SAMPLE COMPANY

Privacy policy

1. Introduction

The Japan Working Holiday Association (hereinafter referred to as ``the association'') collects various information about you (hereinafter referred to as ``personal data'') in order to operate the working holiday system and carry out various procedures. Doing.

The Association considers the information entrusted to it to be one of its most important assets, and treats its protection and management with utmost care as the most important aspect of the Association's activities. Specifically, we have established a privacy policy as below, thoroughly disseminating it to all employees and related parties, and are committed to the appropriate handling and management of your personal data.

2. Scope of this privacy policy

This privacy policy applies to all personal data managed by our association, regardless of country or region.

[Privacy policy language]
This privacy policy may be translated and posted in languages ​​other than Japanese, but in the event of any discrepancy or inconsistency between the Japanese version and the other language version, the Japanese version shall prevail.

3. Personal data to be obtained

Our association acquires the following personal data by lawful and fair methods.
・Personal data provided by customers
・Personal data related to the use of each service of our association (hereinafter referred to as "related services")
・Personal data held within our association group and partner companies that share information
・In addition to the above, personal data legally acquired by our association, including from third parties

[If you cannot provide the relevant information]
Of this information, if you are unable to provide such information regarding various information and services that require registration or provision of information in order to use our association or provide related services, we will not be able to provide our association or related services. You may not be able to use all or part of the.

[Specific examples of personal data]
Examples of the personal data we collect include the following:
・Email address and phone number required for account registration
・Contents of your cooperation in the questionnaire
・Documents provided for identity verification
・Customer profile information (including icon image, display name, etc.)
・Browsing history and device information of websites and smartphone apps
・Personal data that falls under the Act on the Protection of Personal Information (personal identification code, name, date of birth, etc.)

4. Compliance with laws and regulations

We comply with the Act on the Protection of Personal Information (Personal Information Protection Act), other related laws and regulations, and guidelines from related government agencies, and manage personal information lawfully.

5. Purpose of use of personal data

Personal data will be strictly managed with the purpose of use clearly limited as follows. In addition, in order to proceed smoothly with our operations, we may outsource some of our operations and provide necessary personal data to this subcontractor, but we will only provide personal data to the extent that we have received prior consent from the customer. The Association will conduct appropriate supervision, including conclusion of contracts regarding the handling of personal information, with these subcontractors.
・Providing information on events such as seminars and language courses, information on products and services, and promotional materials
・When conducting seminars, courses, etc., presentation of reservation person and participant information to the organizer of the seminar/course, etc.
・Maintenance and support for services and systems provided by our association
・Marketing and research related to various businesses, and responses to customer inquiries
・Displaying advertisements and providing information on media managed by the association, such as web pages, smartphone apps, and emails
・Study abroad services and related services
・Business related to study abroad trust business
・Providing information to job seekers and recruiting companies and related operations in employment placement business and employment dispatch business
・In order to appropriately and smoothly carry out transactions and contracts with customers.

6. Disclaimer regarding use of personal data

In the following cases, personal data may be provided to a third party without the customer's consent.
・When based on laws and regulations
・When it is difficult to obtain the consent of the person in order to protect the life, body, or property of the person
・When our association and our customers provide information, when we outsource mail delivery services or information distribution, and when we provide personal data to organizations deemed necessary

7. Policy regarding information of minors

Our association values ​​the privacy of minors and recognizes the need to protect them in particular, and has established the following policy.

[Prohibition of intentional information collection]
Our association does not intentionally collect personal data from minors. If it becomes necessary to collect personal data from a minor, we will always obtain the consent of the minor's guardian.

[Parental consent]
We will obtain explicit parental consent when storing information about minors. This includes ensuring that minors fully understand the purpose and scope of use of their personal data and obtaining their consent.

[Collecting unconfirmed information]
The website managed by our association (hereinafter referred to as "this website") does not have a function to automatically identify whether a user is a minor. Therefore, this does not apply to website access history or other information where it is difficult to confirm that the user is a minor. This includes general website usage data and information collected through cookies.

