Privacy and Cookie Policy

Privacy Policy_20206

【Privacy Policy】Handling of Personal Information

1. Introduction

Nippon Ski Resort Development Co., Ltd. (hereinafter referred to as the "Company") establishes this Privacy Policy to manifest its stance on respecting the privacy of individuals who use the Company's services (hereinafter referred to as the "User" or "Users"). The Company shall handle and manage Users' personal information (as defined below) with the utmost care and strict attention.

2. Definition of Personal Information

In this Privacy Policy, "Personal Information" refers to information regarding an identified or identifiable living individual. For example, personal information that can identify a User includes name, address, telephone number, payment details, specific Company services purchased by the User, device identification numbers, location data, and online identifiers (such as Cookie information and User IP addresses exemplified in Section 13, "Acquisition and Use of Attribute Information and Behavioral History" below). Furthermore, even if information cannot identify a User on its own, it shall be deemed personal information if the Company can link it to a specific User. In addition, information such as name, date of birth, gender, and address (the so-called "Four Basic Pieces of Information") acquired by the Company through external identity verification services shall be included in "Personal Information" under this Policy if the Company cross-references and manages it with User information, even if the individual cannot be identified by that information alone.

3. Scope of Application

This Privacy Policy shall apply when Users utilize the Company's services and products.

4. Purposes of Use of Personal Information

The Company uses Users' personal information for the following purposes:

Providing services at the Company's ski resorts (sales of season passes/lift tickets, ski rentals, parking lot utilization, etc.)
Providing services at the Company's Official Ticket Center
Distribution and display of advertisements and content based on attribute information, device information, location information, behavioral history, etc., on the Company's website, including the services in item (2) above
All operations incidental or related to items (1) through (3) above
Improvement of the Company's services, development of new services, and marketing
Guidance, operation, management, and provision of information for various events and campaigns
Implementation of questionnaires, monitors, interviews, etc., regarding the Company's services and products
Contacting Users regarding the provision of the Company's services and products
Guidance, operation, management, and provision of various information for services, products, various events, and campaigns handled by the Company, the Company's group companies, and partner companies
Responding to inquiries, requests, etc.
*In addition, information will be used for the purposes described in "7. Joint Use."
Implementing identity verification using external services, and utilizing the information acquired through such identity verification (name, date of birth, gender, address, etc.) to determine product/service sales conditions, apply price categories, and control sales eligibility and sales quantities
Confirming usage status, applying sales restrictions, and implementing fraud prevention measures to prevent unauthorized purchase or resale of specially priced products
Managing the connection status with identity verification services, managing consent and withdrawal, and operations incidental thereto

*Please note that personal information (Four Basic Pieces of Information) acquired through integration with the external identity verification service (xID) shall be used only within the scope of the purposes specified in items (11) through (13) above, and shall not be used for the distribution/display of advertisements/content based on (3), service improvement/new service development and marketing based on (5), or provision of various information to partner companies based on (9). Furthermore, it shall be excluded from the scope of "Joint Use" defined in Section 7.

5. Choice by the User

In principle, the provision of personal information by the User to the Company is based on the User's voluntary will. If personal information is not provided, the User may face disadvantages, such as being unable to use various services provided by the Company, certain system functions failing to operate, or the Company being unable to deliver campaign information.

Users may change their contact information and intention to receive email newsletters at any time in accordance with the method separately designated by the Company.

The provision of personal information using an external identity verification service shall be based on the User's voluntary consent (opt-in). Even if the User does not consent, they can continue to use standard-priced products and services, but they may be unable to utilize specially priced products or certain services that require identity verification.

6. Disclosure and Provision of Personal Information to Third Parties

The Company shall not disclose or provide Users' personal information to third parties except in any of the following cases. Furthermore, personal information containing sensitive information of the User shall not be disclosed or provided to third parties under any circumstances, unless required by laws and regulations or consented to by the User. Provision through joint use or outsourcing shall not fall under disclosure or provision to third parties.

