MENU

CLOSE

P R I V A C Y   P O L I C Y PRIVACY POLICY

Please select your area of residence.

  • ------

  • Thailand

  • Germany

  • Hong Kong

  • Korea

  • Taiwan

  • Macau

  • Singapore

  • the United Kingdom

  • United States of America

  • ------

  • Thailand

  • Germany

  • Hong Kong

  • Korea

  • Taiwan

  • Macau

  • Singapore

  • the United Kingdom

  • United States of America

คำแปล


นโยบายความเป็นส่วนตัวสำหรับบริการ “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” ปรับปรุงล่าสุดเมื่อวันที่ November 20th, 2021
นโยบายความเป็นส่วนตัวฉบับนี้จะอธิบายวิธีการที่เรานำมาใช้ในการเก็บรวบรวม ใช้ เปิดเผย และ/หรือ จัดเก็บข้อมูลของคุณที่เกี่ยวกับเว็บไซต์ของเรา https://2021.sao-ex-chronicle.com/s/excglb และบริการถ่ายทอดวิดีโอ (Video Streaming) ที่เรียกว่าบริการ “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) ไม่ว่าจะเป็นการเข้าถึงผ่านทางคอมพิวเตอร์ อุปกรณ์เคลื่อนที่ หรือเทคโนโลยีอื่น ๆ (รวมเรียกว่า "บริการออนไลน์") นอกจากนี้ นโยบายความเป็นส่วนตัวฉบับนี้ยังอธิบายถึงสิทธิของคุณในเรื่องการคุ้มครองข้อมูล ซึ่งรวมถึงสิทธิในการคัดค้านการประมวลผลบางส่วนที่เราดำเนินการ ข้อมูลเพิ่มเติมเกี่ยวกับสิทธิของคุณตลอดจนการใช้สิทธิของคุณปรากฎในข้อ 8 ด้านล่างนี้
ในนโยบายความเป็นส่วนตัวฉบับนี้ "พวกเรา" "เรา" และ "ของเรา" หมายถึง บริษัท Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) ("SMS") และรวมถึงนิติบุคคลภายใต้การควบคุมของ SMS (คำว่า "ควบคุม" ในบริบทนี้หมายถึง การเป็นเจ้าของ ไม่ว่าโดยตรงหรือโดยอ้อม โดยการถือครองหุ้นไม่ต่ำกว่าร้อยละห้าสิบ (50%) ของอำนาจในการออกเสียงลงคะแนนในบริษัทนั้น ๆ หรืออำนาจโดยแท้จริงที่จะควบคุมการตัดสินใจของฝ่ายบริหารในนิติบุคคลนั้น ๆ) สรุปประเด็นสำคัญ
• เราใช้ข้อมูลที่เก็บรวบรวม (ตามคำนิยามด้านล่าง) เพื่อส่งมอบคุณสมบัติและหน้าที่การทำงานต่าง ๆ ของบริการออนไลน์ให้แก่คุณ และเพื่อจัดหาเนื้อหาอื่นเกี่ยวกับบริการของเราตามคำขอ ตลอดจนข้อเสนออื่น ๆ ให้แก่คุณ หากต้องการศึกษาเพิ่มเติมเกี่ยวกับเรื่องนี้ กรุณาอ่าน "ข้อ 1 ข้อมูลที่เราเก็บรวบรวมเมื่อคุณใช้บริการออนไลน์" และ "ข้อ 2 เราใช้ข้อมูลที่เก็บรวบรวมมาอย่างไร"
• คุณมีสิทธิบางประการ รวมถึงสิทธิในการคัดค้านการประมวลผลบางส่วนที่เราดำเนินการ ทั้งนี้สิทธิต่าง ๆ จะขึ้นอยู่กับที่อยู่อาศัยของคุณ หากต้องการศึกษาเพิ่มเติมเกี่ยวกับเรื่องนี้ กรุณาอ่าน "ข้อ 8 สิทธิในความเป็นส่วนตัว"
• เรามีการเปิดเผยข้อมูลที่เก็บรวบรวมเมื่อเราว่าจ้างบุคคลภายนอกให้ประมวลผลข้อมูลในนามของเราหรือเมื่อมีความจำเป็นในการแบ่งปันข้อมูลตามข้อกำหนดของกฎหมายหรือในสถานการณ์อื่นบางประการ หากต้องการศึกษาเพิ่มเติมเกี่ยวกับเรื่องนี้ กรุณาอ่าน "ข้อ 3 ผู้อื่นที่สามารถเข้าถึงข้อมูลที่เก็บรวบรวม" • ข้อมูลที่เก็บรวบรวมอาจมีการโอนออกจากประเทศ / ภูมิภาคที่อยู่อาศัยของคุณไปยังประเทศสหรัฐอเมริกา ประเทศญี่ปุ่น และเขตอำนาจตามกฎหมายอื่นที่อาจไม่ได้มีมาตรฐานการคุ้มครองข้อมูลส่วนบุคคลในระดับเดียวกับประเทศ / ภูมิภาคที่อยู่อาศัยของคุณ ทั้งนี้ขึ้นอยู่กับว่าคุณอาศัยอยู่ที่ใด หากต้องการศึกษาเพิ่มเติมเกี่ยวกับเรื่องนี้ กรุณาอ่าน "ข้อ 5 การโอนข้อมูลที่เก็บรวบรวมข้ามประเทศและการให้ความยินยอมในการประมวลผล"
Sony may set separate terms and conditions related to the Service (including terms of use to be additionally applied to parts of the Service, operational rules to be separately notified within the Service) (the “Individual Terms,” which shall be deemed to constitute a part of these Terms except when otherwise specifically referred to), and the Customer shall also use the Service in accordance with the Individual Terms. If there is any discrepancy between these Terms and the Individual Terms or the contents of other websites, these Terms shall prevail unless otherwise specified.
1.ข้อมูลที่เราเก็บรวบรวมเมื่อคุณใช้บริการออนไลน์
เพื่อให้เป็นไปตามวัตถุประสงค์ของนโยบายความเป็นส่วนตัวฉบับนี้ "ข้อมูลส่วนบุคคล" หมายถึง ข้อมูลใดก็ตามเกี่ยวกับหรือที่มีความเกี่ยวข้องกับบุคคลผู้ถูกระบุตัวตน หรือที่สามารถระบุตัวตนได้ ซึ่งรวมถึงข้อมูลที่สามารถระบุตัวบุคคลได้เมื่อนำมารวมกับข้อมูลอื่นที่เราจัดเก็บไว้ แม้ว่าข้อมูลดังกล่าวเพียงลำพังอาจไม่สามารถระบุตัวบุคคลได้ก็ตาม ในส่วนที่เกี่ยวข้องกับการใช้บริการออนไลน์ของคุณนั้น เราจะเก็บรวบรวมและใช้ข้อมูลตามคำอธิบายด้านล่าง (รวมเรียกว่า "ข้อมูลที่เก็บรวบรวม") ซึ่งบางส่วนอาจพิจารณาได้ว่าเป็น "ข้อมูลส่วนบุคคล" ตามกฎหมายที่ใช้บังคับในพื้นที่ของคุณ
ข้อมูลที่คุณให้ไว้กับเรา
ข้อมูลในการลงทะเบียน
คุณจะต้องมีบัญชีที่ใช้งานได้สำหรับการใช้บริการออนไลน์ ซึ่งรวมถึง SAO Accounts หรือเข้าสู่ระบบด้วยบัญชีอื่นของผู้จัดจำหน่ายเนื้อหา (content distributor) ที่รองรับการยืนยันตัวตนผ่านระบบการพิสูจน์ตัวตนครั้งเดียว (single sign-on) ของบริการออนไลน์ ("บัญชีภายนอก") หากคุณไม่มีบัญชี SAO Accounts ทางเราแนะนำให้คุณสร้างบัญชีใหม่สำหรับการใช้บริการออนไลน์ เมื่อคุณสร้างและลงทะเบียนบัญชีใหม่แล้ว เราจะเก็บรวบรวมข้อมูลอ้างอิงที่เกี่ยวข้องกับคุณที่คุณให้ไว้กับเรา เช่น ชื่อและนามสกุลของคุณ ที่อยู่อีเมล ชื่อผู้ใช้ ที่อยู่ทางไปรษณีย์ หมายเลขโทรศัพท์ หรือหมายเลขโทรศัพท์เคลื่อนที่ และรหัสผ่าน ตลอดจนข้อมูลทางประชากรศาสตร์ที่คุณให้ไว้กับเรา เช่น เพศ เป็นต้น
หากคุณเข้าสู่ระบบเพื่อใช้บริการออนไลน์ด้วยบัญชีภายนอก เราจะเก็บรวบรวมข้อมูลชื่อบัญชีของคุณและโทเค็น (token) จากการยืนยันตัวตนเพื่อเข้าสู่ระบบผ่านผู้จัดจำหน่ายเนื้อหาภายนอก โปรดทราบว่าข้อมูลที่เราเก็บรวบรวมจากและผ่านผู้จัดจำหน่ายเนื้อหาอาจขึ้นอยู่กับการตั้งค่าความเป็นส่วนตัวที่คุณตั้งไว้กับผู้จัดจำหน่ายเนื้อหานั้น และการอนุญาตที่คุณให้ไว้กับเราที่เกี่ยวข้องกับการเชื่อมโยงบริการออนไลน์ ทั้งนี้ เราจะไม่แบ่งปันข้อมูลที่เก็บรวบรวมใด ๆ กับผู้จัดจำหน่ายเนื้อหา โดยข้อมูลส่วนบุคคลที่ผู้จัดจำหน่ายเนื้อหามีเกี่ยวกับคุณจะถูกเก็บรวบรวมโดยผู้จัดจำหน่ายเนื้อหาเองโดยไม่เกี่ยวข้องกับบริการของเรา และเราจะไม่รับผิดชอบสำหรับกรณีดังกล่าว
ข้อมูลการชำระเงิน
เมื่อคุณต้องการซื้อบริการถ่า แบบชำระเงิน รวมถึงเนื้อหาที่เกี่ยวข้องบนบริการออนไลน์ เราจะเก็บรวบรวมข้อมูลการชำระเงินที่คุณให้ไว้กับเรา เช่น หมายเลขบัตรที่ใช้ในการชำระเงิน รหัส CVC และวันที่หมดอายุ
เนื้อหาที่ผู้ใช้สร้างขึ้น
เมื่อคุณใช้งานส่วนห้องสนทนาในบริการ ท่า เราจะเก็บรวบรวมเนื้อหาใดก็ตามที่คุณเผยแพร่ผ่านช่องทางดังกล่าว ซึ่งรวมถึงข้อความสนทนา รูปภาพ วิดีโอ และเสียงที่คุณอาจเลือกทำการเผยแพร่ หากคุณส่งรูปภาพหรือวิดีโอให้แก่เรา ภาพหรือวิดีโอดังกล่าวอาจมีข้อมูลเชิงลึก (metadata) ที่จะสามารถระบุรายละเอียดเกี่ยวกับภาพหรือวิดีโอนั้น ๆ ซึ่งรวมถึง (แต่ไม่จำกัดเพียง) สถานที่และเวลาของการบันทึกภาพหรือวิดีโอดังกล่าว
ข้อมูลที่เรารวบรวมโดยอัตโนมัติ
นอกเหนือไปจากข้อมูลที่คุณได้ให้แก่บริการออนไลน์ด้วยตนเองแล้ว เมื่อใดก็ตามที่คุณเยี่ยมชมหรือใช้งานบริการออนไลน์ เรา ตลอดจนผู้ให้บริการวิเคราะห์ข้อมูล หรือผู้ให้บริการอื่นที่เป็นบุคคลภายนอก อาจใช้เทคโนโลยีต่าง ๆ ในการเก็บรวบรวมข้อมูลโดยอัตโนมัติ หรือรวบรวมข้อมูลในเชิงรับเกี่ยวกับวิธีการเข้าถึงและใช้งานบริการออนไลน์ ("ข้อมูลการใช้งาน") ข้อมูลการใช้งานอาจรวมถึงแต่ไม่จำกัดเพียง ข้อมูลเกี่ยวกับแอปพลิเคชันซอฟต์แวร์และอุปกรณ์ต่อพ่วง (เช่น ข้อมูลเสียงของผู้ใช้ ข้อมูลการเคลื่อนไหวของผู้ใช้ ตัวระบุเฉพาะ ประสิทธิภาพ การกำหนดค่า การใช้งาน และความถี่ของการใช้ฟังก์ชัน) ประเภทของเบราว์เซอร์ (browser type) ระบบปฏิบัติการ หน้าที่ใช้บริการ เวลาที่ใช้ในบริการออนไลน์ และหน้าเว็บไซต์ที่เยี่ยมชมก่อนหน้านี้ ข้อมูลการใช้งานจะถือเป็นข้อมูลส่วนบุคคล เมื่อเข้าลักษณะตามที่กฎหมายกำหนด
เรายังอาจเก็บรวบรวมโดยอัตโนมัติซึ่งข้อมูลหมายเลขเครื่อง (IP address) ของคุณหรือเครื่องมือระบุอุปกรณ์เฉพาะ ("เครื่องมือระบุอุปกรณ์") สำหรับคอมพิวเตอร์ อุปกรณ์เคลื่อนที่ เทคโนโลยี หรือเครื่องมืออื่น ๆ (เรียกรวมกันว่า "อุปกรณ์") ที่คุณใช้เพื่อเข้าถึงบริการออนไลน์ เครื่องมือระบุอุปกรณ์คือหมายเลขที่กำหนดขึ้นโดยอัตโนมัติให้กับอุปกรณ์ของคุณเมื่อคุณเข้าถึงพื้นที่บริการ (property) หรือเครื่องแม่ข่าย (server) โดยคอมพิวเตอร์ของเราจะสามารถระบุอุปกรณ์ของคุณได้โดยใช้เครื่องมือระบุอุปกรณ์ ทั้งนี้ ผู้ให้บริการระบบโทรศัพท์เคลื่อนที่บางรายอาจให้ข้อมูลแก่เราหรือแก่ผู้ให้บริการของเราซึ่งเป็นบุคคลภายนอกเกี่ยวกับตำแหน่งที่ตั้งของอุปกรณ์ที่ใช้ในการเข้าถึงบริการออนไลน์ด้วย เทคโนโลยีต่าง ๆ ที่ใช้ในบริการออนไลน์เพื่อเก็บรวบรวมข้อมูลการใช้งาน ซึ่งรวมถึงเครื่องมือระบุอุปกรณ์ด้วยนั้นประกอบไปด้วยเทคโนโลยีดังต่อไปนี้
• คุกกี้: "คุกกี้" (ซึ่งอาจอยู่ในรูปไฟล์ HTML ไฟล์แฟลช หรือเทคโนโลยีอื่น ๆ) คือไฟล์ข้อความขนาดเล็กที่ช่วยจัดเก็บข้อมูลกิจกรรมและความชอบของผู้ใช้งาน โดยเมื่อมีการเข้าถึงหรือใช้งานบริการออนไลน์ผ่านอุปกรณ์ใดก็จะมีการติดตั้งคุกกี้ลงบนอุปกรณ์นั้น คุกกี้อาจนำมาใช้เพื่อวัตถุประสงค์ต่าง ๆ เช่น จดจำคุณและความชอบของคุณ ติดตามการเยี่ยมชมบริการออนไลน์ของคุณ และปรับแต่งประสบการณ์ของคุณในบริการออนไลน์ คุณอาจตั้งค่าเบราว์เซอร์ (browser) หรือตั้งค่าอุปกรณ์เพื่อห้ามการใช้งานคุกกี้บางส่วนได้ อย่างไรก็ตาม โปรดทราบว่า หากคุณเลือกปิดการใช้งานคุกกี้บนอุปกรณ์ของคุณ คุณสมบัติการใช้งานบางประการในบริการออนไลน์หรือข้อเสนอออนไลน์ของเราอาจไม่สามารถทำงานได้อย่างเต็มที่
• เว็บบีคอน (Web Beacon): "เว็บบีคอน" (หรือที่รู้จักกันในชื่อเรียกว่า image tags, pixel tags, clear GIFS หรือ web bugs) เป็นชิ้นรหัสเล็กๆที่ใช้ในการเก็บรวบรวมข้อมูลการโฆษณา เช่น จำนวนการเข้าชมหน้าเว็บไซต์ การเข้าชมการส่งเสริมการขาย หรือการตอบโต้กับการโฆษณา โดยอาจมีการใช้เว็บบีคอนหรือเทคโนโลยีที่คล้ายกันเพื่อวัตถุประสงค์ต่าง ๆ รวมถึงแต่ไม่จำกัดเพียงนับจำนวนผู้เยี่ยมชมบริการออนไลน์ สังเกตการณ์วิธีที่ผู้ใช้สำรวจบริการออนไลน์ นับจำนวนอีเมลที่ถูกส่งและมีการเปิดอ่าน หรือพิจารณาว่าเนื้อหาที่ส่งไปมีการเข้าชมจริงหรือไม่
• การฝังสคริปต์: สคริปต์ที่ฝัง (Embedded Script) คือรหัสสำหรับสร้างโปรแกรมที่ถูกออกแบบขึ้นเพื่อเก็บรวบรวมข้อมูลเกี่ยวกับการใช้งานของคุณกับบริการออนไลน์ เช่น ลิงก์ที่คุณคลิก โดยจะมีการดาวน์โหลดรหัสจากเครื่องแม่ข่ายของเรา หรือเครื่องแม่ข่ายของผู้ให้บริการที่เป็นบุคคลภายนอกลงในอุปกรณ์ของคุณเป็นการชั่วคราว โดยสคริปต์จะทำงานก็ต่อเมื่อคุณมีการเชื่อมต่อเข้ากับบริการออนไลน์ และหลังจากนั้นจะถูกปิดการใช้งานหรือถูกลบทิ้ง
โปรดทราบว่า บุคคลภายนอกอาจเก็บรวบรวมข้อมูลส่วนบุคคลเกี่ยวกับกิจกรรมออนไลน์ของคุณในเวลาต่าง ๆ และจากเว็บไซต์ต่าง ๆ เมื่อคุณเยี่ยมชมหรือใช้บริการออนไลน์ ตลอดจนเว็บไซต์และบริการออนไลน์อื่น ๆ ตัวอย่างเช่น เนื้อหาหรือปลั๊กอินของบุคคลภายนอกที่ฝังไว้ในบริการออนไลน์ เช่น เครื่องมือแบ่งปัน (Share) ผ่านสื่อสังคมออนไลน์ ซึ่งทำให้ผู้ดูแลทราบได้ว่า คุณได้มาเยือนหรือใช้งานบริการออนไลน์ และอาจนำข้อมูลดังกล่าวรวมเข้ากับข้อมูลอื่นที่สามารถระบุตัวตนได้ที่เก็บรวบรวมเกี่ยวกับการที่คุณเยี่ยมชมเว็บไซต์หรือบริการออนไลน์อื่นๆ บุคคลภายนอกเหล่านี้อาจจัดการข้อมูลดังกล่าวหรือข้อมูลอื่นที่เก็บรวบรวมโดยตรงผ่านเนื้อหาและปลั๊กอินของตนตามนโยบายความเป็นส่วนตัวของบุคคลภายนอกนั้น ๆ การติดตามออนไลน์ (Online Tracking) เว็บไซต์เบราว์เซอร์ (website browser) บางแห่งอาจมีการใช้งานคุณสมบัติ "ห้ามติดตาม" (Do Not Track) ที่จะส่งสัญญาณไปยังเว็บไซต์ที่คุณเข้าเยี่ยมชมว่าคุณไม่ต้องการให้มีการติดตามกิจกรรมออนไลน์ของคุณ โดยเบราว์เซอร์ (website)ต่าง ๆ มีวิธีการส่งสัญญาณ "ห้ามติดตาม" ที่แตกต่างกัน ด้วยเหตุนี้บริการออนไลน์จึงจะไม่ตอบรับสัญญาณดังกล่าว ยกเว้นในกรณีที่กฎหมายกำหนด
บริการแสดงโฆษณาและประเมินการจราจรทางคอมพิวเตอร์ที่เราอาจใช้
เราอนุญาตให้มีการใช้เทคโนโลยีเพื่อแสดงโฆษณาในบริการออนไลน์ ในวิดีโอ และเนื้อหาอื่น ๆ โดยมีการเผยแพร่เนื้อหาดังกล่าวทางอินเทอร์เน็ต นอกจากนี้ เรายังอาจให้ผู้โฆษณาในเครือข่ายซึ่งเป็นบุคคลภายนอกแสดงโฆษณาในบริการออนไลน์ และให้ผู้ให้บริการวิเคราะห์ข้อมูลทำการประเมิน (เช่น Google Analytics) และส่งมอบข้อมูลที่เกี่ยวข้องกับการใช้บริการออนไลน์และการเข้าชมเนื้อหาของเรา โดยเราจะไม่แบ่งปันข้อมูลที่คุณให้ไว้แก่เรา เช่นชื่อ และ/หรือ ที่อยู่อีเมล์ ให้แก่บุคคลภายนอกดังกล่าว อย่างไรก็ตาม ผู้ให้บริการในเครือข่ายโฆษณา ผู้โฆษณา ผู้สนับสนุน และ/หรือ ผู้ให้บริการวิเคราะห์ข้อมูลอาจติดตั้งและเข้าถึงคุกกี้ เว็บบีคอน และสคริปต์ของตนที่ฝังไว้ในอุปกรณ์ของคุณผ่านช่องทางบริการออนไลน์ได้ โดยคุกกี้ เว็บบีคอน และสคริปต์ที่ฝังไว้อาจทำการเก็บรวบรวมข้อมูลส่วนบุคคลหรือข้อมูลอื่นเกี่ยวกับการใช้บริการออนไลน์ของคุณในช่วงเวลาต่าง ๆ เว็บไซต์หรือแอปพลิเคชันอื่นของบุคคลภายนอก หรืออาจเก็บรวบรวมหรือเข้าถึงข้อมูลเกี่ยวกับคุณ ซึ่งรวมถึงข้อมูลการใช้งาน โดยคุกกี้และเว็บบีคอน ซึ่งรวมถึงคุกกี้และเว็บบีคอนที่ติดตั้งโดยผู้โฆษณาในเครือข่ายซึ่งเป็นบุคคลภายนอก อาจมีการนำมาใช้ เช่น เพื่อแสดงโฆษณาแบบระบุเป้าหมาย เพื่อไม่ให้คุณเห็นโฆษณาแบบเดียวกันซ้ำกันหลายครั้ง หรือเพื่อทำการศึกษาประโยชน์ที่คุณได้รับจากโฆษณาบางรายการ หากต้องการปิดการใช้คุกกี้ คุณสามารถดำเนินการดังนี้
คุณสามารถเลือกไม่รับโฆษณาตามความสนใจของคุณผ่านทางเว็บไซต์ที่เปิดผ่านอุปกรณ์เคลื่อนที่หรือคอมพิวเตอร์ได้โดยเข้าไปที่พันธมิตรโฆษณาดิจิทัล (Digital Advertising Alliance หรือ DAA) ในสหรัฐอเมริกาทาง http://youradchoices.com หรือ โครงการริเริ่มโฆษณาช่องทางเครือข่าย (Network Advertising Initiative หรือ NAI) ในสหรัฐอเมริกาทาง https://www.networkadvertising.org หากคุณใช้แอปพลิเคชันในอุปกรณ์เคลื่อนที่ คุณสามารถปรับปรุงการตั้งค่าผ่านอุปกรณ์ของคุณให้เป็นปัจจุบันได้ อย่างไรก็ตาม หากคุณเลือกปิดการใช้งานคุกกี้แล้วคุณยังอาจได้รับโฆษณา แต่เครือข่ายที่คุณปิดรับการโฆษณาไปแล้วจะไม่สามารถแสดงโฆษณาตามความสนใจเฉพาะของคุณได้อีกต่อไป หากต้องการปิดการใช้กูเกิล แอนะลิติกส์ (Google Analytics) ซึ่งใช้เพื่อศึกษาวิธีการที่ผู้เยี่ยมชมใช้งานบริการออนไลน์นั้น คุณสามารถเข้าไปได้ที่ https://tools.google.com/dlpage/gaoptout
โปรดตรวจสอบการตั้งค่าอินเทอร์เน็ตเบราว์เซอร์ (internet browser) โดยเฉพาะอย่างยิ่งในหัวข้อ "ช่วยเหลือ" (Help) หรือ "ตัวเลือกอินเทอร์เน็ต" (Internet Options) เพื่อบริหารการใช้งานคุกกี้บางรายการที่ไม่ได้อยู่ใน DAA หรือ NAI
สำหรับคำแนะนำในการตั้งค่าเบราว์เซอร์ (browser) เพื่อปฏิเสธการใช้งานคุกกี้ที่ติดตั้งโดยบริษัทที่ไม่ได้อยู่ใน DAA หรือ NAI กรุณาคลิกที่นี่หรือไปยังเว็บไซต์ https://www.allaboutcookies.org/manage-cookies คุณยังสามารถลบคุกกี้ทั้งหมดที่บันทึกในฮาร์ดไดรฟ์ในคอมพิวเตอร์ของคุณได้ โดยค้นหาและลบไฟล์ที่มี "คุกกี้" อยู่ การปิดการใช้งานด้วยวิธีการอื่น: คุณอาจตั้งค่าเบราว์เซอร์ (browser) หรือตั้งค่าอุปกรณ์เพื่อห้ามการใช้งานคุกกี้บางรายการได้ ทั้งนี้ โปรดทราบว่า เมื่อปิดการใช้งานคุกกี้บางรายการแล้วคุณอาจประสบปัญหาในการใช้คุณสมบัติบางรายการในบริการออนไลน์ได้ แอปพลิเคชันสื่อสังคมออนไลน์
ในการทำงานของบริการออนไลน์อาจอนุญาตให้มีการสื่อสารระหว่างบริการออนไลน์กับพื้นที่บริการของบุคคลภายนอก เช่น เฟซบุ๊กและทวิตเตอร์ เพื่อช่วยให้คุณสามารถ "ชอบ" (Like) ผลิตภัณฑ์หรือเนื้อหาออนไลน์ หรือ "แบ่งปัน" (Share) เนื้อหาไปยังพื้นที่บริการอื่นได้ รวมถึงการเชื่อมโยงบริการออนไลน์เข้ากับพื้นที่บริการของบุคคลภายนอกรายอื่น หากคุณ "ชอบ" หรือ "แบ่งปัน" เนื้อหา หรือเผยแพร่ข้อมูลจากบริการออนไลน์ หรือผ่านช่องทางบริการออนไลน์ ไปยังพื้นที่บริการของบุคคลภายนอกนั้น ข้อมูลดังกล่าวอาจกลายเป็นข้อมูลสาธารณะ และพื้นที่บริการของบุคคลภายนอกนั้นอาจเข้าถึงข้อมูลเกี่ยวกับคุณและการใช้บริการออนไลน์ของคุณได้
นอกจากนี้คุณยังสามารถเลือกที่จะเข้าร่วมกับแอปพลิเคชันของบุคคลภายนอก หรือคุณสมบัติ (Feature) ของบุคคลภายนอกได้ (เช่น แอปพลิเคชันเฟซบุ๊ก หรือแอปพลิเคชันหรือคุณสมบัติที่คล้ายกันในพื้นที่บริการของบุคคลภายนอก หรือเชื่อมโยงบริการออนไลน์เข้ากับพื้นที่บริการอื่น) ในกรณีเช่นนี้ถือว่าคุณอนุญาตให้เราเก็บรวบรวม (หรือให้บุคคลภายนอกแบ่งปัน) ข้อมูลเกี่ยวกับคุณ อันรวมถึงข้อมูลส่วนบุคคลด้วย เมื่อคุณเลือกที่จะเข้าร่วมเช่นนั้นแล้ว คุณอาจเลือกเชื่อมโยงกิจกรรมของคุณทางบริการออนไลน์เข้ากับพื้นที่บริการของบุคคลภายนอกนั้นได้ ซึ่งพื้นที่บริการดังกล่าวอาจเก็บรวบรวมข้อมูลเกี่ยวกับการเยี่ยมชมบริการออนไลน์ของคุณ และอาจเผยแพร่กิจกรรมตามคำขอของคุณไว้ใน "ประวัติ" (Profile) ของคุณหรือคุณสมบัติอื่นที่คล้ายกันของบุคคลภายนอกนั้น (เช่น ในกรณีที่คุณเลือกแบ่งปันเนื้อหาที่คุณพบในบริการออนไลน์รายการใดรายการหนึ่งผ่าน "เครือข่าย" (Connection) ในพื้นที่บริการของบุคคลภายนอกดังกล่าว) โดยข้อมูลที่เราเก็บรวบรวมจะเป็นไปตามนโยบายความเป็นส่วนตัวฉบับนี้ อย่างไรก็ตาม ข้อมูลที่บุคคลภายนอกเก็บรวบรวมและจัดเก็บจะยังคงเป็นไปตามแนวทางปฏิบัติว่าด้วยความเป็นส่วนตัวของบุคคลภายนอกนั้น ไม่ว่าบุคคลภายนอกดังกล่าวจะแบ่งปันข้อมูลให้แก่เราหรือบุคคลภายนอกอื่นด้วยหรือไม่ก็ตาม รวมถึงประเภทของข้อมูลที่แบ่งปัน และสิทธิของคุณที่จะเลือกแสดงข้อมูลใดให้ปรากฏต่อผู้อื่นในพื้นที่บริการของบุคคลภายนอกนั้นได้ ทั้งนี้บุคคลภายนอกดังกล่าวอาจอนุญาตให้คุณลบแอปพลิเคชันหรือคุณสมบัติได้ ซึ่งจะทำให้เราไม่สามารถเก็บรวบรวมข้อมูลเกี่ยวกับคุณผ่านแอปพลิเคชันหรือคุณสมบัตินั้นได้อีกต่อไป แต่เราอาจเก็บรักษาข้อมูลที่เก็บรวบรวมไว้ก่อนหน้านั้นตามนโยบายความเป็นส่วนตัวฉบับนี้
เนื้อหาของบุคคลภายนอก การเชื่อมโยงไปยังพื้นที่บริการและบริการอื่น และเนื้อหาของเราในเว็บไซต์อื่น เนื้อหาบางอย่างในบริการออนไลน์อาจจัดแสดงและได้รับการดูแลจากบุคคลภายนอก รวมถึงเครื่องมือ (Widget) ของบุคคลภายนอก (เช่น เครื่องมือที่อนุญาตให้คุณ "ชอบ" หรือ "แบ่งปัน" เนื้อหาร่วมกับเว็บไซต์ของบุคคลภายนอกและบริการในรูปแบบอินเทอร์แอคทีฟอื่น ๆ หรือเพื่อให้คุณให้คะแนนและแสดงความคิดเห็น) นอกจากนี้เมื่อคุณใช้บริการออนไลน์ คุณอาจถูกนำไปยังเว็บไซต์อื่นที่อยู่ภายใต้ความควบคุมและดำเนินการของบุคคลภายนอก ซึ่งอยู่นอกเหนือความควบคุมของเรา รวมถึงลิงก์จากผู้โฆษณา ผู้สนับสนุน และพันธมิตร ที่อาจใช้ตราสัญลักษณ์ของเราซึ่งเป็นส่วนหนึ่งของสัญญาการพัฒนาแบรนด์ร่วมกัน นอกจากนี้ยังอาจมีเนื้อหาและเครื่องมือของเราปรากฏในหน้าเว็บและเว็บไซต์ต่าง ๆ ที่ไม่เกี่ยวกับเราและเราไม่สามารถควบคุมได้ ซึ่งเว็บไซต์เหล่านี้อาจส่งคุกกี้ของตนเข้าไปยังอุปกรณ์ของคุณ และเก็บรวบรวมหรือขอข้อมูลส่วนบุคคลด้วยตนเอง ทั้งนี้ เราจะไม่รับผิดชอบต่อแนวทางปฏิบัติว่าด้วยความเป็นส่วนตัวของบุคคลภายนอกในทุกกรณี
2. เราใช้ข้อมูลที่เก็บรวบรวมมาอย่างไร
โดยทั่วไปแล้วเราจะใช้ข้อมูลที่เก็บรวบรวมเพื่อเข้าทำหรือปฏิบัติตามสัญญาร่วมกับคุณ (ฐานสัญญา) เพื่อการปฏิบัติหน้าที่ตามกฎหมาย (การปฏิบัติตามกฎหมาย) เพื่อประโยชน์โดยชอบด้วยกฎหมายของเราและบุคคลภายนอก โดยมีการรักษาสมดุลกับสิทธิประโยชน์ของคุณและสิทธิและเสรีภาพขั้นพื้นฐานที่เกี่ยวข้องกับการคุ้มครองข้อมูลที่เก็บรวบรวม (ประโยชน์โดยชอบด้วยกฎหมาย) และเพื่อป้องกันหรือยับยั้งอันตรายต่อชีวิต ร่างกาย หรือสุขภาพ (ประโยชน์ที่สำคัญ) ยกเว้นในบางกรณีที่เราจะใช้ข้อมูลที่เก็บรวบรวมมาบนพื้นฐานของความยินยอมของคุณ นอกจากนี้ เรายังใช้ข้อมูลที่เก็บรวบรวมเพื่อวัตถุประสงค์ดังนี้
• การสร้างบัญชี: เรานำข้อมูลอ้างอิงที่เกี่ยวข้องกับคุณมาใช้สร้างบัญชีที่จะนำมาใช้ในการลงชื่อเข้าใช้บริการออนไลน์และบริการอื่นที่เกี่ยวข้อง
• การให้บริการ: เรานำข้อมูลที่เก็บรวบรวมมาใช้ในการดำเนินงาน บำรุงรักษา ปรับปรุง และส่งมอบคุณสมบัติและการทำงานของบริการออนไลน์ ซึ่งรวมถึงการประมวลผลการลงทะเบียน คำสั่งซื้อ และการชำระเงินของคุณ และให้บริการถ่ายทอดวิดีโอแก่คุณ
• การสื่อสาร: เราใช้ข้อมูลที่เก็บรวบรวมมาเพื่อสื่อสารกับคุณเกี่ยวกับบริการออนไลน์ เพื่อวัตถุประสงค์ในการบริหารจัดการและเป็นข้อมูล ตัวอย่างของการสื่อสารดังกล่าวประกอบไปด้วยการตอบคำถาม หรือคำขอของคุณ การสื่อสารเกี่ยวกับการช่วยเหลือลูกค้า และการแก้ไขเพิ่มเติมข้อกำหนดและเงื่อนไข หรือนโยบายใดๆของเรา
• ประสบการณ์ของผู้ใช้: เรานำข้อมูลที่เก็บรวบรวมมาเพื่อใช้สร้างประสบการณ์เฉพาะให้แก่คุณในการใช้บริการออนไลน์ โดยจะนำเสนอข้อมูลผลิตภัณฑ์ เนื้อหา และบริการเฉพาะสำหรับคุณ ตลอดจนคำแนะนำ โฆษณา การส่งเสริมการขาย หรือข้อเสนอต่าง ๆ ที่อาจตรงกับความสนใจของคุณ
• การพัฒนาและปรับปรุงบริการ: เรานำข้อมูลที่เก็บรวบรวมมาใช้เพื่อเพิ่มประสิทธิภาพ และปรับปรุงบริการของเรา รวมถึงบริการออนไลน์ด้วย ตลอดจนนำมาใช้ในการพัฒนาผลิตภัณฑ์ เนื้อหา การบริการ คุณสมบัติ และการทำงานใหม่ ๆ โดยการวิเคราะห์และทำความเข้าใจแนวโน้มการใช้งานและความชอบของผู้ใช้งานของเรา
• การปฏิบัติตามกฎหมาย: เรานำข้อมูลที่เก็บรวบรวมมาใช้เพื่อปฏิบัติตามนโยบายภายในองค์กร ปฏิบัติตามสัญญากับผู้มีส่วนได้ส่วนเสีย กฎหมายและระเบียบที่ใช้บังคับ คำสั่งศาล คำร้องขอของรัฐบาลและหน่วยงานบังคับใช้กฎหมาย นอกจากนี้เรายังใช้ข้อมูลที่เก็บรวบรวมในการบังคับใช้หรือปกป้องสิทธิตามกฎหมาย หรือข้อกำหนดและเงื่อนไขในบริการใดก็ตามของเรา หรือเพื่อรักษาและจัดเก็บข้อมูลส่วนบุคคลตามข้อกำหนดว่าด้วยการจัดเก็บข้อมูลตามกฎหมาย การตรวจสอบการกำกับดูแล และเพื่อวัตถุประสงค์อื่นในการเก็บบันทึกข้อมูล (รวมถึงการปฏิบัติตามข้อกำหนดว่าด้วยการตรวจสอบทั้งภายในและภายนอกองค์กร)
• การตรวจสอบและป้องกันการฉ้อโกง: เราจะนำข้อมูลที่เก็บรวบรวมมาใช้ในการปฏิบัติหน้าที่ในเรื่องการติดตาม ป้องกัน ตรวจจับ และตรวจสอบ ตลอดจนกฎหมายเกี่ยวกับการระบุและรายงานกิจกรรมผิดกฎหมาย ซึ่งรวมถึงหน้าที่ในการรายงานทางการเงิน หน้าที่รายงานเหตุฉ้อโกงและการต่อต้านการฟอกเงิน
• ความปลอดภัย: เราจะนำข้อมูลที่เก็บรวบรวมมาใช้เพื่อดำรงไว้ซึ่งความถูกต้องและปลอดภัยของเว็บไซต์ เนื้อหา และบริการของเรา และเพื่อป้องกันและตรวจจับภัยคุกคามความปลอดภัย การฉ้อโกง หรือกิจกรรมอื่นที่ประสงค์ร้ายหรือเป็นความผิดทางอาญาที่อาจกระทบต่ออุปกรณ์ของคุณ
• อื่น ๆ: นำไปใช้ด้วยวิธีการอื่นโดยได้รับการยินยอมจากคุณ หรือได้รับอนุญาตตามกฎหมายที่ใช้บังคับ
คุณรับทราบความจำเป็นในการให้ข้อมูลแก่เราตามวัตถุประสงค์ที่ให้ไว้ในนโยบายความเป็นส่วนตัวนี้ เพื่อการปฏิบัติตามสัญญา และ/หรือ การปฏิบัติหน้าที่ตามกฎหมาย โดยหากเราไม่สามารถเก็บรวบรวม ใช้ เปิดเผย และ/หรือ จัดเก็บข้อมูลที่เก็บรวบรวมตามคำอธิบายในนโยบายความเป็นส่วนตัวฉบับนี้ เราอาจไม่สามารถปฏิบัติหน้าที่ตามสัญญา และ/หรือ ปฏิบัติหน้าที่ตามกฎหมายที่ใช้บังคับได้
3.ผู้อื่นที่สามารถเข้าถึงข้อมูลที่เก็บรวบรวม
เราจะจัดเตรียมข้อมูลที่เก็บรวบรวมไว้ให้แก่บุคคลภายนอกดังนี้ ผู้ให้บริการซึ่งเป็นบุคคลภายนอก
นอกจากนี้ เรายังอาจว่าจ้างผู้ให้บริการองค์กรที่เป็นบุคคลภายนอกทำการประมวลผลข้อมูลที่เก็บรวบรวมเพื่อวัตถุประสงค์ในการดำเนินกิจกรรมตามที่ระบุไว้ในนโยบายความเป็นส่วนตัวฉบับนี้ โดยกระทำการในฐานะเป็นผู้ประมวลผลข้อมูลส่วนบุคคล การโอนกิจการ
ในกรณีที่เราจำหน่ายหรือโอนกิจการของเรา ไม่ว่าจะส่วนใดส่วนหนึ่งหรือทั้งหมด เราอาจโอนข้อมูลที่เก็บรวบรวมไว้ไปยังผู้ซื้อหรือผู้รับโอนกิจการโดยถือเป็นส่วนหนึ่งของธุรกรรม โดยก่อนทำธุรกรรม เราจะตรวจสอบให้แน่ใจว่าข้อมูลที่เก็บรวบรวมถูกรักษาไว้เป็นความลับ และหลังการทำธุรกรรมเราจะลบข้อมูลที่เก็บรวบรวมไว้ทันทีที่สามารถทำได้อย่างสมเหตุสมผล การบังคับใช้และปฏิบัติตามกฎหมาย
เราจะเก็บรักษา ใช้ และ/หรือ เปิดเผยข้อมูลที่เก็บรวบรวมตามกำหนดหรือที่ได้รับอนุญาตตามกฎหมาย ระเบียบ หรือคำสั่ง รวมถึงเปิดเผยต่อตำรวจหรือหน่วยงานอื่นที่เหมาะสม ทั้งนี้เพื่อตรวจสอบข้อร้องเรียนที่คุณมีขึ้นหรือข้อร้องเรียนที่มีต่อคุณ หรือเพื่อคุ้มครองและปกป้องเราหรือผู้อื่นจากกิจกรรมใดก็ตามที่ผิดกฎหมาย เป็นความผิดทางอาญา หรือเป็นอันตราย
4. การเก็บรักษาข้อมูลและการจัดการข้อมูลที่เก็บรวบรวม
เราจะยังคงเก็บรักษาข้อมูลที่เก็บรวบรวมเป็นระยะเวลา 60 เดือน หลังจากที่คุณลบบัญชีของคุณแล้ว เว้นแต่กฎหมายท้องถิ่นจะกำหนดให้เราต้องเก็บรักษาข้อมูลไว้เป็นระยะเวลานานกว่านั้น โปรดทราบว่าเราอาจจำเป็นต้องเก็บรักษาข้อมูลบางส่วนตามที่กฎหมายกำหนด หากเราไม่จำเป็นต้องใช้ข้อมูลที่เก็บรวบรวมไว้อีกต่อไป ข้อมูลดังกล่าวจะถูกทำลายหรือทำให้ไม่สามารถระบุตัวตนได้ตามนโยบายของเรา โดยการทำให้ไม่สามารถระบุตัวตนได้นั้น หมายถึง การที่เราลบข้อมูลที่สามารถใช้ระบุตัวตนของคุณได้ออกจากข้อมูลที่เก็บรวบรวมไว้
5.การโอนข้อมูลข้ามประเทศและการให้ความยินยอมในการประมวลผล
ข้อมูลที่เก็บรวบรวมจะมีการประมวลผล จัดเก็บ และโอนออกจากประเทศที่คุณอาศัยอยู่ไปยังประเทศอื่นอันรวมถึงสหรัฐอเมริกาและประเทศญี่ปุ่นตามวัตถุประสงค์ที่ระบุในนโยบายความเป็นส่วนตัวนี้ ข้อมูลที่เก็บรวบรวมจะได้รับการประมวลผลโดยพนักงานที่ปฏิบัติหน้าที่นอกประเทศที่คุณอาศัยอยู่ และเป็นผู้ที่ปฏิบัติงานให้แก่เราหรือผู้ให้บริการรายใดรายหนึ่งของเรา ทำให้ข้อมูลที่เก็บรวบรวมอาจปรากฏต่อพนักงานดังกล่าวในประเทศที่กล่าวมาได้
ในการเปิดใช้บริการออนไลน์หรือให้ข้อมูลใดก็ตามแก่เรา ถือว่าคุณเข้าใจและรับทราบโดยสมบูรณ์ถึงการโอน การประมวลผล และการจัดเก็บข้อมูลของคุณในประเทศสหรัฐอเมริกาและเขตอำนาจตามกฎหมายอื่น ๆ ซึ่งอาจไม่มีกฎหมายว่าด้วยการคุ้มครองข้อมูลส่วนบุคคลที่ครบถ้วนหรือมีมาตรฐานเดียวกันกับมาตรฐานการคุ้มครองข้อมูลส่วนบุคคลของประเทศที่คุณอาศัย และ/หรือ เป็นพลเมือง
การใช้มาตรการดังกล่าวอาจส่งผลกระทบต่อสิทธิของคุณในเขตอำนาจตามกฎหมายท้องถิ่นของคุณและเขตอำนาจตามกฎหมายที่ใช้บังคับในต่างประเทศที่เกี่ยวข้อง ซึ่งเขตอำนาจตามกฎหมายในต่างประเทศดังกล่าวอาจจำเป็นต้องเปิดเผยข้อมูลส่วนบุคคลของคุณให้แก่บุคคลภายนอกที่เป็นหน่วยงานที่มีอำนาจในต่างประเทศ
6.ความปลอดภัย
เราดำเนินมาตรการความปลอดภัยที่เหมาะสมตามสมควร ซึ่งกำหนดขึ้นเพื่อป้องกันการสูญหาย การเข้าถึง การปรับเปลี่ยน การเปิดเผย การใช้งาน และการแก้ไขเพิ่มเติมข้อมูลที่เก็บรวบรวมโดยมิชอบด้วยกฎหมายหรือมิได้รับอนุญาต ตลอดจนรักษาความลับ ความถูกต้องครบถ้วน และความพร้อมใช้งานของข้อมูลที่เก็บรวบรวม เราดำเนินมาตรการรักษาความปลอดภัยของข้อมูลอย่างเคร่งครัด แต่ไม่อาจรับรองหรือรับประกันความปลอดภัยโดยสมบูรณ์ให้แก่ข้อมูลที่จัดเก็บไว้ในระบบของเราหรือระบบของคู่สัญญาที่เป็นบุคคลภายนอกของเราได้

