Privacy Policy & GDPR

HPD Corporation Co., Ltd. and its group companies*1 (hereinafter referred to as the "Company") operate our group facilities*2, and in connection with the operation of our group facilities*2, HPD Corporation, business partners, job applicants (including internship applicants), employees, executives, and other members of the Company (hereinafter collectively referred to as Recognizing the importance of corporate social responsibility and the importance of information regarding individuals ("customers, etc.") (hereinafter referred to as "personal information" as stipulated in Article 2 of the Act on the Protection of Personal Information), we comply with laws and guidelines regarding personal information protection and handle it appropriately.
Please note that if the General Data Protection Regulation (hereinafter referred to as "GDPR") established by the European Union applies,GDPR policyPlease also check.
*1: Group companies refer to HOS Co., Ltd., Tsuruya Hotel Co., Ltd., and Okinawa Marine Research Center Co., Ltd.
*2: Our group facilities include Renaissance Okinawa Resort, Coco Garden Resort Okinawa , Aoaonarut Resort, Kissho CAREN, Tsuruya Kisshotei, Kissho Yamanaka, and Kagari Kisshotei.

The personal information that we obtain and hold includes the following:

(1)Personal information received from customers
①Basic information (name, address, gender, date of birth, nationality, email address, phone number, passport number, etc.)
②Related information (anniversaries, preferences, allergies, etc.)
③Payment information (credit card number, bank account number, etc.)
④Facility service usage status (accommodation, activities, product purchase history, etc.)
⑤Contact details (email, website form input, letter, etc.)
⑥ Information provided directly or indirectly by customers in connection with our service provision

(2)Personal information regarding business partners
①Name of person in charge, mobile number, position, etc.
②Other information obtained because it was necessary for business execution

(3)Personal information regarding recruitment/recruitment
① Contents stated in the application documents
② Contents of interviews, telephone calls, emails, etc. conducted for recruitment selection and joining procedures

(4)Personal information regarding employees, officers, and other members of our company
① In addition to the information in (3) above, necessary information such as bank account for salary transfer, health information, etc. in accordance with laws and company regulations regarding work/employment.

(5) Information automatically obtained by browsing our website
① Terminal information, log information, cookies, anonymous ID, location information, IP address, etc.

(6) Information automatically obtained using security systems
①Security camera footage, card key usage history, etc.

Our company will acquire and use personal information within the scope of the following purposes. In addition, if the processing exceeds the scope of the purpose, we will obtain the consent of the person in advance, excluding legal exceptions, before processing.

(1)Customer's personal information
① To provide services and products to customers
②To confirm reservations and respond to inquiries from customers
③ To fulfill contractual obligations to parties involved in travel arrangements (travel agencies, etc.) or external companies (credit card companies, airlines, etc.)
④To deliver information and e-mails regarding our products, events, etc.
⑤ To conduct sweepstakes, campaigns, etc., and to send surveys for the purpose of improving services.
⑥ To manage member information in our member organization and provide services to members
⑦ To distribute behavioral targeting advertisements using Internet advertisement distribution companies
⑧To understand usage status/analyze behavior for the purpose of improving, improving, and developing product services.
⑨ To respond based on legal obligations, laws and regulations, or notifications/guidance from administrative authorities, etc.
⑩ To respond to emergencies, accidents, disasters, etc.
⑪For work related to the above purpose
⑫For other purposes specified separately at the time of acquiring personal information

(2)Personal information of business partners
① To conclude, fulfill, outsource, and carry out other necessary operations with business partners for the purpose of providing services and products related to our business.
②For other purposes specified separately at the time of acquiring personal information

(3)Personal information of employment applicants
① To fulfill contracts regarding recruitment selection and joining procedures, and to carry out other necessary duties.
② To respond to inquiries, requests for materials, etc.
③For other purposes specified separately at the time of acquiring personal information

(4)Personal information of employees, officers, and other members of our company
①For salary calculation/payment and related operations
② For safety, human resources, labor, welfare management and related operations for our company members
③For other purposes specified separately at the time of acquiring personal information

Our company acquires personal information by the following methods. Customers always have the right to choose regarding the provision of personal information. However, if a customer refuses to provide personal information, such as by not providing their name, they may not be able to use some services.