However, the Company utilizes an external identity verification service provider (xID Inc.) for the purpose of identity verification and accompanying information linkage. Personal information acquired through this service shall be handled appropriately in accordance with laws, regulations, and this Privacy Policy.

When the User's explicit consent is obtained
When it is necessary for the protection of human life, body, or property, and it is difficult to obtain the User's consent
When it is necessary to cooperate with a national agency, local public entity, etc., in executing public affairs, and obtaining the User's consent risks impeding the execution of those affairs
When disclosing or providing statistical data (information from which the User cannot be identified)
When disclosure of personal information is requested by a court, prosecutor's office, police, or an authority with equivalent power
When the User is in a state where they can easily confirm the following contents in advance on the Company's web pages, etc., and there is no indication of intention to refuse provision, provided that procedures under laws and regulations are followed:

a. Setting provision to a third party as a purpose of use

b. Items of personal data provided to the third party

c. Means or methods of provision to the third party

d. Stopping disclosure or provision to a third party upon the User's request

e. Methods for accepting requests from Users
When disclosure or provision is permitted by laws and regulations
When personal information is provided due to the succession of business resulting from a merger, corporate split, business transfer, or other reasons, and is handled within the scope of the purpose of use prior to the succession

7. Joint Use

The Company jointly utilizes Users' personal information as follows:

Scope of Joint Users
Company Group Companies
Purposes of Joint Use

a. To provide services, travel services, and other products/services handled by the Company or jointly utilizing companies

b. To send direct mail, guidance on products/services, and implement questionnaires by the Company or jointly utilizing companies

c. For marketing, new service/product development by the Company or jointly utilizing companies

d. To transmit/hand over to the responsible company when there is an inquiry, usage application, or other offer from a User regarding services/products provided by the Company or jointly utilizing companies

e. To appropriately and smoothly execute other transactions with Users by the Company or jointly utilizing companies

f. For management control and internal control of the Company Group
Items of Personal Information to be Jointly Used
In addition to the personal information defined in Section 2 "Definition of Personal Information" above, credit card numbers, credit card expiration dates, credit card usage history and related information, inquiry details, app usage history and related information, etc.
Party Responsible for Managing Personal Information
Nippon Ski Resort Development Co., Ltd.

8. Outsourcing of Personal Information Processing

The Company may outsource part or all of the personal information handling operations. The Company shall be responsible for the handling of personal information at the contractor.

9. Use of Statistically Processed Data

The Company may create statistical data processed so that individuals cannot be identified based on the provided personal information. The Company shall be entitled to utilize statistical data that cannot identify individuals without any restrictions.

10. Transfer Outside Japan

When providing Users' personal information to third parties outside Japan, including subcontractors and joint users, the Company shall take necessary and appropriate measures in accordance with laws and regulations.

11. Accuracy of Personal Information

The Company shall endeavor to accurately process the provided personal information. However, the User shall be responsible for ensuring that the contents of the personal information provided are accurate and up-to-date.

12. Management of Personal Information

The Company endeavors to implement appropriate security measures to prevent the loss, misuse, or alteration of personal information under its control. Personal information is stored in a secure environment inaccessible to general users.

Regarding the protection and appropriate handling of Users' personal information, the Company provides internal education to officers and employees, determines retention periods for personal information according to the purpose of use, and disposes of it by appropriate methods when the purpose of use is achieved.

Personal information acquired through external identity verification services shall also be appropriately managed and stored within the scope necessary to achieve the purpose of use, and appropriate measures for deletion or suspension of use shall be taken when it becomes unnecessary.

13. Acquisition and Use of Attribute Information and Behavioral History

(1) Use of Cookies and Other Technologies

The Company uses Cookies to protect Users' privacy, improve convenience, deliver advertisements, and acquire statistical data. In addition, the Company may use technologies such as Cookies and JavaScript to acquire attribute information that cannot identify individuals, such as age and gender provided at the time of member registration (limited to information that cannot identify individuals even when combined), and Users' behavioral history within the site (accessed URLs, content, reference order, etc.). However, Cookies and behavioral history do not contain any personal information.

