SHOOT! WORLD
Privacy Policy

Effective Date
December 3, 2022
Last updated
December 3, 2022

The Hakuhodo DY Music & Pictures Inc. (the “Company”, or any of “we” or “our”) SHOOT! WORLD privacy policy (this “Privacy Policy”) provides for the methods of collection and processing of personal information of our customers (“customers,” “you”) in connection with our service “SHOOT! WORLD” (the “Service” the website related to the Service (“Our Website”) and any responses to inquiries regarding the Service are included in the Service; the same applies below). The Company is located at 5-3-1 Akasaka, Minato-ku, Tokyo.
In addition to this Privacy Policy, which applies to all of our customers who use the Service, the Company has prepared exhibits that may also apply to you depending on the area in which you reside or are located. In such cases, please refer to the applicable exhibits. If this Privacy Policy conflicts with the country-specific exhibits, such exhibits will prevail. We collect and process the personal information of customers in the following ways:

Categories of personal information we collect/subject to processing

The Company collects and processes the following personal information about its customers:

  • Information provided by the customer. This includes (1) self-portrait photos provided by customers; (2) contents of inquiries made by customers to the Company; and (3) any other information you voluntarily provide for us while using the Service.

How the personal information is used

The Company may process the personal information of customers for the following purposes:

  • to provide the Service;
  • to respond to inquiries made by customers;
  • with your consent, or as otherwise disclosed at the time information is collected;
  • for our recordkeeping purposes; and
  • for other purposes permitted under applicable laws and regulations.

Legal basis, etc. for processing

The Company processes your personal information in accordance with applicable privacy laws and regulations. Please refer to the country-specific exhibits regarding the Company’s legal basis for processing.
The provision of your personal information may be mandatory in order for us to provide the Service. Specifically:

  • Your photo is required for us to provide the Service of creating NFTs using your self-portrait. If you do not provide us with such personal information, the Company may not provide you with the Service.
  • Inquiries must be collected for the Company to respond to your questions. If you do not provide the inquiry details to us, the Company will be unable to provide you with a response.

Retention period for personal information

The Company retains your personal information as long as it is necessary to fulfill the purposes of processing personal information set out above. Subject to any legal or regulatory exceptions, the retention period for each category of personal information is as follows:

  • Photos provided by customers who use the service: up to 1 year after such a customer has withdrawn from the Service.
  • Inquiry details of customers who have contacted the Company: 1 year.

Sources of personal information

The Company obtains personal information from you when you provide it directly to the Company.

Sharing and disclosure of personal information

The Company shares with and discloses customers’ personal information to the following third parties to fulfill the purposes of processing personal information as set out above.

  • Sharing with Processors (service providers)

    • The Customer Support Outsourcing Company for Our Website, such as BlockBase, Inc., and Earlyworks Co., Ltd.;
    • Other contractors of the Company;
  • Legal compliance, etc.

    In some instances, the Company may be required to disclose your personal information to public and governmental authorities within or outside your country of residence in accordance with the law and/or requests from such authorities. The Company will also disclose your personal information if the disclosure is necessary or appropriate due to the purposes of law enforcement, court order, or governmental regulations. The Company will also disclose your personal information if the disclosure is reasonably necessary to protect the Company’s rights, to pursue available remedies, to enforce the Company’s terms of use, to investigate fraud, or to protect the Company’s operations or customers.

  • Other

    In addition, we may also share the personal information of customers with other parties in the following cases:

    • as part of an actual or potential corporate sale, merger, acquisition, reorganization, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding;
    • cases in which there is a need to protect a human life, body, or assets, and when it is difficult to obtain the principal’s consent;
    • with your consent; and
    • other cases permitted under applicable laws and regulations.

Overseas transfer of personal information

As a result of the above sharing and disclosure, your personal information may be transferred to the following countries:

  • United States of America
  • Japan

In such cases, the Company will take proper protection measures required by the personal information protection regulations of each country. For the protection measures of each country, please refer to the country-specific exhibits.

Safety management measures

For the management of customers’ personal information to prevent the unauthorized disclosure, loss, or damage thereof, the Company takes the necessary and appropriate management measures. In addition, if the Company handles personal information in a foreign country, the Company will take necessary and appropriate measures for the safe management of personal data after ascertaining the external environment such as systems regarding the protection of personal information in such a foreign country.