7.ความเป็นส่วนตัวของผู้เยาว์
เรามุ่งมั่นที่จะปฏิบัติตามกฎหมายและระเบียบที่เกี่ยวข้องทุกประการที่ใช้บังคับในเรื่องการเก็บรวบรวม การจัดเก็บ และการใช้ข้อมูลส่วนบุคคลเกี่ยวกับผู้เยาว์ อันรวมถึงกฎหมายคุ้มครองความเป็นส่วนตัวออนไลน์ของผู้เยาว์ (Children's Online Privacy Protection Act) ในประเทศสหรัฐอเมริกาและกฎหมายท้องถิ่นที่ใช้บังคับในประเทศอื่น บริการออนไลน์นี้มีเจตนาเพื่อบุคคลทั่วไป โดยมิได้มุ่งหมายและไม่ทราบโดยเจตนาว่ามีการเก็บรวบรวมข้อมูลส่วนบุคคลจากผู้เยาว์ที่อายุต่ำกว่า 16 ปี (อายุของผู้เยาว์อาจแตกต่างกันตามประเทศ / ภูมิภาคที่คุณอยู่อาศัย) หากคุณเป็นพ่อแม่หรือผู้ปกครอง และกังวลว่าบุตรหลานของคุณอาจให้ข้อมูลส่วนบุคคลแก่เราโดยไม่ได้รับการยินยอมจากคุณ คุณสามารถติดต่อเราได้ตามรายละเอียดในข้อ 10 ด้านล่าง
8.สิทธิในความเป็นส่วนตัว
ในบางประเทศ คุณมีสิทธิบางประการเกี่ยวกับข้อมูลส่วนบุคคลเกี่ยวกับคุณที่อยู่ในความครอบครองของเรา ซึ่งอาจรวมถึงสิทธิในการขอสำเนาข้อมูลที่เก็บรวบรวมเกี่ยวกับคุณที่อยู่ในความครอบครองของเราหรือบริษัทในเครือของเรา และ/หรือ คุณอาจขอให้เราทำสำเนา แก้ไขให้ถูกต้อง แก้ไขเพิ่มเติม ลบ ทำลาย คัดค้าน หรือห้าม (Block) / จำกัดการประมวลผล และ/หรือ การใช้ข้อมูลที่เก็บรวบรวมดังกล่าวหากข้อมูลนั้นไม่ถูกต้องหรือในกรณีที่เข้าเงื่อนไขอื่นใด โดยในบางประเทศ คุณอาจขอให้เราจัดเตรียมข้อมูลบางประเภทให้แก่คุณในรูปแบบที่เป็นระเบียบและสามารถอ่านได้ด้วยเครื่อง (machine-readable) และขอให้เราแบ่งปัน (เคลื่อนย้าย) ข้อมูลดังกล่าวให้แก่ผู้ควบคุมข้อมูลรายอื่นได้ ในกรณีที่เราอาศัยความยินยอมของคุณในการเก็บรวบรวม ใช้ และเปิดเผยข้อมูลที่เก็บรวบรวม คุณมีสิทธิในการเพิกถอนความยินยอมได้ตลอดเวลา อย่างไรก็ตาม สิทธิต่างๆดังกล่าวยังคงมีข้อจำกัดในการใช้ เช่น ในกรณีที่การปฏิบัติตามคำขอของคุณจะทำให้ต้องเปิดเผยข้อมูลส่วนบุคคลเกี่ยวกับบุคคลอื่น หรือในกรณีที่คุณขอให้เราลบข้อมูลที่กฎหมายกำหนดให้เราต้องเก็บรักษาไว้ หรือข้อมูลที่เรามีประโยชน์โดยชอบด้วยกฎหมายในการเก็บรักษาไว้ หากคุณต้องการใช้สิทธิใดๆก็ตามดังกล่าว กรุณาติดต่อเราตามรายละเอียดในข้อ 10 ด้านล่าง ทั้งนี้ หากคุณไม่พึงพอใจกับวิธีการที่เราจัดการคำถามหรือข้อกังวลของคุณ หรือหากคุณมีข้อร้องเรียนเกี่ยวกับวิธีการประมวลผลข้อมูลส่วนบุคคลของเราแล้วนั้น คุณมีสิทธิร้องเรียนต่อหน่วยงานที่กำกับดูแลด้านการคุ้มครองข้อมูลในพื้นที่ได้
9.การแก้ไขเพิ่มเติม
เราอาจปรับปรุงนโยบายความเป็นส่วนตัวนี้เป็นระยะ โดยเราจะแจ้งให้คุณทราบผ่านบัญชีของคุณหากมีการแก้ไขเพิ่มเติมสำคัญใดๆในนโยบายความเป็นส่วนตัวนี้ และหากกรณีที่กฎหมายที่ใช้บังคับกำหนดให้เราต้องได้รับความยินยอมจากคุณ เราจะดำเนินการขอความยินยอมจากคุณก่อน
10.ข้อมูลสำหรับติดต่อ
หากคุณมีข้อสงสัย คำร้อง หรือคำถามเกี่ยวกับความเป็นส่วนตัวใดๆ กรุณาติดต่อเราได้ตามรายละเอียดดังนี้

คุณสามารถติดต่อเรา และเจ้าหน้าที่คุ้มครองข้อมูลส่วนบุคคลของเราได้ตามรายละเอียดดังนี้:
ชื่อ: Sony Music Solutions Inc.
ที่อยู่: Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
อีเมล: https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and service called as “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.
In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
Sony may set separate terms and conditions related to the Service (including terms of use to be additionally applied to parts of the Service, operational rules to be separately notified within the Service) (the “Individual Terms,” which shall be deemed to constitute a part of these Terms except when otherwise specifically referred to), and the Customer shall also use the Service in accordance with the Individual Terms. If there is any discrepancy between these Terms and the Individual Terms or the contents of other websites, these Terms shall prevail unless otherwise specified.
SUMMARY OF KEY POINTS
・We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.
・Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8. Privacy Rights” to learn more about this.
・We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.
・Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that content distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that content distributor. The Personal Information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:
Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain Cookies. However, please note that if you choose to disable Cookies on your Device, some features of the Online Service and our online offerings may not function properly.
Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.
Please note that third parties may collect Personal Information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.

Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect Personal Information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com) or the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit:
https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or NAI, click here or go to
https://www.allaboutcookies.org/manage-cookies/. You can also delete all Cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.

Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including Personal Information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.

Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
Except in limited instances where we would use the Collected Data based on your consent, we generally use the Collected Data to initiate or fulfil a contract with you (contractual basis); to comply with legal obligations (legal compliance); to pursue the legitimate interest of ourselves and third parties, by balancing with your own interest and fundamental rights and freedoms in relation to the protection of the Collected Data (legitimate interest); and to prevent or suppress a danger to a person’s life, body or health (vital interest). We will also use the Collected Data for the following purpose:
・Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;
・Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;
・Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.
・User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;
・Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;
・Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your Personal Information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).
・Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
・Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.
・Other: In any other way, with your consent or permitted under applicable law.
You acknowledge the necessity to provide us with the Collected Data for purposes as described in this Privacy Policy, for contract performance and/or for compliance with legal obligations. If we are not able to carry out the collection, use, disclosure and/or storage of Collected Data described in this Privacy Policy, we may not be able to perform our obligations under the contract and/or comply with the applicable legal obligations.
3. Who else has access to the Collected Data?
Third-party service providers
In addition, we may use our third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy, acting as data processors.

Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.

Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5. International Transfer of the Collected Data and Consent for Processing
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions.

By activating the Online Service or providing us with any information, you fully understand and acknowledge this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive or the standard of personal data protection may not be on the same level with the standard of personal data protection as those in the country/region where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, as an overseas authority.

6. Security
We undertake reasonable and appropriate security measures designed to protect against the unlawful or unauthorized loss, access to, modification, disclosure, use or alteration of the Collected Data, and to maintain the confidentiality, integrity, and availability of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 16. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with Personal Information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
In some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate or where other condition could apply. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. Where we rely on your consent for the collection, use and disclosure of Collected Data, you are entitled to request for a withdrawal of consent at any time. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.
9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

You can find contact details of us and our Data Protection Officer (DPO) below:
Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

I. ZUSAMMENGEFASSTE DATENSCHUTZERKLÄRUNG


Diese Zusammenfassende Datenschutzerklärung („ZUSAMMENFASSUNG“) erläutert, wie wir, Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) („SMS“) und alle juristischen Personen unter der Kontrolle (der Begriff „Kontrolle“ bedeutet in diesem Kontext das unmittelbare oder mittelbare Halten von mindestens fünfzig Prozent (50 %) der Stimmrechtsanteile an diesem Unternehmen oder die Befugnis, die unternehmerischen Entscheidungen dieser juristischen Person zu kontrollieren) von SMS („Wir“, „Uns“ und „Unser(e)“) Informationen oder Daten jedweder Art über Sie bzw. im Zusammenhang mit Ihnen (z. B. Ihren Namen, Ihre E-Mail-Adresse, Anschrift usw.) erheben, nutzen, offenlegen bzw. speichern, auch wenn eine unmittelbare Identifizierung Ihrer Person mit diesen Informationen alleine nicht möglich ist, sie jedoch in Kombination mit anderen von Uns im Zusammenhang mit Unserer Website [https://2021.sao-ex-chronicle.com/s/excglb] und Unseren dienst gespeicherten Informationen („Personenbezogene Daten“) genutzt werden können, gleich ob der Zugriff auf diese über einen Computer, ein mobiles Endgerät oder eine andere Technologie erfolgt (zusammen die „Online-Dienste“). Sie beschreibt ferner Ihre Datenschutzrechte, einschließlich Ihres Widerspruchsrechts in Bezug auf einige Unserer Verarbeitungstätigkeiten. Weitere Informationen zu Ihren Rechten und deren Ausübung entnehmen Sie bitte der nachstehenden Ausführlichen Datenschutzerklärung.
1.Geltungsbereich
Diese Zusammenfassung und die Ausführliche Datenschutzerklärung (zusammen die „Datenschutzerklärung“) gelten für Sie, wenn Sie die Online-Dienste nutzen.
2. Verarbeitung Ihrer Personenbezogenen Daten
Wir erheben und nutzen die folgenden Personenbezogenen Daten im Zusammenhang mit Ihrer Nutzung der Online-Dienste:

a. Informationen, die Sie Uns zur Verfügung stellen, wie Registrierungs- und Zahlungsinformationen, z. B. Ihre E-Mail-Adresse, Ihren Nutzernamen oder die Zahlungskartennummer sowie die von Ihnen bei der Nutzung der Chat-Funktion des Online-Dienste generierten Inhalte, einschließlich Chat-Nachrichten, Fotos oder anderer Inhalte, die Sie dort posten.

b. Informationen, die Wir Automatisch erheben (ggf. vorbehaltlich Ihrer Einwilligung), wie z. B. Ihre IP-Adresse oder andere Identifikationsmerkmale des Geräts, mit dem Sie auf die Online-Dienste zugreifen, Technologien, wie z. B. Cookies oder Web Beacons.

c. Informationen, die Wir von Dritten erhalten, z. B. von Dienstleistern, die in Unserem Auftrag tätig sind und Uns ggf. Informationen zur Verfügung stellen, die zur Prüfung Ihrer Transaktion erforderlich sind, sollten Sie Ihre Kreditkarte als Zahlungsmittel wählen. Darüber hinaus erhalten Wir ggf. Informationen darüber, wie Sie die Online-Dienste oder externen Websites nutzen, von externen Analysedienstleistern, Werbenetzwerkbetreibern oder Social-Media-Anwendungen, die Wir nutzen und die ggf. bestimmte Personenbezogene Daten über Sie nach Maßgabe ihrer Datenschutzerklärungen bzw. Nutzungsbedingungen verarbeiten
3.Verarbeitungszwecke
Wir verarbeiten und nutzen Ihre Personenbezogenen Daten in Bezug auf Ihre Nutzung der Online-Dienste (zusammen die „Erhobenen Daten“), um Ihnen Features und Funktionen der Online-Dienste sowie sonstige gewünschte Inhalte im Zusammenhang mit Unseren Dienstleistungen und anderen Angeboten zur Verfügung zu stellen.

4. Rechtsgrundlagen für die Verarbeitung der Erhobenen Daten
Eine der zentralen Anforderungen im Datenschutzrecht besteht darin, dass jede Verarbeitung Personenbezogener Daten eine Rechtsgrundlage haben muss. Wir nutzen grundsätzlich folgende Rechtsgrundlagen: Die Verarbeitung ist erforderlich für (i) die Erfüllung eines Vertrages (Art. 6 Abs. 1 lit. b) DS-GVO, (ii) die Erfüllung einer rechtlichen Verpflichtung (Art. 6 Abs. 1 lit. c) DS-GVO, (iii) die Wahrung eines berechtigten Interesses (Art. 6 Abs. 1 lit. f) DS-GVO); darüber hinaus stützen Wir Uns (iv) auf Ihre vorherige Einwilligung, sofern Sie diese erteilt haben (Art. 6 Abs. 1 lit. a) DS-GVO).
5.Datenübermittlungen und Empfänger einschließlich Internationale Datenübermittlung
Im Einklang mit den anwendbaren gesetzlichen Bestimmungen übermitteln Wir Ihre Personenbezogenen Daten an Unsere Dienstleister, Dritte (z. B. externe Dienstleister, Geschäftspartner) und ggf. Behörden, Gerichte, externe Berater und ähnliche Dritte. Einige der vorstehend genannten Empfänger sind in Ländern außerhalb der Europäischen Union / des Europäischen Wirtschaftsraums (zusammen die „EU“) ansässig, wie z. B. in den USA, in Japan und/oder in anderen Ländern, die nicht dasselbe Datenschutzniveau wie Ihr Heimatland aufweisen.
6.Aufbewahrungsfristen für und Löschung von Erhobene(n) Daten
Erhobene Daten werden grundsätzlich gelöscht, sobald sie nicht mehr für die Zwecke benötigt werden, die ihrer ursprünglichen Erhebung zugrunde lagen, oder nach Maßgabe der anwendbaren gesetzlichen Bestimmungen.
7.Ihre gesetzlichen Rechte
Ihnen stehen in Bezug auf die Verarbeitung Ihrer Personenbezogenen Daten bestimmte Rechte zu, die sich jeweils aus den anwendbaren gesetzlichen Bestimmungen ergeben, wie z. B. das Recht auf Auskunft über Ihre Daten sowie das Recht auf deren Berichtigung, Löschung oder Herausgabe. Bitte richten Sie Ihre Fragen an https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry
8.Änderungen dieser Datenschutzerklärung
Wir werden ggf. gelegentlich Aktualisierungen dieser Datenschutzerklärung vornehmen. Wir werden Sie über Ihr Nutzerkonto informieren, sollte es zu wesentlichen Änderungen an dieser Datenschutzerklärung kommen.
9.Kontaktinformationen und wie Sie Uns kontaktieren können
Bei Fragen zu dieser Datenschutzerklärung kontaktieren Sie bitte Unseren Vertreter in der EU gemäß Art. 27 Abs. 1 DS-GVO:

Name: Sony Europe BV
Adresse: Taurusavenue 16, 2132LS Hoofddorp, the Netherlands
E-Mail: [email protected]

Wenn Sie Ihre Rechte als betroffene Person ausüben möchten, Bedenken im Zusammenhang mit Datenschutz haben, eine Beschwerde vorbringen möchten oder sonstige Fragen zu Unserer Verarbeitung Personenbezogener Daten haben, kontaktieren Sie bitte Unseren Datenschutzbeauftragten per Post oder E-Mail:
Name: Tadahiko Shida
Adresse: Midtown Tower, 9-7-1, Akasaka, Minato-ku, Tokyo, 107-6214 Japan
E-Mail: https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

II. AUSFÜHRLICHE DATENSCHUTZERKLÄRUNG


1.Verarbeitung Ihrer Personenbezogenen Daten
Wir verarbeiten die folgenden Personenbezogenen Daten im Zusammenhang mit Ihrer Nutzung der Online-Dienste:
a.Personenbezogene Daten, die Sie Uns zur Verfügung stellen:
(1) Angaben bei der Anmeldung:
Um die Online-Dienste nutzen zu können benötigen Sie eines unserer zugelassenen Konten, einschließlich SAO-Konten, oder müssen sich mit einem anderen Konto („Externes Konto“) eines externen Content-Vertreibers („Content-Vertreiber“) anmelden, das die Authentifizierung durch einmaliges Anmelden bei der Plattform unseres Dienstleisters unterstützt. Sollten Sie nicht über SAO-Konten verfügen, müssen Sie ein neues Konto für die Online-Dienste einrichten. Wenn Sie ein neues Konto einrichten, erheben Wir Ihre persönlichen Daten, die Sie Uns zur Verfügung stellen, wie z. B. Ihren Vor- und Nachnamen, Ihre E-Mail-Adresse, Ihren Nutzernamen, Ihre Postleitzahl, Ihre Postanschrift, Ihre Festnetz- oder Mobilfunknummer und Ihr Passwort, sowie Ihre demografischen Informationen, die Sie Uns bereitstellen, z. B. Ihr Geschlecht.

Wenn Sie sich für die Online-Dienste mit dem Externen Konto anmelden, erhalten wir vom Content-Vertreiber im Allgemeinen nur den Namen Ihres Kontos und die Token als Ergebnis der Anmeldeauthentifizierung.

(2) Angaben zur Zahlung:
Wenn Sie Unseren kostenpflichtigen Dienst und damit zusammenhängende Inhalte im Rahmen Unserer Online-Dienste erwerben möchten, erheben Wir Ihre Angaben zur Zahlung, die Sie Uns zur Verfügung stellen, z. B. die Zahlungskartennummer, den CVC-Code und das Ablaufdatum.

(3) Von Nutzern erstellte Inhalte:
Wenn Sie die Chat-Funktion des Online-Dienste nutzen, erheben Wir sämtliche Inhalte, die Sie dort posten, einschließlich Chat-Nachrichten, Fotos, Video- und Audioinhalte, die Sie ggf. posten. Wenn Sie Uns Fotos oder Videos zur Verfügung stellen, enthalten diese Aufnahmen ggf. Metadaten, die Informationen über diese Aufnahmen preisgeben können, insbesondere über Ort und Zeitpunkt der Aufnahme.

b.Personenbezogene Daten, die Wir durch technische Mittel erheben:
Immer wenn Sie die Online-Dienste besuchen oder damit interagieren, nutzen sowohl Wir als auch externe Analysedienstleister oder sonstige Dienstleister zusätzlich zu den Informationen, die Sie den Online-Diensten zur Verfügung stellen, ggf. auch eine Reihe von Technologien, die automatisch oder passiv Informationen dazu erheben, wie auf die Online-Dienste zugegriffen wird und wie diese genutzt werden, insbesondere die Informationen über Softwareanwendungen und Peripheriegeräte (z. B. Benutzer-Sprachdaten, Benutzer-Bewegungsdaten, eindeutige Kennungen, Leistung, Konfigurationen, Nutzung und Häufigkeit der Nutzung der Funktionen), den Browser-Typ, das Betriebssystem, die aufgerufene Seite, die Nutzungsdauer der Online-Dienste und die vorangegangenen Seitenaufrufe; diese Informationen könnten als Personenbezogene Daten angesehen werden („Nutzungsdaten“). Wir erheben darüber hinaus ggf. Ihre IP-Adresse oder sonstige einmalige Identifikationsmerkmale („Geräte-Identifikationsmerkmale“) für den Computer, das mobile Endgerät, die Technologie oder sonstige Geräte (zusammen die „Geräte“), mit denen Sie auf die Online-Dienste zugreifen. Bei einem Geräte-Identifikationsmerkmal handelt es sich um eine Nummer, die Ihrem Gerät automatisch zugewiesen wird, wenn Sie auf Web-Präsenzen oder deren Server zugreifen, und Unsere Computer erkennen Ihr Gerät anhand seines Geräte-Identifikationsmerkmals. Einige Mobilfunkanbieter stellen Uns oder Unseren externen Dienstleistern ggf. Informationen in Bezug auf den physischen Standort des Geräts zur Verfügung, mit dem auf die Online-Dienste zugegriffen wird. Die Technologien, die bei den Online-Diensten zur Erhebung von Nutzungsdaten, einschließlich Geräte-Identifikationsmerkmale, eingesetzt werden, umfassen:

• Cookies, wie html-Dateien, Flash-Dateien oder sonstige Technologie, sind kleine Textdateien, die dabei helfen, Nutzerpräferenzen und Aktivitäten zu speichern („Cookies“). Ein Cookie wird auf einem Gerät platziert, das für den Zugriff auf die oder den Besuch der Online-Dienste genutzt wird. Cookies können für viele Zwecke genutzt werden, z. B. zur Wiedererkennung von Ihnen und Ihren Präferenzen, zum Tracking Ihrer Besuche der Online-Dienste und zur individuellen Anpassung Ihres Nutzerlebnisses der Online-Dienste. Sie können Ihren Browser oder Ihr Gerät so einstellen, dass die Nutzung bestimmter Cookies abgelehnt wird. Bitte beachten Sie jedoch, dass einige Features der Online-Dienste und Unsere Online-Angebote ggf. nicht mehr einwandfrei funktionieren, wenn Sie Cookies auf Ihrem Gerät deaktivieren.

• Web-Beacons, auch bekannt als Image Tags, Pixel Tags, Clear GIFS oder Web Bugs, sind kleine Codestücke, die zur Erhebung von Werbedaten, z. B. zum Zählen von Seitenaufrufen, Werbeaufrufen oder Reaktionen auf Werbung, genutzt werden („Web-Beacons“). Web-Beacons oder ähnliche Technologien können für zahlreiche Zwecke genutzt werden, insbesondere zur Zählung von Besuchern der Online-Dienste, zur Erfassung, wie der Nutzer durch die Online-Dienste navigiert, zur Zählung, wie viele gesendete E-Mails tatsächlich geöffnet wurden, oder zur Feststellung, ob gesendete Inhalte tatsächlich angesehen wurden.

• Embedded Scripts: Ein Embedded Script ist ein Programmierungscode, mit dem Informationen über Ihre Interaktionen mit den Online-Diensten (z.B. die Links, die Sie anklicken) erhoben werden. Der Code wird vorübergehend von Unserem Server oder einem externen Dienstleister auf Ihr Gerät heruntergeladen, und ist nur aktiv, solange Sie mit den Online-Diensten verbunden sind, und wird danach deaktiviert oder gelöscht.

• Dienste zur Bereitstellung von Werbung (Ad Serving Services) und Messung des Internetverkehrs Wir nutzen Technologien, die Werbeanzeigen über die Online-Dienste und innerhalb deren Videos und anderen Inhalte bereitstellen, so wie diese Inhalte im Internet bereitgestellt werden. Darüber hinaus greifen wir ggf. auf externe Netzwerk-Werbetreibende zurück, um Werbeanzeigen über die Online-Dienste bereitzustellen, und auf externe Analysedienstleister (z. B. Google Analytics), welche die Nutzung der Online-Dienste und den Aufruf Unserer Inhalte auswerten und Uns diese Informationen zur Verfügung zu stellen. Wir geben Informationen, die Sie Uns zur Verfügung stellen, z. B. Ihren Namen und/oder Ihre E-Mail-Adresse, nicht an diese Dritten weiter. Es ist jedoch möglich, dass die Werbenetzwerkbetreiber, Werbetreibenden, die Sponsoren und/oder Analysedienstleister ihre eigenen Cookies, Web-Beacons und Embedded Scripts im Rahmen der Online-Dienste auf Ihrem Gerät platzieren und darauf zugreifen. Diese Cookies, Web-Beacons und Embedded Scripts erheben ggf. im Laufe der Zeit personenbezogene Informationen oder sonstige Informationen über Ihre Nutzung der Online-Dienste und anderer Websites oder Anwendungen Dritter, und erheben ggf. auch anderweitig Informationen über Sie oder haben ggf. Zugriff auf diese Informationen, einschließlich Nutzungsdaten. Cookies und Web-Beacons, einschließlich solcher, die von externen Netzwerk-Werbetreibenden platziert werden, können unter anderem genutzt werden, um Werbeanzeigen gezielt anzuzeigen, um zu verhindern, dass Sie dieselben Werbeanzeigen zu häufig angezeigt bekommen oder Recherchen darüber anzustellen, wie sinnvoll bestimmte Werbeanzeigen für Sie sind.

Bitte beachten Sie, dass Dritte ggf. im Laufe der Zeit und auf verschiedenen Websites personenbezogene Informationen über Ihre Online-Aktivitäten erheben, wenn Sie die Online-Dienste oder andere Websites und Dienste online besuchen oder nutzen. Zum Beispiel können Dritte, die in die Online-Dienste eingebettete Inhalte oder Plug-ins, wie beispielsweise Tools zum Teilen von Inhalten auf sozialen Medien (social media sharing tools), einsetzen, die Information erhalten, dass Sie die Online-Dienste besucht oder genutzt haben, und sie können diese Information ggf. mit anderen identifizierbaren Angaben, die sie über Ihre Besuche anderer Websites oder Online-Dienste erhoben haben, kombinieren. Diese Dritten verarbeiten diese und weitere Informationen, die sie unmittelbar durch ihre Inhalte und Plug-ins erhoben haben, ggf. im Einklang mit ihren eigenen Datenschutzrichtlinien. Online Tracking. Einige Web-Browser verfügen über eine „Do Not Track“-Funktion, die den von Ihnen besuchten Websites signalisiert, dass Sie nicht möchten, dass Ihre Online-Aktivitäten verfolgt werden. Bislang ist die Art und Weise der Übertragung des Do-Not-Track-Signals durch die Browser noch nicht einheitlich geregelt. Aus diesem Grund reagieren die Online-Dienste nur auf diese Signale, soweit dies gesetzlich vorgeschrieben ist.

c.Personenbezogene Daten, die Wir von Dritten erhalten
(1) Dienstleister, die in Unserem Auftrag handeln:
Wir erhalten ggf. Personenbezogene Daten über Sie von Dienstleistern, die in Unserem Auftrag handeln. Wenn Sie zum Beispiel Ihre Kreditkarte als Zahlungsmittel wählen, erhalten Wir ggf. Personenbezogene Daten von Unserem Zahlungsdienstleister, um die Transaktion im Rahmen Unserer Maßnahmen zur Betrugsabwehr zu validieren. Wir nutzen diesen externen Zahlungsdienst darüber hinaus zur Erhebung und Speicherung Ihrer Personenbezogenen Daten, um Unsere Pflichten in Bezug auf die Finanzberichterstattung erfüllen zu können. Ggf. erlangen Wir diese Personenbezogenen Daten, um Unsere Steuererklärungspflichten zu erfüllen. Sollten Sie darüber hinaus eine andere Web-Präsenz nutzen und Ihr Einverständnis erklären, Informationen von Uns zu erhalten, leitet diese Web-Präsenz ggf. Ihre E-Mail-Adresse und andere Personenbezogene Daten an Uns weiter, so dass Wir Sie wie gewünscht kontaktieren können. Wir ergänzen die Erhobenen Daten ggf. um Aufzeichnungen Dritter, um Unsere Leistung Ihnen gegenüber zu verbessern, Unsere Inhalte auf Sie abzustimmen und Ihnen Produkte, Inhalte und Dienste zum Kauf anzubieten, von denen Wir meinen, dass Sie von Interesse für Sie sein könnten. Wir kombinieren die von diesen Dritten erhaltenen Personenbezogenen Daten ggf. mit den Erhobenen Daten. Soweit Wir keine gegenteilige Erklärung abgegeben haben, findet in diesen Fällen die vorliegende Datenschutzerklärung auf sämtliche erhaltenen Personenbezogenen Daten Anwendung.