The Company may deliver and display advertisements after identifying individuals when Users use this Service by logging in.

In addition, the Company utilizes behavioral targeting advertising services provided by the following companies to deliver appropriate advertisements to Users. If you wish to invalidate this service, please access the following opt-out page and follow the procedures.
1. Google LLC

(2) Use of Access Logs When Logged In

When a User uses this Service by logging in, the Company may identify the individual and use the behavioral history from before the login to deliver/display advertisements/content and provide this Service.

● List of Cookies Acquired

Cookie Name	Purpose of Cookie
FORM_KEY	Stores a randomly generated key used to prevent forged requests (such as CSRF attacks).
PHPSESSID	Your session ID on the server.
GUEST-VIEW	Allows guests to view and edit their orders.
PERSISTENT_SHOPPING_CART	A link to information about your cart and viewing history.
STF	Information on products you have shared via email to friends.
STORE	The store view or language you have selected.
USER_ALLOWED_SAVE_COOKIE	Indicates whether a customer allowed the use of cookies.
MAGE-CACHE-SESSID	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-STORAGE-SECTION-INVALIDATION	Facilitates caching of content on the browser to make pages load faster.
MAGE-CACHE-TIMEOUT	Facilitates caching of content on the browser to make pages load faster.
SECTION-DATA-IDS	Facilitates caching of content on the browser to make pages load faster.
PRIVATE_CONTENT_VERSION	Facilitates caching of content on the browser to make pages load faster.
X-MAGENTO-VARY	Facilitates caching of content on the server to make pages load faster.
MAGE-TRANSLATION-FILE-VERSION	Facilitates translation of content into other languages.
MAGE-TRANSLATION-STORAGE	Facilitates translation of content into other languages.

14. Requests Regarding the Handling of Personal Information

Regarding Users' personal information stored in the databases held by the Company, when a request is made by a User via a designated method for disclosure, correction, deletion, addition, suspension of use, or erasure (hereinafter referred to as "Disclosure, etc."), the Company shall verify that the person making the request is the User themselves, and respond as follows within a reasonable period and scope in accordance with laws and regulations.

Requests for Disclosure
The Company discloses the items of personal information requested by the User.
Requests for Correction, Deletion, or Addition
The Company reviews the details of the request and performs correction, deletion, or addition regarding the User's personal information to the extent possible.
Requests for Suspension of Use or Erasure
In accordance with the details of the request, the Company suspends the use of or erases the designated items of personal information to an appropriate and possible extent. Please note that due to the suspension of use or erasure, services previously available or services aligned with the User's requests may become unavailable. Please submit requests with prior understanding of this consequence.

*If the implementation of the request significantly impedes the Company's normal operations, or risks violating provisions of laws and regulations, the Company may be unable to respond exactly as requested by the User.

Users may also make requests for disclosure, correction, deletion, suspension of use, etc., regarding personal information acquired through external identity verification services. Please note that if deletion or suspension of use is executed for such information, the provision of specific services or specially priced products that presuppose identity verification may become unavailable.

15. Methods for Requesting Disclosure, etc. and Contact Desk

If a User wishes to make a request for "14. Requests Regarding the Handling of Personal Information" above, please contact the following desk in writing or via the contact form:

<Contact Information>
Personal Information Handling Desk, Nippon Ski Resort Development Co., Ltd.
6380-4 Hokujo, Hakuba-mura, Kitaazumi-gun, Nagano 399-9301, Japan
Inquiry Form

16. Changes to the Privacy Policy

The Company may modify this Privacy Policy from time to time. When modifications are made, the Company will post the updated policy on the Company's Website, so please review the modified contents carefully.