Privacy Policy
Ddrive K.K. ("Ddrive") respects your privacy and are committed to protecting your personal information that you provide to us. This Privacy Policy explains our policies and practices regarding the use and disclosure of your personal information by Ddrive. Ddrive reviews and updates this Privacy Policy from time to time as needed without notice. Therefore, you should review the terms of this Privacy Policy periodically so that you are aware of how Ddrive collect and use personal information. By using our website and our apps, you consent to the collection, use, and disclosure of your personal information by Ddrive as explained below.
Please note: Our website and apps were created for adults and young students or children. We acknowledge and follow the rules of the United States Children's Online Privacy Protection Act ("COPPA") and so, should any child under the age of 16 provide any "personal information" to our website and apps without legally-valid parental or school consent, we will delete it as soon as possible. We also comply with other age restrictions and requirements in accordance with applicable local laws.
If you do not agree with this policy, please do not access or use our Apps or Services.
Who this policy applies to:
Our Customers who have signed up for our Website, Apps and Services.
End-Users of our Customers who interact with our Websites, Apps and Services.
Personal Information
In general, you can visit our website without providing us with any personal information. However, there are instances where we must have your personal information in order for us to grant you access to our protected and secured sites for software trial downloads. Personal information refers to information that is related to you, and may include things such as your registration data (your name, employer/school address, email address, phone number, title, etc.). When you receive your confirmation email or when you receive any email from the list server, you will be given instructions on how to remove yourself from the list. In addition to the information that we collect from you directly, we may also receive information about you from other sources, including from our current customers, third parties (resellers whom we work with), or publicly available sources.
Use of Personal Information
We intend to use such information for purposes of supporting your relationship with Ddrive by designing content that is suitable to your needs and alerting you to new product and service offerings as they become available. This personal information may be retained by Ddrive to verify compliance with the agreement between Ddrive and your employer/school, to keep track of the domains from which people visit us, to create a user profile to better serve you, or to simply contact you either electronically or otherwise. If you decide that we should not use your personal information to contact you, please let us know and we will not use that information for such purpose. Ddrive websites and apps, to administer our websites and apps, and to enhance our websites and apps for optimal user experience; to monitor the usage and performance of our websites and apps, and to determine aggregate information about our users and usage pattern; to identify you when you access and use our services; to facilitate transactions and process payments; to provide maintenance, support, and customer service for our websites and apps; to conduct research and analysis; and to fulfill other legitimate purposes permitted by applicable law. Lastly, we do not use any advertising Cookies or place advertisements in our websites and apps.
Disclosure of Personal Information
Ddrive will not share personal information for marketing, advertising or product/service offering purposes to any third parties. If Ddrive sells all or part of its business or makes a sale or transfer of assets or is otherwise involved in a merger or business transfer, we may transfer your personal information to a third party as part of that transaction. We disclose personal information if: we have your consent; we need to share it in order to provide you with the products and/or services you requested; we respond to a court order or in order to comply with the law.
Public Forum and Messaging
Ddrive may offer public discussion forums and social media feeds. Please note that information that you disclose in these public forums becomes public. Please use caution in disclosing any personal information. The site may also allow you to exchange messages with other users. We may store these messages in order to deliver them and allow you to manage them.
Accuracy and Security
The accuracy and security of the personal information is important to Ddrive. If you contact us to correct your personal information, we will attempt to correct such inaccuracies in a timely manner. Ddrive is concerned with the security of your personal information and is committed to taking reasonable steps to protect it from unauthorized access and use of that personal information. To that end, we put in place the appropriate policies and procedures to secure your personal information. While there is no such thing as “perfect security” on the Internet, we will take reasonable steps to ensure the safety of your personal information.
Access and Choice
Ddrive has implemented the following procedures that you may use to access, correct, or delete your personal information, or choose how your information is used:
If you would like correct any inaccurate personal information that Ddrive maintains from users of the site, please email us at: support@ddrive.ai.
You may also have a right, in accordance with applicable laws, to access, update, and in some cases requests deletion of the personal information that we hold about you. When updating your personal information, we may ask you to verify your identity before we can act on your request. We will comply with your request as soon as reasonably practicable and in accordance with applicable laws. We may need to retain certain information for record keeping purposes, as required under applicable legal obligations, or to complete any transactions that you began prior to requesting such change or access.
Some web browsers and devices permit you to broadcast a preference that you not be “tracked” online. Ddrive does not modify your experience based upon whether such a signal is broadcast.
Retention of Personal Information
Ddrive retains your personal information for so long as your account is active or as needed to provide you with services or to fulfill our contractual obligations; as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements; and for so long as is necessary for the purposes for which we collected such personal information.
International Operations
Ddrive is based, and this site is hosted, in Japan. If you are from a country outside of Japan with laws governing data collection, use, and disclosure that may differ from Japanese. law and you provide personal information to Ddrive, please note that any personal information that you provide to us may be transferred to Japan. By providing your personal information, you hereby specifically and expressly consent to such transfer and processing and the collection, use, and disclosure set forth herein or in any terms and conditions related to the use of and access to the site. Where we transfer your personal information from the EEA to recipients located outside the EEA who are not in a jurisdiction that has been formally designated by the European Commission as providing an adequate level of protection to receive personal information, we do so on the basis of standard contractual clauses.