(2) Social-Media-Anwendungen, die Uns Personenbezogene Daten zur Verfügung stellen:
Eine Funktionalität der Online-Dienste erlaubt ggf. Interaktionen der Online-Dienste mit Web-Inhalten Dritter, wie z. B. Facebook und Twitter. Diese Funktionalität ermöglicht es Ihnen, ein Produkt oder Online-Inhalte zu „liken“, Inhalte mit anderen Web-Präsenzen Dritter zu „teilen“ und die Online-Dienste mit Web-Präsenzen Dritter anderweitig zu verknüpfen. Wenn Sie Inhalte „liken“ oder „teilen“ oder Informationen anderweitig von den oder über die Online-Dienste(n) an Web-Präsenzen Dritter posten, werden diese Informationen ggf. öffentlich und die Dritten haben ggf. Zugriff auf Ihre Personenbezogenen Daten und Informationen über Ihre Nutzung der Online-Dienste. Sie können sich darüber hinaus entscheiden, Anwendungen oder Funktionen Dritter (wie z. B. Facebook-Anwendungen oder eine ähnliche Anwendung oder Funktion auf einer externen Web-Präsenz, oder durch anderweitige Verknüpfung der Online-Dienste mit einer anderen Web-Präsenz) zu nutzen, wodurch Sie Uns (bzw. dem Dritten) gestatten, Ihre Personenbezogenen Daten zu erheben (bzw. weiterzugeben). Sollten Sie sich zur vorstehend beschriebenen Nutzung entscheiden, erklären Sie sich damit einverstanden, dass Ihre Aktivitäten im Rahmen der Online-Dienste ggf. mit der Web-Präsenz dieses Dritten verknüpft werden, der wiederum ggf. Informationen über Ihre Besuche der Online-Dienste erhebt und diese Aktivitäten je nach Einstellungen in Ihrem „Profil“ oder in einer ähnlichen Funktion bei diesem Dritten veröffentlicht (z. B. wenn Sie sich dafür entscheiden, Inhalte, die Sie bei einem der Online-Dienste finden, mit Ihren „Kontakten“ bei der Web-Präsenz dieses Dritten zu teilen). Die von Uns erhobenen Personenbezogenen Daten unterliegen dieser Datenschutzerklärung. Die von dem Drittanbieter erhobenen und gespeicherten Daten unterliegen jedoch weiterhin den Datenschutzpraktiken des Dritten, einschließlich der Entscheidung, ob der Dritte Informationen weiterhin mit Uns oder anderen Dritten teilt, der Art der geteilten Informationen und Ihrer Wahlmöglichkeiten bezüglich der Einstellungen, was auf der Web-Präsenz des Dritten für andere sichtbar sein soll. Der Dritte gestattet es Ihnen ggf., eine Anwendung oder Funktion zu entfernen. In diesem Fall werden Wir nicht länger über diese Anwendung oder Funktion Personenbezogenen Daten über Sie erheben, die zuvor erhobenen Personenbezogenen Daten jedoch im Einklang mit dieser Datenschutzerklärung ggf. aufbewahren.
2.Verarbeitungszwecke
Wir nutzen die Erhobenen Daten für die folgenden Zwecke:
a.Kontoeinrichtung:
Wir nutzen Ihre persönlichen Daten zur Einrichtung Ihres Kontos, das für die Anmeldung zu den Online-Diensten und anderen zugehörigen Diensten genutzt werden kann;
b.Erbringung der Dienste:
Wir nutzen die Erhobenen Daten zur Betreibung, Unterhaltung, Verbesserung und Bereitstellung der Leistungsmerkmale und Funktionen der Online-Dienste, insbesondere auch für die Bearbeitung Ihrer Registrierung, Ihrer Bestellungen und Zahlungen sowie die Bereitstellung des Videostreaming-Dienstes an Sie;
c.Mitteilungen:
Wir nutzen die Erhobenen Daten zu Verwaltungs- und Informationszwecken für Mitteilungen an Sie im Rahmen der Online-Dienste. Beispiele dieser Mitteilungen umfassen die Bearbeitung Ihrer Anfragen oder Ersuchen, kundendienstbezogene Mitteilungen und Änderungen Unserer Bedingungen oder Richtlinien.
d.Marketing:
Wir nutzen die Erhobenen Daten, um Ihnen per E-Mail oder durch andere elektronische Mitteilungen Informationen über unsere Produkte, Inhalte, Dienstleistungen oder andere Werbeaktionen usw. zuzusenden.
e.Nutzererlebnis:
Wir nutzen die Erhobenen Daten zur Personalisierung Ihres Erlebnisses der Online-Dienste, indem Wir Ihnen maßgeschneiderte Informationen zu Produkten, Inhalten und Diensten sowie Empfehlungen, Werbung, Werbeaktionen oder Angebote zukommen lassen, die für Sie ggf. von Interesse sind;
f.Verbesserung und Entwicklung der Dienste:
Wir nutzen die Erhobenen Daten zur Optimierung und Verbesserung Unserer Dienste, einschließlich der Online-Dienste, und für die Entwicklung neuer Produkte, Inhalte, Dienste, Leistungsmerkmale und Funktionen anhand der Analyse und Erfassung der Nutzungstrends und Vorlieben Unserer Nutzer;
g.Einhaltung der gesetzlichen Bestimmungen:
Wir nutzen die Erhobenen Daten zur Sicherstellung der Einhaltung Unserer internen Richtlinien, der Vereinbarungen mit Unseren Stakeholdern, der anwendbaren gesetzlichen Bestimmungen und Vorschriften, gerichtlicher Anordnungen, sowie um Anfragen von Regierungs- und Strafverfolgungsbehörden nachzukommen. Wir nutzen die Erhobenen Daten auch zur Durchsetzung oder Verteidigung Unserer Rechte oder der Bedingungen eines Unserer Dienste, oder zur Aufbewahrung und Speicherung Ihrer personenbezogenen Informationen, um gesetzliche Aufbewahrungsfristen, aufsichtsrechtliche Prüfungen und andere Aufzeichnungszwecke (einschließlich der Einhaltung interner und externer Prüfungsanforderungen) einzuhalten bzw. zu erfüllen.
h.Betrugsprävention und -untersuchung:
Wir nutzen die Erhobenen Daten zur Erfüllung von Pflichten im Hinblick auf die Überwachung, Verhinderung, Entdeckung und Untersuchung sowie zur Erfüllung gesetzlicher Vorschriften im Zusammenhang mit der Ermittlung und Meldung verbotener und rechtswidriger Aktivitäten, einschließlich Betrug und Bekämpfung von Geldwäsche, sowie von Finanzberichterstattungspflichten.
i.Sicherheit:
Wir nutzen die Erhobenen Daten zur Aufrechterhaltung der Integrität und Sicherheit Unserer Websites, Inhalte und Dienste und zur Verhinderung und Entdeckung von Sicherheitsbedrohungen, Betrug oder anderer krimineller oder böswilliger Handlungen, die Ihre Geräte gefährden könnten.
j.Sonstige Zwecke:
Mit Ihrer Einwilligung oder soweit nach anwendbarem Recht zulässig auch in anderer Weise.
3.Rechtsgrundlagen für die Verarbeitung Ihrer Personenbezogenen Daten
Für die Zwecke dieser Datenschutzerklärung umfasst „EU“ das Vereinigte Königreich selbst nach dem Austritt des Vereinigten Königreichs aus dem EWR infolge des Brexits und, falls zutreffend, die Schweiz. Wir stützen uns bei der Verarbeitung der Erhobenen Daten auf folgende Rechtsgrundlagen:
a.Erfüllung eines Vertrages, Art. 6 Abs. 1 lit. b) DS-GVO:
zur Bereitstellung der Online-Dienste an Sie. Beispielsweise nutzen Wir Ihre Kontoinformationen zur Überprüfung Ihrer Identität, Bereitstellung Ihres Zugriffs auf die Online-Dienste, Kommunikation mit Ihnen im Hinblick auf Ihre Nutzung der Online-Dienste oder Benachrichtigung über wichtige Änderungen der Online-Dienste. Diese Nutzung ist für die Erfüllung des zwischen Ihnen und Uns bestehenden Vertrages erforderlich.
b.Berechtigtes Interesse, Art. 6 Abs. 1 lit. f) DS-GVO:
Wir oder Dritte haben ein berechtigtes Interesse an der Nutzung der Erhobenen Daten. Insbesondere haben wir an der Nutzung der Erhobenen Daten ein berechtigtes Interesse zur Verbesserung und Entwicklung Unserer Produkte, Inhalte und Dienste, zur Personalisierung Ihres Erlebnisses der Online-Dienste und Bereitstellung von maßgeschneiderten Informationen zu Produkten, Inhalten und Diensten, und zur Verbesserung des Schutzes, der Sicherheit und Leistung der Online-Dienste. Bei der Verarbeitung der Erhobenen Daten in Unserem berechtigten Interesse stellen Wir sicher, dass Wir die möglichen Auswirkungen auf Sie sowie Ihre Interessen, Rechte und Freiheit nach den anwendbaren gesetzlichen Bestimmungen berücksichtigen und abwägen. Wir werden die Erhobenen Daten nicht für Verarbeitungen nutzen, bei denen die Auswirkungen auf Sie gegenüber Unseren Interessen überwiegen, es sei denn, Wir haben Ihre Einwilligung zu Unserer Verarbeitung oder diese Verarbeitung ist anderweitig gesetzlich erforderlich. Sie haben das Recht, einer Verarbeitung auf der Grundlage Unserer berechtigten Interessen gemäß Darlegung in nachstehender Ziffer 6 zu widersprechen.
c.Rechtliche Verpflichtung, Art. 6 Abs. 1 lit. c) DS-GVO:
Wir haben nach dem Recht der EU und/oder eines Mitgliedstaats die rechtliche Verpflichtung zur Nutzung der Erhobenen Daten, wie etwa die Verpflichtung zur Überwachung, Verhinderung, Entdeckung und Untersuchung verbotener und rechtswidriger Aktivitäten, einschließlich Betrug und Bekämpfung von Geldwäsche, sowie die Verpflichtung zur Finanzberichterstattung.
d.Einwilligung, Art. 6 Abs. 1 lit. a) DS-GVO:
Wenn Sie uns Ihre vorherige Einwilligung erteilt haben, können Wir Ihnen Informationen per E-Mail oder durch andere elektronische Mitteilungen zu Unseren Produkten, Inhalten und Diensten oder anderen Werbeaktionen usw. übermitteln. Wenn Unsere Verarbeitung auf Ihrer Einwilligung beruht, können Sie Ihre Einwilligung jederzeit gemäß nachstehender Ziffer 8 widerrufen. Wenn Sie Uns beispielsweise Ihre Einwilligung zur Platzierung von Cookies und Nutzung ähnlicher Technologien erteilen, können Sie diese Funktionen gemäß den Anweisungen in unserer Mitteilung abwählen.
In der nachstehenden Tabelle sind die für den jeweiligen Zweck verarbeiteten Personenbezogenen Daten und die geltenden Rechtsgrundlagen zusammengestellt.

Verarbeitungszwecke Betroffene Erhobene Daten Rechtsgrundlage
Kontoeinrichtung Angaben bei der Anmeldung (Einwilligung, E-Mail, Name, Passwort, Land/Region des Wohnsitzes) Einwilligung
Erbringung der Dienste Kaufhistorie, Angaben zur Zahlung, Von Nutzern erstellte Inhalte Einwilligung
Mitteilungen Name, E-Mail Einwilligung
Marketing Angaben bei der Anmeldung, Nutzungshistorie der Dienste, Kaufhistorie Einwilligung
Nutzererlebnis n/a Einwilligung
Verbesserung und Verbesserung und Entwicklung der Dienste Cookies Einwilligung
Einhaltung der gesetzlichen Bestimmungen Angaben bei der Anmeldung, Nutzungsdaten, IP-Adresse, andere Geräte-Identifikationsmerkmale Rechtliche Verpflichtung
Betrugsprävention und -untersuchung Angaben zur Zahlung Rechtliche Verpflichtung
Sicherheit n/a Einwilligung
Sonstige Zwecke n/a Einwilligung
4.Datenübermittlungen und Empfänger sowie Rechtsgrundlagen für derartige Übermittlungen
Wir stellen die Erhobenen Daten Dritten wie folgt zur Verfügung:
a.(Externe) Dienstleister
Zur Verarbeitung der Erhobenen Daten können Wir auf Dienstleister zurückgreifen, hierbei kann es sich um interne (d. h. Teil von SMS) oder externe (Dritte) Dienstleister handeln. In jedem Fall werden die Dienstleister zu dem Zweck beauftragt, die in dieser Datenschutzerklärung beschriebenen Tätigkeiten durchzuführen. Einige der Dienstleister handeln in unserem Auftrag als Auftragsverarbeiter gemäß Art. 28 DS-GVO. Wir können jedoch im Einklang mit DS-GVO auch an andere externe Dienstleister, die als unabhängige Verantwortliche handeln (z. B. Anwälte, Wirtschaftsprüfer, Abschlussprüfer etc.) Daten übermitteln.
b.Betriebsübergang
Für den Fall, dass Wir Unseren Betrieb ganz oder teilweise verkaufen oder übertragen, können Wir Erhobene Daten im Rahmen der Transaktion an die erwerbende oder übernehmende Partei übermitteln. Wir werden weiterhin die Vertraulichkeit der Erhobenen Daten vor und nach Durchführung einer solchen Transaktion sicherstellen. Wir werden die Erhobenen Daten schnellstmöglich im Anschluss an eine solche Transaktion löschen. Soweit wir Erhobene Daten zu diesen Zwecken übermitteln, geschieht die Übermittlung auf der Grundlage von DS-GVO.
c.Einhaltung und Durchsetzung
Für Zwecke der Untersuchung von Ihnen oder gegen Sie vorgebrachter Beschwerden oder um Uns oder andere vor illegalen, kriminellen oder schädlichen Handlungen zu schützen oder dagegen zu verteidigen, werden Wir Ihre Daten in dem nach den anwendbaren gesetzlichen Bestimmungen, Vorschriften bzw. Verordnungen erforderlichen oder erlaubten Rahmen speichern, nutzen und/oder offenlegen, insbesondere auch gegenüber der Polizei und sonstigen zuständigen Behörden. Soweit Wir Erhobene Daten zu diesen Zwecken übermitteln, geschieht die Übermittlung auf der Grundlage von DS-GVO.
5.Internationale Übermittlung der Erhobenen Daten
Die Erhobenen Daten werden verarbeitet, gespeichert und für die in dieser Datenschutzerklärung beschriebenen Zwecke von Ihrem Wohnsitzland in verschiedene andere Länder außerhalb Ihres Wohnsitzlandes, einschließlich Japan und der USA, übermittelt. Die Erhobenen Daten werden von Mitarbeitern außerhalb Ihres Wohnsitzlandes, die für Uns oder einen Unserer Dienstleister tätig sind, verarbeitet und können solchen Mitarbeitern gegenüber in diesen Ländern offengelegt werden. Wir ergreifen geeignete Maßnahmen, um sicherzustellen, dass alle Übermittlungen von Erhobenen Daten aus der EU in Länder außerhalb der EU die Anforderungen der anwendbaren EU-Datenschutzbestimmungen erfüllen, und dass geeignete technische und organisatorische Sicherheitsmaßnahmen getroffen werden, um die Personenbezogenen Daten gegen versehentliche oder rechtswidrige Zerstörung, versehentlichen Verlust oder versehentliche Änderung, unbefugte Offenlegung oder unbefugten Zugriff und gegen alle anderen rechtswidrigen Arten der Verarbeitung zu schützen. Bei Übermittlung von Informationen außerhalb der EU, und falls dies an einen Stakeholder oder Dienstleister in einem Land erfolgt, das nicht einem Angemessenheitsbeschluss durch die EU-Kommission unterliegt (d. h. ein Land, das nicht dasselbe Datenschutzniveau bietet wie Ihr Wohnsitzland), werden die Daten durch die von der EU-Kommission genehmigten Standardvertragsklauseln (die vorstehend in I. 9. aufgeführten Kontaktdaten erhältlich sind) oder die für den Verarbeiter verbindlichen internen Datenschutzvorschriften eines Lieferanten angemessen geschützt. Die Weiterübermittlung unterliegt den entsprechenden Anforderungen an Weiterübermittlungen nach Maßgabe anwendbaren Rechts. Dennoch kann sie sich auf Ihre Rechte als betroffene Person in Ihrer lokalen Rechtsordnung und auch in der (den) jeweiligen ausländischen Rechtsordnung(en) auswirken. Diese ausländischen Rechtsordnungen müssen Ihre personenbezogenen Informationen ggf. auch Dritten gegenüber offenlegen, z. B. gegenüber einer ausländischen Behörde. Bei Fragen oder Anliegen im Hinblick auf Unsere Vereinbarungen zu Datenübermittlungen wenden Sie sich bitte an Uns (siehe vorstehend I. 9.).
6.Aufbewahrungsfristen für und Löschung von Erhobene(n) Daten
Nachdem Sie Ihr Nutzerkonto gelöscht haben, bewahren Wir die Erhobenen Daten für 60 Monate auf, es sei denn, lokale gesetzliche Bestimmungen schreiben Uns eine längere Aufbewahrung vor. Bitte beachten Sie, dass es ggf. gesetzlich erforderlich ist, bestimmte Informationen aufzubewahren. Grundsätzlich bewahren Wir die Erhobenen Daten nur so lange auf, wie dies gesetzlich erforderlich oder zulässig ist, insbesondere solange die Erhobenen Daten benötigt werden, um noch nicht verjährte Ansprüche zu erfüllen oder abzuwehren. Soweit Wir die Erhobenen Daten nicht mehr benötigen, werden sie im Einklang mit Unseren Richtlinien zerstört oder anonymisiert. Mit anonymisiert meinen Wir, dass Wir Informationen entfernen, die dazu genutzt werden könnten, Sie anhand der Erhobenen Daten zu identifizieren.
7.Ihre gesetzlichen Rechte
Nach den nach anwendbarem Recht (d. h. der DS-GVO) festgelegten Bedingungen haben Sie die folgenden Rechte:
a.Recht auf Auskunft:
Sie haben das Recht, von Uns Auskunft darüber zu verlangen, ob Sie betreffende Personenbezogene Daten verarbeitet werden, und soweit dies der Fall ist, haben Sie das Recht, Auskunft über die Personenbezogenen Daten zu verlangen. Zu den Informationen, über die Auskunft verlangt werden kann, gehören u. a. die Zwecke der Verarbeitung, die Kategorien der betreffenden Personenbezogenen Daten und die Empfänger oder Kategorien von Empfängern, gegenüber denen die Personenbezogenen Daten offengelegt worden sind oder noch offengelegt werden.
b. Sie haben das Recht, eine Kopie der Personenbezogenen Daten, die Gegenstand der Verarbeitung sind, zu erhalten. Für alle weiteren Kopien, die Sie verlangen, können Wir ein angemessenes Entgelt auf der Grundlage der Verwaltungskosten berechnen.
c.Recht auf Berichtigung:
Sie haben das Recht, von Uns die Berichtigung unrichtiger Sie betreffender Personenbezogener Daten zu verlangen. Je nach Zweck der Verarbeitung haben Sie das Recht, die Vervollständigung unvollständiger Personenbezogener Daten – auch mittels einer ergänzenden Information – zu verlangen.
d.Recht auf Löschung (Recht auf Vergessenwerden):
Sie haben das Recht, von Uns die Löschung Ihrer Personenbezogenen Daten zu verlangen.
e.Recht auf Einschränkung der Verarbeitung:
Sie haben das Recht, eine Einschränkung der Verarbeitung Ihrer Personenbezogenen Daten zu verlangen. In diesem Fall werden die entsprechenden Daten markiert und dürfen von Uns nur für bestimmte Zwecke verarbeitet werden.
f.Recht auf Datenübertragbarkeit:
Sie haben das Recht, die Sie betreffenden Personenbezogenen Daten, die Sie Uns zur Verfügung gestellt haben, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten, und Sie haben das Recht, diese Personenbezogenen Daten an eine andere Stelle ohne Behinderung durch Uns zu übermitteln.
g.Widerspruchsrecht:
Sie haben das Recht, der Verarbeitung Ihrer Personenbezogenen Daten durch Uns jederzeit aus Gründen, die sich aus Ihrer besonderen Situation ergeben, zu widersprechen, und Wir sind gegebenenfalls verpflichtet, die Verarbeitung Ihrer Personenbezogenen Daten einzustellen. Wenn Sie ein Widerspruchsrecht haben und ausüben, werden Wir Ihre Personenbezogenen Daten nicht länger zu diesen Zwecken verarbeiten. Durch die Ausübung dieses Rechts entstehen keine Kosten. Ein solches Widerspruchsrecht besteht unter Umständen nicht, insbesondere wenn die Verarbeitung Ihrer Personenbezogenen Daten erforderlich ist, um vor dem Abschluss eines Vertrages Maßnahmen zu ergreifen oder um einen bereits geschlossenen Vertrag zu erfüllen.

Bitte beachten Sie, dass die vorstehend genannten Rechte nach den anwendbaren nationalen datenschutzrechtlichen Bestimmungen eingeschränkt sein können. Bitte richten Sie Ihre Fragen an https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry. Im Falle von Beschwerden haben Sie ferner das Recht, bei der zuständigen Aufsichtsbehörde eine Beschwerde einzureichen, insbesondere in dem Mitgliedstaat Ihres gewöhnlichen Aufenthalts oder des Ortes des behaupteten Verstoßes gegen die DS-GVO.

LETZTE AKTUALISIERUNG: 20. November 2021

I.SUMMARY PRIVACY POLICY


This Summary Privacy Policy ("Summary") explains how we, Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity) by SMS (“We”, "Us" and "Our") collect, use, disclose and/or store information or data of any kind (e.g., your name, email-address, address etc.) about or related to you, even if such information cannot directly identify you on its own but can be used in combination with other information that is stored by Us ("Personal Data") in connection with Our website [https://2021.sao-ex-chronicle.com/s/excglb] and service whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which We carry out. More information about your rights, and how to exercise them, is set out in the Full Privacy Policy below.
1. Scope of Applicability
This Summary and the Full Privacy Policy (together the ("Privacy Policy") apply to you if you use the Online Service.
2. Processing of your Personal Data
We collect and use the following Personal Data related to your use of the Online Service:


a. Information you provide to Us, such as registration and payment information, e.g., your email address, username or payment card number as well as the content you generate when using the chat function of the Online Service including any chat messages, photos or other content you post there.

b. Information that We collect automatically (as the case may be, subject to your consent), such as your IP address or other identifiers for the device you use to access the Online Service, technologies such as Cookies or Web Beacons.

c. Information We receive from third parties, e.g., service providers that work on Our behalf, which may provide Us with information that is necessary to validate your transaction in case you choose to apply your credit card for payment. Further, We may receive information on how you use the Online Service or third party websites from third party analytics service providers, ad network providers or social media applications that We make use of and which may process certain Personal Data about you subject to their privacy policies and/or terms of use.
3. Processing Purposes
We collect and use your Personal Data related to your use of the Online Service (collectively, the "Collected Data") to provide you with features and functions of the Online Service, and to provide you with other requested content related to Our services and other offerings.

4. Legal Justifications for the Processing of the Collected Data
One of the key privacy law requirements is that any processing of Personal Data has to have a legal justification. We generally use the following legal justifications: the Processing is necessary for (i) the performance of a contract (Art. 6(1)(b) GDPR), (ii) compliance with a legal obligation (Art. 6(1)(c) GDPR), (iii) realizing a legitimate interest (Art. 6(1)(f) GDPR), and, (iv) if you have provided your prior consent, we also rely on such (Art. 6 (1)(a) GDPR).
5. Data transfers and Recipients including International Data Transfers
In accordance with applicable law, We transfer your Personal Data to Our service providers, third parties (e.g., third party service providers, business partners), and, as the case may be, governmental authorities, courts, external advisors, and similar third parties. Some of the aforementioned recipients are located in jurisdictions outside the European Union / European Economic Area (jointly the "EU") such as the United States, Japan, and/or other jurisdictions that may not provide the same level of data protection as your home country/region.
6. Retention periods for and deletion of Collected Data
Collected Data will generally be deleted once they are no longer needed for the purposes motivating their original collection or as required by applicable law.
7. Your statutory rights
As set forth by applicable law, you have certain rights with regard to the Processing or your Personal Data, each as per the conditions defined in applicable law, such as the right to get access to your data, to get them corrected, erased or handed over. Please refer any of your questions to /s/excglb/form/inquiry?ima=4803.
8. Changes to this Privacy Policy
From time to time, We may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account.
9. Contact Information and how to contact Usnen

If you have any questions regarding this Privacy Policy please contact Our representative in the EU pursuant to Art. 27
(1) GDPR:

Name: Sony Europe BV
Address: Taurusavenue 16, 2132LS Hoofddorp, the Netherlands
Email: [email protected]

If you wish to exercise your data subject rights, have a privacy concern, complaint or any other question how we process Personal Data, please contact Our Data Protection Officer by mail or email:
Name: Tadahiko Shida
Address: Midtown Tower, 9-7-1, Akasaka, Minato-ku, Tokyo, 107-6214 Japan
Email: /s/excglb/form/inquiry?ima=4803

II. FULL PRIVACY POLICY


1. Processing of your Personal Data
We process the following Personal Data related to your use of the Online Service:
a. Personal Data you provide to Us:
(1) Registration Information: In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts ("External Account") of an external content distributor ("Content Distributor") that are supported for authentication with single sign-on to Our service provider's platform. If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, We collect your credential information that you provide to Us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide to Us, such as gender.
If you sign in the Online Service with the External Account, in general, We will receive only the name of your account and tokens as a result of sign-in authentication from the Content Distributor.

(2) Payment Information:
When you wish to purchase Our paid service and related contents on the Online Service, We collect your payment information that you provide to Us, such as payment card number, CVC code and expiration date.

(3) User Generated Content:
When you use the chat function of the Online Service, We collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide Us with photos or videos, such images may include metadata, which can indicate information about the images, including but not limited to, where and when the image was taken.
b. Personal Data We collect by technical means:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, We, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used, including but not limited to, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views, which might be qualified as Personal Data ("Usage Information"). We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and Our computers identify your Device by its Device Identifier. Some mobile service providers may also provide Us or Our third-party service providers with information regarding the physical location of the Device used to access the Online Service. The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

• Cookies, which may be html files, Flash files or other technology, are small text files that help store user preferences and activity ("Cookies"). A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and Our online offerings may not function properly.

• Web Beacons, also known as image tags, pixel tags, clear GIFS or web bugs, are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses (“Web Beacons”). Web Beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent emails were actually opened or to determine whether content sent was actually viewed.

• Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from Our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

• Ad Serving and Traffic Measurement Services
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, We may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide Us with information about the use of the Online Service and viewing of Our content. We do not share the information that you provide to Us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
c. Personal Data We Receive from Third Parties
(1) Service providers acting on Our behalf:
We may receive Personal Data about you from service providers working on Our behalf. For example, if you choose to apply your credit card for payment, We may receive Personal Data through Our third-party payment provider in order to validate the transaction as part of Our anti-fraud efforts. We also use this third-party payment service to collect and store your Personal Data so that We can meet Our financial reporting requirements. We may obtain this Personal Data to fulfill Our tax reporting obligations. In addition, if you use another property and you opt-in to receive information from Us, that property may forward to Us your email address and other Personal Data so that We may contact you as requested. We may also supplement the Collected Data with outside records from third parties to enhance Our ability to serve you, to tailor Our content to you and to offer you opportunities to purchase products, contents or services that We believe may be of interest to you. We may combine the Personal Data We receive from these third parties with Collected Data. In those cases, We will apply this Privacy Policy to any Personal Data received, unless We have disclosed otherwise.

