law.
2.
The Company shall not provide personal information handled by the Company to any third party in a foreign country without obtaining the prior consent of the client, except in the following cases:
(1)
In case falling under any of the preceding clause 1, items (1) to (6);
(2)
In case of provision to a third party in a country designated by the Personal Information Protection Commission as a foreign country having a system for protection of personal information that is recognized to have standards equivalent to that of Japan in protecting the rights and interests of individuals;
(3)
In case the implementation of measures which follow the spirit of the Personal Information Protection Law is ensured in an appropriate and reasonable manner with the person receiving personal information in respect of the handling of personal information by such person receiving personal information;
(4)
In case the person receiving personal information receives a certification in accordance with an international framework for the handling of personal information;
(5)
In other cases permitted by the Personal Information Protection Law.
3.
The Company may outsource all or part of the handling of personal information to subcontractors to the extent necessary to achieve the purpose of use. In such cases, the Company will thoroughly screen the eligibility of subcontractors, stipulate confidentiality obligations and other matters in the contract, and establish a system to ensure that personal information is properly managed.
Article 4. Joint Use
The Company will carry out the joint use of personal information as follows:
1.
Joint Use in the Construction Career Up System
The Company will share the personal information being handled in the Construction Career Up System (hereinafter referred to as the “CCUS”) provided by the Incorporated Foundation Fund for Construction Industry Promotion. For details on the items of personal information to be jointly used in the CCUS, the purpose of use, the scope of joint users, the person in charge of management or otherwise, please refer to the ‘Handling of Personal Information in the Construction Career Up System’ (https://www.ccus.jp/ files/documents/privacy.pdf).
2.
Joint Use in Connection with the Provision of ANDPAD
ANDPAD is the service that enables visualizing operations and carrying out the efficient management of building and construction projects in the cloud. By using ANDPAD, each party involved in a building and construction project will be able to check the registration information and use status of ANDPAD other parties involved. In order to enable such information sharing among the parties involved, the Company will share the personal information of the Users of ANDPAD .
The “User” refers to an entity or individual (including subcontractors, business partners, the related parties such as the employees, etc. of subcontractors and business partners, the construction client, etc.) registered with ANDPAD as a party involved in each building/construction project by the business entity that has employed ANDPAD (hereinafter referred to as the “Employing Company”). The Users may use ANDPAD in accordance with the Terms of Use stipulated by the Company. When an Employing Company registers a User for ANDPAD or each building/construction project, the registered User will be notified thereof by e-mail and notification on ANDPAD. In case of suspecting an incorrect registration or otherwise, please contact the Company through the “Inquiry Desk” provided for in Article 9.
(1)
Items of personal information to be shared
Name, company name, job title, e-mail address, telephone number, profile image, other profile information’s registered information (excluding password), gender, date of birth, address, various types of certificates’ images, other registered information of safety documentation information, the User’s ID, and usage status of ANDPAD .
(2)
Scope of joint users
The Employing Companies and the Users (collectively, the “Project Involved Parties”).
(3)
Purpose of use of the joint users (the Project Involved Parties)
(I)
To use ANDPAD
(II)
To implement and manage each building/construction project for which the User is registered as an involved party;
(III)
To comply with laws, regulations, related guidelines or otherwise applicable to the Project Involved Parties.
(4)
Person in charge of management of the joint use ANDPAD Inc. (https://andpad.co.jp/company/)
3.
Joint Use of Personal Information within Our Group Companies
We jointly use personal information among our group companies as described below:
(1)
Scope of Joint Users
Our group companies.
Currently, the following company is involved in joint use, but this may be subject to additions or changes in the future:
Comvex Inc.
(2)
Types of Information to Be Jointly Used and Purposes of Use by the Joint User
Types of Information to Be Jointly Used
Purposes of Use by the Joint User
Customer data (including ANDPAD users)
(a)
Introduction/proposal of products/services by the Company or third parties.
(b)
Planning/development/improvement
of products/services.
(c)
Implementation of marketing measures.
(d)
Use for research and development, AI training, and publication.
(e)
Related administrative tasks.
Applicant data
(a)
The purposes mentioned in the Article2.1(3) “Personal information of job applicants and candidates “.
(b)
Planning and execution of group-wide hiring.
(c)
Related administrative tasks.
