1. Protection and control of personal data

National Research and Development Agency/National Institute for Environmental Studies (hereinafter referred to as "the Institute") provides services (information provided by the Site) on the Global Environmental Database (hereinafter referred to as "the Site"). We collect the personal data described below within the necessary scope for the smooth operation of the services, such as information dissemination and inquiry reception, provided on the Site. The collected personal data will be processed appropriately within the scope of the purpose of use in accordance with the Institute's Privacy Policy and the EU General Data Protection Regulation (hereinafter referred to as "GDPR").

2. Definition of Terms

The definitions of terms in the Privacy Policy (hereinafter referred to as "the Policy") are as follows:

• Personal data: Information about an identified or identifiable natural person (hereinafter referred to as "data subject"). On the Site, information about individuals such as e-mail addresses that is necessary for the operation of the Site.
• Processing: Operations performed on personal data (data collection, recording, editing, storage, modification / amendment, recovery, reference, use, disclosure / provision, alignment, restriction, deletion, etc.).

3. Scope of Application

This privacy policy applies only to the Site. This Policy also applies to users of the Site who live or reside within the EEA.

4. Personal data to be collected

The Institute collects the following personal data about users of the Site and users who have registered as users on the Site (hereinafter referred to as "the registered users").

1. Users of the Site
   • Information about inquiry (e-mail address, etc.) only when there is an inquiry from a user of the Site
   • Access log (Internet domain names, IP address) to the Site
2. Registered users
   • E-mail address
   • Name
   • Affiliation
   • Access log (Internet domain names, IP address) to the Site

5. Purpose and Legal Basis of Personal Data Processing

When processing and using personal data, the purpose of use should be clarified in accordance with Article 6.1 (a) of the GDPR, and personal data will be processed if the consent of the user is obtained in advance and in accordance with the legal basis stipulated in Article 6.1 (b) to (f) of the GDPR. However, with regard to Article 6.1 (f) of the GDPR, personal data shall be used within the scope of the following legitimate interests.

1. Depending on the response to inquiries to the Site and the content of the inquiries, transfer to related departments in the Institute, and related ministries and agencies (information on inquiries)
2. Security measures for the server that operates the Site (IP address)
3. User authentication when using the services of the Site
4. Notification by e-mail from the electronic service of the Site
5. Necessary communications with Registered Users (e-mail address)
6. Implementation of reports, etc. based on requests from public institutions (e-mail address, affiliation)

6. Refusal to Provide Personal Data

To obtain some of the data provided on the Site, you must register as a user. If you do not register as a user, we will not be able to provide some of the services.

7. Disclosure, provision and sharing of personal data

Personal data provided on the Site may be disclosed, provided or shared outside this Site for the following purposes.

1. In order to achieve the purposes described in this Policy, we may disclose, provide to, or share the personal data of users with relevant ministries and agencies etc. When sharing personal data with relevant ministries and agencies, we will take the measures prescribed in Article 26 of the GDPR and disclose the data to the user himself / herself.
2. In complying with EU law or the laws of EU / EEA member countries, we will disclose and provide the personal data of users to the authorities and the other disclosure and provision parties stipulated by the law.
3. The Site may use Google Analytics provided by Google, Inc. for the purpose of tracking the access status of the homepage and improving the content of the homepage. Cookies may be used to provide services and are used for statistical analysis etc., as anonymous information.

8. Site Security (SSL description)

The Site uses SSL (Secure Sockets Layer), an encryption technology, on all pages, and data input flows over the network from your terminal to the server in an encrypted state.

9. About Cookies (explanation of purpose of use)

The Site uses cookies to maintain the processing status across multiple pages, and collect information on browsing the Site. Personal information and data will not be obtained through the use of cookies.

10. Transfer of personal data outside the EU

The Institute will not transfer the personal data it holds to other countries.

11. Rights of users of the Site, etc.

1. The user has the following rights regarding the personal data held by the institute.
   1. Right to obtain all necessary information regarding data processing (GDPR Article 13, GDPR Article 14)
   2. Right to inquire about information (GDPR Article 15)
   3. Right to correct information (GDPR Article 16)
   4. Right to erase information “Right to be forgotten” (GDPR Article 17)
   5. Right to restrict information processing (GDPR Article 18)
   6. Right to object to information processing (GDPR Article 21)
   7. Right to data portability (GDPR Article 20)
2. As long as the personal data of the user is processed with the consent of the user, the user has the right to withdraw this consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. (GDPR Article 7, Paragraph 3)
3. When a minor becomes a user, the consent by the holder of parental responsibility over the minor is required. (GDPR Article8)
4. The user has the right to lodge a complaint with an information protection supervisory authority regarding the processing of personal information on the Site. (GDPR Article 77)
5. Personal data registered by registered users can be corrected by the registered users themselves from Update of user information under the User Registration menu on the Site.
6. If you wish to stop using the Site as the registered user please apply at Deregistration from the User Registration menu on the Site, or let us know by e-mail.
7. If you wish to delete your personal data, please contact us by e-mail at "Contact Information" below. We will delete it promptly after confirming your identity.

12. Disclaimer

For information purposes, the Site may post links to websites other than the Institute. Since linked sites have their own policies, when accessing a linked website please check the policies of the linked website. The Institute is not responsible for the content of any linked website outside the Institute, the use of the site, and the processing of personal data.

13. Acceptance to the Privacy Policy

By using this web page, we assume that you have consented to the Privacy Policy of this Site and the handling methods of personal data described here. Please do not provide your personal data unless you agree to the policies mentioned above.

14. Privacy Policy Revision

We will comply with laws and regulations and other norms related to personal data, and continuously improve our system for protecting personal data. When we revise the Privacy Policy, we will announce the revision and clearly state the revision date on this web page.

15. Data Protection Officer

Director, Earth System Division, National Institute for Environmental Studies

16. Contact

Address: 16-2 Onogawa, Tsukuba, Ibaraki, 305-8506 Japan
Email:
FAX: 029-858-2645