(1) Obtained directly from customers, etc.
We may collect personal information through telephone calls, letters, business cards, orally, through websites, apps, etc. when making reservations or using our group facilities, creating an account on our group facilities' websites, responding to surveys, participating in lottery or sweepstakes, applying for or using services provided by our group facilities, recruiting or business communications, etc.

(2) Acquisition from customers' devices and the network of our group facilities
When you use the websites or other content of our group facilities, we may use cookies and related technologies to automatically collect personal information from your entire device.

(3) Acquisition from companies that have received legitimate authority from customers, etc.
In order to use our group facilities, customers may enter into a contract and obtain personal information from the following companies selected by our group facilities.
Example) Travel agent used by the customer or airline used as a means of transportation
Card companies used by customers, etc. for payment, etc.

(4) Obtaining from published information
Personal information may be obtained from newspapers, the Internet (including SNS), telephone directories, publications, and other books.

(5) If we receive personal information from customers for reasons other than those listed above, we will clearly explain the purpose and content of the information and collect the minimum necessary information.

When handling personal information, our company complies with the standards stipulated by the Personal Information Protection Act and related laws and regulations, and takes the following measures.

• Necessary preventive measures and safety measures to prevent leakage, unauthorized access, loss, destruction, tampering, etc.
• Regular updates to the information management system
• Establishing a safe organizational structure
• Formulation of internal regulations and specific rules regarding the handling of personal information, continuous review and improvement
• Thoroughly disseminating the content through regular education and training
• Physical safety measures for equipment and facilities that handle personal information
• Appropriate supervision of personal information contractors (specifying safety management in the contract, etc.)

*SSL: Our website uses the encryption technology SSL (Secure Sockets Layer). Personal information and credit card numbers sent by customers, etc. are automatically encrypted using SSL, so that even if they come into contact with a third party during communication, the contents cannot be read. However, this does not guarantee a completely secure environment.

Our company will not disclose or provide personal information of customers, etc. to third parties except in the following cases.

・When there is consent from the person in question
・When shared use with our group facilities for the purpose of use specified by our company
・When providing information to a subcontractor within the scope of the clearly stated purpose of use in order to provide services to customers, etc.
・When providing to a third party in the form of statistical information that cannot identify individuals for research and analysis aimed at improving usage trends and services provided.
・When provision is requested based on laws and regulations, etc. ・When it is urgently necessary to protect human life, body, mind, property, public health, etc., and it is difficult to obtain the consent of the customer, etc.
・In cases where it is necessary to cooperate with the national or local government, or a person entrusted by them, in carrying out public affairs, and obtaining the consent of the person concerned is likely to impede the execution of said affairs.
・When the person in question explicitly requests disclosure or provision to a third party.
・When personal information management rights are transferred due to business succession due to merger, etc.

Our company will jointly use the personal information of our customers as follows, after taking necessary protection measures.

(1) Scope of joint use
Our group facilities

(2) Purpose of joint use
Purpose stipulated in “2. Purpose of acquisition”

(3) Information to be jointly used
Information stipulated in “1. Types of personal information to be acquired”

(4) Person responsible for managing shared use
HPD Corporation Co., Ltd.

We will retain personal information obtained from customers as long as necessary for the purposes of use stated in this policy. The specific retention period is determined by taking into account the purpose of acquiring and processing personal information, the nature of personal information, and legal or business necessity. In addition, after the retention period has elapsed, personal information will be deleted or anonymized in a safe manner.

Cookies are a technology that stores access information to our website on your computer or mobile device.
Our website uses cookies to analyze browsing and usage status and to provide appropriate information to customers. If you wish, you can stop or disable your browser's cookie-related functions, but some of the services on our website may not function properly.
For information on how to configure, please contact the provider of each browser, orCookie policyPlease check.

