SQUEEZE Corporation (hereinafter referred to as the “Company”) provides the following services: “Minn” and “Theatel”, which are accommodation services provided by the Company, and “suitebook” and “suitebook checksmart”, which are accommodation reservation and other services provided by the Company (hereinafter collectively referred to as the “Services” and including similar services to be provided by the Company in the future), as well as the Company’s operations and transactions with business partners (hereinafter collectively referred to as the “Services”). The following privacy policy (hereinafter referred to as the “Policy”) has been established with respect to the handling of personal information in connection with the Company’s operations and transactions with business partners (hereinafter collectively referred to as the “Services”). The following privacy policy (hereinafter referred to as the “Policy”) has been set forth below.

1 Definition of personal information, etc.

(1) In this policy, “personal information” and “personally identifiable information” mean “personal information” and “personally identifiable information” as defined in the Act on the Protection of Personal Information (hereinafter referred to as “Personal Information Protection Act”, including its amendments), respectively.
(2) In this Policy, “Individual” means a specific individual identified by Personal Information.

2 Personal information to be collected

(1) We may ask members, users, and guest users of the Service (hereinafter collectively referred to as “Users, etc.”) to provide the following information: name, age, gender, date of birth, occupation, address, telephone number and e-mail address, names of hotels where the User has stayed through the Service, and nationality and passport number (if the User reports that he/she is a foreigner).
(2) SBI may request the User to provide information such as age, gender, date of birth, occupation, address, telephone number and e-mail address, names of hotels where the User has stayed through the Service, and nationality and passport number (if the User has declared that he/she is a foreigner).
(3) In the event that a User wishes to link the Service used by the User to a social networking service as set forth in Article 3, Paragraph 1 (g), SBI may collect the user information (excluding passwords) registered with such social networking service.
(4) We may provide the name, age, gender, date of birth, address, telephone number, e-mail address, educational background, employment history, photograph, and other information usually included in a resume (limited to job applicants) to persons in charge at our business partners and to applicants for employment with us (hereinafter collectively referred to as “persons in charge, etc.”). We may ask you to provide information such as your name, age, gender, date of birth, address, telephone number and e-mail address, as well as your educational background, employment history, photograph and other information that is usually included in a resume (only for job applicants). We do not delete the personal information of applicants who are not hired.
(5) We use security cameras as a security system in the operation of this service, and we may collect information (appearance, behavior history, etc.) captured by the security cameras.

3 Purpose of use of personal information

(1) The purposes for which the Company uses the personal information of users, etc., are as follows
(a) Provision, management, and operation of the Service, and correspondence incidental thereto
(b) Provision, management, and operation of the Company’s official website for the Service (hereinafter referred to as the “Site” (*)), and correspondence incidental thereto *https://staytuned.asia/ https://app.suitebook.io/ https://app. However, the above website may be increased or decreased in the future, and in such case, the Company shall notify the Users, etc. by amending this Policy.
(c) To contact the Users, etc. as necessary for them to use the Service or the Site.
(d) Responses to inquiries, requests for materials, etc. from Users, etc.
(e) In the event that the User becomes a party to a contract with the Company, preparation for and performance of said contract, and any other actions necessary for said contract.
(f) To conduct sweepstakes and campaigns
(g) In the event that a User wishes to link with the following SNS services (*) operated by a third party other than the Company, and the Service or the Site is capable of doing so, display of the registration information on such SNS services on the Service or the Site * Display of the registration information on the SNS services operated by Meta Platforms, Inc. (former name: Facebook, Inc.), “Instagram” operated by Meta Platforms, Inc. In such cases, users will be notified by means of a change in this policy. In addition, this policy shall not be affected by any change, merger, or split-up of the operating companies of any of the above services.
(h) Improvement of the Service or development of new services, such as customer analysis, marketing, development of products and services, etc.
(i) Ensuring the security of the Service
(j) Other purposes incidental to the purposes of use described in the preceding items
(k) In the event that MHI acquires personal information as a result of the succession of business from another business operator handling personal information due to a merger or otherwise, to the extent necessary to achieve the purposes of use before the succession (limited to personal information acquired as a result of the succession of business).
(2) The purposes for which we use the personal information of the person in charge of our business partners are as follows
(a) Contact necessary for transactions with us
(b) In the event that the supplier becomes a party to a contract with us, to prepare for and execute the contract, and for any other actions necessary for the contract.
(3) The purposes for which we use the personal information of job applicants are as follows
(a) To provide various types of information related to recruitment activities (seminars, events, company information sessions, website announcements, etc.) and to accept applications
(b) Recruitment selection
(c) Administrative processing, such as communications related to employment selection
(d) Information on medical examinations at the time of hiring and procedures for entering the company, etc.
(e) Post-employment management.
(4) Notwithstanding the preceding clauses, the Company shall not disclose any sensitive personal information such as medical history, income, family relationships, political opinions, religious beliefs (religion, ideology and creed), labor union membership, or any other personal information that is required to be disclosed.
(5) Notwithstanding the preceding paragraphs, we will not acquire or use personal information regarding sensitive information such as medical history, income, family relationships, political views, religious beliefs (religion, ideology, and creed; the same below), labor union membership, race and ethnicity, family origin and domicile, health care and sex life, and criminal records, except as required by law or as necessary to achieve the purpose of appropriate operations.

