privacy policy

 

Nijigen no Mori Co., Ltd. (hereinafter referred to as “our company”), the operating company of Nijigen no Mori, is deeply aware of the importance of handling personal information in the operation of Nijigen no Mori (hereinafter referred to as “this business”), and will acquire, use and provide such information appropriately. In order to protect the personal information of users of the services and content related to this business, registered members of the email newsletter and ticket sales system, and applicants to our job search information (hereinafter collectively referred to as “users, etc.”), we have established this personal information protection policy (hereinafter referred to as “this policy”) and will implement the matters set out below.

• Establishment of an operating organization In order to properly use and manage personal information, we will establish an operating organization that defines roles, responsibilities, and authority.

• Appropriate operational management We will educate and inform our employees about laws, guidelines, regulations, manuals, etc. related to the protection of personal information, and will implement and manage them appropriately.

• Prohibition of use for purposes other than those intended We will establish, implement, and maintain procedures to take necessary measures to ensure that personal information is not used for purposes other than those intended.

• Compliance with laws and regulations We comply with the Act on the Protection of Personal Information (hereinafter referred to as the “Personal Information Protection Act”), related government and ministerial ordinances, guidelines, etc.

• Implementation of safety management measures In order to ensure the accuracy and safety of personal information under our management, we will implement appropriate safety management measures to prevent the leakage, loss, or damage of personal information.

• Handling of personal information through outsourcing: We may outsource the handling of personal information to a third party. In such cases, we will provide necessary and appropriate supervision of the outsourcing party in accordance with the Personal Information Protection Act.

• Response to complaints and inquiries We will prepare the necessary systems and establish procedures to receive complaints and inquiries from individuals regarding the handling of their personal information and respond appropriately and promptly, and will comply with and maintain these procedures.

• Continuous improvement Our personal information protection system, which is formulated with this policy at its apex, will be continually reviewed and improved, taking into consideration technological trends in the information industry, and will maintain its standard.

 

Handling of personal information (Privacy Policy)

　

Nijigen no Mori Co., Ltd. (hereinafter referred to as “our company”) will handle personal information provided by customers to our company when using Nijigen no Mori attractions and facilities operated by our company (hereinafter referred to as “this service”) as follows.

1. Company name, address, and name of representative
Nijigen no Mori Co., Ltd. 2425-2 Kusumoto, Awaji City, Hyogo Prefecture
Representative Director and President Hiroshige Sadamatsu

2. Purpose of use of personal information
The personal information acquired and collected by our company through this service will be used for the following purposes.
① To manage customers when registering for this service and using this service ② To respond to inquiries and contact customers ③ To deliver and provide products, etc. ④ To conduct campaigns, surveys, etc. ⑤ To investigate and analyze the usage status of this service and propose services, etc. based on the analysis results

3. Provision of personal data to third parties
We will not provide personal data to third parties except in the following cases:
① When necessary matters have been clearly stated or notified to the individual in advance and consent has been obtained. ② When disclosure or provision is permitted by law. ③ When it is necessary to protect the life, body, or property of an individual, and it is difficult to obtain the individual’s consent. ④ When it is particularly necessary to improve public health or promote the healthy development of children, and it is difficult to obtain the individual’s consent. ⑤ When it is necessary to cooperate with a national or local government agency, or a person commissioned by them, in carrying out duties prescribed by law, and obtaining the individual’s consent is likely to hinder the performance of those duties. ⑥ When the third party in question is an academic research institution, etc., and it is necessary for the third party to handle the personal data for academic research purposes (including when part of the purpose of handling the personal data is academic research purposes, and excluding cases where there is a risk of unjustly infringing on the rights and interests of individuals).

4. Regarding outsourcing of personal data, we may outsource some or all of the handling of personal data to a contractor that meets the standards of our personal information protection system, within the scope of the purpose of use.
When outsourcing all or part of the handling of personal data, we will enter into a contract with the outsourcing party and provide necessary and appropriate supervision to ensure that the outsourcing party manages personal data safely.

5. Shared use of personal data
In order to provide this service, we will jointly use personal data as follows:

[Items of personal data to be jointly used]
Your name, phone number, email address

[Scope of parties who will jointly use the information]
Our company, Pasona Group Inc.