[What to do when information about minors is discovered]
If we discover that we have stored information about a minor, we will promptly delete that information unless we have obtained parental consent.
However, this excludes cases where it is deemed necessary to preserve the information for explanations to parents, etc., cases where there is a request for cooperation from an investigative agency, or cases where there is a legal requirement.

8. Information sharing and disclosure policy

The Association shares information within the Association group and with partner companies in order to make the most of the information obtained from customers and provide better services. This includes the following companies:

Travel and Travel Co., Ltd. One Rank Co., Ltd.

We share information with these companies only to provide you with more relevant services and products or to meet our legal obligations. The information shared is kept to the minimum necessary and strict security measures are in place to protect your privacy.
Sharing of customer information will be done in accordance with the provisions of our association's privacy policy and with the best interests of the customer in mind. You have the right at any time to submit comments regarding this information sharing or to refuse to share your information. If you have any questions or concerns about information sharing, please contact our Privacy Policy Contact.

9. Utilization of customer information

The browsing history and information obtained through cookies are used to provide you with more appropriate services and products. This includes providing personalized advertising and content, developing new services to meet your needs, and improving your user experience.

10. Use of cookies and tracking technologies

Our website uses cookies and tracking technologies to provide you with a better browsing experience and to improve our services. Cookies are small data files that websites temporarily store information on your computer or mobile device. This allows our website to remember your visit and provide you with a more personalized experience on your next visit.

[Collected information]
・Customer browsing history
・Pages visited
・Clicked link
・Login information
・Other navigation data

[Purpose of use]
・Improve website performance and usability
・Providing advertisements and content suitable for customers
・Market analysis and research

[Customer options]
You have choices regarding the use of cookies. Through your browser settings, you can refuse the use of cookies or receive notification when a cookie is set. However, please note that some features of our website may not function properly if you disable cookies.
Please note that if you use the website of our association and related services without disabling cookies in your browser, you will be deemed to have consented to the use of tracking technology.

11. Personal data retention period

Our association has adopted the following policy regarding the retention of personal data:

[Definition of retention period]
For the duration of our relationship: We will continue to retain personal data for the duration of our relationship with our customers. This includes maintaining an active account, providing services, and providing customer support.
After the relationship ends: If the relationship with the customer ends, we retain personal data for a period of 7 years. This period is in place to cover contractual obligations, legal liability, and future claims and audits.

[Exceptions]
Special requirements: In certain circumstances, such as contractual arrangements, immigration requirements, tax billing or audit requirements, we may need to retain data beyond the standard retention periods listed above. These requirements are determined based on applicable laws and regulations.

[Secure processing of data]
The Association guarantees that data that has expired will be safely and appropriately deleted or anonymized.

12. International management and transfer of data

In order to ensure efficient management and protection of personal data, our association stores and processes personal data on servers and data centers located in the following countries and regions.
・Japan
・United States
・Singapore
・Australia
This includes backing up your personal data. Data management in these regions is done to ensure high standards of security and privacy protection and complies with national data protection laws.

[Security of data transfer]
Your personal data will also be protected during international transfers using appropriate security measures and encryption techniques. When moving data between these countries, we adhere to strict procedures and regulations to maintain data privacy and security.

[Customer Rights and Choices]
You can contact us at any time regarding how we use your personal data and where we process it. You also have the right to access, correct or delete your personal data.
If you have any questions or concerns regarding international data transfers, please feel free to contact us at our Privacy Policy Contact Us.

13. Procedures for accessing and correcting personal data

We will assist you in accessing and, if necessary, correcting your personal data.

[Access to personal data]
Access Request: You can access your personal data at any time. If you would like access, please contact us using the details below.
Providing information: After receiving your request for access, we will provide you with a copy of your personal data within a reasonable period of time. The information we provide includes the types of personal data we hold about you, the purposes for which the information is used, and the third parties with whom it is shared.
Fees: Generally, this information is provided free of charge, but if you wish to have your personal information sent by mail, you will be responsible for the postage costs.
We may also charge a reasonable fee if your request is clearly unreasonable or excessively repetitive.