4 Restrictions on use

(1) We will not handle personal information beyond the scope necessary to achieve the purpose of use without obtaining the prior consent of the user or other person to whom the personal information pertains. However, this shall not apply in any of the following cases
(a) When required by law
(b) When it is necessary to protect the life, body, or property of a person (not necessarily the person in question) and it is difficult to obtain the person’s consent
(c) Cases in which the provision of personal information is particularly necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the person in question
(d) When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining your consent is likely to impede the execution of such affairs.
(2) We will not use personal information in a manner that may facilitate or induce illegal or improper activities.

5 Proper acquisition

We will acquire personal information in an appropriate manner and will not acquire it through deception or other wrongful means. We will also take care not to collect personal information from minors without the consent of their parents or guardians.

6 Notification of the purpose of use of personal information at the time of acquisition

(1) When acquiring personal information, we will either publicly announce the purpose of use in advance or notify the person of the purpose of use promptly after acquiring the personal information. However, this does not apply in the following cases
(a) Cases in which notifying the person of the purpose of use or publicly announcing it may harm the life, body, property, or other rights or interests of the person or a third party
(b) Cases in which notifying the person of the purpose of use or publicly announcing it may harm the Company’s rights or legitimate interests (c) Cases in which it is necessary to cooperate with a government agency or local public body in executing affairs prescribed by law, and in which notifying the person of the purpose of use or publicly announcing it may impede the execution of such affairs (c) When it is necessary to cooperate with a national agency or local public body in the performance of its duties as prescribed by law, and notifying the person of the purpose of use or publicly announcing it may impede the performance of such duties
(d) When it is recognized that the purpose of use is clear from the circumstances of the acquisition.
(2) Notwithstanding the preceding paragraph, in cases where SBM obtains personal information from a User, etc. upon application for use of the Service (including cases where SBM obtains personal information indirectly from a User, etc. through a Service User), SBM shall, either by itself or through said Service User, notify the User, etc. in advance of the purpose of use of said personal information, and shall not use said personal information for any other purpose. In the case of acquiring personal information (including cases in which personal information is acquired indirectly from users through Service Users), the Company will clearly state the purpose of use as stipulated in this Policy to the users in advance, either by itself or through the Service Users. However, this does not apply to cases where there is an urgent need to do so in order to protect the life, body, or property of a person.

7 Change of purpose of use

If the Company changes the purpose of use of personal information, it will not do so beyond the scope that is reasonably considered to have a reasonable relationship with the purpose of use before the change, and will notify the person in question or publicly announce the changed purpose of use. (This does not apply to cases (1)(a) through (d) of the preceding paragraph.

8 Safe management of personal information and supervision of employees

To prevent leakage, loss, or damage of personal information and otherwise ensure the safe management of personal information, we have established personal information protection regulations and provide necessary and appropriate supervision of our employees.