(2) Social Media Applications that Provide Personal Data to Us:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to your Personal Data and information regarding your use of the Online Service. You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow Us to collect (or the third party to share) your Personal Data. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The Personal Data We collect is subject to this Privacy Policy. However, the Personal Data collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with Us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case We will no longer collect Personal Data about you through the application or feature, but We may retain the Personal Data previously collected in accordance with this Privacy Policy.
2. Processing Purposes
We will use the Collected Data for the following purposes:
a. Account Creation:
We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;
b. Service Provision:
We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;
c. Communications:
We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of Our terms & conditions or policies.
d. Marketing:
We use the Collected Data to send you information by email or through other electronic communications on Our products, contents and services, or other promotions, etc.
e. User Experience:
We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;
f. Service Improvement and Development:
We use the Collected Data to optimize and improve Our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of Our users;
g. Compliance with Law:
We use the Collected Data to ensure compliance with Our internal policies, agreements with Our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend Our legal rights or the terms and conditions of any Our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).
h. Fraud prevention and investigation:
We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
i. Security:
We will use the Collected Data to maintain the integrity and security of Our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.
j. Other:
In any other way, with your consent or permitted under applicable law.
3. Legal Justifications of the Processing of your Personal Data
For the purpose of this Privacy Policy, “EU” includes the United Kingdom, even after the United Kingdom leaves the EEA following Brexit, and, where applicable, Switzerland. We rely on the following legal bases for processing the Collected Data:
a. Performance of Contract, Art 6 (1)(b) GDPR:
We use the Collected Data to provide you with the Online Service. For example, We use your account information to verify your identity, provide you with the access to the Online Service, communicate with you regarding your use of the Online Service or notify you of important changes to the Online Service. Such use is necessary for the performance of the contract between you and Us.
b. Legitimate Interest, Art 6 (1)(f) GDPR:
We, or a third party, have legitimate interest in using the Collected Data. In particular, We have a legitimate interest in using the Collected Data to improve and develop Our products, contents and services, to personalize your experience on the Online Service and provide you with tailored information of products, contents and services, and improve the safety, security, and performance of the Online Service. When We process the Collected Data for Our legitimate interests, We make sure to consider and balance any potential impact on you, and your interests, rights and freedom under any applicable laws. We will not use the Collected Data for any processing where Our interests are overridden by the impact on you, unless We have your consent for Our processing, or otherwise required by law. You have the right to object to processing that is based on Our legitimate interests, as indicated in Section 7 below.
c. Legal Obligation, Art. 6 (1)(c) GDPR:
We have a legal obligation under EU and/or Member State Law to use the Collected Data, such as the obligation to monitor, prevent, detect and investigate illegal and illicit activity, including fraud and anti-money laundering, and the obligation to provide financial reporting.
d. Consent, Art. 6 (1)(a) GDPR:
If you have provided your prior consent, We may send you information by email or through other electronic communications on Our products, contents and services, or other promotions, etc. Where Our processing is made based on your consent, you have the right to withdraw your consent at any time, as indicated in Section 7 below. For example, where you give Us consent to place cookies and to use similar technologies, you will be able to opt-out of those materials in accordance with the instructions made in Our communication.
The table below summarizes the Personal Data processed for the respective purposes as well as the applicable legal basis.

Processing Purposes Collected Data involved Legal justification
Account Creation registration information (consent, email, name, password, country/region of residence) Consent
Service Provision purchase history, payment information, user generated contents Consent
Communications name, email Consent
Marketing registration information, service usage history, purchase history Consent
User Experience n/a Consent
Service Improvement and Development cookie Consent
Compliance with Law registration information, usage information, IP address, other device identifiers Legal Compliance
Fraud prevention and investigation payment information Legal Compliance
Security n/a Consent
Other n/a Consent
4. Data transfers and recipients and legal justification for such transfers
We will make the Collected Data available to third parties as follows:
a. (Third-Party) Service providers
We may use service providers to process the Collected Data, some of which may be internal (i.e., part of SMS) or external (third party) service providers In any case, the service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy. Some of the service providers are acting on our behalf as data processors pursuant to Art. 28 GDPR. However, we may also transfer to other third party service providers acting as independent controllers (e.g., lawyers, accountants, auditors, etc.) in accordance with applicable law pursuant to GDPR.
b. Business transfer
In the event that We sell or transfer a portion or all of Our business, Collected Data may be transferred by Us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, We will delete the Collected Data as soon as reasonably practicable after such transaction. To the extent, we transfer Collected Data for such purposes, the transfer is based on GDPR.
c. Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities. To the extent we transfer Collected Data for such purposes, the transfer is based on GDPR.
5. International Transfer of the Collected Data
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for Us or for one of Our service providers and may be disclosed to such staff in those countries/regions. We take appropriate measures to ensure that all transfers of the Collected Data from the EU to countries/regions outside the EU meet the requirements of applicable EU data protection legislation and to ensure that appropriate technical and organizational security measures are in place to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. Where information is transferred outside the EU, and where this is to a stakeholder or vendor in a country/region that is not subject to an adequacy decision by the EU Commission (i.e., a country/region that does not provide the same level of data protection as your country/region of residence), data is adequately protected by EU Commission approved standard contractual clauses (accessible via the contact details provided in I. 9. above), or a vendor's Processor Binding Corporate Rules. Any onward transfer is subject to appropriate onward transfer requirements as required by applicable law. Nonetheless, this may impact your data subjects rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, e.g., an overseas authority. If you have any questions or concerns about Our data transfer arrangements, please contact Us (see I. 9. above).
6. Retention periods for and deletion of Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells Us to keep it for longer. Please note that We may be required to retain certain information by law. In principle, We will retain the Collected Data only as long as required or permitted by applicable law, in particular as long as the Collected Data may be needed to fulfill or defend against claims that are not yet time-barred. Where We no longer require the Collected Data, it will be destroyed or de-identified in line with Our policies. When We say de-identified, We mean that We will remove information that could be used to identify you from the Collected Data.
7. Your statutory rights
Under the conditions set out under applicable law (i.e., the GDPR), you have the following rights:
a. Right of access:
You have the right to obtain from Us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed.
b. You have the right to obtain a copy of the Personal Data undergoing processing. For additional copies requested by you, We may charge a reasonable fee based on administrative costs.
c. Right to rectification:
You have the right to obtain from Us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
d. Right to erasure (right to be forgotten):
You have the right to ask Us to erase your Personal Data.
e. Right to restriction of processing:
You have the right to request the restriction of processing your Personal Data. In this case, the respective data will be marked and may only be processed by Us for certain purposes.
f. Right to data portability:
You have the right to receive the Personal Data concerning you which you have provided to Us in a structured, commonly used and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from Us.
g. Right to object:
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by Us and We can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by Us. Exercising this right will not incur any costs. Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the applicable national data protection law. Please refer any of your questions to /s/excglb/form/inquiry?ima=4803 . In case of complaints, you also have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence or alleged infringement of the GDPR.

LAST UPDATED: November 20th, 2021

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy
LAST UPDATED: November 20th, 2021


This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website [ https://2021.sao-ex-chronicle.com/s/excglb ] and service called as “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.
In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan)(“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
SUMMARY OF KEY POINTS
• We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.
• Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8. Privacy Rights” to learn more about this. • We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.
• Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.

The provision of your Personal Information is voluntary. However, if you do not provide us with your Personal Information, we may not be able to provide you with the requested services or respond to your requests.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.
Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include: • Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
• Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
• Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com), the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/), the Digital Advertising Alliance of Canada (DAAC) in Canada (http://youradchoices.ca/) or the European Interactive Digital Advertising Alliance (EDAA) in Europe (http://www.youronlinechoices.eu/). For our mobile application, please update your device and browser and cookie settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA, NAI, DAAC or EDAA.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA, NAI, DAAC or EDAA, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.
Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
We will use the Collected Data for the following purpose:

• Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;
• Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;
• Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.
• User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you (with your consent where required by applicable law - please refer to "Direct Marketing" below);
• Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;
• Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).
• Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
• Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.
• Other: In any other way, with your consent or permitted under applicable law.
Direct Marketing
We intend to use your name, username, email address, country/region of residence, service usage history (e.g., what you added to your cart or favorites) and purchase history for the purpose of sending marketing communications to you, and we require your consent in order to do so (where required by applicable law). The classes of marketing subjects are as follows: products, services, promotions, events and news of SMS.

You may subsequently withdraw your consent to direct marketing by contacting us as indicated in Section 10 below. Where you exercise your right to withdraw your consent and opt out of direct marketing, we shall cease to use and transfer your personal information for direct marketing purposes, without charge.

3. Who else has access to the Collected Data?
We will make the Collected Data available to any legal entities controlled by SMS, and third parties as follows:
Third-party service providers
In addition, we may use our internal third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy, acting as processors.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5. International Transfer of the Collected Data
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions. By activating the Online Service or providing us with any information, you fully understand and acknowledge the transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, such as an overseas authority.
6. Security
We undertake reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 18. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with personal information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
In some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.

Notice to Hong Kong Residents

Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to, and correction of, your Personal Information. If you would like to exercise any of these rights, please contact us as described in Section 10 below.

9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:
Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
DPO: Tadahiko Shida
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” 개인정보 처리방침
마지막 업데이트: November 20th, 2021


본 개인정보 처리방침은 컴퓨터, 모바일 장치 또는 기타 기술(통칭하여 "온라인 서비스")을 통해 제공되는 당사 웹 사이트[https://2021.sao-ex-chronicle.com/s/excglb] 및 “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”)라는 서비스와 관련하여 사용자의 개인정보나 데이터를 수집, 사용, 공개, 저장하는 방법에 대해 설명합니다. 또한 정보주체의 권리를 비롯하여 당사가 수행하는 일부 개인정보 처리에 반대할 수 있는 권한도 설명합니다. 정보주체의 권리 및 권리 행사 방법에 대한 자세한 내용은 아래의 제8항에 나와 있습니다.
본 개인정보 처리방침에서 "당사"는 Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (이하 “SMS”) 및 SMS에 의해 “관리”되는 모든 법적 주체를 의미합니다(여기서 “관리”라 함은 그 법인의 의결권 중 최소한 50% 이상의 직접 또는 간접적 소유로 그 법인의 경영결정을 실질적으로 통제할 수 있는 권한을 말한다).
핵심 사항 요약
• 당사는 수집된 데이터(아래에 정의됨)를 사용하여 온라인 서비스의 기능을 제공하고 서비스 및 기타 서비스와 관련하여 요청된 콘텐츠를 제공합니다. “1. 온라인 서비스 사용시 수집하는 데이터” 및 “2. 수집된 데이터의 처리목적”을 참조하시기 바라고 자세한 내용을 알고 싶으면 여기를 보십시오.
• 귀하가 위치한 지역에 따라 귀하는 당사가 수행하는 개인정보 처리에 반대할 권리 등을 갖습니다. 자세한 내용은 “8. 정보주체의 권리 및 행사방법"을 참조하십시오.
• 법률 또는 기타 특정 상황에서 요구되는 경우, 당사는 수집된 데이터를 제3자에게 제공하거나 개인정보 처리를 위탁할 수 있습니다. “3. 수집된 데이터의 이전”을 참조하시기 바라고 자세한 내용을 알고 싶으면 여기를 보십시오.
• 수집된 데이터는 귀하의 거주 국가/지역에서 미국, 일본 및 다른 국가로 전송될 수 있으며, 이러한 국가에서는 귀하의 거주 국가/지역과 동일한 수준의 데이터 보호를 제공하지 않을 수 있습니다. "5. 수집된 데이터의 국제 전송 및 처리에 대한 동의"를 참조하시기 바라고 자세한 내용을 알고 싶으면 여기를 보십시오.
1. 온라인 서비스 사용시 수집하는 데이터
본 개인정보 처리방침상 "개인정보"는 개인을 식별하거나 식별할 수 있는 개인에 관한 정보 또는 개인과 관련된 정보를 의미합니다. 여기에는 개인을 식별할 수 있는 정보와 당사가 저장하는 다른 정보가 포함됩니다. 이는 해당 정보만으로는 개인을 식별할 수 없는 경우에도 마찬가지입니다. 온라인 서비스 사용과 관련하여 당사는 아래에 설명된 정보 또는 데이터(통칭하여 "수집된 데이터")를 수집 및 사용하며, 그 중 일부는 해당 관할 지역의 관련 법률에 따라 "개인정보"로 간주될 수 있습니다.
귀하가 당사에 제공하는 정보
등록 정보:
온라인 서비스를 사용하기 위해 귀하는SAO 계정을 비롯한 당사의 적격 계정을 보유하여야 합니다. 또는 귀하는 온라인 서비스에 대한 SSO(Single Sign-On) 인증을 지원하는 콘텐츠 유통업체의 다른 계정으로 로그인 하여야 합니다(이하 “외부 계정”). 만약 귀하께서SAO 계정이 없는 경우, 온라인 서비스를 위한 새로운 계정을 만드는 것을 추천합니다. 귀하가 계정을 새로 만들고 등록하는 과정에서 당사는 아래와 같은 개인정보를 수집합니다.

(a) 필수 항목: 계정 정보(예: 성명, 이메일 주소, 사용자 이름, 우편번호, 주소, 전화번호 또는 휴대전화번호, 비밀번호);
(b) 선택 항목: 인구통계 정보(예: 성별).

귀하께서 외부 계정으로 온라인 서비스에 로그인하는 경우, 일반적으로 당사는 외부 콘텐츠 유통업체의 로그인 인증의 결과로서 귀하 계정의 이름과 토큰들만 받게 됩니다.
당사가 외부 콘텐츠 유통업체를 통해 수집하는 정보는 귀하가 해당 유통업체와 설정한 개인 정보 보호 설정과 귀하가 온라인 서비스를 링크하는 것과 관련하여 당사에게 부여한 권한들에 따라 달라질 수 있습니다. 당사는 어떠한 수집된 데이터도 이러한 유통업체와 공유하지 않습니다. 콘텐츠 유통업체가 귀하에 대해 보유하고 있는 개인정보는 그들이 당사의 서비스와 별개로 획득한 것이고, 당사는 이에 대해 책임을 지지 않습니다.

결제 정보:
귀하가 온라인 서비스에서 유료 서비스 및 관련 콘텐츠를 구매하고자 하는 경우 당사는 아래와 같은 결제 정보를 수집합니다:

(a) 필수 항목: 카드 번호, CVC 코드, 카드 유효기간

사용자 생성 콘텐츠:
귀하가 온라인 서비스의 채팅 기능을 사용할 때 당사는 채팅 메시지, 사진, 비디오, 오디오 등 귀하가 포스팅한 모든 콘텐츠를 수집합니다. 귀하가 사진 또는 비디오를 제공한 경우 이러한 이미지에는 이미지 정보를 나타내는 메타데이터가 포함될 수 있습니다. 여기에는 이미지를 찍은 위치 및 시기 등이 포함되며 이에 한정되지 않습니다.

당사가 자동으로 수집하는 정보:
귀하가 온라인 서비스에 제공하기로 동의한 정보 외에도 귀하가 온라인 서비스를 방문하거나 상호 작용할 때마다 당사는 물론 분석도구를 공급하는 제3자 또는 기타 서비스 공급자는 귀하가 온라인 서비스에 어떻게 액세스하고 온라인 서비스를 어떻게 사용하는지에 대한 정보(통칭하여 "사용 정보")를 자동으로 또는 수동적으로 수집하며 이를 위한 다양한 기술을 사용할 수 있습니다. 사용 정보에는 소프트웨어 애플리케이션 및 주변 장치(사용자 음성 데이터, 사용자 모션 데이터, 고유 식별자, 성능, 구성, 사용 및 기능 사용 빈도 등)에 대한 정보, 브라우저 종류, 운영 체제, 제공되는 페이지, 온라인 서비스의 시간 및 이전 페이지 뷰가 포함될 수 있습니다. 사용 정보는 관련 법령에서 정한 바에 따라 개인 정보로 취급될 수 있습니다.

또한 당사는 귀하가 온라인 서비스에 액세스하는 데 사용하는 컴퓨터, 모바일 장치, 기술 또는 기타 장치(통칭하여 "장치")에 대한 귀하의 IP 주소 또는 기타 고유 식별자("장치 식별자")를 자동으로 수집할 수 있습니다. 장치 식별자는 자산 또는 해당 서버에 액세스할 때 귀하의 장치에 자동으로 할당되는 번호이며, 당사의 컴퓨터는 장치 식별자로 귀하의 장치를 식별합니다. 일부 모바일 서비스 공급자는 온라인 서비스에 액세스하는 데 사용되는 장치의 물리적 위치에 대한 정보를 당사 또는 타사 서비스 공급자에게 제공할 수도 있습니다.

장치 식별자를 포함하여 사용 정보를 수집하기 위해 온라인 서비스에서 사용되는 기술은 다음과 같습니다.
• 쿠키: "쿠키"(HTML 파일, 플래시 파일 또는 기타 기술)는 사용자의 기본 설정 및 활동을 저장하는 데 도움이 되는 작은 텍스트 파일입니다. 장치가 온라인 서비스에 액세스하거나 방문하기 위하여 사용될 때 장치에 쿠키가 저장됩니다. 쿠키는 사용자 및 사용자의 기본 설정을 기억하고 온라인 서비스 방문을 추적하며, 온라인 서비스에서의 귀하의 경험을 커스터마이징하는 등 다양한 용도로 사용될 수 있습니다. 귀하는 특정 쿠키의 사용을 차단하도록 브라우저 또는 장치를 조정할 수 있습니다. 그러나 장치에서 쿠키를 사용하지 않도록 선택하면 온라인 서비스의 일부 기능과 온라인 서비스가 제대로 작동하지 않을 수 있습니다.
• 웹 비콘: “웹 비콘”(이미지 태그, 픽셀 태그, 클리어 GIFS 또는 웹 버그라고도 함)은 페이지 뷰, 프로모션 뷰 또는 광고 응답 횟수와 같은 광고 데이터를 수집하는 데 사용되는 작은 코드입니다. 웹 비콘 또는 유사 기술은 온라인 서비스 방문자 수를 계산하고, 사용자가 온라인 서비스를 탐색하는 방법을 모니터링하고, 전송된 전자메일 중 실제로 확인된 메일의 수를 계산하거나 전송된 콘텐츠가 실제로 보여지는지 여부를 확인하는 등 다양한 용도로 제한없이 사용될 수 있습니다.
• 임베디드 스크립트: 임베디드 스크립트는 온라인 서비스와의 상호 작용에 대한 정보를 수집하도록 설계된 프로그래밍 코드입니다(예: 클릭한 링크). 이 코드는 당사 서버 또는 타사 서비스 공급자로부터 장치에 일시적으로 다운로드되며 온라인 서비스에 연결되어 있는 동안에만 활성 상태이며, 이후에는 비활성화되거나 삭제됩니다.

귀하가 온라인 서비스 또는 기타 온라인 웹 사이트 및 서비스를 방문하거나 사용할 때 제3자가 다른 웹 사이트를 통해 귀하의 온라인 활동에 대한 정보를 수집할 수 있습니다. 예를 들어, SNS 공유 도구와 같은 일부 타사 임베디드 콘텐츠 또는 플러그인을 통해 운영자는 귀하가 온라인 서비스를 방문하였거나 상호 작용했다는 사실을 알 수 있습니다. 또한 제3자는 위 정보와 그들이 귀하가 다른 웹 사이트 또는 서비스를 방문할 당시 수집한 식별 가능한 정보를 결합할 수 있습니다. 이러한 제3자는 위 정보와 그들이 콘텐츠 및 플러그인을 통해 직접 수집한 기타 정보를 그들의 개인정보 보호 정책에 따라 처리할 수 있습니다. 온라인 추적. 일부 웹 브라우저는 사용자가 방문한 웹 사이트에 온라인 활동을 추적하지 말라는 신호를 보낼 수 있게 하는 "추적 안 함" 기능을 지니고 있습니다. 브라우저들이 “추적 안 함” 신호를 보내는 방식은 아직 통일되어 있지 않습니다. 이러한 이유로 온라인 서비스는 법률이 요구하는 경우를 제외하고 이러한 신호에 응답하지 않습니다.
광고 서비스 및 트래픽 측정 서비스:
당사는 온라인 서비스와 해당 동영상 및 기타 콘텐츠에 대한 광고를 인터넷을 통해 제공하는 기술을 사용합니다. 또한, 당사는 온라인 서비스에 대한 광고를 제공하기 위해 타사 네트워크 광고주를 사용하고, 온라인 서비스 사용 및 콘텐츠 뷰에 대한 정보를 평가하고 제공받기 위하여 타사 분석 서비스 제공업체(Google Analytics 등)를 사용할 수 있습니다. 당사는 귀하가 당사에 제공하는 이름 및/또는 이메일 주소 등의 정보를 타사와 공유하지 않지만, 광고 네트워크 공급자, 광고주, 스폰서, 및/또는 분석 서비스 공급자는 온라인 서비스에서 사용자 장치에 자체 쿠키, 웹 비콘 및 임베디드 스크립트를 설정하고 접근할 수 있습니다. 이러한 쿠키, 웹 비콘 및 임베디드 스크립트는 귀하의 개인정보나 온라인 서비스 사용에 관한 다른 정보를 수집할 수 있으며, 그 밖의 다른 방법으로 사용 정보를 수집하거나 액세스할 수 있습니다. 쿠키 및 웹 비콘(타사 네트워크 광고주가 설정한 것 포함)은 특히 타겟 광고를 사용하거나, 동일한 광고를 너무 많이 보지 못하게 하거나, 특정 광고의 유용성에 대한 조사를 수행하는 데 사용될 수 있습니다.

이러한 쿠키를 수신 거부하려면 아래 선택 사항을 실행하십시오.

최적화된 모바일 기기나 데스크톱 웹 사이트에서 작동하는 관심 기반 광고를 일반적으로 거부하려면, 미국의 NAI(Network Advertising Initiative, https://www.networkadvertising.org/), 미국의 DAA(Digital Advertising Alliance, http://youradchoices.com)를 방문하십시오. 모바일 애플리케이션을 사용하는 경우 장치 설정을 업데이트하십시오. 이러한 쿠키를 거부하여도 여전히 광고를 수신할 수 있지만, 귀하가 거부한 네트워크는 귀하의 관심에 맞는 광고를 더 이상 제공하지 않습니다.

방문자가 온라인 서비스와 상호 작용하는 방식을 이해하는 데 사용되는 Google Analytics를 거부하려면 https://tools.google.com/dlpage/gaoptout 을 방문하십시오.

"도움말" 또는 "인터넷 옵션" 섹션에 있는 인터넷 브라우저 설정을 검토하여 DAA, NAI에 속하지 않는 특정 쿠키에 대한 선택 사항을 실행하십시오.

DAA, NAI에 속하지 않는 회사에서 제공하는 쿠키를 거부하도록 브라우저 설정을 구성하는 방법에 대한 지침을 보려면 https://www.allaboutcookies.org/manage-cookies/ 를 클릭 하십시오
"쿠키"가 있는 파일을 검색하고 삭제하여 귀하의 컴퓨터 하드 드라이브에 이미 저장되어 있는 쿠키를 모두 삭제할 수도 있습니다.

추가 수신 거부 선택: 특정 쿠키의 사용을 차단하도록 브라우저나 장치를 구성할 수 있습니다.
특정 쿠키가 없으면, 온라인 서비스에서 특정 기능을 사용하기 어려울 수 있습니다.
SNS 애플리케이션:
온라인 서비스의 기능을 통해 온라인 서비스와 Facebook, Twitter 등 타사 서비스 사이의 상호 작용을 할 수 있습니다. 이러한 기능을 사용하면 귀하는 제품 또는 온라인 콘텐츠에 "좋아요"를 누르고, 타사 사이트의 콘텐츠를 "공유"하고, 다른 타사 사이트와 온라인 서비스를 연결할 수 있습니다. 귀하가 콘텐츠를 "좋아요" 또는 "공유"하거나 온라인 서비스를 통해 타사 사이트에 정보를 게시하도록 선택한 경우 해당 정보가 공개될 수 있으며 타사 사이트를 통해 귀하의 정보 및 온라인 서비스 사용에 대한 정보가 액세스될 수 있습니다.

또한 귀하는 타사의 응용 프로그램이나 기능(예: Facebook 응용 프로그램 또는 유사한 응용 프로그램이나 타사 사이트의 기능 또는 온라인 서비스를 다른 사이트에 링크하는 기능)에 참여할 것인지 선택할 수 있고, 이를 통해 귀하는 당사가 귀하에 대한 정보(개인정보 포함)를 수집하거나 제3자가 공유하는 것을 허용하게 됩니다. 귀하가 참여를 선택하는 경우, 귀하는 온라인 서비스에 대한 귀하의 활동을 제3자 사이트에 연결하도록 선택할 수 있습니다. 그러면 제3자는 온라인 서비스 방문 정보를 수집할 수도 있습니다. 그리고 제3자는 귀하가 귀하의 "프로필" 또는 이와 유사한 타사 사이트의 기능을 요청할 때 귀하의 활동을 게시할 수 있습니다 (예: 온라인 서비스 중 하나에서 찾은 콘텐츠를 제3자 사이트와 공유하기로 선택한 경우).

당사가 수집하는 정보는 본 개인정보 처리방침의 적용을 받습니다. 그러나 제3자가 수집 및 저장한 정보의 처리는 제3자의 개인정보 처리 실무의 적용을 받을 수 있습니다. 개인정보 처리 실무에는 제3자가 정보를 당사 또는 다른 제3자와 공유하는 것을 지속할지 여부, 공유된 정보의 유형 및 제3자 사이트의 다른 사용자에게 어떠한 정보를 공개할지에 관한 귀하의 선택 등이 포함됩니다.

