Data processing agreement
This English text is for convenience. The Japanese version is legally authoritative. 個人データ処理委託契約
In brief
- You remain the personal-information controller; we process audio and related data as your processor.
- Processing is limited to booked services; no marketing use or AI training on your files.
- Sub-processors include さくらインターネット株式会社; we contract for security and notify you of new ones.
- Files are deleted or returned after the archive period in our terms (12 months).
1. Parties and purpose
This agreement governs personal data that a client (“controller”) provides to 合同会社Lefsenlayerco (limited liability company (Godo Kaisha), Tokyo, “processor”) when we deliver recording studio work—recording, mixing, mastering, podcast editing (Services) under the Act on the Protection of Personal Information (APPI).
The controller defines purposes and obtains necessary consent or notices before sharing guest, narrator or performer data. The processor follows Privacy policy and this agreement within the controller’s instructions. Each project is specified in quotes, orders or e-mail.
2. Processing scope
Processor activities are limited to:
- Studio recording, editing, mixing, mastering and preview files
- Delivery in agreed formats (master formats guide)
- Agreed revisions (up to 2 rounds under terms where applicable)
- Backup and archive for about 12 months
Without the controller’s prior written consent, the processor will not use data for marketing, resale, machine learning, generative AI training or voice cloning. Podcast guest rights remain primarily with the controller (rights guide).
3. Security measures
The processor applies measures described in Privacy policy (access control, encryption, locked premises, staff training, media handling). The controller should use agreed secure transfer when sending confidential material.
On an incident, the processor notifies the controller promptly and cooperates on APPI-required steps; the controller handles data-subject contact unless otherwise agreed.
4. Sub-processors
The processor may use:
- さくらインターネット株式会社 — hosting, mail and storage (220-0012 神奈川県横浜市西区南堀江2-16-5 保土ヶ谷ビル4F)
- FormSubmit (United States) — only if the controller uses our contact form to send metadata
By accepting this agreement the controller generally authorises these sub-processors. New sub-processors are notified in advance; objections are discussed in good faith. Contracts or terms require appropriate security.
5. Retention, return and deletion
Session files are kept about 12 months after final delivery or session, then deleted or returned per terms. Earlier deletion or return is honoured when technically feasible. Accounting records required by law are outside this scope for their statutory period.
Deletion uses methods that make routine recovery impractical; backups may take additional weeks to purge. The controller should keep needed copies at delivery.
6. Audit and term
The controller may request written explanations of security measures within reasonable limits. On-site audits, at most once per year, require mutual scheduling and protect trade secrets.
This agreement rides alongside the service contract (Terms) and survives termination for confidentiality and deletion duties.
7. Governing law and contact
Japanese law applies. Disputes are first discussed via [email protected] or 03-5724-8910; if unresolved, courts in Tokyo have non-exclusive jurisdiction (mandatory consumer rules prevail for consumers).
Processor: 合同会社Lefsenlayerco, 森川 健太, 目黒区中目黒1-5-8 レフセンビル3F. Also Cookie policy, Accessibility statement.