9 Supervision of contractors

When we outsource all or part of the handling of personal information, we will provide necessary and appropriate supervision to ensure that the outsourced company manages personal information safely, such as by including appropriate provisions for safety management in the contract with the outsourced company.

10 Restrictions on provision to third parties

(1) We will not provide personal information to a third party without obtaining the prior consent of the individual, except in the following cases
(a) When required by law
(b) When it is necessary for the protection of the life, body, or property of a person (not necessarily the person in question) and it is difficult to obtain the consent of the person in question
(c) Cases in which the provision of personal information is particularly necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the person in question
(d) When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining your consent is likely to impede the execution of such affairs.
(2) Except in the following cases, we will not provide personal information to a third party in a foreign country without obtaining the prior consent of the person in question.
(a) When the third party is located in a country specified in the Notification No. 1(*) of the Personal Information Protection Commission of Japan, 1991 *https://www.ppc.go.jp/files/pdf/190123_h31iinkaikokuji01.pdf
(b) When any of the preceding clauses (a) through (d) applies. The “laws and regulations” referred to in the preceding paragraph (a) shall mean the laws and regulations of Japan. (3) In the event of provision to a third party, SOFTBANK TELECOM will record the following matters (hereinafter referred to as “Record of Provision to Third Party”). However, this shall not apply to cases where the information entered by the user into the Service is provided to a third party through the user’s own operations, such as when the user diverts the information entered into the Service for accommodation at another hotel.
(a) Name, address, location, and representative of the third party (if the third party is a corporation)
(b) The name of the User, etc. and other items sufficient to identify the User, etc.
(c) Items of personal information
(4) When we receive personal information from a third party (including a third party in a foreign country), we will confirm the name, address, location, and representative of the third party (if the third party is a corporation), and the circumstances of acquisition of the personal information by the third party, in accordance with the rules of the Personal Information Protection Committee. (4) The personal information of the representative (if the third party is a corporation) and the circumstances of acquisition of such personal information by the third party shall be confirmed in accordance with the Rules of the Personal Information Protection Commission.
(5) Notwithstanding Paragraphs (1) and (2) above, a person to whom personal information is provided shall not be considered a “third party” in any of the following cases, and SBM may provide personal information to such person
(a) When we outsource all or part of the handling of personal information within the scope necessary to achieve the purpose of use
(b) When personal information is provided as a result of the succession of business due to merger or other reasons
(c) Cases in which personal information is used jointly with a specific party, and in which the Company notifies the person in advance of this fact, the items of personal information jointly used, the scope of the party jointly using the information, the purpose of use by the party using the information, and the name of the party responsible for managing the personal information, or (5) The Company has notified the person in advance of the items of personal information, the scope of joint users, the purpose of use by the user, and the name of the person responsible for managing the personal information, or has made such information readily accessible to the person.
(6) We will not provide personal information that is sensitive, such as medical history, income, family relationships, political opinions, religious beliefs, labor union membership, race and ethnicity, family origin and legal domicile, health care, sexual life, and criminal records, to third parties, except as required by law or as necessary to achieve appropriate business objectives. We will not provide such information to third parties, except as required by law or as necessary to achieve appropriate business objectives.

11 Creation, etc. of anonymized processed information

(1) In accordance with the standards set forth in the Personal Information Protection Law, we process users’ information to create anonymized processed information (as defined in the Personal Information Protection Law). Examples of such processing are as follows
(a) Deletion of descriptions that can identify specific individuals
(b) Deletion of personal identification codes
(c) Deletion of codes that interconnect information
(d) Deletion of specific descriptions
(e) Other measures based on the nature of the personal information database, etc. (as defined in the Personal Information Protection Law).
(2) The items included in the anonymized processed information processed by the Company are as follows
(a) Personal attribute information (age, gender, occupation, address, and nationality)
(3) When we provide anonymized processed information created by us to a third party, we will provide the following items in the following manner for the following purposes.
(a) Purpose
(i) To create statistical information for our affiliated companies.
(ii) To develop or improve new products and services or new features of existing products and services.
(b) Item (2) above
Items described in (2) above
(c) Method of provision: We will provide the information in an encrypted and secure manner by electromagnetic means.
(4) The Company shall supervise employees who handle anonymized processed information to ensure that security control measures are implemented in accordance with the Company’s internal rules.

