Chuo Alps Kanko Co., Ltd. (hereinafter referred to as “the Company”) considers the proper handling of personal information related to our customers to be a critical responsibility. We have established the specific “Privacy Policy” set forth below and are committed to strictly enforcing this Privacy Policy to protect our customers’ personal information with the utmost care. Please note that customers residing within the EU should also review the additional provisions applicable to the handling of personal information of EU (European Union) and EEA (European Economic Area) residents, in accordance with the EU General Data Protection Regulation (hereinafter referred to as “GDPR”).
Name, address, and name of the representative of the entity handling personal information
759-489 Akaho, Komagane City, Nagano Prefecture 399-4117
Chuo Alps Kanko Co., Ltd.
Hidekazu Katagishi, President and CEO
Collection of Personal Information
We collect personal information through the following methods in connection with transactions related to our facilities and products (including accommodation, food and beverage services, banquets, merchandise sales, the provision and sale of other ancillary products and services, and the hosting of events), as well as in connection with transactions with our business partners.
Personal Information Held by Our Company
The personal information we handle includes the following.
Purpose of Use of Personal Information
We will use the personal information we collect solely for the purposes specified below and will not use it for any other purposes or beyond the scope specified.
Disclosure of Personal Information to Third Parties
We may disclose or share all or part of the personal information we have collected in the following cases:
Disclosure, Correction, or Suspension of Use of Personal Information, etc.
If you, as the data subject, request the disclosure, correction, or suspension of use of your personal information, we will verify your identity and respond in good faith within a reasonable and necessary scope. For details regarding the procedures for such requests (required documents, submission methods, identity verification methods, fees, and other information), please contact our “Personal Information Protection Inquiry Desk.” Please note that reservation confirmations for our accommodation, dining, and banquet facilities are handled by our designated customer service desk; please contact them for such inquiries.
Measures Taken to Ensure the Security of Held Personal Data
To prevent the leakage, loss, or damage of personal data and to ensure the secure management of personal data, we have implemented the following measures.
(Establishment of Guidelines and Regulations for the Handling of Personal Information)
Recognizing the importance of personal information and considering its appropriate use and management to be a social responsibility, we have formulated a Personal Information Protection Policy and established internal regulations that define proper and specific procedures for the collection, use, management, and disposal of personal information.
(Organizational Security Measures)
In addition to appointing a Chief Information Officer and establishing an Information Security Committee, we have designated responsible officers and managers within departments handling personal information, entrusting them with responsibility for the management and operation of personal information to ensure appropriate management.
(Human Resource Security Measures)
We continuously conduct education and awareness-raising activities regarding personal information protection for our employees and other relevant personnel.
(Physical Security Measures)
We have implemented measures to manage areas where personal data is handled and to prevent the theft or loss of equipment, electronic media, documents, and other materials.
(Technical Security Measures)
We have implemented access controls for personal data and measures to prevent unauthorized external access and computer viruses.
(Understanding the External Environment)
We have implemented appropriate security measures after thoroughly understanding the personal information protection systems in foreign countries where personal data is stored.
Other Matters
Information About the Website
The website operated by our company (hereinafter referred to as “this Site”) takes the utmost care in handling and protecting personal information in accordance with this policy to ensure that users can use our services comfortably and safely. However, we cannot be held responsible for the security of your personal information on other websites linked to this Site. We recommend that you carefully review the privacy policies of websites other than ours to ensure the security of your personal information. If such policies are not available, we advise you to contact the relevant department or representative of that website directly to verify the security of your personal information.
① Use of Cookies
This website uses cookies for certain services in order to provide you with a better user experience. Cookies are a type of data sent to your computer by a web server. The cookies used on this website are intended to provide appropriate information and ensure your security; they do not contain any personal information that could identify you. You can refuse cookies by adjusting your browser settings; however, to ensure a smooth experience when using all services on our website, please enable cookies.
② Regarding Visitor Access Logs
This website records information about visitors in the form of access logs. Access logs include the visitor’s domain name, IP address, browser type, and date and time of access, but do not contain any personally identifiable information. Access logs are used for website maintenance and statistical analysis of usage patterns, and are not used for any other purpose.
These Additional Provisions set forth specific additional information that we are required to provide to customers residing within the European Union (EU) under the EU General Data Protection Regulation (GDPR), as well as your rights regarding the handling of your personal information in accordance with applicable local laws. In the event of any conflict between these Additional Provisions and the provisions of the main Privacy Policy, these Additional Provisions shall prevail.
Handling of Personal Information
The methods and purposes by which we handle your personal information (including its collection, retention, and use), the types of personal information we handle, and the disclosure of your personal information to third parties are described in this Privacy Policy.
Legal Basis for the Use of Personal Information
The methods and purposes by which we handle your personal information (including its collection, retention, and use), the types of personal information we handle, and the provision of your personal information to third parties are described in this Privacy Policy. As a general rule, our use of personal information is based on your consent. Where we do not have your consent, the legal basis for our use of personal information is the necessity to fulfill a contract with you, the necessity to take steps at your request prior to entering into a contract, the necessity to pursue legitimate interests of our company or a third party, or the necessity to comply with a legal obligation to which we are subject. The legitimate interests pursued by us or third parties include increasing operating profits through marketing and service improvements, as well as enhancing the usability and security of our website.
Transfer of Personal Information to Third Countries, etc.
The methods and purposes by which we handle your personal information (collection, retention, and use), the types of personal information we handle, and your individual rights. We transfer personal information collected outside of Japan to Japan for the purpose of fulfilling our contract with you or carrying out procedures requested by you prior to the conclusion of a contract. Although Japan has not received a decision from the European Commission confirming that it ensures an adequate level of protection for personal information, we handle your personal information using appropriate security and confidentiality measures.
Retention Period for Personal Information
We retain personal information only for as long as necessary to achieve the purposes for which it was collected, and we will take measures to securely delete or anonymize such information within a reasonable period of time after the retention period has expired.
Your Rights Regarding Personal Information
You have the following rights under the GDPR and other applicable laws with respect to our company. You may exercise these rights by contacting our Personal Information Protection Inquiry Desk. When we receive a request to exercise these rights, we will respond in good faith after verifying your identity, unless the request falls under an exception specified in the GDPR or other applicable laws.
Withdrawal of Consent
You may withdraw your consent to the use of your personal information at any time. Withdrawing your consent does not affect the lawfulness of the use of your personal information based on your consent prior to withdrawal. You may withdraw your consent by contacting our Personal Information Protection Inquiry Desk.
Appeal to the Regulatory Authority
Customers may lodge a complaint with supervisory authorities, such as national, regional, or international organizations, regarding our handling of personal information in accordance with the GDPR and other applicable laws.
Personal information required for your stay
We require the following information in order to provide accommodation services to our guests. In particular, Japanese law requires us to record and retain guest registration details for a period of three years. If this information is not provided, we may be unable to provide accommodation services to you.
Your Child’s Personal Information
If you are under 16 years of age, please provide your personal information only after obtaining the consent of your parent or legal guardian.
The existence of automated decision-making, such as profiling
We do not make decisions based solely on automated processing, such as profiling of personal information.