(3)
Joint use manager: ANDPAD Inc. (https://andpad.co.jp/company/)
Article 5. Safety Control Measures
The Company will take the necessary and appropriate measures to prevent leakage, loss, or damage of the personal information handled by the Company and to otherwise safely manage personal information. If you have any questions regarding the security control measures taken by the Company, please contact us through the inquiry form provided in Article 9
Article 6. Disclosure, Correction and Suspension of Use of Personal Information
1.
The Company may receive requests from clients for disclosure, etc. (meaning notification of purpose of use, disclosure, correction, addition, deletion, erasure, suspension of use or provision to a third party, and disclosure of records of provision to a third party; the same applies hereinafter) in accordance with the provisions of the Personal Information Protection Law, the Company will, pursuant to provisions of the Personal Information Protection Law, and the following items, make the disclosure, etc. of personal information without delay after confirming that the request is made by the client itself.
(1)
Notification of purpose of use or disclosure of personal information or records of provision to a third party
The client may request against the Company for notification of the purpose of use or disclosure of personal information or records of provision to third parties in accordance with procedures separately provided for by the Company. However, the Company may not respond to the request in the following cases:
(I)
In case there is a risk that the disclosure may harm the life, body, property, or other rights or interests of the client or a third party;
(II)
In case there is a risk that the disclosure may cause significant hindrance to the proper conduct of the Company’s business;
(III)
In case the disclosure would violate laws and regulations;
(IV)
In case the Company cannot confirm that the request for disclosure is made by the client itself;
(V)
In other cases where the request does not meet the requirements of the Personal Information Protection Law.
In addition, in the event that a request is made for notification of the purpose of use or disclosure of personal information or records of provision to a third party, a disclosure fee determined separately by the Company will be charged.
(2)
Corrections, additions and deletions
The client may request the correction, addition, or deletion of personal information in accordance with procedures separately provided for by the Company. In such cases, the Company will conduct investigation without delay to the extent necessary to achieve the purpose of use, and correct, add, or delete the relevant personal information based on the results of such investigation.
(3)
Suspension of use, erasure, or suspension of provision to third parties
The client may request suspension of use, erasure, or suspension of provision to third parties of personal information in accordance with procedures separately provided for by the Company. In such cases, the Company will respond appropriately in accordance with the Personal Information Protection Law.
2.
In making a request under any of the preceding paragraphs, please contact using the inquiry desk’s form in Article 9, accompanied by the following information and other information and documents prescribed by the Company:
(I)
Name, address, telephone number, and e-mail address
(II)
Details of request
(III)
Identification documents
Article 7. Cookie Handling
1.
Use of Cookies
The Company shall, on the websites operated by the Company, use Cookies for the purposes of improving the experience of the clients, analyzing and ascertaining the use status of websites, confirming login information, distributing advertisements that match the interests and concerns of clients, and other purposes. Cookies are small files that are stored on the client’s device when visiting the websites, and are used by the web server to exchange information with the client’s Internet browsing software (browser) when the client views the websites. By using Cookies, when collecting the data such as view history of the clients accessed to the Company’s websites, the Company and the suppliers of tools used on the
websites of the Company will be able to recognize the client’s browser. The client may refuse the use of Cookies by changing the settings of the client’s Internet browsing software (browser). However, the client acknowledges in advance that by refusing the use of Cookies, the client may not be able to use some of the functions of the Company’s websites.
2.
Use of Google Analytics
The Company uses ‘Google Analytics’, an access analysis tool provided by Google LLC, to ascertain and analyze the use status of the Company’s websites. For more information, please visit the following website: www.google.com/intl/ja/policies/privacy/partners/
Article 8. Links
The business entities other than the Company linked to the Company’s websites may implement acquisition of personal information on the websites thereof, and in such cases, this Privacy Policy does not apply, and the Company shall not assume any obligation or responsibility in relation to the handling of personal information by such business entities other than the Company.
Article 9. Inquiry Desk
In case of any comments or questions regarding this Privacy Policy, or any other inquiries regarding the handling of personal information, or requests based on any items of Article 6.1, please contact us using the form (https://andpad.jp/contacts/new).
Article 10. Revision
In the event that this Privacy Policy is revised, the date and contents of the revision will be promptly announced on the Company’s website.
1 September 2015 Enacted
27 May 2020 Revised
1 April 2022 Revised
20 October 2022 Revised
4 September 2024 Revised
© 2026 ANDPAD All Rights Reserved.