The Native Textile Production Area Project Promotion Council (hereinafter referred to as the “Native Textile Council”) processes personal data in compliance with applicable data protection regulations of the EU and its Member States, in particular the General Data Protection Regulation (hereinafter referred to as the “GDPR”).
This GDPR Privacy Policy is intended to supplement the Native Textile Council’s Privacy Policy and specifically sets forth policies relating to the GDPR.
This GDPR Privacy Policy applies to individuals located in EU Member States and in Iceland, Norway, and Liechtenstein, which are part of the European Economic Area (EEA), when they provide personal data to the Contemporary Art Platform through the use of this website (such users of this website are hereinafter referred to as “Data Subjects”).
1. Definition of Personal Data
In this GDPR Privacy Policy, “personal data” means:
Any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
2. Name and Address of the Controller
- Name: Native Textile Production Area Project Promotion Council
- Address: 30-2 Yoshitsune, Hirokawa-machi, Yame-gun, Fukuoka 834-0104, Japan
- Email: texchikugo@gmail.com
3. Name and Address of the Data Protection Officer (DPO)
- Name: Hiroshi Tamura
- Address: 3-12-22 Yakuin, Chuo-ku, Fukuoka 810-0022, Japan
- Email: texchikugo@gmail.com
4. Purpose, Legal Basis, and Retention Period of Processing Personal Data
(1) Purpose of Processing
As described in Section 3 (“Purpose of Use”) of the Privacy Policy.
(2) Legal Basis for Processing
The legal bases for processing personal data are as follows:
- Where the Data Subject has given consent to the processing of their personal data for one or more specific purposes. Where processing is based on consent, the Data Subject has the right to withdraw such consent.
- Where processing is necessary for the performance of a contract to which the Data Subject is a party, or in order to take steps at the request of the Data Subject prior to entering into a contract.
- Where processing is necessary for compliance with a legal obligation to which the Controller is subject.
- Where processing is necessary in order to protect the vital interests of the Data Subject or of another natural person.
- Where processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
(3) Retention Period
The Native Textile Council will promptly delete personal data of Data Subjects after a reasonable period necessary for achieving the purposes of processing has elapsed.
Personal data collected for participation in events organized, co-organized, or supported by the Native Textile Council will be retained until the conclusion of such events. In the case of a series of events, the data will be retained until the final event concludes. After the completion of the events, the collected personal data will be deleted or anonymized within a reasonable period so that the Data Subject can no longer be identified, unless the Data Subject has separately consented to further processing.
5. Sharing of Personal Data
The Native Textile Council may share online identifiers of Data Subjects with third parties for the purpose of delegating website access analysis. The Native Textile Council will enter into data processing agreements compliant with Article 28 of the GDPR with such third parties and will impose obligations regarding data security and confidentiality to protect the rights of Data Subjects.
6. Special Categories of Personal Data
This service does not collect special categories of personal data as defined in Articles 9 and 10 of the GDPR from users of this service.
7. Rights of Data Subjects
Under applicable privacy laws, including the GDPR, Data Subjects have the following rights. To exercise these rights, Data Subjects may contact the Data Protection Officer (DPO) designated by the Native Textile Council.
(1) Right of Access (Article 15 GDPR)
Data Subjects have the right to access personal data concerning them that is being processed by the Controller.
(2) Right to Rectification (Article 16 GDPR)
Data Subjects have the right to request the Controller to rectify inaccurate personal data concerning them.
(3) Right to Erasure (“Right to be Forgotten”) (Article 17 GDPR)
Data Subjects have the right to request the Controller to erase personal data concerning them without undue delay under certain circumstances.
(4) Right to Restriction of Processing (Article 18 GDPR)
Data Subjects have the right to request restriction of processing of personal data under certain circumstances.
(5) Right to Data Portability (Article 20 GDPR)
Data Subjects have the right to receive personal data concerning them in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance.
(6) Right to Object (Article 21 GDPR)
Data Subjects have the right to object to the processing of personal data concerning them under certain circumstances.
(7) Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR)
Data Subjects have the right to lodge a complaint with a supervisory authority established by an EU Member State regarding the processing of their personal data by the Native Textile Council.
8. Automated Decision-Making, Including Profiling (Article 22 GDPR)
The Native Textile Council does not subject Data Subjects to decisions based solely on automated processing, including profiling, as defined in Article 22 of the GDPR.