제3자는 귀하로 하여금 응용 프로그램이나 기능을 삭제하는 것을 허용할 수 있는데, 이러한 경우 당사는 해당 응용 프로그램 또는 기능을 통해 귀하에 대한 정보를 더 이상 수집하지 않지만, 본 개인정보 처리방침에 따라 이전에 수집한 정보를 보유할 수 있습니다.
타사 컨텐츠, 다른 사이트 및 서비스에 대한 링크, 다른 웹 사이트에 있는 당사의 컨텐츠
온라인 서비스의 특정 콘텐츠는 타사에서 호스팅 및 제공될 수 있으며, 여기에는 타사 위젯(예: 타사 웹 사이트 및 대화형 서비스의 컨텐츠를 "좋아요" 또는 "공유"하도록 허용하거나 평점 및 리뷰 제공을 허용하는 위젯)이 포함될 수 있습니다. 또한 온라인 서비스에 접속하면 제3자가 운영하고 관리하는 다른 웹 사이트로 연결될 수 있습니다. 여기에는 공동 브랜드 계약의 일부 내용에 따라 당사의 로고(들)을 사용할 수 있는 광고주, 스폰서 및 파트너들의 링크가 포함됩니다. 또한, 당사의 콘텐츠와 위젯은 당사와 관련이 없고 통제할 수 없는 웹 페이지 및 웹 사이트에 포함될 수 있습니다. 이러한 다른 웹 사이트는 자신의 쿠키를 사용자의 장치로 보낼 수 있으며, 독립적으로 데이터를 수집하거나 개인 정보를 요청할 수 있습니다. 당사는 제3자의 개인 정보 처리 방침에 대해 책임을 지지 않습니다.
2. 수집된 데이터의 처리목적
수집된 데이터는 다음과 같은 목적으로 이용됩니다.
• 계정 생성: 온라인 서비스 및 기타 관련 서비스에 로그인하는 데 사용할 수 있는 계정을 생성하기 위해 귀하의 자격 증명 정보를 사용합니다.
• 서비스 제공: 당사는 수집된 데이터를 사용하여 등록 처리, 구매한 주문 및 결제 처리, 비디오 스트리밍 서비스 제공 등 온라인 서비스의 기능 및 기능을 운영, 유지 관리, 개선 및 제공합니다.
• 의사소통: 당사는 수집된 데이터를 사용하여 관리 및 정보 제공 목적으로 온라인 서비스에 관해 사용자와 의사소통을 합니다. 이러한 의사소통의 예로는 문의 또는 요청에 대한 응답, 고객 지원 관련 커뮤니케이션, 이용 약관 또는 정책 변경 등이 있습니다.
• 사용자 경험: 당사는 수집된 데이터를 사용하여 귀하가 관심을 가질만한 추천, 광고, 프로모션 또는 사은품은 물론 제품, 콘텐츠 및 서비스에 대한 맞춤형 정보를 제공함으로써 온라인 서비스에서 사용자 경험을 개인화합니다.
• 서비스 개선 및 개발: 당사는 수집된 데이터를 사용하여 온라인 서비스를 비롯한 서비스를 최적화 및 개선하고 사용자의 사용 추세 및 기본 설정을 분석 및 이해함으로써 새로운 제품, 콘텐츠, 서비스, 기능 및 기능을 개발합니다.
• 법률 준수: 당사는 내부 정책, 이해 관계자와의 계약, 관련 법률 및 규정, 법원 명령, 정부 및 사법 당국의 요청을 준수하기 위해 수집된 데이터를 사용합니다. 또한 당사의 법적 권리를 지키기 위한 목적으로, 당사 서비스의 이용 약관을 실행하거나 법에서 정한 정보 내지 기록 보존 의무를 준수하기 위한 목적으로 수집된 데이터를 사용합니다.
• 사기 예방 및 조사: 당사는 모니터링, 예방, 탐지 및 조사 의무, 사기 및 자금세탁 등 불법적이고 사회통념에 반하는 행위를 식별하고 보고하는 것과 관련된 법령 및 재무 보고 의무를 준수하기 위하여 수집된 데이터를 사용합니다.
• 보안: 당사는 수집된 데이터를 사용하여 당사 웹 사이트, 콘텐츠 및 서비스의 무결성과 보안을 유지하고 사용자 장치를 손상시킬 수 있는 보안 위협, 사기 또는 기타 범죄 또는 악의적 활동을 예방 및 감지합니다.
• 기타: 기타 목적의 경우 귀사의 동의 또는 관련 법률에 따라서 처리합니다.
3. 수집된 데이터의 이전
당사는 다음과 같이 개인정보를 제3자에게 제공하거나 개인정보의 처리를 위탁하고 있습니다.
개인정보의 제3자 제공
당사는 제2항에서 명시한 목적 범위 내에서만 수집된 데이터를 처리하고, 개인정보 보호법 제17조 및 제18조를 준수하여(즉, 귀하의 동의 또는 법령상 근거가 있는 경우에 한하여) 제3자에게 개인정보를 제공합니다.
개인정보의 위탁 처리
귀하의 개인정보를 효율적으로 처리하기 위해서 당사는 외부업체에 개인정보 처리를 위탁할 수 있습니다. 당사는 개인정보보호법에 따라 개인정보를 처리하는 업체를 관리 감독합니다.
- 위탁받는 자(수탁자) : Sony Payment Services Inc.
- 위탁하는 업무의 내용 : 결제 처리
- 위탁받는 자 (수탁자): Kuore Inc.
- 위탁하는 업무의 내용: 고객 지원 관련 커뮤니케이션
영업 양도
당사가 영업의 일부 또는 전체를 양도하는 경우, 영업 이전에 수반하여 수집된 데이터도 함께 양수인에게 이전될 수 있습니다. 당사는 이러한 양수도 거래가 발생하기 전에 수집된 데이터의 기밀성을 지속적으로 보장할 것이며, 당사가 보관 중이던 수집된 데이터는 위 양수도 거래 후 합리적으로 실현 가능한 대로 신속하게 삭제할 것입니다.
규정 준수 및 적용
법률, 규정 또는 수사기관이나 기타 감독당국에서 내린 명령에서 요구하거나 허용하는 경우 당사는 수집된 데이터를 보관, 사용 및/또는 공개하여 귀하의 혹은 귀하에 대한 불만 사항을 조사하거나, 불법적인 행위, 범죄 행위 또는 유해한 행위로부터 당사 또는 타인을 보호 또는 방어합니다.
4.데이터의 보유 및 수집된 데이터의 관리
개인정보의 처리 및 보유 기간

법률에서 특별히 보존의무를 부과하지 않는 한, 당사는 귀하가 탈퇴한 후 60개월 동안 수집된 데이터를 보존합니다. 다만 법률에 따라 특정 정보를 보존해야 할 수도 있습니다. 당사는 수집된 데이터가 필요하지 않게 된 경우, 당사의 정책에 따라 데이터를 삭제하거나 비식별 처리할 것입니다. 비식별 처리란 수집된 데이터에서 사용자를 개인을 식별하는 데 사용되는 정보를 제거하는 것을 의미합니다.

온라인 서비스와 관련하여 법령에서 정한 개인 정보의 보유기간은 다음과 같습니다.
•전자상거래 등에서의 소비자보호에 관한 법률 제6조 및 동 시행령 제6조(거래기록)
- 표시광고에 관한 기록 : 6개월
- 계약 또는 청약철회 등에 관한 기록, 대금결제 및 재화 등의 공급에 관한 기록 : 5년
- 소비자의 불만 또는 분쟁처리에 관한 기록 : 3년
•통신비밀보호법 제15조의 2 및 동 시행령 제41조 제2항(통신사실확인자료)
- 법 제2조 제11호 가목부터 라목까지 및 바목에 따른 통신사실확인자료(가입자의 전기통신일시, 전기통신개시종료시간, 발착신 통신번호 등 상대방의 가입자번호, 사용도수) : 12개월
- 법 제2조 제11호 마목 및 사목에 따른 통신사실확인자료(컴퓨터 통신 또는 인터넷의 사용자가 전기통신역무를 이용한 사실에 관한 컴퓨터 통신 또는 인터넷 로그기록자료, 컴퓨터 통신 또는 인터넷의 사용자가 정보통신망에 접속하기 위하여 사용하는 정보통신기기의 위치를 확인할 수 있는 접속지의 추적자료) : 3개월
개인정보의 파기
회사는 개인정보 보유 및 이용 기간의 경과, 처리목적 달성 등 개인정보가 불필요하게 되었을 때에는 지체 없이 아래와 같은 방법으로 해당 개인정보를 파기합니다. 정보주체로부터 동의 받은 개인정보의 보유 및 이용 기간이 경과하거나 처리목적이 달성되었음에도 불구하고 다른 법령에 따라 개인정보를 계속 보존하여야 하는 경우에는, 해당 개인정보를 별도의 데이터베이스(DB)로 옮기거나 보관장소를 달리하여 보존합니다.
• 종이로 출력된 개인정보: 분쇄기로 분쇄하거나 소각
• 전자적 파일형태로 저장된 개인정보: 기록을 재생할 수 없는 기술적 방법을 사용하여 삭제
5. 수집된 데이터의 국제 전송 및 처리에 대한 동의
수집된 데이터는 본 개인정보 처리방침에 명시된 목적을 위해 귀하의 거주 국가에서 일본 및 미국을 포함한 거주 국가 외의 다양한 국가로 처리, 저장 및 전송됩니다. 수집된 데이터는 귀하의 거주 국가 이외의 국가에서 근무하는 직원에 의해 처리되거나 해당 직원에게 보여질 수 있습니다. 이와 같은 직원은 당사 또는 당사 서비스 공급자 중 한 곳에서 근무하는 직원입니다.

귀하가 온라인 서비스를 활성화하거나 당사에 정보를 제공함으로써, 귀하는 귀하의 정보가 미국 등 다른 국가에서 이전, 처리 및 저장되는 것과 다른 국가의 개인정보 보호 정책은 귀하가 거주하는 국가 혹은 귀하가 시민권을 보유한 국가의 개인정보 보호 정책과 같지 않을 수 있다는 점에 대하여 완전히 이해하고 이에 동의하는 것입니다.

이는 귀하가 거주하는 국가에서 혹은 국외에서 보장하는 귀하의 법적 권리에 영향을 미칠 수 있습니다. 이러한 국외 지역에서는 감독당국에 의해 제3자에게 개인정보를 공개해야 할 수도 있습니다.

개인정보를 이전받는 자(연락처): Sony Music Solutions Inc. (전자우편: https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry)
개인정보가 이전되는 국가: 일본, 미국
이전받는 자의 개인정보 이용목적: 본 개인정보 처리방침 제2항 기재 목적
이전되는 개인정보 항목: 수집된 데이터 일체
이전일시 및 방법: 서비스 제공 기간 동안 네트워크를 이용한 수시 전송
이전받는 자의 보유∙이용기간: 귀하가 탈퇴한 후 60개월간
6. 개인정보의 안전성 확보조치
수집된 데이터의 손실, 남용 또는 변경을 방지하기 위해 합리적인 안정성 확보 조치를 취합니다. 우리는 정보 보안을 매우 중요하게 생각하지만, 당사 시스템에 저장되어 있거나 협력업체 시스템에 저장되어 있는 모든 정보의 절대적인 보안을 보장하거나 보증할 수는 없습니다.

당사는 구체적으로 다음과 같은 조치를 취하고 있습니다.
• 관리적 조치 : 내부관리계획 수립 및 시행, 정기적 직원 교육 등
• 기술적 조치 : 개인정보처리시스템 등의 접근권한 관리, 접근통제시스템 설치, 고유식별정보 등의 암호화, 보안프로그램 설치
• 물리적 조치 : 전산실, 자료보관실 등의 접근통제
7. 아동의 개인 정보 보호
당사는 개인정보 보호법 등 아동에 관한 개인정보의 수집, 저장 및 이용에 관한 모든 관련 법률 및 규정(미국의 아동용 온라인 개인정보 보호법 및 기타 국가의 해당 지역 법률을 포함)을 준수할 것을 약속합니다. 온라인 서비스는 일반 사용자를 대상으로 합니다; 만 14세 미만의 아동으로부터 개인정보를 의도적으로 수집하지 않습니다. 귀하가 만 14세 미만 아동의 법정대리인(친권을 행사하는 부모 또는 미성년후견인)이고, 귀하의 동의 없이 위 아동이 당사에 개인정보를 제공한 것으로 우려되는 경우, 아래 제10항에 명시된 대로 당사에 연락해야 합니다.
8. 정보주체의 권리 및 행사방법
귀하는 당사가 보유하고 있는 귀하의 개인정보와 관련하여 권리를 지니고 있습니다.

귀하는 당사 또는 당사 그룹의 회사들이 보유하고 있는 귀하의 수집된 데이터에 대한 사본을 요청할 수 있습니다.

귀하는 당사가 보유하고 있는 귀하의 수집된 데이터에 오류 등이 있을 경우 수집된 데이터의 복사, 정정, 수정, 삭제, 파괴, 처리 제한, 처리 정지 등을 요청할 수 있습니다.

귀하는 시스템에서 읽을 수 있는 구조화된 형식의 정보를 제공하도록 요청할 수 있고, 또한 그러한 데이터를 다른 개인정보처리자에게 공유하도록 요청할 수도 있습니다.

다만, 이러한 귀하의 권리는 제한될 수 있습니다. 예를 들어, 귀하의 요청을 이행하기 위해서 타인의 개인정보가 공개되는 경우, 귀하가 법률에 의해 당사에게 보존의무가 있는 정보를 삭제 요청하는 경우에는 당사는 귀하의 요청에 응하지 않을 수 있습니다. 이러한 권리를 행사하려면 아래 제10항에 따라 당사에 연락하여 주시기 바랍니다.

이러한 권리는 귀하의 법정대리인이나 위임을 받은 자 등 대리인을 통하여 행사될 수 있습니다. (다만, 만 14세 미만 아동의 경우 법정대리인이 직접 이러한 권리를 행사하여야 합니다). 대리인을 통하여 권리를 행사하는 경우 「개인정보 처리 방법에 관한 고시(개인정보보호위원회고시 제2020-7호)」 별지 제11호 서식에 따른 위임장을 제출하셔야 합니다.

귀하가 귀하의 요청에 대한 당사의 대응에 대해 만족하지 못한 경우, 귀하는 개인정보 분쟁조정위원회 등 유관 기관에 이에 대한 상담 등을 문의할 수 있습니다.
9. 개인정보 처리방침의 변경
때때로 본 개인정보 처리방침을 업데이트해야 할 수도 있습니다. 당사는 귀하의 계정을 통해 본 개인정보 처리방침의 변경 사항을 알려드릴 것입니다. 개인정보 처리방침의 변경과 관련하여 관련 법률에 따라 귀하의 동의를 얻어야 하는 경우, 당사는 귀하에게 동의를 요청하겠습니다.
10. 연락처 정보
개인정보 보호에 관한 우려, 불만 또는 질문이 있는 경우 다음 연락처로 문의하십시오.

대한민국 거주자의 경우

당사는 대한민국 법률 및 규정에 따라 국내대리인을 다음과 같이 지정할 것입니다.

명칭: Sony Korea Corporation (대표자: Okura Kikuo)
주소: 24F, One IFC, 10 Gukjegeumyung-Ro, Yeoundeungpo-Gu, Seoul, Korea
연락처: 02-1588-0911 / mailto:[email protected]

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy
LAST UPDATED: November 20th, 2021


This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and service called as “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.
In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
SUMMARY OF KEY POINTS
• We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.
• Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8. Privacy Rights” to learn more about this.
• We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.
• Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect the following information:

(a) Mandatory Information: Your credential information (e.g., first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password); and
(b) Optional Information: Your demographic information (e.g., gender).

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us as follows:

(a) Mandatory Information: Payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:
• Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
• Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
• Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:

To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com) and the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or NAI, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.

Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
We will use the Collected Data for the following purpose:
• Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;
• Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;
• Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.
• User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;
• Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;
• Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).
• Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
• Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.
• Other: In any other way, with your consent or permitted under applicable law.
3. Who else has access to the Collected Data?
We will make the Collected Data available to third parties as follows:
Third-Party Service providers
We process your Personal Information strictly for the purpose set out in Section 2 and we will disclose it to third parties in compliance with Articles 17 and 18 of the Personal Information Protection Act, which sets out the circumstances in which we may disclose your Personal Information (e.g. with your consent, as required by law and etc.).
Engagement of third party data processors
In order to facilitate efficient processing of your Personal Information, we engage third parties to process Personal Information on our behalf. We monitor and manage the third party’s processing of Personal Information in accordance with the Personal Information Protection Act.
- Data Processor: Sony Payment Services Inc.
- Details of processing: Processing payments.
- Data Processor: Kuore Inc.
- Details of processing: Customer support-related communications.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
Duration of processing and storing Personal Information
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, the Collected Data shall be destroyed in accordance with our policies.

The relevant duration for storage under the law in relation to online services is as follows.

・Preservation of the records on transactions, such as marks, advertisements and contents of the contracts and execution thereof under the Act on the Consumer Protection in Electronic Commerce, Etc.
- Records relating to marks and advertisements: 6 months
- Records relating to contracts or withdrawal from contracts, payments and provision of goods: 5 years
- Records relating to customer complaints or dispute resolution: 3 years
・Preservation of the communication confirmation data under Article 41 of the enforcement decree of the Protection of Communications Secrets Act
- the date of telecommunications by the subscribers, the time that the telecommunications commence and end, the subscriber number of the other party, the frequency of use, and the data on tracing a location of information communications apparatus connecting to the information communications networks: 12 months
- the computer communications or Internet log records relating to facts that the users of computer communications or the Internet have used the telecommunications services, and the data on tracing a location of connectors capable of confirming the location of information communications apparatus to be used by the users of computer communications or the Internet for connecting with the information communications networks: 3 months
Destruction of Personal Information
We destroy your Personal Information when:
(a) the permitted duration for storage and use of your Personal Information has expired; or
(b) we no longer require your Personal Information (e.g. when we have accomplished our purpose).
If we are required to retain your Personal Information beyond such time under the applicable law, we keep your Personal Information in a separate database or a different location.
• Printed material containing Personal Information: We either shred the material using a shredder or incinerate it.
• Electronic files containing Personal Information: We delete the files using special technology to make them irrecoverable.
5. International Transfer of the Collected Data and Consent for Processing
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions.

By activating the Online Service or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, as an overseas authority.

We transfer your Personal Information to overseas as follows:

Recipient of the Personal Information (Contact Details): Sony Music Solutions Inc. (E-mail: /s/excglb/form/inquiry?ima=4803)
Countries to which the Personal Information is transferred: Japan, United States of America
Recipient’s Purpose of Using Personal Information: for the purposes set out in Section 2 of this privacy policy
Personal Data to be Transferred: all of Collected Data
Date and Method of Transfer: transmitting via networks during the provision of services
Period of Use and Retention by the Recipient: 60 months after you unsubscribe from our service.
6. Security
We undertake reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.

We have implemented the following measures.
• Organizational measures: Establishing and executing internal management plan. Regular staff training and etc.
• Technical measures: Restricting access to the system that processes personal information, installing access restriction system, encryption of personally identifiable information and installing antivirus software.
• Physical measures: Restricting access to the computer room and the information archive.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 14. If you are a parent or guardian and are concerned that your child has provided us with personal information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
In some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below.
These rights may be exercised by your legal representative or authorized person or parent (Note: if you are under 14 years of age, your legal representative, authorized person or parent must exercise such rights on your behalf). If you wish to do so, you need to submit a power of attorney in the form specified in Appendix 11 of the notification in relation to the processing of personal information (Personal Information Protection Commission Resolution No. 7 (2020)).
If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.
9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent..
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

FOR RESIDENTS IN KOREA:

We would designate a domestic representation according to Korea laws and regulations as following:
Name: Sony Korea Corporation (CEO: Okura Kikuo)
Address: 24F, One IFC, 10 Gukjegeumyung-Ro, Yeoundeungpo-Gu, Seoul, Korea
Contact information: 02-1588-0911 / mailto:[email protected]

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition”隱私政策
最新更新日期:November 20th, 2021



本隱私政策說明本公司如何就取得之蒐集、利用、揭露及/或儲存有關 台端透過電腦、行動裝置或其他科技技術使用本公司網站https://2021.sao-ex-chronicle.com/s/excglb及服務“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”)(合稱「本公司線上服務」)之資訊或資料,另說明 台端之資料保護權,包括 台端對於本公司部分處理行為之拒絕權。有關 台端之權利及行使方法之進一步資訊,詳見以下第8條。

本隱私政策中,「本公司」一詞指Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan)(下稱「SMS公司」) 及SMS公司所控制之任何法律實體(本文之「控制」一詞指對該公司直接或間接持有百分之五十(50%)以上具表決權之利益或具有控制該實體管理決策之實質權力)。
重點摘要
・本公司利用蒐集資料(定義如下)向 台端提供本公司線上服務之特色及功能,以及台端要求之其他與本公司服務及其他提供項目有關內容。欲知本項之詳情,請參閱「第1條。本公司於 台端使用本公司線上服務時所蒐集之資料」及「第2條。本公司如何利用蒐集資料」。

・台端按 台端所在地而定享有特定權利,包括對於本公司部分處理行為之拒絕權。欲知本項之詳情,請參閱「第8條。隱私權」。

・本公司委託第三人代本公司處理資料時,如法律規定或於其他特定情形下須分享蒐集資料,本公司將揭露蒐集資料。欲知本項之詳情,請參閱「第3條。得以存取蒐集資料之人」。

・蒐集資料按 台端所在地而定得自 台端之本國/本地區移轉至美國、日本及可能未提供與 台端本國/本地區相同程度之資料保護之管轄區。欲知本項之詳情,請參閱「第5條。蒐集資料之國際移轉及處理同意」。
1. 本公司於 台端使用本公司線上服務時所蒐集之資料
本隱私政策所稱「個人資訊」指關於經識別或可識別之個人或與之相關之任何資訊,包括即使單獨使用該資訊即無從辨別該個人,但併同本公司儲存之其他資訊使用時可辨別個人之資訊。本公司就 台端對本公司線上服務之使用將蒐集及利用以下所述之資訊或資料(合稱「蒐集資料」),部分蒐集資料依 台端管轄區之適用法律可能視為「個人資訊」。
台端向本公司提供之資訊:
登記資訊:
台端需持有合格之本公司帳戶,包含SAO帳戶,或以其他任何支援本公司線上服務單一登入認證之其他發行商帳號(下稱「外部帳戶」),始得使用本公司線上服務。如 台端並未持有任何SAO帳戶,建議  台端開設本公司線上服務之新帳戶 台端新設及登記帳戶時,本公司將蒐集 台端向本公司提供之 台端驗證資訊,如 台端之姓名、電子郵件地址、使用者名稱、郵政編碼、郵政地址、電話或行動電話號碼及密碼,以及 台端向本公司提供之 台端性別等個人基本資訊。

當 台端使用外部帳戶登入本公司線上服務,於一般的情況,本公司僅會取得 台端帳戶名稱以及因於外部發行商驗證登錄所生之驗證代碼(Token)。 台端應注意本公司自發行商所蒐集之資訊取決於 台端於該發行商所進行之隱私權設定,以及 台端授權予本公司就本公司線上服務所享有之相關權限。本公司不會對發行商分享任何蒐集資料。該發行商所擁有 台端之個人資訊均由發行商獨立於本公司服務所個別取得,本公司並不承擔任何責任。

付款資訊:
如 台端擬購買本公司線上服務之本公司收費服務及相關內容,本公司將蒐集 台端向本公司提供之 台端付款資訊,如付款卡號、信用卡安全驗證碼及有效日期。

使用者原創內容:
台端使用本公司線上服務之聊天功能時,本公司將蒐集 台端選擇於該處發布之任何內容,包括 台端選擇發布之任何聊天訊息、照片、影片及音訊。如 台端向本公司提供照片或影片,該等影像可能包括顯示其相關資訊之原資料,包括但不限於影像錄製地點與時間。

如 台端選擇不提供上述資訊,本公司即無法提供本公司線上服務。

本公司自動蒐集之資訊:
除 台端選擇向本公司線上服務提供之任何資訊外, 台端造訪本公司線上服務或與本公司線上服務互動時,本公司及任何第三人分析提供者或其他服務提供者得採用多項自動或被動蒐集本公司線上服務之存取及使用方法資訊(「使用資訊」)之技術。使用資訊包括但不限於有關軟件應用程序和外圍設備的信息(例如用戶語音數據、用戶動作數據、唯一標識符、性能、配置、功能的使用和使用頻率)、瀏覽器類型、作業系統、提供之頁面、本公司線上服務之存取使用時間及先前瀏覽次數。視法律規定,使用資訊將視為個人資訊。

本公司亦得自動蒐集 台端用以存取本公司線上服務之電腦、行動裝置、技術或其他裝置(合稱「裝置」)之IP位址或其他個別識別碼(「裝置識別碼」)。裝置識別碼為 台端存取網域資產或其伺服器時自動獲發之號碼,本公司電腦即憑 台端裝置之裝置識別碼識別 台端裝置。部分行動服務提供者亦得向本公司或本公司第三人服務提供者提供有關用以存取本公司線上服務之裝置之實際位置資訊。

本公司線上服務用以蒐集使用資訊之裝置識別碼等技術包括:

・Cookies:「Cookies」(可能為html檔、Flash檔或其他技術)為協助儲存使用者偏好及活動之小型文字檔,使用者使用裝置存取或造訪本公司線上服務時,cookie將置放於該裝置上。Cookies得按多種目的使用,如記住 台端及 台端之偏好設定、追蹤 台端至本公司線上服務之造訪,及定製 台端之本公司線上服務體驗。 台端得設定 台端瀏覽器或裝置,以阻擋特定cookies之使用,但請注意,如 台端選擇關閉 台端裝置之cookies,本公司線上服務之部分功能及本公司線上提供項目可能無法正常運作。
・網路信標:「網路信標」(亦稱作圖片標籤、像素標籤、透明GIF圖檔或網頁蟲)為小型代碼,用以蒐集廣告資料,如計算網頁瀏覽次數、推廣瀏覽次數或廣告回應。網路信標或類似技術得按多種目的使用,包括但不限於計算本公司線上服務之造訪人次、監督使用者對本公司線上服務之瀏覽方式、計算電子郵件寄出後實際開啟之郵件數量,或確定內容寄出後是否實際觀看。
・內嵌文本:內嵌文本為程式碼,用以蒐集關於 台端與本公司線上服務互動之資訊,如 台端點選之連結。該程式碼自本公司伺服器或第三人服務提供者暫時下載至 台端之裝置,僅於 台端連接本公司線上服務期間始予啟用,連接結束後即停用或刪除。