Requests for disclosure, notification of purpose of use, correction, addition, or deletion of content (partially), suspension or deletion (in whole), disclosure or suspension of records provided to third parties (hereinafter collectively referred to as "requests") from individuals or their representatives regarding personal information held by our company. When making a "Request for Disclosure, etc."), please submit the required documents in writing (registered mail) to the counter below, and we will respond promptly within a reasonable period and to the extent necessary (a fee equivalent to the actual cost will be collected depending on the content of the request).
However, we may decline such requests in cases where the request violates the law, where there is a risk of harming the life, body, property, or other rights and interests of the person or a third party, where there is a risk of significantly impeding the proper implementation of our business, where the relevant personal information does not exist, where the identity of the requester cannot be confirmed, or where the requester does not pay the prescribed fee.

(1)Document mailing address (counter)
Address: 3425-2 Yamada, Onna Village, Kunigami District, Okinawa 904-0416
HPD Corporation Co., Ltd.
To Renaissance Okinawa Resort Accounting
*For questions, etc., contact: Email:privacy@hpd-c.co.jpPhone number: 098-965-0707

(2) Required documents
■If requested by the person in question

・bill

・Identification documents

A: Copy of one of the following
Driver's license
Passport
My Number Card (front side only)
Physical disability certificate
Residence card
Special permanent resident certificate

B: If you do not have the documents listed in A above, please provide copies of any two of the following:
Various health insurance insurance cards (within validity)
Various pension handbooks (within expiry date)
Copy of family register or extract (within 30 days of issue/original only)
Certificate of residence (within 30 days of issue/original only)
Seal registration certificate (within 30 days of issue/original only)
(If you wish to receive a reply by mail) Stamps equivalent to the actual cost of sending the reply
*Please contact us in advance regarding the amount.

■In case of request by proxy
・Bill
・Identity and agent confirmation documents (A or B above)
・(In the case of a request by a "legal representative")
・Documents certifying the qualifications of a legal representative, such as a copy of the family register
*Within 30 days from the date of issue
・(In the case of a request by a “voluntary representative”)
・Power of attorney
・(If you wish to receive a reply by mail) Stamps for the amount of the return will be sent by mail that is limited to the recipient.
*Please contact us in advance for the amount.

(3) How our company responds
We will send it to the address indicated on the invoice by post (receive only to the person in question) or email.
*Please set your domain in advance so that you can receive emails from "@hpd-c.co.jp".

(4) Notes
・If there are any deficiencies in the information, identity verification documents, fees, etc., we will notify you using the "contact information from our company" listed on the invoice. However, if there is no re-invoice within 2 weeks from the notification, the invoice will be invalidated. Documents and fees received at that time will not be returned and will be processed appropriately by our company.
・All miscellaneous expenses related to disclosure, such as printing and copying of required documents, acquisition costs of identification documents, etc., postage costs, etc., will be borne by the requester.
・Personal information obtained by our company in response to a request for disclosure, etc. will be used only to the extent necessary for the disclosure, etc. procedure. Please note that all submitted documents will not be returned. We will dispose of it appropriately.
・Please note that our company cannot be held responsible for any problems that arise due to the disclosure of retained personal data through this request.

(1)
When creating pseudonymized information (information about an individual obtained by processing personal information so that a specific individual cannot be identified unless compared with other information), the Company will process the information appropriately in accordance with the standards set by the Personal Information Protection Act and related laws and regulations.

(2)
If we use pseudonymized information, which is personal information, to the extent necessary for the purposes listed in "2. Purpose of acquisition" and "6. Joint use" of this policy, and if we change the purpose of use and use it for another purpose, we will publicize the changed purpose of use.

(3)
The pseudonymized information will not be compared with other information for the purpose of identifying the individual concerned with the original personal information. In addition, we will not provide pseudonymized personal information to third parties, except in cases where it is shared between our group facilities.

(4)
When we create pseudonymized information, or when we obtain pseudonymized information and deletion information related to such pseudonymized information, in addition to what is stipulated in "4. Safety Management" of this policy, we will take safety management measures based on laws and regulations regarding pseudonymized information and deletion information related to such pseudonymized information.

