1. Information obtained by Human Value

Human Value obtains the following information for the purpose of providing the Service and future service improvements.

Information obtained from the User

• Information obtained upon registration of an account

  In the case of registration or resetting of an Ocapi account, we obtain the User's name, e-mail address, password and company name (provided on a voluntary basis).

• Information obtained upon the creation of a questionnaire

  When a questionnaire is set using Ocapi, we obtain the organization name associated with the User and, if the Optional Report Function is used, the contextual information related to such an organization. Also, in cases where the function for automatically distributing e-mails to questionnaire respondents (hereinafter referred to as "Automatically Send E-mails Function") is being used, we obtain the respondents' names and e-mail addresses.

• Information obtained through the payment process

  In order to process the payment when a questionnaire is created, we obtain personal information registered with the PayPal account. This information does not include credit card information. Human Value does not hold the credit card information of any User.

• Information obtained upon response to a questionnaire

  For responses to questionnaires using Ocapi, depending on how the questionnaire is set and on the content of the responses, we obtain the User's name and details related to the organization.

Information automatically obtained upon use of the service by the User

• Log data

  The log data generated when the User uses the Service, or displays the contents in the Service, will be obtained and recorded automatically. This log data includes, but is not limited to, the IP address, accessed pages, mobile carrier used, territory where the Service is used, type of computer or mobile device in use, operating system and its version, browser in use and its version, browser language setting, and information to identify the User's Ocapi account.

• Cookies

  Human Value uses cookies to identify logins to Ocapi accounts. When a User logs in to an Ocapi account, a cookie is transmitted to the computer and is automatically stored by the web browser. The web browser can be configured so that cookies will no longer be accepted and stored cookies will be deleted. However, if cookies are not accepted, services requiring login to an Ocapi account cannot be used.

Information obtained by third parties

Human Value uses third-party services, including Google Analytics, in order to improve our understanding of the provision and use of the Service. Providers of such third-party services obtain and record, as anonymous traffic data, cookies, IP addresses and other information that is transmitted by a web browser as a part of a webpage request.

2. Scope of use of acquired information

Human Value will use the acquired information in order to provide, maintain, protect and improve the Service; develop new services; and supply to third parties as prescribed in Section 5.

Unless otherwise agreed by the User, no information will be used for any purpose other than as herein specified.

3. Extent of disclosure of acquired information

The information stated below will be disclosed to the extent stated below.

• Name and e-mail address associated with Ocapi account

  If the User uses the Automatically Send E-mails Function, the User's name and e-mail address are disclosed to the respondents that are registered.

• Information set in the questionnaire

  The organization name set in the questionnaire and, if the Optional Report Function is used, the contextual information is disclosed on the Questionnaire Response page. The respondent's name and e-mail address registered for use with the Automatically Send E-mails Function is disclosed to the respondent himself/herself on the Questionnaire Response page which are automatically distributed to each respondent by e-mails. This is intended to confirm that the name and e-mail address are not registered incorrectly.

• Information in responses to questionnaires

  The name entered by a questionnaire respondent on the Questionnaire Response page is disclosed to the Ocapi account User who set the questionnaire. Contents of responses to questionnaires and contextual information entered when using the option summary is disclosed, together with response information of all respondents to the questionnaire, to the Ocapi account User who set the questionnaire as a summarized report. No personal responses or contextual information is disclosed, although it is possible that the contents of responses or contextual information can be guessed from a report if there are very few respondents or in other limited situations.

• Payment information

  Information obtained during the payment process at the time a questionnaire is prepared is disclosed only to the User himself/herself for the creation of a receipt.

• URLs of Questionnaire Response pages

  When preparing a questionnaire with the Service, a URL for a Questionnaire Response page is generated automatically. Anyone who knows the URL can access this Questionnaire Response page to browse information disclosed there and respond to the questionnaire. The Questionnaire Response page does not provide a password authentication function or the like, but it does generate a URL that cannot be predicted. The User should assume responsibility and exercise caution if he or she shares the URL of a Questionnaire Response page. The Questionnaire Response page becomes inaccessible when the response deadline of the questionnaire expires or when a report summarizing the response information has been output.