[Purpose of use by joint users]
Regarding “2. Purpose of use of personal information,” item ⑤

[Person responsible for managing jointly used personal data]
Our company

6. Use of statistically processed data We may create statistical data based on personal data that has been processed so that individuals cannot be identified. We may use statistical data that does not identify individuals without any restrictions.

7. Voluntary nature of personal information The provision of personal information is voluntary and is not compulsory in any way. However, please note that if you do not provide personal information, you will not be able to use the Services as described in the purpose of use.

8. Acquisition of personal information in a way that is not easily recognizable by the individual
The websites in this Service may use information such as cookies and browsing history (hereinafter referred to as “personal information”) to enhance the information and services provided and to make them more convenient to use. When we obtain personal information from a data management platform operated by a third party and use it within the scope of the intended purpose after linking it with the individual’s personal data, we will obtain the individual’s consent in advance.

9. Disclosure, Correction, and Deletion of Retained Personal Data Pursuant to the Act on the Protection of Personal Information (hereinafter referred to as the “Personal Information Protection Act”), the procedures for requests for disclosure, etc. of retained personal data and records relating to provision to third parties (notification of purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure, and suspension of provision to third parties) are as follows.
① In principle, requests for disclosure, etc. can only be made by the individual in question. When making a request, we will need to verify your identity and provide the details of the request, so please fill out the necessary documents specified by our company and submit them to the contact information listed in [12. Inquiry Desk].
② If any of the following applies, the information will not be subject to disclosure.
*When there is a risk of harming the life, body, property or other rights and interests of the individual or a third party.
*When there is a risk of causing significant disruption to the proper execution of our business
*If it would violate other laws and regulations.

10. Safety control measures
We will take necessary and appropriate security control measures to manage personal data (including personal information that we have acquired or are planning to acquire and that we plan to handle as personal data; the same applies hereinafter in this section), including preventing leakage, loss, or damage (hereinafter referred to as “Leakage, etc.”). The security control measures for personal data are as follows:
(1) Formulation of Basic Policy Our company complies with the Personal Information Protection Policy to ensure the proper handling of personal data.
(2) Establishment of rules for handling personal data We have established the “Basic Regulations for Personal Information Protection” (hereinafter referred to as the “Basic Regulations for Personal Information Protection”), which outlines the acquisition method, responsible persons, and their duties for each stage of acquisition, use, storage, provision, deletion, disposal, etc.
(3) Organizational safety control measures ① We have appointed a personal information protection manager for handling personal data, clarified the employees who handle personal data and the scope of personal data handled by said employees, and established a reporting and contact system to the personal information protection manager in the event that we become aware of facts or signs of violations of the Personal Information Protection Act or the Basic Regulations for Personal Information Protection.
②We regularly audit whether the handling of personal data complies with laws, regulations, basic rules for the protection of personal information, and other standards.
(4) Personnel safety management measures ① Matters concerning confidentiality of personal data are stated in the work regulations.
②We provide regular training to our employees on important points to note regarding the handling of personal data.
(5) Physical security control measures ① We clarify the devices that can handle personal data and the employees who handle those devices to prevent unnecessary access to personal data.
②We take measures to prevent theft or loss of devices, electronic media, documents, etc. that handle personal data, and we also take measures to prevent personal data from being easily identified when carrying such devices, electronic media, etc., including when moving within the business premises.
(6) Technical security control measures 1) We implement access control to limit the scope of personnel and personal information databases handled.
②We have introduced a mechanism to protect information systems that handle personal data from unauthorized external access or malicious software.

11. Contact point for inquiries and consultations regarding disclosure, etc. of retained personal data (personal data over which the Company has the authority to disclose, correct, add or delete content, suspend use, erase, and suspend provision to third parties, and which does not include data specified by the Enforcement Order of the Personal Information Protection Act as data whose existence or non-existence would be harmful to the public interest or other interests) or the handling of personal data, please contact the following point of contact.

・Contact Nijigen no Mori Management Headquarters CS Team

E-MAIL: info@nijigennomori.co.jp