(1)
When creating anonymously processed information (personal information processed so that a specific individual cannot be identified and the personal information cannot be recovered), the Company will process the information appropriately in accordance with the standards stipulated by the Personal Information Protection Act and related laws and regulations.

(2)
Anonymously processed information will not be compared with other information for the purpose of identifying the person whose personal information is the source of the information. Additionally, when anonymously processed information is created, the items of personal information included in the anonymously processed information will be made public. In addition, when providing information to a third party, we will clearly indicate that the information provided is anonymously processed information.

(3)
When anonymously processed information is created, in order to prevent the leakage of information about deleted information from the personal information used to create anonymously processed information, personal identification codes, and the processing method used, in addition to the provisions set forth in "4. Safety Management" of this policy, we will take measures for safety management based on the provisions of laws and regulations.

Although our website pays the utmost attention to the handling of personal information in accordance with this policy, we are not responsible for the handling of your personal information on third-party websites or applications linked to our website. Please check the terms and conditions regarding personal information of the website before using it.

Our company may revise this policy without prior notice in response to changes in related laws or the social environment. Please check the website from time to time for the latest information. Please note that our company cannot be held responsible for any troubles caused by not confirming the information.

3425-2 Yamada, Onna Village, Kunigami District, Okinawa 904-0416
HPD Corporation Co., Ltd.
Renaissance Okinawa Resort Accounting
*For questions, etc., contact email:privacy@hpd-c.co.jpPhone number: +81 98-965-0707

Cookies are small text files that are stored in your browser when you visit a website. This allows the website to remember information about your visits and activities. By using cookies and related technologies, we distinguish each visitor, provide the optimal display according to the visitor's terminal and browser settings, and use recorded past browsing history to provide information and advertisements tailored to the interests of our customers.

We use three types of cookies:

Required cookies:
These cookies are essential to support the basic functionality and security features of the website. These cookies remain active whenever you use the website and are used without your consent.
Specifically, it supports features such as:
・Maintaining user login status
・Shopping cart management
・Save security settings
・Page navigation support

■Tools used on this website

Analysis cookies:
These cookies are used to understand how our website is used. We use this information to continually improve our website by understanding the usage status, such as the number of visitors to each page, how many pages are moved in a single visit, and whether there are any errors. For this purpose, we use Google Analytics. Google collects, records, and analyzes the access status of customers, etc., and uses this information to improve the quality of our website. Information about customers, etc. collected, recorded, and analyzed by Google Analytics is processed anonymously, so it does not contain any information that identifies a specific individual, but it may be used for advertisement distribution, etc.

■Tools used on this website

Marketing cookies:
This information is set by an external advertising distribution service provider and is used to record site access information, attribute information when logging in, etc., and to deliver advertisements according to the interests of customers. These cookies do not directly store personal information, but if you are a registered user of Google, Meta, Yahoo JAPAN, etc., your website browsing history may be managed in a way that is linked to your registered information. The information created by this cookie will be handled in accordance with the regulations of external advertising distribution service providers. You can also block these cookies, which will result in less targeted and more general advertising. The information collected by this cookie will be handled in accordance with the privacy policy and other regulations of the external advertisement distribution service provider.

■Tools used on this website

It is up to you to decide whether or not to save cookies on your device. You can set your browser to disable cookies, but some functions of our website may not be available or some pages may not display correctly.

(1) Method for each browser
Settings are required for all browsers on the devices you use (computers, tablets, smartphones, etc.). Below are links to commonly used browsers. The steps differ depending on each browser, so please check the instructions for your browser.

For Internet Explorer™: https://support.microsoft.com/ja-jp/help/17442/windows-internet-explorer-delete-manage-cookies

For Safari™: https://www.apple.com/jp/legal/privacy/jp/

For Google Chrome™: https://policies.google.com/technologies/managing?hl=ja

For Firefox™: https://support.mozilla.org/ja/kb/cookies-information-websites-store-on-your-computer

For Opera™ (English page): https://help.opera.com/en/latest/web-preferences/

(2) Method using the "Detailed cookie settings" menu
You can also select your desired settings in the "Cookie Settings" window on our website, but only "essential cookies" cannot be disabled in this window. Please check each URL listed in "(1) Method for each browser" and make changes from each device you are using.

