Data Security and Protection

---

At NITCO , we prioritize the security of your data through comprehensive measures, including Cloud Services, advanced encryption methods, data loss prevention, threat detection, and multi-factor authentication. 

Our strategy encompasses advanced threat protection, robust data encryption, meticulous identity and access management, effective mobile device management, and compliance tools tailored to meet Japan's stringent regulatory standards.

We securely store customer data on an Online Cloud Server, safeguarded by AES 256-bit encryption. Our platforms undergo continuous monitoring to identify and mitigate potential threats, and we proactively update our systems to align with the latest security guidelines, thereby preempting vulnerabilities.

In our commitment to data integrity and regulatory compliance, we adhere to key industry regulations and standards such as the General Data Protection Regulation (GDPR), Health Insurance Portability and Accountability Act (HIPAA), Family Educational Rights and Privacy Act (FERPA), and Japan's Act on the Protection of Personal Information (APPI).

Through regular audits and obtaining relevant certifications, we ensure transparency and uphold customer trust in our security practices.

This policy applies to NITCO Technologies 株式会社 located at Tokyo-103-0013 Japan, Nihonbashi, Ningyocho 1-16-6, Chuo-Ku Roose Tower 3F (hereinafter “Orgware”, “we”, “us” or “our”).

We are committed to protecting and using your personal information responsibly.

Collection of Personal Information We collect information about you to facilitate your job search efficiently and securely. 

We may collect and process data containing Personal Information:

a) information provided by you on forms or job applications on our websites, including information at the time of website registration, service subscription, website problem reporting, or service requests;

b) information, data, documents, or files you upload on our website related to a job or position;

c) details of transactions conducted through our websites;

d) information we may collect from public records and third parties.

Collection of Sensitive Information and Special Category Data 

We may collect Sensitive and Special Category data through our services, only with your consent. This may include data revealing racial or ethnic origin, religious or philosophical beliefs, genetic data, biometric data, health data, as well as Employment, professional background, education, and training data.

How We Use Your Information We use the information, including Personal Information, as follows:

a) to provide information or services you request, and to fulfill our obligations from contracts between you and us;

b) to offer you information or services we think may interest you, with your consent;

c) for compliance with applicable laws and regulations;

d) for other purposes for which you provided the information

e) for whatever else is reasonable or related to or in connection with the above and our service provision. 

Sharing of Your Information 

We may disclose your Personal Information to our group members or third parties (including employers, third-party recruiters, referees) in the following circumstances:

a) to provide services you request from us, fulfilling our obligations from contracts between you and us;

b) in business or asset sales or purchases, where we may disclose your Personal Information to the prospective seller or buyer;

c) to governmental or regulatory bodies, law enforcement, or other authorities, to enforce our rights, comply with directions, requests, orders, or report suspected illegal activities.

Consent By providing your Personal Information, you consent to our collection, use, and disclosure for the purposes in this policy. 

You may withdraw consent and request us to stop using/disclosing your Personal Information by writing to us.

Security 

We maintain appropriate measures to protect personal information against unauthorized or unlawful processing, loss, alteration, disclosure, access, destruction, or damage.

Accuracy 

We process only accurate and timely information. 

Please ensure your personal information is current and inform us promptly of any changes.

Retention of Your Data 

We retain your data as necessary for the collection purpose or as required/permitted by law. If your personal information is no longer needed and not legally required, we will destroy or de-identify it.

Data Intermediary 

When processing your Personal Information on behalf of a third party, we follow the third party's instructions for the agreed purposes.

Enforcing Your Rights

You have rights regarding your Personal Information. You can exercise these rights in accordance with applicable laws. Access requests may incur a fee. To enforce your rights, contact our Privacy Officer in writing.

Cookies 

We use cookies and web beacons from trusted third-party partners, like Google, for enhanced measurement services, improved targeted advertisements, and marketing support. These cookies and web beacons do not personally identify you.

Changes and Questions Future privacy policy changes will be posted on our website and notified via email. Questions, comments, and requests regarding this policy are welcome and should be addressed to our Privacy Officer at prabu@nitcotech.com