Cookies and similar technologies

When a customer accesses Our Website and such customer enables cookies, etc. (including tracking technologies such as flash cookies and web beacons, and other technologies; “Cookies, etc.”), the Company may automatically acquire information about the PC, smartphone, tablet, or other information regarding the communication devices used by the customer, etc. If the Company acquires such information, the Company will handle the information as personal information. If you do not wish to use cookies or other tracking technologies, you may disable them by changing your web browser settings. Please refer to Exhibit: EEA (European Economic Area) and the UK for the legal basis for processing cookies with respect to customers located or residing in the EEA (European Economic Area) and the United Kingdom.

Links, etc., to Third-Party Websites or the like

The Service may provide links to third-party websites or apps. We do not control the privacy practices of those websites or apps, and they are not covered by the scope of this Privacy Policy. You should review the privacy policies of other websites or apps that you use to learn about their data practices.

Rights of customers

The Company will respect the legal rights you hold regarding personal information protection regulations applicable to you. Customers subject to Japanese law may require disclosure of personal information, correction, addition, and elimination of content, suspension and erasure of usage, suspension of provision to third parties, and disclosure of records of provision to third parties in accordance with Japanese laws regarding protection of personal information. In addition, legal rights related to personal information laws will be applied to customers as applicable in their jurisdiction. For rights granted in each country, please refer to the country-specific exhibits. If you wish to exercise your rights, please make an inquiry using the contact in Section 12. (Contact Details) of this Privacy Policy.

Contact Details

For questions, complaints, and other inquiries regarding the processing of personal information by the Company and this Privacy Policy, please contact the consultation center stated below:

Changes to the Privacy Policy

The Company may, in making changes to the Privacy Policy (including country-specific exhibits), change or add all or part of the Privacy Policy by publishing such changes or additions on Our Website or Discord, or giving notice by any other method that the Company deems appropriate (subject to applicable laws and regulations, if any). If there are any necessary procedures in personal information protection regulations that are applicable, such procedures will be taken.
We encourage you to visit this page periodically to learn of any updates. You can see when the Privacy Policy (including country-specific exhibits) was last updated by checking the “last updated” date.

Effective Date
December 3, 2022
Last updated
December 3, 2022

Exhibit: EEA(European Economic Area) and the UK

This Exhibit applies to customers located or residing in the EEA (European Economic Area) and the UK and refers to the GDPR and the UK GDPR (collectively, the “GDPR”).

Legal basis for processing

Purpose of the processing Lawful basis of the processing Categories of personal data Data recipients Data transfer outside EU/EEA
Providing the Service Contract performance (Art. 6.1 b GDPR) Customer’s portrait Processors
(service providers)
Yes
Responding to inquiries made by customers Contract performance (Art. 6.1 b GDPR) Inquiry details Processors
(service providers)
Yes
  • * For details of the balancing test for legitimate interests, please contact us using the contact details specified in Section 12. (Contact Details) of this Privacy Policy.
  • ** Where required by law, we will obtain your consent before engaging in direct marketing.

Overseas transfer of personal information

Most of our IT systems are hosted in Japan. The European Commission has determined that Japan offers an adequate level of protection.

We also transfer your personal data to processors which host or access personal data outside of the UK or the EEA in which case we take steps to ensure your data is adequately protected:

  • United States of America–Personal data listed on “1. Categories of personal information subject to processing.”– Mechanism relied upon: Approved Standard Contractual Clauses ( GDPR Article 46(2)(c) and Article 46(5))

A copy of the relevant mechanism can be obtained for your review on request by using the contact details from the contact in Section 12. (Contact Details) of this Privacy Policy.

Your rights

You have the following rights.

  • Obtaining information with regards to data processing: You have the right to obtain from us all necessary information regarding our processing of data concerning you (GDPR Article 13 and Article 14).
  • Access to personal information: You have the right to obtain confirmation from us as to whether or not personal information concerning you are being processed, and, where that is the case, to access your personal information and any other relevant information concerning you. (GDPR Article 15).
  • Rectification and erasure of personal information: You have the right to have us rectify inaccurate personal information concerning you without undue delay and have incomplete personal information completed by us (GDPR, Article 16). You also have the right to have us erase personal information concerning you without undue delay when certain conditions are met (GDPR Article 17).
  • Restricting processing of personal information: You have the right to restrict our processing of personal information concerning you when certain conditions are met (GDPR Article 18).
  • Objection to processing of personal information: You have the right to object to our processing of personal information concerning you when certain conditions are met (GDPR Article 21).
  • Personal information portability: You have the right to receive personal information concerning you in a structured, commonly used and machine-readable format, and to transmit those data to another controller without hindrance from us, when certain conditions are met (GDPR Article 20).
  • Right to withdraw your consent: You have the right to withdraw your consent at any time by the means separately specified at the time we obtain your consent. However, your withdrawal of consent does not affect the lawfulness of processing conducted based on your consent before its withdrawal.
  • Freedom from automated decision-making: You have the right to not be subject to automated (no human involvement) decision-making, which produces legal effects or significant effects on you, when certain conditions are met (GDPR Article 22).
Effective Date
December 3, 2022
Last updated
December 3, 2022