It may be revised depending on changes in laws and social conditions. Changes to the cookie policy will become effective when the changed content is posted on our website.

3425-2 Yamada, Onna Village, Kunigami District, Okinawa 904-0416
HPD Corporation Co., Ltd.
Renaissance Okinawa Resort Accounting
Phone number: +81 98-965-0707
Email:privacy@hpd-c.co.jp　

This website is operated by HPD Corporation, MOVE21 Building, 2-32-13 Higashi Mikuni, Yodogawa-ku, Osaka 532-0002.
For inquiries, please contact us by email.privacy@hpd-c.co.jpPlease contact us.

This policy describes the specific information we are required to provide to data subjects in Europe (EU), the European Economic Area (EEA), and the United Kingdom (UK) under the EU General Data Protection Regulation ((EU) 2016/679 GDPR) and the UK General Data Protection Regulation (UK GDPR). These regulations set out data subject rights and personal data processing policies.

In this policy, our websitehttps://renaissance-okinawa.com/This page explains how we handle your personal data.
This document also covers the processing of personal data for other purposes, such as recruitment, sales and services.

4.1 EU Representative
Enobyte GmbH
Augustenstr. 49, 80333 Munich, Germany
Email:eurep-hpd@enobyte.com

4.2 UK Agent
Enobyte GmbH
c/o Regus HQ Bloomsbury 4/4a Bloomsbury Square, London, WC1A 2RP, United Kingdom
Email:ukrep-hpd@enobyte.com

We will only process your personal data where a legal basis exists. Under the GDPR and UK GDPR, there are three legal bases we use:

(1) Consent (GDPR/UK GDPR Article 6(1)a)
If consent is voluntarily provided, we may only process your personal data for the purposes for which consent was given.

(2) Contractual obligations (GDPR/UK GDPR Article 6.1.b)
If we enter into a contract with you, we need to store and use some information about you. The same applies if we perform necessary procedures based on a customer's request before concluding a contract.

(3)Legitimate interests (GDPR/UK GDPR Article 6(1)f)
Legitimate interests enable us to process your personal data for our legitimate interests. However, only if those interests do not override your interests or fundamental rights and freedoms. This processing and the benefits pursued are explained in this policy.

When you visit our website, our servers automatically store server log file information sent by your browser. This information includes:

content data
・Input text or upload file

Usage data
・Websites accessed
・Date and time the request was made

metadata
・Customer's IP address
・Your computer's time zone
・Date and time of your computer
・Requested website
・Which website did you access from?
- Information about your browser (version, language used, installed fonts and languages)
・Other information that your browser may send via the HTTP protocol

The temporary storage of your IP address is necessary to display the website content on your device. This information is used only to maintain the technical operation of our servers and network and to ensure network security. This processing is based on our legitimate interest in providing you with a secure website (Art. 6(1) f. EU GDPR/UK GDPR).

Server logs will be automatically deleted within 5 days. We save logs for this period to check for suspicious activity within our servers and to protect our infrastructure from external attacks such as DDoS.

We use an external hosting provider to provide our website. Providers receive and store content data, usage data, and metadata on our behalf. The external hosting providers we use are:

We use Cloudflare as our CDN provider to load some images and elements on this website. CDN providers are provided with usage data and metadata about your visits. By using a CDN, you can provide information to your customers more efficiently and improve the security of your website. This processing is based on our legitimate interests (Article 6(1) lit. GDPR/UK GDPR).

Cloudflare is a service provided by Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA. Please see our privacy policy here:https://www.cloudflare.com/privacypolicy

Cookies are small text files that can be written to your browser by any website. These cookies may be set by us (first-party cookies) or by a third party (third-party cookies). Cookies set by us cannot be read by other websites. However, if a cookie is set by a third party, other websites using that third party can also read the information stored in the cookie.

This allows for tracking capabilities across multiple websites. When using third-party cookies, we always ask for your consent before placing them.