12 Publication of matters concerning personal information, etc.

We will make the following matters concerning personal information available to you and respond to you without delay upon your request. However, this does not apply to matters that are publicly disclosed in accordance with the express provisions of this policy.
(a) Name, address, and representative name of the business handling personal information: SQUEEZE Corporation, 3-3-7 Kita-Shoyama, Minato-ku, Tokyo; Shinichi Tatebayashi, Representative Director, Daiichi Shoyama Building 3F
(b) Purpose of use of personal information As described in Article 3.
(c) Contact point for inquiries regarding personal information As described in Article 18.
(d) Procedures for responding to requests for notification of purpose of use or requests for disclosure of personal information held, and amount of fee for requests for notification of purpose of use or requests for disclosure of personal information held. Fee: 1,000 yen
(e) Measures taken for the secure management of retained personal information (excluding those that may impede the secure management of said personal information by making them accessible to the person) As per Articles 8 and 9.

13 Disclosure of personal information

When we receive a request from an individual for disclosure of his/her personal information or records provided to a third party, we will disclose such information to the individual without delay. However, we may decide not to disclose all or part of the information if any of the following applies.
(a) If there is a risk of harm to the life, body, property, or other rights or interests of the person concerned or a third party
(b) If there is a risk of significant hindrance to the proper conduct of our business
(c) If it would violate other laws or regulations.

14 Correction, etc. of personal information

When we receive a request from an individual to correct, add, or delete (hereinafter referred to as “correct, etc.”) his/her personal information on the grounds that it is untrue, we will, except in cases where special procedures are required by other laws and regulations, conduct the necessary investigation without delay to the extent necessary to achieve the purpose of use, and based on the results, correct, etc. the content of the personal information and then notify the individual to that effect.

15 Suspension of use of personal information, etc.

If we receive a request from an individual to cease use of or delete his/her personal information (hereinafter referred to as “cease of use, etc.”) on the grounds that such personal information has been handled beyond the scope of the purpose of use publicly announced in advance, or that such information has been obtained through deception or other wrongful means, we will conduct the necessary investigation without delay, and based on the results of the investigation, we will cease use of the personal information and notify the individual to that effect, If the Company requests the suspension of use or deletion of personal information (hereinafter referred to as “Suspension of Use, etc.”), the Company will conduct the necessary investigation without delay, and based on the results, will suspend the use of the personal information and notify the person to that effect. However, if it is difficult to suspend the use of personal information due to the large cost involved or other reasons, and alternative measures necessary to protect the rights and interests of the individual can be taken, such alternative measures will be taken.

16 Explanation of reasons

If, despite your request, we decide to do any of the following and notify you to that effect, we will endeavor to explain the reasons for such decision. (a) not to notify you of the purpose of use, (b) not to disclose all or part of your personal information, (c) not to correct, etc., stop using, etc., or stop providing to a third party your personal information, or (d) to take other measures that differ from your request.

17 Privacy policy changes

The Company will amend this Policy as necessary. Unless otherwise specified by the Company, the revised Policy shall take effect from the time it is posted on the Website.

18 Handling of cookies, IP addresses and tracking

The Company handles cookies and IP addresses appropriately as personally identifiable information. The Company uses cookies to manage and maintain the provision of content on the Site, to consider new services, to manage login information, and to deliver advertisements. Users may disable cookies by changing the settings on their web browsers. However, if you choose to disable cookies, you may not be able to use certain portions of the Site. We may continue to track your activities on the Site for the purposes of our customer support, analysis, research, product development, fraud prevention, risk assessment, legal compliance, and investigations, to the extent that such information constitutes personally identifiable information.

19 Contact person for inquiries

3F ARCHES KAMIYAMACHO, 6-4 Kamiyamacho, Shibuya-ku, Tokyo 150-0047, Japan
SQUEEZE Corporation Privacy Policy Management
Contact via e-mail: hcm@squeeze-inc.co.jp