Cookies
Ddrive uses "cookies". The use of cookies is an industry standard, and you'll find cookies at most major websites. A cookie is a small data file that a website can transfer to a visitor's hard drive to keep records of the visits to such site. A cookie contains information, such as your User Information, that helps us recognize the pages you have visited and improve future visits, but the only personal information a cookie can contain is the information that you provide yourself. A cookie cannot read data off of your hard drive or read cookie files created by other sites. If you prefer not to accept a cookie, you can set your Web browser to refuse all cookies or to warn you before accepting a cookie. You can still access most of the features on our website even without accepting a cookie.
Information We Collect with Kimochi Meter App
We collect information to provide a cloud-based app and extension for any Google Workspace for Education user that has authenticated himself by logging into his Google account whether on a desktop machine or a Chromebook.
Some of these services such as Sync with Google Classroom, create the same classroom roster as Google Classroom to our apps by using the Google Classroom API and by using our apps, you agree to be bound by Google's Privacy Policy (http://www.google.com/policies/privacy)
Our apps collect the following School-managed account information:
As an Admin User (Administrator or Principal):
We require you to sign up for our app's account to use the Admin screen. When you do so, we will ask for personal information, like your name, email address (Goole Workspace for Education account) , telephone number. The email address will be added to the our app's server.
As a Teacher User:
You will need to be signed up for a Google account to be able to use the Teacher screen. We require a Google account (email address) in order to add your registration to the system. Our Chrome extension will then be required to be added to your Chrome browser, either on a PC, Mac or Chromebook.
Teachers (and other Admin users) can export and view student entered data wth Kimochi meter apps through the authenticated Google Drive API access.
As a Student User:
In order to enable the Kimochi meter app, students must log in to the Kimochi meter server with their current Google account (email address).
We provide a single-sign on (SSO) experience for this authentication. The Kimochi meter Chrome Extension retrieves the current signed in Google account (email address) on the Google profile by the chrome.identity API and then uses the account to sign in to the filtering server automatically on behalf of the students.
Communications
If you have questions regarding our Privacy Policy, please email us at: support@ddrive.ai.
If Ddrive needs, or is required, to contact you concerning any event that involves information about you, we may do so by email, telephone, or mail.
個人情報及び特定個人情報保護方針
Ddrive株式会社は、教育DXの推進業務を行うに当たって、お客様並びに当社従業者の個人情報及び特定個人情報等を保護することは重大な社会的責任と認識します。以下の通り個人情報及び特定個人情報保護方針を定め、適正な取扱いの確保について全社を挙げて取り組むことを宣言します。