• URLs of pages for downloading reports

  To send out a report summarizing questionnaire response information or to use a function to download a report that has already been output, a URL for downloading the report is generated automatically. As with the Questionnaire Response page, anyone who knows the URL can access it to download a report. The page to download a report does not provide a password authentication function or the like, but it does generate a URL that cannot be predicted. The User should assume responsibility and exercise caution if he or she shares the URL of a download page.
  The URL of a download page remains valid for one week after the output of the report. After that, it is no longer accessible. The URL generated upon use of the function for downloading a report that has already been output is valid for one day. This function can be used any number of times and a different URL is generated for each use.

4. Change and deletion of personal information

Users who sign up for an Ocapi account are given an account tool for changing the personal information that is supplied to Human Value and the personal information that is associated with the User's own account. Also, on the Manage Assessment page, a deletion tool is provided so that respondents' personal information can be deleted. The name entered by a questionnaire respondent and, if the Optional Report Function is used, the contextual information can be deleted with the deletion tool. Furthermore, if the Automatically Send E-mails Function is used, the name and e-mail address set can be deleted. If the deletion tool is not used, the personal information of a questionnaire respondent is deleted automatically 365 days after the report has been output.
The User can delete the Ocapi account permanently. In this case, the User's personal information is completely deleted from Ocapi and all questionnaires created and the respondent's personal information is completely deleted.

5. Handling of personal information

• Compliance with laws, etc.

  In obtaining, using and otherwise handling personal information, Human Value will comply with the laws and guidelines for protection of personal information as well as this Privacy Policy and will take great care to protect the personal information.

• Disclosure and sharing of personal information

  Human Value will in no event sell, loan or disclose a User's personal information to a third party; provided, however, that it may supply such personal information to a third party in any of the following events.
  
  

  1. Handling of personal information is outsourced in whole or in part to the extent necessary to achieve the purpose specified in section 1 and 2.
  2. The information is needed by a business partner working with Human Value for the purpose of providing the User with contents and services, and a mutual non-disclosure agreement has been executed between Human Value and such a business partner.
  3. The disclosure of information is considered necessary for the purpose of providing the User with contents and services, and the disclosure or sharing of information is consented to by the User.
  4. A formal inquiry is received from the police, court or any other public organization in accordance with the laws.
  5. An act by the User violates a contract with Human Value and the disclosure is considered necessary to protect Human Value services and the rights and properties of Human Value and those of third parties.
  6. There is an imminent crisis threatening human life, body, properties, etc. and immediate disclosure is necessary.

• Safety management measures

  Human Value will take the safety management measures necessary and appropriate to protect the information from illegal access, alteration, leakage, loss and destruction. Also, it will comply with the laws for protection of personal information and will establish, continuously review, and comply with the internal rules for protection of personal information.

• Procedures for disclosure, etc.

  If a User asks Human Value to disclose, correct, stop using or delete his/her own personal information, Human Value will take steps to do so after having identified the User. To make such a request, please refer to the section "Procedures for disclosure, correction, etc. of personal information" below or contact Human Value at the address provided.
  
  

• Measures on occurrence of leakage and handling of complaints

  If an incident such as a leak of personal information of the User occurs, Human Value will promptly notify the User of the facts of the situation. Also, it will promptly and appropriately respond to complaints and other inquiries relating to the handling of personal information.
  Any complaint or other inquiry regarding the Privacy Policy shall be sent to Human Value at the contact address provided below.

• Procedures for disclosure, correction, etc. of personal information

  Applications are accepted by e-mail, post, etc. To apply for disclosure of your own personal information, please use the "personal information" disclosure application form. For applications for a correction, addition, suspension of supply to third parties, etc., please use the application form for correction, etc. of "personal information."
  For anything that is not clear, please contact us as follows.

• Contact Address

  Human Value, Inc. (person in charge of the protection of personal information)
  Kawakita Memorial Bldg. 3F, 18 Ichibancho, Chiyoda-ku, Tokyo 102-0082, Japan
  Tel. +81 3-5276-2888
  E-mail: ocapi@humanvalue.co.jp
  Available hours by phone: 10:00-18:00 from Monday to Friday, Tokyo time (exclusive of year-end, new-year and national holidays)