請注意, 台端造訪或使用本公司線上服務或其他線上網站及服務時,第三人得陸續於不同網站蒐集關於 台端線上活動之個人資訊,舉例而言,部分第三人於本公司線上服務之內嵌內容或外掛內容(如社群媒體分享工具)之操作者可獲知 台端曾造訪本公司線上服務或曾與本公司線上服務互動,其即可能將此資訊與其他經其蒐集關於 台端至其他網站或線上服務之造訪之可識別資訊相結合。該等第三人得依其自身的隱私政策處理上述資訊及其他經其透過其內容及外掛內容直接蒐集之其他資訊。
線上追蹤。部分網路瀏覽器設有「請勿追蹤」功能,向 台端造訪之網站表明, 台端不希望 台端之線上活動受到追蹤。瀏覽器對請勿追蹤信號之傳輸方式尚未統一,因此,除依法規定外,本公司線上服務對於該信號將不予回應。
本公司得使用之廣告投放及網路流量量測服務:
本公司授權技術得於本公司線上服務及其影片中及網際網路提供之其他內容投放廣告,本公司另得使用第三人網路廣告商於本公司線上服務投放廣告,亦得使用第三人分析服務提供者(例如Google Analytics)評估本公司線上服務之使用情形及本公司內容之瀏覽情形並向本公司提供關於該使用及瀏覽情形之資訊。對於 台端向本公司提供之資訊,如 台端之姓名及/或電子郵電地址,本公司不會與上述第三人分享,但廣告網路提供者、廣告商、贊助商及/或分析服務提供者得自本公司線上服務設定及存取 台端裝置之cookies、網路信標及內嵌文本,該等cookies、網路信標及內嵌文本得陸續蒐集 台端對於本公司線上服務及其他第三人網站或應用程式之個人資訊及其他使用資訊,並得以其他方式蒐集或存取關於 台端之資訊,包括使用資訊。Cookies及網路信標(包括第三人網路廣告商所設定者)得用以鎖定廣告,避免 台端觀看相同廣告之次數過高,亦得用以研究特定廣告對 台端之效用。

如欲選擇停用上述cookies,請選擇如下:
如欲普遍性的停用行動最佳化或桌上型網站上按興趣顯示之廣告,請至美國數位廣告聯盟(DAA)(網址http://youradchoices.com)、網絡廣告聯盟(NAI)(網址https://www.networkadvertising.org/)。就本公司之行動應用程式,請更新 台端之裝置設定。請注意, 台端若選擇停用上述cookies,可能仍會收到廣告,但 台端選擇停用cookies之網路將不再寄送符合 台端興趣之廣告。
如欲選擇停用作為了解造訪者如何與本公司線上服務互動用途之Google Analytics,請至網址https://tools.google.com/dlpage/gaoptout
請檢閱 台端之網際網路瀏覽器設定(一般於「說明」或「網際網路選項」下之設定」),就非屬DAA或NA之cookies做出 台端之選擇。
有關如何設定 台端瀏覽器之設置以拒絕非屬DAA或NAI之公司提供cookies之說明,請點選此處或前往https://www.allaboutcookies.org/manage-cookies/。 台端亦得搜尋並刪除內含「cookie」之檔案,以刪除 台端電腦硬碟內之所有cookies。
其他停用選項: 台端得設定 台端瀏覽器或裝置之設置,以阻擋部分cookies之使用。
請注意,刪除特定cookies後, 台端可能難以使用線上服務之特定功能。
社群媒體應用程式:
本公司線上服務之功能允許本公司線上服務與臉書、推特等第三方網域資產互動,俾 台端得以對產品或線上內容按「讚」、將內容「分享」至其他網域資產,及以其他方式將本公司線上服務連結至其他第三人網域資產。如 台端選擇對內容按「讚」、「分享」內容,或以其他方式自本公司線上服務或透過本公司線上服務發布資訊至第三人網域資產,該資訊可能成為公開資訊,該第三人網域資產因此可能得以存取關於 台端之資訊及 台端對於本公司線上服務之使用資訊。

台端亦得選擇加入第三人應用程式或功能(如第三人網域資產上之臉書應用程式或類似之應用程式或功能,或以其他方式將本公司線上服務連結至其他網域資產),透過該程式或功能准許本公司蒐集(或准許第三人分享)關於 台端之資訊,包括個人資訊。如 台端選擇加入,即表示 台端選擇將 台端之本公司線上服務活動連結至該第三人網域資產,該第三人網域資產即得蒐集關於 台端對本公司線上服務之造訪資訊,並依 台端要求於該第三人之 台端「個人檔案頁面」或類似功能公布該活動(例如若 台端選擇與第三人網域資產之 台端「好友」分享 台端於本公司線上服務之一找到之內容)。本公司蒐集之資訊均適用本隱私政策,但第三人蒐集及儲存之資訊仍依第三人對於隱私保護的實際作法而定,包括第三人是否持續與本公司或其他第三人分享資訊、分享之資訊類別,及 台端對於他人可於該第三人網域資產看見之內容選項。第三人得准許 台端移除應用程式或功能,屆時本公司不再透過該應用程式或功能蒐集關於 台端之資訊,但得保留先前依據本隱私政策蒐集之資訊。
第三人內容、與其他網域資產及服務之連結,及本公司於其他網站之內容
本公司線上服務之某些內容得由第三人代管及提供,第三人包括第三人小工具(如俾使 台端得對內容按「讚」、與第三人網站及互動式服務「分享」內容,或提供評比及評論者)。 台端造訪本公司線上服務時,可能被連接至本公司控制範圍以外之第三人所經營及控制之其他網站,包括依聯名協議規定得使用本公司標識之廣告商、贊助商及合作夥伴之連結。本公司之內容及小工具得包含於與本公司無關聯且本公司無控制權之網頁及網站之內,該等其他網站可能會發送其cookies至 台端裝置,並得獨自蒐集資料或徵求個人資訊。對於任何第三人之隱私作為,本公司概不負責。
2. 本公司如何利用蒐集資料
本公司按下列目的利用蒐集資料:
・開戶:本公司利用 台端驗證資訊開設 台端帳戶,供登入本公司線上服務及其他相關服務之用;

・提供服務:本公司利用蒐集資料操作、維持、增強及提供本公司線上服務之特色及功能,包括處理 台端之註冊、 台端之訂單及付款,及向 台端提供影音串流服務;

・通訊:本公司按管理及提供資訊之目的利用蒐集資料與 台端就本公司線上服務進行往來通訊,舉例而言,通訊包括回應 台端之詢問或要求、顧客支援相關之通訊,及本公司條款與條件或政策之任何變更;

・使用者經驗:本公司利用蒐集資料向 台端提供產品、內容及服務之專用資訊以及 台端可能感興趣之建議、廣告、推廣或提供項目,藉以對 台端提供本公司線上服務之個人化經驗。

・服務提升及開發:本公司利用蒐集資料分析及了解本公司用戶之使用趨勢及偏好,藉以提升並最佳化本公司服務(包括本公司線上服務),以及開發新產品、內容、服務、特色及功能。

・法規遵循:本公司利用蒐集資料確保本公司內部政策、與利益關係人間之協議、適用法規、法院命令、政府及執法單位之要求皆予遵循。本公司亦利用蒐集資料執行或防衛本公司之法律權利或本公司任何服務之條款與條件,或為符合特定之法律保存規定、法定查核及其他記錄保存目的(包括符合內外部之查核規定)保存及儲存 台端之個人資訊。

・詐欺防治及調查:本公司將利用蒐集資料遵守監控、防治、偵測及調查義務、遵守確定及舉報非法及不法活動之相關法律,包括詐欺及洗錢防治,以及遵守財務申報義務。
・安全:本公司將利用蒐集資料維護本公司網站、內容及服務之完整性及安全,及防止及偵測安全威脅、詐欺或其他可能損及 台端裝置之犯罪或惡意活動。

・其他:經 台端同意或相關法律准許之其他任何方式。
3. 得以存取蒐集資料之人
本公司將按下列規定向第三人提供蒐集資料:
第三方服務提供者
本公司得使用本公司內部所使用第三方服務提供者處理蒐集資料,該等服務提供者係按進行本隱私政策所述之活動目的擔任處理者。
業務移轉
如本公司出售或移轉本公司業務之一部或全部,蒐集資料得由本公司於交易中移轉至承買或收購方。該交易發生前,本公司將持續確保蒐集資料之保密性,交易後將於合理可行之範圍內盡速刪除蒐集資料。
法遵及執行
如法規或命令規定或准許,本公司將予保存、利用及/或揭露任何蒐集資料,包括向警方或其他適當機關為之,藉以調查 台端提出或受他人提出之申訴,或保護或防衛本公司或他人免受非法、犯罪或有害活動之影響。
4. 資料保存及蒐集資料之管理
台端刪除 台端帳戶後,除當地法律規定本公司須按較長期間保留蒐集資料外,本公司將持續保留蒐集資料60個月。請注意,本公司可能依法規定須保存特定資訊。本公司不再需要蒐集資料時,將依本公司政策予以銷毀或去識別化,本公司所稱去識別化意指本公司將移除可用以自蒐集資料識別 台端身分之資訊。
5. 蒐集資料之國際移轉及處理同意
蒐集資料將按本隱私政策所述之目的處理、儲存及自 台端居住國/地區移轉至 台端居住國/地區外之不同國家/地區,包括日本與美國。蒐集資料將由 台端居住國/地區以外、代本公司或本公司服務提供者工作之職員處理,得由上述職員於該等國家/地區看見。

如 台端啟動本公司線上服務或向本公司提供任何資訊,即表示 台端充分了解及同意, 台端之資訊得於美國及其他管轄區移轉、處理及儲存如上,而當地之隱私政策法律可能不及 台端所居住及/或為公民之國家/地區完善。

台端於 台端當地管轄區及相關海外管轄區之權利可能因此受影響,該等海外管轄區亦可能需以海外機關之身分向第三人揭露 台端之個人資訊。
6. 安全
本公司採取合理安全措施,藉以保護蒐集資料免遭遺失、誤用或更改。本公司極為重視資訊安全,但無法保證或擔保本公司於本公司系統或本公司第三人承商之系統所儲存之任何資訊絕對安全。
7. 兒童隱私
本公司致力遵循有關兒童個人資訊之蒐集、儲存及利用之所有適用法規,包括美國兒童網路隱私保護法及其他國家/地區之當地適用法律。本公司線上服務之對象為一般大眾而非未滿16歲之兒童,亦未有意蒐集未滿16歲兒童之個人資訊。該兒童歲數可能因 台端居住國/地區而異。如 台端為父母或監護人且擔心 台端子女已未經 台端同意向本公司提供個人資訊, 台端應依下列第10條之方式聯繫本公司。
8. 隱私權
對於本公司持有關於 台端之個人資訊,台端於部分國家/地區享有特定權利,包括查閱本公司或本公司集團公司持有關於 台端之蒐集資料及/或請求製給副本之權利,及/或 台端得請求本公司提供該蒐集資料之副本及更正、修改、刪除、消除、銷毀、反對或阻止/限制該蒐集資料之處理及/或使用。 台端於部分國家/地區亦得請求本公司以結構化之機讀格式提供特定種類之資訊,並請求本公司與其他控管者分享(移植)該等資料。上述權利可能受有限制,舉例而言,如因配合 台端之請求致揭露他人之個人資料時,或如 台端請求本公司刪除本公司依法規定須予保留之資訊或其保留符合本公司充分合法利益之資訊時, 台端之上述權利則可能受有限制。如 台端擬行使上述任何權利,請依下列第10條規定之方式逕洽本公司。如 台端對於本公司處理 台端疑問或疑慮之方式感到不滿意,或對本公司處理個人資料之方式有所投訴, 台端有權向當地資料保護監理機關提出申訴。
9. 變更
本公司可能隨時需要更新本隱私政策。如本隱私政策有任何重大變更,本公司將透過 台端帳戶通知 台端,如適用法律規定本公司須取得 台端之同意,本公司將向 台端徵求 台端同意。
10. 聯絡資訊
如 台端對於隱私方面有任何疑慮、申訴或疑問,請洽下列單位人員:

Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy
LAST UPDATED: November 20th, 2021



This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and service called as “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.

In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
SUMMARY OF KEY POINTS
・We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.

・Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8. Privacy Rights” to learn more about this.

・We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.

・Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

If you choose not to provide the above information, we will not be able to provide the Online Service.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). "Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

・Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
・Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
・Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com), and the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or NAI, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.
Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
We will use the Collected Data for the following purpose:
・Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;

・Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;

・Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.

・User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;

・Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;

・Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).

・Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
・Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.

・Other: In any other way, with your consent or permitted under applicable law.
3. Who else has access the Collected Data?
We will make the Collected Data available to third parties as follows:
Third-party service providers
In addition, we may use our internal third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy, acting as processors.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5. International Transfer of the Collected Data and Consent for Processing
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions.

T By activating the Online Service or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, as an overseas authority.
6. Security
We undertake reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 16. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with personal information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
IIn some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to review and/or request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.
9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy
LAST UPDATED: November 20th, 2021



This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and service called as “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.

In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan)(“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
SUMMARY OF KEY POINTS
・We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.

・Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8. Privacy Rights” to learn more about this.

・We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.

・Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). "Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

・Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
・Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
・Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com), and the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or NAI, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.
Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
We will use the Collected Data for the following purpose:
・Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;

・Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;

・Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.

・User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you. You may opt-out of such advertisements, by visiting our website;

・Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;

・Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).

・Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
・Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.

・Other: In any other way, with your consent or permitted under applicable law.
3. Who else has access the Collected Data?
We will make the Collected Data available to third parties. Any entity or person partaking in the processing of data will be subject to professional secrecy.
Third-party service providers
In addition, we may use our internal third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy on our behalf, acting as data processors.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5. International Transfer of the Collected Data and Consent for Processing
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions.

T By activating the Online Service or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, as an overseas authority.
6. Security
We undertake reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 16. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with personal information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
In some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.
9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy
LAST UPDATED: November 20th, 2021



This Privacy Policy explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and video streaming service called “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights. More information about your rights, and how to exercise them, is set out in Section 8 below.

In this Privacy Policy, “we”, "us" and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan)(“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity.)
SUMMARY OF KEY POINTS
・We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1. What data do we collect when you use the Online Service” and “Section 2. How we use the Collected Data” to learn more about this.

・Depending on where you are located, you have certain rights. Please read “Section 8. Privacy Rights” to learn more about this.

・We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3. Who else has access to the Collected Data?” to learn more about this.

・Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions. Please read “Section 5. International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1. What data do we collect when you use the Online Service
For the purpose of this Privacy Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service ("External Account"). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor.
Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). "Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views. Usage Information is treated as personal information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

・Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
・Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
・Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.
Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com) and the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests.
In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout.
Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI.
For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.
Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies.
Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including personal information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Privacy Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Privacy Policy.
Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2. How we use the Collected Data
We will use the Collected Data for the following purpose:
・Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;

・Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;

・Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.

・User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;

・Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;

・Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).

・Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
・Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.

・Other: In any other way, with your consent or permitted under applicable law.

To elaborate on the former, consent is deemed to have been obtained from you:

⚪︎if we have notified you of our intention to and the purpose for which we will collect, use or disclose your personal information, and you have not taken any action to opt out of such collection, use or disclosure within the period stated;

⚪︎where it is reasonably necessary for us to disclose your personal information to other third parties (including on a downstream basis) so that we can perform our obligations to you; or

⚪︎where you have voluntarily provided us with your personal information.

To elaborate on the latter, your consent is not required when we use your personal information to:

⚪︎to improve, enhance or develop new services that can be provided to you;

⚪︎improve, enhance or develop new methods or processes for our business operations with respect to our services;

⚪︎learn or understand your behaviour and preference; or

⚪︎identify services that may be suitable for you, or personalising or customising any such services for you.
3. Who else has access the Collected Data?
We will make the Collected Data available to third parties as follows:
Third-party service providers
In addition, we may use our internal third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy, acting as processors.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4. Data Retention, Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5. International Transfer of the Collected Data and Consent for Processing
C Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions. The Collected Data transferred outside of Singapore will be protected at a standard that is comparable to that under the PDPA.

This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, as an overseas authority.
6. Security
We undertake reasonable security measures designed to protect against the unauthorised access, unauthorised collection, unauthorised disclosure, unauthorised copying, loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7. Children’s privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of personal information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience; it is not directed to and does not knowingly collect personal information from children under the age of 16. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with personal information without your consent, you should contact us as indicated in Section 10 below.
8. Privacy Rights
In some countries/regions, you have certain rights with respect to the personal information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal information about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests (such as business purposes) in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal information, you may lodge a complaint with the local data protection supervisory authority.
9. Changes
From time to time we may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10. Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

I. SUMMARY PRIVACY POLICY


This Summary Privacy Policy ("Summary") explains how we, Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity) by SMS (“We”, "Us" and "Our") collect, use, disclose and/or store information or data of any kind (e.g., your name, email-address, address etc.) about or related to you, even if such information cannot directly identify you on its own but can be used in combination with other information that is stored by Us ("Personal Data") in connection with Our websitehttps://2021.sao-ex-chronicle.com/s/excglband service whether accessed via computer, mobile device or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which We carry out. More information about your rights, and how to exercise them, is set out in the Full Privacy Policy below.
1.Scope of Applicability
This Summary and the Full Privacy Policy (together the ("Privacy Policy") apply to you if you use the Online Service.
2. Processing of your Personal Data
We collect and use the following Personal Data related to your use of the Online Service:
a. Information you provide to Us, such as registration and payment information, e.g., your email address, username or payment card number as well as the content you generate when using the chat function of the Online Service including any chat messages, photos or other content you post there.
b. Information that We collect automatically (as the case may be, subject to your consent), such as your IP address or other identifiers for the device you use to access the Online Service, technologies such as Cookies or Web Beacons.
c. Information We receive from third parties, e.g., service providers that work on Our behalf, which may provide Us with information that is necessary to validate your transaction in case you choose to apply your credit card for payment. Further, We may receive information on how you use the Online Service or third party websites from third party analytics service providers, ad network providers or social media applications that We make use of and which may process certain Personal Data about you subject to their privacy policies and/or terms of use.
3. Processing Purposes
We collect and use your Personal Data related to your use of the Online Service (collectively, the "Collected Data") to provide you with features and functions of the Online Service, and to provide you with other requested content related to Our services and other offerings.
4. Legal Justifications for the Processing of the Collected Data
One of the key privacy law requirements is that any processing of Personal Data has to have a legal justification. We generally use the following legal justifications: the Processing is necessary for (i) the performance of a contract (Art. 6(1)(b) GDPR, (ii) compliance with a legal obligation (Art. 6(1)(c)GDPR), (iii) realizing a legitimate interest (Art. 6(1)(f) GDPR), and, (iv) if you have provided your prior consent, we also rely on such (Art. 6 (1)(a) GDPR).

5. Data transfers and Recipients including International Data Transfers
In accordance with applicable law, We transfer your Personal Data to Our service providers, third parties (e.g., third party service providers, business partners), and, as the case may be, governmental authorities, courts, external advisors, and similar third parties. Some of the aforementioned recipients are located in jurisdictions outside the European Union / European Economic Area (jointly the "EU") and United Kingdom such as the United States, Japan, and/or other jurisdictions that may not provide the same level of data protection as your home country/region.
6. Retention periods for and deletion of Collected Data
Collected Data will generally be deleted once they are no longer needed for the purposes motivating their original collection or as required by applicable law.
7. Your statutory rights
As set forth by applicable law, you have certain rights with regard to the Processing or your Personal Data, each as per the conditions defined in applicable law, such as the right to get access to your data, to get them corrected, erased or handed over. Please refer any of your questions to https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry
8. Changes to this Privacy Policy
From time to time, We may have to update this Privacy Policy. We will let you know of any material changes to this Privacy Policy through your account.
9. Contact Information and how to contact Us
If you have any questions regarding this Privacy Policy please contact Our representative in the UK pursuant to Art. 27 (1) of the UK GDPR:

Name: Sony Europe BV
Address: The Heights, Brooklands, Weybridge, Surrey KT13 0XW, The United Kingdom
email: [email protected]

If you wish to exercise your data subject rights, have a privacy concern, complaint or any other question how we process Personal Data, please contact Our Data Protection Officer by mail or email:
Name: Tadahiko Shida
Address: Midtown Tower, 9-7-1, Akasaka, Minato-ku, Tokyo, 107-6214 Japan
email: https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry

II. FULL PRIVACY POLICY


1. Processing of your Personal Data
We process the following Personal Data related to your use of the Online Service:
a. Personal Data you provide to Us:
(1) Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts ("External Account") of an external content distributor ("Content Distributor") that are supported for authentication with single sign-on to Our service provider's platform. If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, We collect your credential information that you provide to Us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide to Us, such as gender.

If you sign in the Online Service with the External Account, in general, We will receive only the name of your account and tokens as a result of sign-in authentication from the Content Distributor.

Please note that the information We collect from and through the Content Distributor may depend on the privacy settings you have set with that Content Distributor and the permissions you grant to Us in connection with linking the Online Service. We do not share any Collected Data with that Content Distributor. The personal information that Content Distributor has about you is obtained by them independent of Our service and We are not responsible for it.

Payment Information:
When you wish to purchase Our paid service and related contents on the Online Service, We collect your payment information that you provide to Us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, We collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide Us with photos or videos, such images may include metadata, which can indicate information about the images, including but not limited to, where and when the image was taken.

b. Personal Data We collect by technical means:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, We, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used, including but not limited to, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, and the preceding page views, which might be qualified as Personal Data ("Usage Information"). We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and Our computers identify your Device by its Device Identifier. Some mobile service providers may also provide Us or Our third-party service providers with information regarding the physical location of the Device used to access the Online Service. The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

• Cookies, which may be html files, Flash files or other technology, are small text files that help store user preferences and activity ("Cookies"). A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and Our online offerings may not function properly.

• Web Beacons, also known as image tags, pixel tags, clear GIFS or web bugs, are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses (“Web Beacons”). Web Beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent emails were actually opened or to determine whether content sent was actually viewed.

• Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from Our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

• Ad Serving and Traffic Measurement Services We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, We may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide Us with information about the use of the Online Service and viewing of Our content. We do not share the information that you provide to Us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect personal information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.

Please note that third parties may collect personal information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies. Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.

c. Personal Data We Receive from Third Parties
(1) Service providers acting on Our behalf:
We may receive Personal Data about you from service providers working on Our behalf. For example, if you choose to apply your credit card for payment, We may receive Personal Data through Our third-party payment provider in order to validate the transaction as part of Our anti-fraud efforts. We also use this third-party payment service to collect and store your Personal Data so that We can meet Our financial reporting requirements. We may obtain this Personal Data to fulfill Our tax reporting obligations. In addition, if you use another property and you opt-in to receive information from Us, that property may forward to Us your email address and other Personal Data so that We may contact you as requested. We may also supplement the Collected Data with outside records from third parties to enhance Our ability to serve you, to tailor Our content to you and to offer you opportunities to purchase products, contents or services that We believe may be of interest to you. We may combine the Personal Data We receive from these third parties with Collected Data. In those cases, We will apply this Privacy Policy to any Personal Data received, unless We have disclosed otherwise.

(2) Social Media Applications that Provide Personal Data to Us: Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to your Personal Data and information regarding your use of the Online Service. You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow Us to collect (or the third party to share) your Personal Data. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The Personal Data We collect is subject to this Privacy Policy. However, the Personal Data collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with Us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case We will no longer collect Personal Data about you through the application or feature, but We may retain the Personal Data previously collected in accordance with this Privacy Policy.
2. Processing Purposes
We will use the Collected Data for the following purposes:
a. Account Creation:
We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;
b. Service Provision:
We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;
c. Communications:
We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of Our terms & conditions or policies.
d. Marketing:
We use the Collected Data to send you information by email or through other electronic communications on Our products, contents and services, or other promotions, etc.
e. User Experience:
We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;
f. Service Improvement and Development:
We use the Collected Data to optimize and improve Our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of Our users;
g. Compliance with Law:
We use the Collected Data to ensure compliance with Our internal policies, agreements with Our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend Our legal rights or the terms and conditions of any Our service, or to retain and store your personal information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).
h. Fraud prevention and investigation:
We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
i. Security:
We will use the Collected Data to maintain the integrity and security of Our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.
j. Other:
In any other way, with your consent or permitted under applicable law.
3. Legal Justifications of the Processing of your Personal Data
For the purpose of this Privacy Policy, “EU” includes the United Kingdom, even though the United Kingdom has left the EEA following Brexit, and, where applicable, Switzerland. We rely on the following legal bases for processing the Collected Data. If you are in the United Kingdom, references to Articles of the GDPR in this Privacy Policy shall also mean the equivalent provisions under the GDPR as incorporated into the laws of the United Kingdom (“UK GDPR”):
a. Performance of Contract, Art 6 (1)(b) GDPR:
We use the Collected Data to provide you with the Online Service. For example, We use your account information to verify your identity, provide you with the access to the Online Service, communicate with you regarding your use of the Online Service or notify you of important changes to the Online Service. Such use is necessary for the performance of the contract between you and Us.
b. Legitimate Interest, Art 6 (1)(f) GDPR:
We, or a third party, have legitimate interest in using the Collected Data. In particular, We have a legitimate interest in using the Collected Data to improve and develop Our products, contents and services, to personalize your experience on the Online Service and provide you with tailored information of products, contents and services, and improve the safety, security, and performance of the Online Service. When We process the Collected Data for Our legitimate interests, We make sure to consider and balance any potential impact on you, and your interests, rights and freedom under any applicable laws. We will not use the Collected Data for any processing where Our interests are overridden by the impact on you, unless We have your consent for Our processing, or otherwise required by law. You have the right to object to processing that is based on Our legitimate interests, as indicated in Section 7 below.
c. Legal Obligation, Art. 6 (1)(c)GDPR:
We have a legal obligation under EU and/or Member State Law to use the Collected Data, such as the obligation to monitor, prevent, detect and investigate illegal and illicit activity, including fraud and anti-money laundering, and the obligation to provide financial reporting.
d. Consent, Art. 6 (1)(a)GDPR:
If you have provided your prior consent, We may send you information by email or through other electronic communications on Our products, contents and services, or other promotions, etc. Where Our processing is made based on your consent, you have the right to withdraw your consent at any time, as indicated in Section 7 below. For example, where you give Us consent to place cookies and to use similar technologies, you will be able to opt-out of those materials in accordance with the instructions made in Our communication.
The table below summarizes the Personal Data processed for the respective purposes as well as the applicable legal basis.

