Privacy Policy

1. General Provisions

VISTA CORP. (hereinafter referred to as the "Company") places great importance on the appropriate handling of personal data (hereinafter referred to as "Personal Data") of the Client's employees and related parties in the services provided by the Company (hereinafter referred to as the "Service") based on the Service Agreement concluded with the Client. This Privacy Policy applies to users of the Service, regardless of whether they are located in Japan or overseas.

2. Personal Data Collected

The Service may collect the following Personal Data:

• Name, email address, job title
• Usage history, access logs, IP address
• Other information necessary in relation to the Service Agreement

3. Purpose of Use

Personal Data shall be used for the following purposes:

• Provision, operation, and management of the Service
• Response to inquiries and support
• Contract management and billing operations
• Compliance with laws and regulations and protection of rights

4. Legal Basis

The processing of Personal Data is conducted based on the following legal grounds:

• For the performance of a contract (GDPR Article 6(1)(b))
• For the legitimate interests of the Company (GDPR Article 6(1)(f))
• For compliance with legal obligations

5. Provision to Third Parties and International Transfer

Personal Data may be provided to third parties entrusted by the Company (cloud providers, sub-processors, etc.) for the purpose of providing the Service. Personal Data may be processed at data centers located both domestically and internationally. Regarding international transfers, the Company shall implement appropriate safeguards such as the GDPR Standard Contractual Clauses (SCCs). The Company will not sell or provide Personal Data to third parties without prior authorization, except when based on legal obligations.

6. Protection of Personal Data

The Company shall implement appropriate technical and organizational security management measures to prevent alteration, leakage, or loss of Personal Data.

7. Rights of Overseas Users

Overseas users (particularly residents of the EU) may exercise the following rights:

• Right of Access: Confirmation of their own Personal Data
• Right to Rectification: Correction of inaccurate data
• Right to Erasure (Right to be Forgotten): Deletion of Personal Data where necessary
• Right to Restriction of Processing and Right to Object
• Right to Data Portability: Receipt and transfer of data

If you wish to exercise these rights, please contact the contact point set forth below.

8. Inquiries

For inquiries regarding Personal Data, please contact the following: