Skip to content
Naka-ku | Mon-Fri 10am-10pm, Sat 10am-6pm 052-952-7058

Data Processing Agreement (DPA)

This Data Processing Agreement (hereinafter "the Agreement") is entered into between Quemadozone 合同会社 (hereinafter "the Processor") and the legal entity or sole proprietor utilizing the studio's services (hereinafter "the Controller"). This Agreement establishes the terms and conditions for the processing of data handled during recording sessions and post-production processes.

Summary:
  • The Processor processes data exclusively within the scope of instructions provided by the Controller.
  • Data retention follows the archive policy (12 months) as defined in the business rules.
  • XSERVER Inc. and FormSubmit are utilized as sub-processors.
  • Strict compliance with Japan's Act on the Protection of Personal Information (APPI) is maintained.

1. Definitions and Purpose

The purpose of this Agreement is to ensure the security of data processing performed by the Processor on behalf of the Controller, in accordance with the Act on the Protection of Personal Information (APPI) and the Amended APPI (2022). This Agreement supplements the Terms of Use and the Privacy Policy.

2. Scope and Categories of Processing

The data subject to processing includes the following:

  • Data Subjects: Artists, narrators, engineers, and third-party performers employed or contracted by the Controller.
  • Data Categories: Names, contact details, recorded audio data (multitracks, stems), and session instruction sheets.
  • Processing Purpose: Execution of vocal recording, instrument recording, mixing, mastering, and podcast production.

3. Processor Obligations and Security

Quemadozone 合同会社 undertakes the following obligations:

  • To process data only according to the written instructions (including email) of the Controller.
  • To limit data access to Nana Yamazaki (Director), Hana Shimizu (Chief Engineer), Haruto Yamada (Recording Engineer), and essential staff only.
  • To implement physical access controls (studio locking systems) and logical access controls (password management).

4. Use of Sub-processors

The Processor utilizes the following sub-processors to the extent necessary for service delivery:

  • XSERVER Inc.: Data backup and website hosting (Address: Grand Front Osaka Tower A 32F, 4-20 Ofuka-cho, Kita-ku, Osaka 530-0011).
  • FormSubmit: Data transfer via the contact form (located in the USA). The Controller is deemed to have consented to the transfer of data to the USA as detailed in the Privacy Policy.

5. Data Return and Deletion

The Processor shall promptly return or delete data upon termination of the contract or upon request by the Controller, subject to the following rules:

  • Archive Period: For convenience, the Processor retains session data for a maximum of 12 months. Data exceeding this period is permanently erased unless explicit consent is provided by the Controller.
  • Proof of Deletion: Upon request, the Processor will notify the Controller once the data erasure is complete.

6. Incident Notification and Audit

In the event of a security incident, such as a data breach, the Processor shall notify the Controller within a reasonable period (generally within 24 hours) of detecting the event. The Controller reserves the right to request an audit (such as a written report) to ensure compliance.

7. Legal Compliance and Jurisdiction

This Agreement is governed by Japanese law and is subject to the supervision of the Personal Information Protection Commission (PPC / Address: 3-3-1 Kasumigaseki, Chiyoda-ku, Tokyo 100-0013, https://www.ppc.go.jp). Any disputes arising from this Agreement shall be subject to the exclusive jurisdiction of the Nagoya District Court.

Contact Information:
Quemadozone 合同会社 (Director: Nana Yamazaki)
Address: Sakura-dori 12-4, 460-0008 Nagoya
Phone: 052-952-7058 / Email: [email protected]