The first party cookies we set are:

Our website may embed graphics, videos, social media buttons and other features provided by servers of external service providers. When you visit a website that embeds such content, your IP address will be transmitted to a third party.
In some cases, these tools may include web beacons (invisible graphics) that are used to collect statistics. If you discover such web beacons, please contact us. We will make every effort to promptly remove it from our website.

Some third-party content may set cookies on your browser to store certain information about how you use the tool or content.

In some cases, third parties may combine information collected on our website with other information to create a profile about you.

This website uses Google Tag Manager, provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). This service allows you to manage your website's tools through a centralized interface. Google Tag Manager itself does not process personal data, but is used to load other tools and content that may process personal data.

If you have given your consent, this website uses Google Analytics, a web analysis service from Google LLC. Controller in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This data processing is based on your consent (GDPR/UK GDPR Article 6(1) a).

Google Analytics uses cookies to analyze the usage of our website. The information obtained from cookies is usually transferred to and stored on a Google server in the United States.

IP anonymization is enabled in Google Analytics 4 by default. Due to this anonymization, your IP address is shortened by Google in the EU or EEA. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and shortened there. According to Google, the IP address sent through Google Analytics will not be combined with other Google data.

When you visit a website, your actions are recorded as "events". These events include:

・Number of page views
・First visit to website
・Session start
・Web pages viewed
・Your “click path” (interaction with the website)
・Scroll (when scrolling to the bottom 90% of the page)
・Click on external link
・Internal search queries
・Interaction with videos
・File download
・Ads displayed and clicked

The following is recorded:

・Approximate location information (region)
・Visit date and time
・IP-address (short form)
・Technical information about your browser and device (e.g. language settings, screen resolution)
・Your internet service provider
・Referring URL (which website or advertising medium you accessed this website through)

Google uses this information to evaluate your use of our website and to compile reports on web activity. This report is provided by Google Analytics 4 and helps you analyze your website's performance.

The following three companies may receive this data:

・Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a processor pursuant to Article 28 of the GDPR)
・Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
・Alphabet Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA

For the United States, the European Commission approved a new adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Google's servers are located all over the world, and we cannot completely exclude the possibility that your data may be transferred to a third country (e.g. Singapore). Therefore, we have entered into Standard Contractual Clauses (SCCs) with Google to establish an appropriate level of data protection in those countries.

The data transmitted by us and associated with cookies will be automatically deleted after 12 months. Google Analytics cookies are stored for a maximum of 2 years. Additionally, data that has exceeded the retention period will be automatically deleted every month.

You can withdraw your consent with future effect at any time by changing your preferences in the detailed cookie settings. The legality of the processing carried out based on consent up to the time of withdrawal remains unchanged.

You can prevent the storage of cookies by adjusting your browser settings at an early stage. However, if you choose to reject all cookies, the functionality of this website and other websites may be limited. You can also prevent Google from collecting and processing data generated by cookies and data about your website usage (including your IP address) by using the following methods:

・I do not agree to the installation of cookies
・Download and install the browser plug-in from the link below.
https://tools.google.com/dlpage/gaoptout

For more information about Google and its data handling practices, please see the links below.

・Terms of use: https://marketingplatform.google.com/about/analytics/terms/us/
・Data protection: https://support.google.com/analytics/answer/6004245?hl=en

・Use of cookies:https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=en

・Privacy policy:https://policies.google.com/privacy?hl=en

We use external ad serving service providers. These providers collect and store site access information and login attribute information in order to deliver advertisements tailored to your interests. This processing is based on your consent (GDPR/UK GDPR Article 6(1) a).

We use the following external ad distribution service providers.