Processing Purposes Collected Data involved Legal justification
Account Creation registration information (consent, email, name, password, country/region of residence) Consent
Service Provision purchase history, payment information, user generated contents Consent
Communications Name, E-Mail Consent
Marketing registration information, service usage history, purchase history Consent
User Experience n/a Consent
Service Improvement and Development cookie Consent
Compliance with Law registration information, usage information, IP address, other device identifiers Legal Compliance
Fraud prevention and investigation payment information Legal Compliance
Security n/a Consent
Other n/a Consent
4. Data transfers and recipients and legal justification for such transfers
We will make the Collected Data available to third parties as follows:
a. (Third-Party) Service providers
We may use service providers to process the Collected Data, some of which may be internal (i.e., part of SMS) or external (third party) service providers In any case, the service providers are engaged for the purposes of pursuing the activities outlined in this Privacy Policy. Some of the service providers are acting on our behalf as data processors pursuant to Art. 28 GDPR. However, we may also transfer to other third party service providers acting as independent controllers (e.g., lawyers, accountants, auditors, etc.) in accordance with applicable law pursuant to GDPR.
b.Business transfer
In the event that We sell or transfer a portion or all of Our business, Collected Data may be transferred by Us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, We will delete the Collected Data as soon as reasonably practicable after such transaction. To the extent, we transfer Collected Data for such purposes, the transfer is based on GDPR.
c.Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities. To the extent we transfer Collected Data for such purposes, the transfer is based on GDPR.
5. International Transfer of the Collected Data
Collected Data will be processed, stored and transferred for the purposes outlined in this Privacy Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for Us or for one of Our service providers and may be disclosed to such staff in those countries/regions. We take appropriate measures to ensure that all transfers of the Collected Data from the EU to countries/regions outside the EU meet the requirements of applicable EU and UK data protection legislation and to ensure that appropriate technical and organizational security measures are in place to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. Where information is transferred outside the EU, and where this is to a stakeholder or vendor in a country/region that is not subject to an adequacy decision by the EU Commission or adequacy regulations under the UK GDPR (i.e., a country/region that does not provide the same level of data protection as your country/region of residence), data is adequately protected by EU Commission approved standard contractual clauses (2010/87/EU and/or 2004/915/EC, which are accessible via the contact details provided in I. 9. above), or a vendor's Processor Binding Corporate Rules. Any onward transfer is subject to appropriate onward transfer requirements as required by applicable law. Nonetheless, this may impact your data subjects rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your personal information to a third party, e.g., an overseas authority. If you have any questions or concerns about Our data transfer arrangements, please contact Us (see I. 9. above).
6.Retention periods for and deletion of Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells Us to keep it for longer. Please note that We may be required to retain certain information by law. In principle, We will retain the Collected Data only as long as required or permitted by applicable law, in particular as long as the Collected Data may be needed to fulfill or defend against claims that are not yet time-barred. Where We no longer require the Collected Data, it will be destroyed or de-identified in line with Our policies. When We say de-identified, We mean that We will remove information that could be used to identify you from the Collected Data.
7.Ihre gesetzlichen Rechte
Under the conditions set out under applicable law (i.e., the GDPR), you have the following rights:
a. Right of access:
You have the right to obtain from Us confirmation as to whether or not Personal Data concerning you is being processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been or will be disclosed.
b. You have the right to obtain a copy of the Personal Data undergoing processing. For additional copies requested by you, We may charge a reasonable fee based on administrative costs.
c. Right to rectification:
You have the right to obtain from Us the rectification of inaccurate Personal Data concerning you. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
d. Right to erasure (right to be forgotten):
You have the right to ask Us to erase your Personal Data.
e. Right to restriction of processing:
You have the right to request the restriction of processing your Personal Data. In this case, the respective data will be marked and may only be processed by Us for certain purposes.
f. Right to data portability:
You have the right to receive the Personal Data concerning you which you have provided to Us in a structured, commonly used and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from Us.
g. Right to object:
You have the right to object, on grounds relating to your particular situation, at any time to the processing of your Personal Data by Us and We can be required to no longer process your Personal Data. If you have a right to object and you exercise this right, your Personal Data will no longer be processed for such purposes by Us. Exercising this right will not incur any costs. Such a right to object may not exist, in particular, if the processing of your Personal Data is necessary to take steps prior to entering into a contract or to perform a contract already concluded.

Please note that the aforementioned rights might be limited under the applicable national data protection law. Please refer any of your questions to https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry. In case of complaints, you also have the right to lodge a complaint with the competent supervisory authority, in particular in the Member State of your habitual residence or alleged infringement of the GDPR, or if you are in the United Kingdom, the Information Commissioner’s Office (“ICO”).

“SWORD ART ONLINE - EX-CHRONICLE - Online Edition” Privacy Policy Last Updated: November 20th, 2021


This Privacy Policy ("Policy") explains how we collect, use, disclose and/or store your information or data in connection with our website https://2021.sao-ex-chronicle.com/s/excglb and service called “SWORD ART ONLINE - EX-CHRONICLE - Online Edition” (“SAO”) whether accessed via computer, mobile device, or other technology (collectively, the “Online Service”). It also describes your data protection rights, including your right to object to some of the processing which we carry out. More information about your rights, and how to exercise them, is set out in Section 8 below.
In this Policy, “we,” "us," and "our" mean Sony Music Solutions Inc. (Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo 107-6214, Japan) (“SMS”) and any legal entities controlled by SMS (the term “control” in this context means the direct or indirect ownership of at least fifty percent (50%) of the voting interest in such corporation or the power in fact to control the management decisions of such entity).
SUMMARY OF KEY POINTS
・We use the Collected Data (defined below) to provide you with features and functions of the Online Service, and to provide you with other requested content related to our services and other offerings. Please read “Section 1) What data do we collect when you use the Online Service?” and “Section 2) How we use the Collected Data” to learn more about this.
・Depending on where you are located, you have certain rights, including a right to object to some of the processing which we carry out. Please read “Section 8) Privacy Rights (including California Privacy Rights)” to learn more about this.
・We disclose the Collected Data when we engage a third party to process data on our behalf, when such sharing is required by law or in certain other situations. Please read “Section 3) Who else has access to the Collected Data?” to learn more about this.
・Depending on where you are located, the Collected Data may be transferred out of your home country/region to the United States, Japan, and other jurisdictions that may not provide the same level of data protection as your home country/region. Please read “Section 5) International Transfer of the Collected Data and Consent for Processing” to learn more about this.
1) What data do we collect when you use the Online Service?
For the purpose of this Policy, "Personal Information" means any information about or related to an identified or identifiable individual. This includes information that can identify an individual in combination with other information that is stored by us, even if such information cannot identify the individual on its own. In relation to your use of the Online Service, we collect and use information or data as described below (collectively, the “Collected Data”), some of which may be considered “Personal Information” under applicable law in your jurisdiction.
Information you provide to us:
Registration Information:
In order to use the Online Service, you will need to have any of our eligible accounts, including SAO Accounts, or to sign in with any other accounts of the content distributor that is supported for authentication with single sign-on to the Online Service. (“External Account”). If you do not have SAO Accounts, you are recommended to create a new account for the Online Service. When you newly create and register for an account, we collect your credential information that you provide to us, such as your first and last name, email address, username, zip code, postal address, telephone or mobile phone number and password, as well as your demographic information that you provide us, such as gender.

If you sign in the Online Service with the External Account, in general, we will receive only the name of your account and tokens as a result of sign-in authentication from external contents distributor. Please note that the information we collect from and through the content distributor may depend on the privacy settings you have set with that distributor and the permissions you grant to us in connection with linking the Online Service. We do not share any Collected Data with that distributor. The personal Personal information Information that content distributor has about you is obtained by them independent of our service and we are not responsible for it.

Payment Information:
When you wish to purchase our paid service and related contents on the Online Service, we collect your payment information that you provide to us, such as payment card number, CVC code and expiration date.

User Generated Content:
When you use the chat function of the Online Service, we collect any content that you choose to post there, including any chat messages, photos, video and audio that you may choose to post. If you provide us with photos or videos, such images may include metadata which can indicate information about the images, including but not limited to, where and when the image was taken.

Information we collect automatically:
In addition to any information that you choose to provide to the Online Service, whenever you visit or interact with the Online Service, we, as well as any third-party analytics providers or other service providers, may use a variety of technologies that automatically or passively collect information about how the Online Service is accessed and used ("Usage Information"). "Usage Information may include, without limitation, information about software applications and peripheral devices (such as user voice data, user motion data, unique identifiers, performance, configurations, use and frequency of use of the functions), browser type, operating system, the page served, time on the Online Service, geolocation data, and the preceding page views. Usage Information is treated as Personal Information where required by law.

We may also automatically collect your IP address or other unique identifiers ("Device Identifiers") for the computer, mobile device, technology or other device (collectively, "Devices") you use to access the Online Service. A Device Identifier is a number that is automatically assigned to your Device when you access a property or its servers, and our computers identify your Device by its Device Identifier. Some mobile service providers may also provide us or our third-party service providers with information regarding the physical location of the Device used to access the Online Service.

The technologies used on the Online Service to collect Usage Information, including Device Identifiers, include:

・Cookies: "Cookies" (which may be html files, Flash files or other technology) are small text files that help store user preferences and activity. A Cookie is placed on a Device when that Device is used to access or visit the Online Service. Cookies may be used for many purposes, such as remembering you and your preferences, tracking your visits to the Online Service and customizing your experience on the Online Service. You may configure your browser or Device to block the use of certain cookies. However, please note that if you choose to disable cookies on your Device, some features of the Online Service and our online offerings may not function properly.
・Web Beacons: “Web beacons” (also known as image tags, pixel tags, clear GIFS or web bugs) are small pieces of code used to collect advertising data, such as counting page views, promotion views or advertising responses. Web beacons or similar technologies may be used for various purposes, including, without limitation, to count visitors to the Online Service, to monitor how users navigate the Online Service, to count how many sent e-mails were actually opened or to determine whether content sent was actually viewed.
・Embedded Scripts: An embedded script is programming code that is designed to collect information about your interactions with the Online Service, such as the links you click on. The code is temporarily downloaded onto your Device from our server or a third-party service provider, is active only while you are connected to the Online Service, and is deactivated or deleted thereafter.

Please note that third parties may collect Personal Information about your online activities over time and across different websites when you visit or use the Online Service or other online websites and services. For example, some third parties' embedded content or plugins on the Online Service, such as social media sharing tools, allow their operators to learn that you have visited or interacted with the Online Service, and they may combine this information with other, identifiable information they have collected about your visits to other websites or online services. These third parties may handle this information, and other information they directly collect through their content and plugins, pursuant to their own privacy policies.

Online Tracking. Some web browsers incorporate a “Do Not Track” feature that signals to websites that you visit that you do not want to have your online activity tracked. How browsers communicate the Do Not Track signal is not yet uniform. For this reason, the Online Service do not respond to such signals, except where required by law.
Ad Serving and Traffic Measurement Services We May Use:
We license technology to serve advertisements on the Online Service and within its videos and other content as that content is served across the Internet. In addition, we may use third party network advertisers to serve advertisements on the Online Service and third-party analytics service providers (such as Google Analytics) to evaluate and provide us with information about the use of the Online Service and viewing of our content. We do not share the information that you provide to us, such as your name and/or email address with these third parties, but ad network providers, the advertisers, the sponsors, and/or analytics service providers may set and access their own cookies, web beacons and embedded scripts on your Device from the Online Service. These cookies, web beacons, and embedded scripts may collect Personal Information or other information about your use of the Online Service over time and other third-party websites or applications and they may otherwise collect or have access to information about you, including Usage Information. Cookies and web beacons, including those set by third party network advertisers, may be used to, among other things, target advertisements, prevent you from seeing the same advertisements too many times, or conduct research regarding the usefulness of certain advertisements to you.
To opt-out of such Cookies, please exercise choice below:
To generally opt-out of interest-based advertising on mobile-optimized or desktop websites, please visit the Digital Advertising Alliance (DAA) in US (http://youradchoices.com) and the Network Advertising Initiative (NAI) in US (https://www.networkadvertising.org/). For our mobile application, please update your device settings. Please note that by opting out of such Cookies, you may still receive advertisements, but the network from which you opted out will no longer deliver ads tailored to your interests. In order to opt-out of Google Analytics, which is used to understand how visitors interact with the Online Service, please visit: https://tools.google.com/dlpage/gaoptout. Please review your Internet browser settings, typically under the sections "Help" or "Internet Options," to exercise choices you have for certain Cookies that are not part of the DAA or NAI. For instructions on how to configure your browser settings to reject Cookies being served by companies that are not part of the DAA or NAI, click here or go to https://www.allaboutcookies.org/manage-cookies/. You can also delete all cookies that are already on your computer's hard drive by searching for and deleting files with "cookie" in it.

Additional Opt-Out Choices: You may configure your browser or Device to block the use of certain Cookies. Please note that without certain Cookies, it may make it difficult for you to use certain features on the Online Service.
Social Media Applications:
Functionality on the Online Service may permit interactions between the Online Service and third-party properties, such as Facebook and Twitter. Such functionality enables you to “like” a product or online content, “share” content to other properties, and otherwise link the Online Service with another third-party property. If you choose to “like” or “share” content or to otherwise post information from or via the Online Service to a third-party property, that information may become public and the third-party property may have access to information about you and your use of the Online Service.

You may also choose to participate in a third-party application or feature (such as Facebook applications or a similar application or feature on a third-party property, or otherwise linking the Online Service with another property) through which you allow us to collect (or the third party to share) information about you, including Personal Information. When you choose to participate, you may be opting to link your activity on the Online Service with that third-party property, which may then collect information about your visits to the Online Service and may publish that activity as you request to your "profile" or similar feature with that third party (such as if you choose to share content you find on one of the Online Service with your "connections" on the third party's property). The information we collect is subject to this Policy. However, the information collected and stored by the third party remains subject to the third party's privacy practices, including whether the third party continues to share information with us or with other third parties, the types of information shared, and your choices regarding what is visible to others on that third party's property. The third party may allow you to remove an application or feature, in which case we will no longer collect information about you through the application or feature, but we may retain the information previously collected in accordance with this Policy.
Third Party Content, Links to Other Properties and Services, and Our Content on Other Websites
Certain content on the Online Service may be hosted and served by third parties, which may include third party widgets (such as those that allow you to "like" or "share" content with third party websites and interactive services or to provide ratings and reviews). In addition, when you are on the Online Service you may be directed to other websites that are operated and controlled by third parties that are beyond our control. This includes links from advertisers, sponsors and partners that may use our logo(s) as part of a co-branding agreement. In addition, our content and widgets may be included on web pages and websites that are not associated with us and over which we have no control. These other websites may send their own cookies to your Device, and they may independently collect data or solicit Personal Information. We are not responsible for the privacy practices of any third party.
2) How we use the Collected Data
We will use the Collected Data for the following purpose:
・Account Creation: We use your credential information to create your account that can be used to sign-in to the Online Service and other related services;

・Service Provision: We use the Collected Data to operate, maintain, enhance and provide features and functions of the Online Service, including processing your registration, your purchased orders and your payments, delivering video streaming service to you;

・Communications: We use the Collected Data to communicate with you about the Online Service for administrative and informational purposes. Examples of said communications include responses to your inquiries or requests, customer support-related communications and changes to any of our terms & conditions or policies.

・User Experience: We use the Collected Data to personalize your experience on the Online Service by providing you with tailored information of products, contents and services, as well as recommendations, advertisements, promotions, or offerings that may be of interest to you;

・Service Improvement and Development: We use the Collected Data to optimize and improve our services, including the Online Service, and to develop new products, contents, services, features and functions by analyzing and understanding the usage trends and preferences of our users;

・Compliance with Law: We use the Collected Data to ensure compliance with our internal policies, agreements with our stakeholders, applicable laws and regulations, court orders, government and law enforcement requests. We also use the Collected Data to enforce or defend our legal rights or the terms and conditions of any our service, or to retain and store your Personal Information to comply with specific legal retention requirements, regulatory audits, and other record keeping purposes (including to meet internal and external audit requirements).

・Fraud prevention and investigation: We will use the Collected Data to comply with monitoring, prevention, detection and investigation obligations, laws associated with the identification and reporting of illegal and illicit activity, including fraud and anti-money laundering, and financial reporting obligations.
・Security: We will use the Collected Data to maintain the integrity and security of our websites, contents and services and preventing and detecting security threats, fraud or other criminal or malicious activity that might compromise your devices.

・Other: In any other way, with your consent or permitted under applicable law.

3) Who else has access to the Collected Data?
We will make the Collected Data available to third parties as follows:
Third-party service providers
In addition, we may use our internal third-party service providers to process the Collected Data. The service providers are engaged for the purposes of pursuing the activities outlined in this Policy, acting as processors.
Business transfer
In the event that we sell or transfer a portion or all of our business, Collected Data may be transferred by us to the purchasing or acquiring entity as part of the transaction. We will continue to ensure the confidentiality of the Collected Data before such transaction occurs, and after such transaction, we will delete the Collected Data as soon as reasonably practicable after such transaction.
Compliance and enforcement
We will retain, use and/or disclose any of Collected Data as required or permitted by law, regulation or order, including to the police or other appropriate authorities, to investigate complaints made by or against you, or to protect or defend ourselves, or others, against illegal, criminal or harmful activities.
4) Data Retention; Managing the Collected Data
We will continue to retain the Collected Data for 60 months after you delete your account unless local law tells us to keep it for longer. Please note that we may be required to retain certain information by law. Where we no longer require the Collected Data, it will be destroyed or de-identified in line with our policies. When we say de-identified, we mean that we will remove information that could be used to identify you from the Collected Data.
5) International Transfer of the Collected Data and Consent for Processing
Collected Data will be processed, stored and transferred for the purposes outlined in this Policy from your country/region of residence to various countries/regions outside your country/region of residence, including Japan and the US. Collected Data will be processed by staff operating outside your country/region of residence who work for us or for one of our service providers and may be seen by such staff in those countries/regions.

By activating the Online Service or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen. This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your Personal Information to a third party, as an overseas authority.

By activating the Online Service or providing us with any information, you fully understand and consent to this transfer, processing and storage of your information in the United States and other jurisdictions, where the privacy policy laws may not be as comprehensive as those in the country/region where you reside and/or are a citizen. This may impact your rights in your local jurisdiction and also in the applicable overseas jurisdiction(s). These overseas jurisdictions may also need to disclose your Personal Information to a third party, as an overseas authority.
6) Security
We undertake reasonable security measures designed to protect against the loss, misuse or alteration of the Collected Data. We take information security very seriously but we cannot guarantee or warrant the absolute security of any information that we store on our systems or that is stored on our third party contractors’ systems.
7) Children’s Privacy
We are committed to complying with all applicable laws and regulations regarding the collection, storage and use of Personal Information concerning children, including the Children's Online Privacy Protection Act in the United States and applicable local legislation in other countries/regions. The Online Service is intended for a general audience. The Online Service is not directed to and does not knowingly collect Personal Information from children under sixteen (16) years of age. Depending on your country/region of residence, this age of children may differ. If you are a parent or guardian and are concerned that your child has provided us with Personal Information without your consent, you should contact us as indicated in Section 10 below. If we become aware that we have received or collected Personal Information about a child under sixteen (16) years of age, we will delete that Personal Information as soon as possible.
8) Privacy Rights (including California Privacy Rights)
In some countries/regions, you have certain rights with respect to the Personal Information we hold about you. These may include the right to request a copy of the Collected Data that we or our group companies holds about you and/or you may request that we provide a copy, corrects, amends, deletes, erases, destroys, objects or blocks/restrict processing and/or use of such Collected Data if it is inaccurate. In some countries/regions, you may also ask us to provide some types of the Information to you in a structured, machine-readable format and ask us to share (port) such data with another controller. These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete Information which we are required by law to keep, or have compelling legitimate interests in keeping. If you would like to exercise any of these rights, please contact us as described in Section 10 below. If you are not satisfied with how we have handled your questions, concerns or have any complaints about how we process personal data, you have a right to lodge a complaint with the local data protection supervisory authority.

Notice to California Residents
CA Personal Information. Consistent with Section 1 above, we collect certain categories of Personal Information about California residents (“CA Personal Information”) for the purpose described in this Policy, specifically: Identifiers, Commercial Information, Internet or Other Electronic Network Activity and Audio, Visual and Similar Electronic Information.
California Consumer Rights.
Subject to certain exceptions detailed in the California Consumer Privacy Act (“CCPA") and other applicable laws and regulations, as a California resident, you have the right to:
・request access to your CA Personal Information, including information about the categories of CA Personal Information we have collected, the categories of sources from which we have collected your CA Personal Information, the business or commercial purpose for collecting, selling, or sharing your CA Personal Information, the categories of third parties to whom we disclose CA Personal Information, and the specific pieces of CA Personal Information we have collected about you;
・request deletion of your CA Personal Information; however, to the extent permitted by applicable law, we may be required to retain some of your CA Personal Information, and certain CA Personal Information is strictly necessary for us to fulfill the purposes described in this Policy;
・request information about the CA Personal Information about you that we have disclosed for a business purpose and the categories of persons to whom it was disclosed for a business purpose;
・request information about the CA Personal Information about you that we have "sold" or "shared" (as such terms is defined under applicable California privacy laws) and the categories of third parties to whom the CA Personal Information was sold or shared; and
・opt-out of the "sale" or "sharing" of your CA Personal Information (as such terms is defined under applicable California laws), if applicable.

Exercising Your California Consumer Rights. If you are a California resident and wish to exercise any of these rights or if you have questions regarding the CA Personal Information collected or shared with third parties, please: (a) contact us as described in the “Contact Information” section below with the specific nature of your request, referencing “Your California Privacy Rights – SAO”; or (b) call the following toll-free number +1 833-470-0771(10:00~18:00(JST) only weekdays on Monday, Wednesday and Friday). When submitting your request, you must include your first and last name, email address, and zip code or mailing address. You may be asked to provide additional proof of identification so that we can verify your identity and validate the request. Please note that you are limited by law in the number of requests you may submit per year. We will not discriminate against you by offering you different pricing or products, or by providing you with a different level or quality of products, based solely upon you exercising your rights to your CA Personal Information.

Sources of CA Personal Information. Consistent with Section 1 above, we may collect CA Personal Information from you.

Purposes. We collect the CA Personal Information for the business and commercial purposes described above. We also share your CA Personal Information as follows:

• Sharing your CA Personal Information for Business Purposes: In the preceding twelve months, we may have shared the following categories of CA Personal Information for business purposes: Identifiers and Other Consumer Information. This information may be shared for the purpose of providing services to you, for legal compliance, or to protect legitimate interests, in compliance with law.

Sale of CA Personal Information. In the preceding twelve (12) months, we have not sold (as defined under CCPA) CA Personal Information. We do not knowingly share the CA Personal Information of individuals under sixteen (16) years of age, in a manner that constitutes a "sale" under California law.

Authorized Agents: To the extent that you elect to designate an authorized agent to make a request on your behalf, they must provide appropriate documentation including written signed permission from you, proof of your identity, and verification of their identity; or a valid, designated power of attorney as defined under the California Probate Code.

California "Shine the Light" law
California Civil Code Section 1798.83, also known as California's "Shine the Light" law, permits residents of California to request certain details about information we may disclose to third parties for direct marketing purposes. If you are a California resident and would like to request this information, please contact us in accordance with the “Contact Information” section (Section 10) below.

9) Changes
From time to time we may have to update this Policy. We will let you know of any material changes to this Policy through your account. If the applicable law requires us to obtain your consent, we will ask you for your consent.
10) Contact Information
If you have a privacy concern, complaint or question, please contact to the following:

Sony Music Solutions Inc.
Midtown Tower, 9-7-1 Akasaka, Minato-ku, Tokyo, 107-6214 Japan
https://2021.sao-ex-chronicle.com/s/excglb/form/inquiry
top