Representative Director Daisuke Kawaguchi
Sony Marketing Inc. ("Sony") engages in a diverse range of businesses centered on "people" based on its purpose of "filling the world with excitement through the power of creativity and technology" and the management direction of "getting closer to people", and aims to create sustainable value and enhance corporate value from a long-term perspective using this diversity as a strength.
In order to conduct business activities in touch with people, it is essential that we respect the human rights of individuals and build and provide an environment that implements fair handling and safety management throughout the entire life cycle of personal information entrusted to us by customers, fans, artists, business partners, employees, and other stakeholders. Sony will act ethically, giving due consideration to the impact that handling personal information has on stakeholders, and will strive to build trust with you by enforcing accountability while ensuring transparency.
In the event that Sony indicates content that differs from this Privacy Policy in the privacy policy for an individual product or service, the content of the privacy policy for the relevant product or service will take precedence over this Privacy Policy. In addition, matters concerning personal information of job applicants and Sony employees will be separately notified or announced to the individual.
In addition, "Sony Group Companies" refers to Sony Group Corporation and companies in which Sony Group Corporation directly or indirectly holds a majority of issued voting shares or shares.
Sony will acquire each of the types of information set forth below.
Sony may acquire information by linking it to information (including personal data) received from third parties and managed by Sony.
When you use your "My Sony" Sony account (referred to as "My Sony"), Sony uses cookies, tokens, and other technologies to collect credentials (information issued to identify you consisting of a combination of random alphanumeric characters) necessary for My Sony authentication and authorization.
Sony will use acquired information for the following purposes.
In addition, if Sony separately indicates a purpose of use, etc. by notifying the person in question or obtaining approval from the relevant person concerning the terms of use, etc., the details of the individual purpose of use, etc. will take precedence over the above.
4-1.Sony will not provide any information to third parties without obtaining the customer's prior consent, except as permitted by law.
4-2.Matters related to joint use among group companies
Article 27, Paragraph 5, Item (iii) of the Act on the Protection of Personal Information stipulates that, as an exception to third-party provision, when personal data that is jointly used with a specific person is provided to that specific person, and the fact of such provision and certain matters are made readily available to the individual, such specific person does not fall under the category of "third party" defined in the provision on third parties and personal data can be provided to the joint users without obtaining the consent of the individual.
In this regard, Sony may jointly use acquired personal data in accordance with the following items.
4-3.Provision to subcontractors
Sony may provide some of the acquired information specified above in 2 to subcontractors in Japan and the U.S. to the extent necessary to achieve the purposes of use specified above in 3.
4-4.International Transfers
Sony may store all or part of the acquired information specified above in 2 on servers of a data hosting provider located in the United States of America (Amazon Web Services, Inc. of the United States). In addition, the acquired information specified above in 2 may be processed and viewed by employees of Sony or its subcontractors in countries other than the customer's country of residence, including Vietnam, China, the Philippines or the United States of America. Please refer to the following page (Japanese only) for an overview of the legal system regarding the protection of personal information in the relevant country.
https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku 
Sony applies common Sony Group policies based on industry standards and best practices, such as the International Organization for Standardization (ISO) 27001 standard group and the National Institute of Standards and Technology (NIST) SP800 series, and takes strict security measures for personal information acquired and held by Sony. This includes implementing and regularly reviewing organizational information security management, regular education and training for employees, regular inventory of information assets, implementation of physical security control measures (employee access control, terminal management, etc.), encryption of communications, strict access control, and regular vulnerability management of information systems. In addition, Sony may store some of the information obtained from customers specified above in 2 on a data hosting provider in the United States (see 4-4. International Transfers above). In this case, Sony will store the information after confirming that the provider has taken necessary and appropriate measures to manage the information securely.
Sony strives to comply with all laws and regulations applicable to the collection, storage and use of personal information concerning children. If you become aware that your child has provided personal information to Sony without the consent of a parent or guardian, please notify Sony at the Inquiry Desk specified below in 8.
Sony may change this Privacy Policy at any time to the extent permitted by law. In this case, Sony will notify customers of the revised Privacy Policy through this website.
Sony will respond appropriately to inquiries regarding the disclosure, correction, suspension of use (such as introduction of products and services), deletion, and other handling of personal information in accordance with the provisions of laws and regulations. Please contact Sony at the contact point below where you provided your personal information. For details of the procedure, please refer to the Procedures for Requests for Disclosure, etc. of Retained Personal Data.
Customers have certain rights regarding the acquired information specified above in 2. Such rights include the right to request disclosure, correction, suspension of use, etc. of retained personal data held by Sony or Sony Group companies. This includes the right for a customer to request that certain retained personal data be provided to the customer or any other organization of the customer's choice in a structured, machine-readable format. However, the exercise of these rights may be limited if permitted by law.
End of document.
