Privacy Policy for DARE: Special Provisions for Residents of the EEA/UK (GDPR)
Last Updated: May 28, 2026
These Special Provisions apply solely to residents of the Member States of the European Economic Area (EEA) and the United Kingdom (UK) in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR") and the UK Data Protection Act 2018. These provisions supplement the DARE General Privacy Policy.
Article 1: Legal Basis for Processing
Under GDPR, we must have a "legal basis" to process your personal data. We rely on the following bases depending on the specific activity:
Performance of a Contract (Article 6(1)(b)): Processing is necessary to provide the Services you have requested, including account management, software license authentication, and transaction processing via Paddle.
Legitimate Interests (Article 6(1)(f)): Processing is necessary for our legitimate business interests, such as improving our "Raster to Vector" algorithms, ensuring network security, preventing fraud, and conducting essential business analytics.
Consent (Article 6(1)(a)): In specific cases, such as sending certain marketing communications or using non-essential cookies, we will obtain your explicit consent, which you may withdraw at any time.
Legal Obligation (Article 6(1)(c)): Processing is necessary for compliance with legal obligations, such as tax reporting or responding to lawful government requests.
Article 2: Your Rights as a Data Subject
As a resident of the EEA or UK, you possess the following rights regarding your personal data:
Right of Access (Art. 15): You have the right to obtain confirmation as to whether or not your personal data is being processed and to receive a copy of that data.
Right to Rectification (Art. 16): You have the right to request the correction of inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten") (Art. 17): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
Right to Restriction of Processing (Art. 18): You have the right to restrict the processing of your data under certain conditions (e.g., if you contest the accuracy of the data).
Right to Data Portability (Art. 20): You have the right to receive your data in a structured, commonly used, and machine-readable format and to transmit that data to another controller.
Right to Object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
To exercise these rights, please contact our Data Protection Team at support@darehelp.zendesk.com. We will respond to your request within one month.
Article 3: International Data Transfers
SystemMetrix Co., Ltd. is located in Japan. When we transfer your personal data from the EEA/UK to Japan, we rely on the following safeguards:
Adequacy Decision: The European Commission and the UK Government have officially recognized Japan as providing an "adequate" level of data protection. This allows for the seamless transfer of personal data to Japan without the need for additional specific authorizations.
Standard Contractual Clauses (SCCs): For transfers to service providers located in countries without an adequacy decision (such as certain US-based subprocessors), we utilize Standard Contractual Clauses approved by the European Commission to ensure a high level of protection.
Article 4: Data Retention and Storage
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Policy and our statutory obligations.
Transaction records are kept for at least 7 years to comply with Japanese corporate and tax laws.
Account identifiers and license data are retained until you request account deletion or after a prolonged period of inactivity (typically 2 years).
Article 5: Security of Processing
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption (TLS/SSL), access controls, and pseudonymization where applicable. Our focus on local application processing (e.g., DARE Drive Local Edition) significantly reduces the volume of sensitive drawing data processed on our servers, enhancing your privacy.
Article 6: Right to Lodge a Complaint
If you believe that our processing of your personal data infringes on the GDPR or UK data protection laws, you have the right to lodge a complaint with a supervisory authority in the Member State of your residence, place of work, or the place of the alleged infringement.
Article 7: Data Protection Contact
For any GDPR-related inquiries, please contact our designated Data Protection Liaison:
SystemMetrix Co., Ltd. – Data Protection Office
Email: support@darehelp.zendesk.com
Attention: Data Protection Officer