(1) Google Ads
We use Google Ads provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) to advertise our services on the Google Ads network. These ads are shown to users of Google products and visitors to websites that include ads on the Google network. If a user clicks on our advertisement and is directed to a website with a “conversion-tracking-tag”, we will obtain information about the conversion rate.
We only receive aggregate data and do not capture any personally identifiable information.
Click here for Google's privacy policy: https://policies.google.com/privacy
Learn more about ad networks here: https://marketingplatform.google.com

(2) Facebook Ads
We use Facebook Ads, provided by Meta Platforms, Inc. (1601 Willow Road, Menlo Park, CA 94025), to advertise our services on various platforms within the Meta ecosystem, including Facebook and Instagram. These ads are shown to users who are interested in similar services based on their interaction with Meta's platform or external sites that have embedded tracking technology, such as Facebook Pixel.
We receive information about the performance of our ads, including how many people view or interact with our ads and the conversion rate when users take certain actions after clicking on an ad. This information is provided in aggregated form and does not include personally identifiable information.
Click here for Meta's privacy policy: https://www.facebook.com/privacy/policy
Learn more about ad networks here: https://www.facebook.com/business/ads/

(3) LINE Ads/Yahoo! Ads
Our company uses LINE Ads/Yahoo! Ads provided by LY Corporation (102-8282 Kioi Tower, 1-3 Kioicho, Chiyoda-ku, Tokyo) to advertise our services in Japan through the LINE and Yahoo! platforms.
These ads will be displayed to users on LINE, Yahoo! JAPAN, and partner sites that are part of the LY Corporation advertising network. Targeting is based on interest, behavioral, or demographic data obtained when users use LINE and Yahoo services.

We use “conversion-tracking-tags” to measure the effectiveness of our campaigns and receive information about how many users click on our ads and how well they complete their objectives on the site. This information is aggregated and anonymized and does not contain personally identifiable information.

Click here for LY's privacy policy: https://www.lycorp.co.jp/en/company/privacypolicy

Click here for details on the LINE Ads network: https://www.linebiz.com/jp-en/

Learn more about the Yahoo! Ads Network: https://global-marketing.yahoo-net.jp

On some of our web pages, you will see a "Watch Video" button below certain images. By clicking this button, you will be directed to Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland) (hereinafter referred to as "Google"). Clicking this button to access YouTube tells Google your IP address and tells Google that you have watched a video. If you are logged in to YouTube, this information will be used by the user. (If you want to avoid this, please log out of YouTube before watching a video.) Additionally, Google may store cookies in your browser to store additional information about your interactions while watching a video (for example, when to pause).

The legal basis for linking to these videos is your consent pursuant to Article 6(1) a GDPR/UK GDPR.

For more information about how Google handles your personal data and how to adjust your ad settings (including turning off personalized ads), please visit Google's Privacy & Terms page at the link below:
https://policies.google.com/privacy

To help guide you to our location, we use Google Maps provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. When you visit a web page with embedded Google Maps, Google may collect your IP address, the date and time of your visit, the websites you visit, and your location if you interact with Google Maps or use the Route Planner feature. When you use a mobile device, Google can only collect location data if you have consented to the provision of location data through your device settings.

The legal basis for the embedding of maps is our legitimate interest in providing easy access to our website.

The purposes and legal basis for using personal data at our company are as follows.

(1)Reservation procedure
Handling activities: Receipt and management of accommodation reservations
Types of data handled: Name, gender, date of birth, phone number, payment information, HPD membership number, companion information, reservation number, reservation history
Legal basis: GDPR/UK GDPR Article 6(1) b
Type of acquirer: travel agency, cloud service

(2) Ensuring safety and satisfaction during accommodation
Handling activities: Allergy confirmation
Types of data handled: Name, phone number, reservation information, allergy information
Legal basis: GDPR/UK GDPR Article 6(1) a

(3)Direct marketing
Processing activities: Sending commercial or promotional messages
Type of data handled: Name, email address
Legal basis: GDPR/UK GDPR Article 6(1) a, f
Acquirer type: Email marketing

(4) Responding to requests and inquiries from customers
Handling activities: Responding to requests and inquiries from customers
Types of data handled: Name, address, phone number, email address, inquiry details
Legal basis: GDPR/UK GDPR Article 6(1) f

(5) Payment, invoice creation, refund procedures, receipt of cancellation fees, and other payment services
Activities handled: Online advance payment, various payment methods such as credit card and invoice
Types of data processed: Name, postal code, credit card information, country of residence, billing
Legal basis: GDPR/UK GDPR Article 6(1) b

(6)Recruitment
Activities handled: Recruitment and selection of employees
Types of data handled: Name, date of birth, gender, address, phone number, photo, educational background, work history, language ability
Legal basis: GDPR/UK GDPR Article 6(1) b

We operate social media pages for promotional and self-marketing purposes. We are currently disseminating information on Facebook and Instagram.