[Correction of personal data]
Correction request: If you discover errors in your personal data or if the information is out of date, you can correct it. If you wish to make corrections, please contact the Privacy Policy Inquiry Desk.
Implementation of corrections: After receiving a request for correction, the Association will conduct the necessary checks and promptly correct the information. We will notify you when the modification is complete.
Limitations and Denials: We reserve the right to deny amendment requests under certain circumstances. For example, where the request violates a legal obligation or affects the rights and freedoms of other individuals.

14. Regarding changes to the privacy policy

We may update this privacy policy from time to time in order to better serve our customers and to comply with legal requirements. We will respond to changes to the privacy policy as follows.

[Minor changes]
Minor changes to the privacy policy will be made without prior notice. This includes adjusting the wording and updating non-essential content. We encourage you to periodically review this page for the latest Privacy Policy.

[Important changes]
If there are any material changes to our privacy policy, we will notify you in advance before implementing the change. Announcements may be made through notices on the website, email, or other means of communication.
Material changes may include changes to how we use personal data, changes to our data sharing policies, changes to data retention periods, and changes that affect your rights.
In addition, if important changes are made, we will obtain consent from the customer again as necessary.

15. Response policy in the event of a data breach

We treat the security of your data as a top priority. In the unlikely event that a data breach occurs, we will respond promptly and appropriately in accordance with the guidelines of the Information-technology Promotion Agency (IPA) and the Personal Information Protection Commission, Japan's specialized organizations for information security measures.

[Correspondence procedure]
Breach Confirmation and Assessment: If we suspect a data breach, we immediately conduct an internal investigation to confirm the breach. Assess the scale and impact of the breach and plan necessary countermeasures.
Report to relevant authorities: Report the details of the infringement to the Personal Information Protection Commission and receive guidance.
Victim Notification: If a data breach may affect your personal data, we will promptly notify victims. The notification will include details of the breach, the type of data affected, the actions taken, and any actions you should take.
Increased preventive measures: Review and strengthen your security posture to prevent future breaches.

[Customer response]
If you become aware of a data breach, please immediately report it to the Privacy Policy Inquiry Desk below and follow our instructions.

16. Relationships with third party service providers

We work with trusted third party service providers to provide certain services and features. These service providers may process your personal data for the following purposes:

[Data processing by third parties]
Service provision: We provide specific services and functions based on requests from our association. Examples include cloud-based data storage, customer support, and implementation of marketing campaigns.
Data protection: These third parties will take appropriate security measures to keep your data safe and protected from unauthorized access, disclosure, loss or destruction.

[Selection criteria and supervision]
We rigorously select third-party service providers to ensure that your data is treated appropriately and in compliance with applicable data protection legislation. We also have data protection agreements in place with these providers and regularly audit their data processing activities.

[Sharing with third parties]
Your personal data will be shared with third parties only for the purposes listed above. It will not be shared for any other purpose.

[Sharing with third parties]
Your personal data will be shared with third parties only for the purposes listed above. It will not be shared for any other purpose.

This privacy policy is effective from December 1, 2023. If you use our website or continue to use our services after this date, you agree to the terms of this policy.
You can check the change history from Click here.

[Privacy Policy Update]
Our association may update this privacy policy as necessary. If changes are made, we will notify you of the changes by posting a notice on our website or by sending a notification to your registered email address. We are committed to providing you with sufficient notice of any material changes to our policy before the changes take effect.

[Customer's responsibility]
It is your responsibility to periodically review this Privacy Policy and become aware of any changes. By continuing to use the Service after the Policy has been changed, you will be deemed to have accepted the changed Policy.

18. Contact information regarding personal data and privacy policy

Our association will promptly respond to complaints and inquiries regarding the handling of personal data. Please use the contact information below to contact us. Please note that we will respond only after confirming the identity of the person making the inquiry.

[Privacy Policy Inquiry Desk]
[Organization name] Japan Association for Working Holiday Makers
[Location] 16F Link Square Shinjuku, 5-27-5 Sendagaya, Shibuya-ku, Tokyo, 151-0051
[Email] info@jawhm.or.jp
[Telephone number] +81-50-3355-7148 (English available)