Exhibit: California

California Privacy Rights

his exhibit applies to consumers subject to the California Consumer Privacy Act (“CCPA”), and applies to “personal information” as defined under the CCPA. This exhibit contains disclosures required by the CCPA and explains the rights for California residents.

If you are vision impaired, you can access this exhibit using a screen reader. If you are otherwise disabled, you can access this exhibit by contacting the Company for additional accessibility information using the contact details specified in Section 10 below.

Categories of California Personal Information collected by the Company

We collect personal information as defined under the CCPA (“California Personal Information”). We have collected California Personal Information in the following categories within the past twelve (12) months:

  • Biometric information (Customer self-portrait photo)
  • Internet or other electronic network activity information and commercial information (Details of inquiries made by you to the Company and any other information you voluntarily provided while using the Service.)

Source of California Personal Information

We collect the California Personal Information specified in Section 1 above directly from you.

Use of California Personal Information

The Company uses your California Personal Information for the following purposes:

  • to provide the Service;
  • to respond to inquiries made by you;
  • with your consent, or as otherwise disclosed at the time information is collected;
  • for our recordkeeping purposes; and
  • for other purposes permitted under applicable laws and regulations.

Recipients of California Personal Information

In the past twelve (12) months, we have disclosed your California Personal Information to the following categories of service providers for business purposes.

We do not sell personal information and have not sold your California Personal Information to any third party within the past twelve (12) months, irrespective of whether you are under 16 years of age or not.

Personal information category Third-party recipients for business purpose disclosures
Biometric information
  • Service providers such as customer support outsourcing companies for Our Website, including BlockBase, Inc., and Earlyworks Co., Ltd.; and
  • Other vendors of the Company.
Internet or other electronic network activity information and commercial information
  • Service provider such as customer support outsourcing companies for Our Website including BlockBase, Inc., and Earlyworks Co., Ltd.; and
  • Other vendors of the Company.

Your rights concerning California Personal Information

You have certain rights in connection with your California Personal Information. You may exercise the following rights regarding your California Personal Information, subject to certain exceptions and limitations:

  • The right to know the categories and specific pieces of personal data we collect, use, disclose, and sell about you; the categories of sources from which we collected personal data about you; our purposes for collecting or selling personal data about you; the categories of personal data about you that we have either sold or disclosed for a business purpose; and the categories of third parties with which we have shared personal data.
  • The right to request deletion of the California Personal Information we have collected and retained about you. We may deny your request for deletion if retaining the information is necessary for us or our service provider(s) to:
    • Complete the transaction for which we collected the California Personal Information and provide the Service that you requested;
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity or prosecute those responsible for such activities;
    • Comply with legal obligation; or
    • Make other internal and lawful uses of that information that are compatible with the context in which you provided it.
  • Other California Privacy Rights: As a California resident, under California’s Shine the Light law (California Civil Code § 1798.83) you may request that we provide a list of the categories of personal information that we have disclosed to third parties for direct marketing purposes during the preceding calendar year, and the names and addresses of those third parties. You also may request that we do not share your personal information with third parties for marketing purposes.

We will not discriminate against you for exercising any of these rights above.

Exercising your rights to know or delete

To exercise any of the above rights, please contact us using the following information and submit the required verifying information, as further described below:

Verification procedures and necessary information

We may request that you provide additional information to verify your identity or to correctly understand, evaluate and respond to your request, but you are not required to create an account with us in order to have it fulfilled. We ask you to provide specific personal information for our records and reference. We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request.

Authorized Agent

You may designate an authorized agent to submit requests on your behalf by designating such an agent in writing. We may require the agent to provide us with proof that you have authorized the agent to make requests on your behalf prior to accepting requests from the agent.

Minors

We do not have actual knowledge that we sell the personal data of minors under 16 years of age.

Contact details for detailed information

If you have any questions or concerns regarding our privacy policies and practices or your options and rights under California law, please contact us here: .