個人情報及び特定個人情報等は、受託した業務並びに従業者の雇用・人事管理上必要な範囲に限定して適切な手段で取得、提供します。また、特定された利用目的の達成に必要な範囲を超えた取扱い（目的外利用）を行わず、それを実現するための措置を講じます。
個人情報及び特定個人情報等への不正アクセス、または個人情報の紛失、破壊、改ざん及び漏えいなどのリスクに関して教育、監査、改善を通して合理的な安全対策を講じ、個人情報及び特定個人情報保護体制を継続的に向上します。
当社が保有する個人情報及び特定個人情報等に関して適用される法令及びその他の規範を遵守します。
当社は、個人情報及び特定個人情報等に関する質問及び苦情に、適切かつ迅速に対応いたします。
社会的ニーズや個人の要望、あるいは最新のIT技術動向を踏まえ、個人情報及び特定個人情報保護体制を適時･適切に見直しを図り、その改善を継続的に行います。
2022年12月01日（制定）
Ddrive株式会社
個人情報及び特定個人情報等の取扱について
Ddrive株式会社は、「個人情報及び特定個人情報保護方針」に基づき、当社が事業の用に供する個人情報及び特定個人情報等を次の通り取扱います。
個人情報及び特定個人情報等の利用目的
(1) 当社が取扱う個人情報は、次の利用目的の範囲内で適正に取扱います。
(2) 当社が取扱う特定個人情報等は、社会保障、税及び災害対策に関する特定の事務の範囲内で適正に取り扱います。
2. 個人情報及び特定個人情報等の第三者提供
(1) 当社は個人情報を業務遂行のため、及び、次の①～⑦を除き、第三者に開示又は提供いたしません。
①ご本人の同意がある場合
②法令などで認められた場合
③人の生命、身体又は財産の保護のために必要がある場合であって、本人の同意を得ることが困難であるとき
④公衆衛生の向上又は児童の健全な育成の推進のために特に必要がある場合であって、本人の同意を得ることが困難であるとき
⑤当該個人情報取扱事業者が学術研究機関等である場合であって、当該個人データの提供が学術研究の成果の公表又は教授のためやむを得ないとき（個人の権利利益を不当に侵害するおそれがある場合を除く。）
⑥当該個人情報取扱事業者が学術研究機関等である場合であって、当該個人データを学術研究目的で提供する必要があるとき（当該個人データを提供する目的の一部が学術研究目的である場合を含み、個人の権利利益を不当に侵害するおそれがある場合を除く。）（当該個人情報取扱事業者と当該第三者が共同して学術研究を行う場合に限る。）。
⑦当該第三者が学術研究機関等である場合であって、当該第三者が当該個人データを学術研究目的で取り扱う必要があるとき（当該個人データを取り扱う目的の一部が学術研究目的である場合を含み、個人の権利利益を不当に侵害するおそれがある場合を除く。）
(2) 当社は特定個人情報等を提供することができるのは、番号法第19条各号に当てはまる場合に限定し、それ以外で特定個人情報等の提供はいたしません。
3. 委託先等の管理
当社は第1項で示した利用目的の達成のために、お預かりした個人情報及び特定個人情報等を当社と契約を締結した委託会社に預託することがあります。委託会社に対しては、適切な取扱い、管理および保護を行わせ、第三者への開示・提供、および第1項の目的以外に利用することを禁止します。
4. 当社の個人情報保護の安全管理のために講じた措置
(1) 基本方針の策定
個人データの適正な取扱いの確保のため、「関係法令・ガイドライン等の遵守」、「質問及び苦情処理の窓口」等についての基本方針を策定
(2) 個人データの取扱いに係る規律の整備
取得、利用、保存、提供、削除・廃棄等の段階ごとに、取扱方法、責任者・担当者及びその任務等について個人データの取扱規程を策定
(3) 組織的安全管理措置
個人データの取扱いに関する責任者を設置するとともに、個人データを取り扱う従業者及び当該従業者が取り扱う個人データの範囲を明確化し、法や取扱規程に違反している事実又は兆候を把握した場合の責任者への報告連絡体制を整備
個人データの取扱状況について、定期的に内部監査を実施するとともに、個人情報の保護に関する法律についてのガイドライン（個人情報保護委員会）を審査基準としたJAPHICマークの外部審査受審
(4) 人的安全管理措置
個人データの取扱いに関する留意事項について、従業者に定期的な研修を実施
個人データについての秘密保持に関する事項を就業規則に記載
(5) 物理的安全管理措置
個人データを取り扱う区域において、従業者の入退室管理及び、権限を有しない者による個人データの閲覧を防止する措置を実施
個人データを取り扱う機器、電子媒体及び書類等の盗難又は紛失等を防止するための措置を講じるとともに、事業所内の移動を含め、当該機器、電子媒体等を持ち運ぶ場合、容易に個人データが判明しないよう措置を実施
(6) 技術的安全管理措置
アクセス制御を実施して、担当者及び取り扱う個人情報データベース等の範囲を限定
個人データを取り扱う情報システムを外部からの不正アクセス又は不正ソフトウェアから保護する仕組みを導入
5. 個人情報及び特定個人情報等のお問い合わせ、開示等の手続きについて
(1) ご本人またはその代理人が、個人情報及び特定個人情報等に関して、利用目的の通知、開示、第三者提供記録、内容の訂正・追加又は削除、利用の停止、消去及び第三者への提供の停止（以下、「開示等」という。）を要求される場合には誠実に対応いたします。
(2) お問い合わせに際し、ご本人またはその代理人であるかを確認いたします。
(3) ご本人または、その代理人としてのご本人確認が取れない場合は、お問い合わせ、開示等のご要望に応じられない場合があります。
(4) ご本人またはその代理人からの開示等の請求は、合理的期間内に回答させていただきます。
【開示等の手続きの方法】
(1) 下記の窓口までメール又は、お電話でご連絡ください。
(2) 当社指定の「個人情報開示等申請書」を送付いたしますので、必要事項をご記入ください。
(3) 当社所有の個人情報をもとに、本人確認させていただきます。
(4) 代理人からのお問合せの場合、委任状や印鑑証明をもって代理人であることを確認させていただきます。
(5) 「個人情報開示等申請書」を郵送してください。
(6) 「個人情報開示等申請書」によりいただいた個人情報は、お問合せいただいたお客様との連絡及び本人確認に使用いたします。それ以外の目的では使用いたしません。いただいた書類は、開示等のお求めに対する回答が終了した後、1年間保存し、その後破棄させていただきます。
＊特定個人情報の開示等の手続きについては、上記と同様としますが、番号法順守の観点から、開示可能かどうかの判断を特定個人情報保護管理者が行った上開示いたします。
6. 個人情報及び特定個人情報等の開示等及び苦情・相談の窓口
Ddrive株式会社 個人情報相談窓口
当社お問い合わせフォームよりお問い合わせください。
7. 認定個人情報保護団体について
当社は、個人情報の保護に関する法律に基づく認定個人情報保護団体である一般社団法人ＪＡＰＨＩＣマーク認証機構の対象事業者です。
個人情報に関する苦情・相談についてのお問い合わせはこちらをご確認ください。
https://japhic.or.jp/office/info
※当社の商品・サービスに関する問い合わせ先ではございません。
Ddrive株式会社
情報セキュリティ方針