When you visit our Site, these platforms may collect data based on your behavior and interests and provide us with user group and interaction analysis in anonymized form. We have no involvement in the generation or display of these analyses, and we have no control over data collection or processing.

We may receive the following data categorized by user:

・Total number of visits
・Interaction with our posts
・Comments
・Visitor gender ratio
・Number of clicks on specific content such as maps and contact information
・Reaching range of posts

Direct engagement with our posts, such as by liking or reposting, allows us to identify you. If you wish to avoid being identified, please use the unfollow function on your platform.

We use this data and our social media presence to promote our services in modern ways to a wide audience. The use of this data and the operation of this page is based on our legitimate interest in carrying out an efficient, effective and interactive promotion (Article 6.1.f. GDPR/UK GDPR).

Additionally, each platform may use your data for its own purposes for market research and advertising. Cookies may be stored on your computer and your usage behavior may be analyzed. Additionally, other information about your device and internet connection may be collected and linked to your account. The Platform may create profiles of you whether you are logged in or have an account, and these profiles may be used to display targeted advertisements on different platforms.

In some cases your data may be processed outside the EU/EEA and UK. In particular, data transfer to the United States cannot be ruled out. In preparation for such cases, we have entered into Standard Contractual Clauses (SCC) with platform operators.

You may exercise your rights against us or the Platform at any time. However, please note that in all cases, the platform will be responsible for responding to your request. If you have any questions, please feel free to contact us.

Please see below for detailed information on each platform.

(1)Facebook and Instagram
Facebook and Instagram are social media platforms provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, whose parent company is located at 1 Hacker Way, Menlo Park, California 94025, United States.
We have entered into a joint controller agreement with Meta. Please check the link below for details:https://www.facebook.com/legal/terms/page_controller_addendum
You can read the key points of the contract using the link below:https://www.facebook.com/legal/terms/information_about_page_insights_data
You may exercise your rights against us or the Platform at any time. However, please note that in all cases, the platform will be responsible for responding to your request. If you have any questions, please feel free to contact us.
Click here for Meta's privacy policy:https://www.facebook.com/about/privacy/
If you have a Facebook account, you can opt out of processing for advertising purposes here:https://www.facebook.com/settings?tab=ads

(2)X
X is a social media platform provided by X Corp., One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, and its parent company, Twitter, Inc., 1355 Market Street #900, San Francisco, California 94103.
Click here for X's privacy policy:https://x.com/en/privacy
Information on privacy settings provided by X can be found here:https://help.x.com/en/safety-and-security/x-privacy-settings
You can change your advertising privacy options here: https://help.x.com/en/safety-and-security/privacy-controls-for-tailored-ads

(3) YouTube
YouTube is a video platform provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and its parent company Google LLC, 1600 Amphitheater Parkway, Mountain View, California 94043.
Click here for privacy policy:https://policies.google.com/privacy
You can change your advertising and personalized advertising settings here:https://adssettings.google.com/authenticated

We may transfer your personal data to third countries, including countries that do not have an adequate level of data protection, for the performance of a contract or for pre-contractual procedures. When transferring your personal data, we will take appropriate security measures and maintain confidentiality in accordance with this privacy policy and related laws and regulations.

In principle, we will delete your personal data once it is no longer necessary for the purpose for which it was collected.
However, if we are unable to delete it for a certain period of time due to legal obligation, we will cease access to that information, store it securely, and delete it after the legal obligation terminates.

You may exercise your rights at any time by contacting us or our agent directly. However, please note that in order to protect other data subjects, we may ask you to confirm your identity.

You have the following rights:

(1) Access rights
(2) Right of correction, right of deletion
(3) Right to restrict processing
(4) Right to data portability
(5) Right to withdraw consent