Privacy Policy

This Privacy Policy applies to the processing of your personal data by Kyushu Railway Company (“we”, “us”, or “our”), performed pursuant to applicable data protection laws, in connection with the services provided by us and our website.

If any of our other privacy policies specifies our processing of your personal data in certain services in more detail than this Privacy Policy, the provisions of such privacy policy will prevail.

1. Controller for Processing Your Personal Data
We are the controller for processing your personal data. Please check section 9 below for our contact details.

2. Categories of Personal Data to be Collected
Regardless of the method, such as orally, in writing, by e-mail, or through forms on our website, we collect the following categories of personal data directly from you:

(1) Information on the use of services provided by us Your name, telephone number, e-mail address, gender, date of birth, country of residence, nationality, passport number, credit card information, and other information related to the use of services provided by us (such as the details of tickets and travel products, and the date and time of use thereof)

(2) Information on inquiries and opinions to us Information contained in interactions with you, and the details of your inquiries and opinions

(3) Information collected through our website User identifiers, user attribute information, IP address, browsing and activity histories on our website, the type and version of web browser and device, device language settings information, device screen size, and other browsing environment

In addition, we may indirectly collect your personal data set forth in subsections (1) through (3) above through third parties such as online travel agents.

Among the above, the personal data in subsection (1) may be necessary for execution and performance of a contract with you regarding our services. You may refuse to provide your personal data to us; however, in that case, we will not be able to enter into a contract with you or provide our services.

3. Purposes of and Legal Bases for Processing Your Personal Data
The purposes of and legal bases for processing your personal data are as follows:

(i) Providing our services, and any other correspondence in connection with those services (performance of a contract);

(ii) Management and operation for providing membership-based services and any other correspondence in connection with those services (performance of a contract);

(iii) Sending and providing information on products, services, campaigns, and other activities carried out by us and our business partners (legitimate interests (legitimate interests of us and our business partners to carry out marketing and promotional activities), consent);

(iv) Preparation of basic data for questionnaires, market research, analysis of customer trends, and other analysis necessary for management; preparation of statistical material and publication thereof (legitimate interests (our legitimate interests to improve our business and management));

(v) Reflecting customer feedback and requests relating to the enhancement and improvement of services (legitimate interests (our legitimate interests to provide better services to you so that you can continue to use our services));

(vi) Analysis of your behavior histories who visit our website (legitimate interests (our legitimate interests to measure or improve the effectiveness of our business, services, and marketing), consent);

(vii) Informing applicants of winning or selection in sweepstakes, creative competition, or similar open calls, providing prizes and rewards, and responding to matters related to the planning and operation of events (performance of a contract, legitimate interests (our legitimate interests to provide our services to you));

(viii) Execution of agency business and other business outsourced to us by travel agencies, transportation agencies, accommodation facilities, tourist facilities, telecommunications carriers, insurance companies, or other similar agencies to provide their services to you (performance of a contract, legitimate interests (our legitimate interests to perform the business outsourced to us to provide their services to you));

(ix) Fulfillment of obligations under relevant laws and regulations (compliance with legal obligations, legitimate interests (our legitimate interests to comply with obligations under laws and regulations));

(x) Establishment, exercise, or defense of our legal claims (legitimate interests (legitimate interests to establish, exercise or defend our legal claims)); and

(xi) Contacting you as necessary for other purposes (legitimate interests (our legitimate interests to communicate with you as necessary and to provide our services smoothly)).

Notwithstanding the legal bases mentioned above, if applicable data protection laws require processing based on consent or other legal bases, we will process your personal data in accordance with the applicable data protection laws.

4. To Whom We Disclose Your Personal Data
We may disclose your personal data to the following persons within the scope of the purposes set forth in section 3 above:

(1) Service Providers We may disclose your personal data to third-party service providers who provide us with certain services, such as IT service providers, customer service providers, and online travel agents.

(2) Our Business Successors We may provide your personal data to parties that succeed to our business through transactions such as corporate reorganization or business transfer.

(3) Public Authorities and Law Enforcement Entities We may disclose your personal data to other third parties (such as regulatory authorities, government authorities, courts, and attorneys) in connection with compliance with applicable legal obligations, or the establishment, exercise, or defense of our legal claims.

5. Security Control Measures
We take necessary and appropriate measures to maintain the security of personal data, including preventing any leaks or loss of, or damage to, your personal data. Specifically, we establish rules on the processing of personal data, conduct periodic self-inspection of the status of processing personal data, provide periodic training to employees regarding the processing of personal data, implement measures to prevent theft or loss of equipment used for processing personal data, and take measures such as implementing access controls.

6. Transfers of Your Personal Data Outside Your Resident Country
Your personal data may be transferred to third parties outside your resident country or territory. Where we transfer your personal data to third parties located in countries or territories outside those in which you are located, we comply with applicable data protection laws using methods such as ensuring either of the items below, or obtaining your consent thereto:

(1) the recipient destination is designated as any country and territory that ensures an adequate level of protection for the rights and freedoms that you possess with respect to personal data under the applicable data protection laws; or

(2) the recipient has entered into a data transfer agreement with us as required by applicable data protection laws.

7. Storage Period of Personal Data
We will store your personal data for the period necessary for the purposes of processing such personal data. However, if it is necessary under law to retain personal data for a longer period or for the establishment, exercise, or defense of legal rights, we will retain such personal data for the period necessary to respond to such needs.

8. Your Rights
You have several legal rights in relation to personal data that we hold about you. These rights may vary depending on where you are located and which data protection laws apply to the relationship between you and us, but typically will include the following rights:

(1) the right to obtain information regarding the processing of personal data about you and to access personal data that we hold about you;

(2) the right to request that we correct your personal data if it is inaccurate or incomplete;

(3) the right to request that we erase your personal data in certain circumstances;

(4) the right to request that we restrict our processing of your personal data in certain circumstances;

(5) the right to object to our processing of your personal data;

(6) the right to receive your personal data in a structured, commonly used, and machine-readable format and to request that we directly transmit that personal data to a recipient, where doing so is technically feasible; and

(7) if we process your personal data on the basis of your consent, the right to withdraw your consent to our processing of your personal data at any time; however, the withdrawal of consent does not affect the lawfulness of processing personal data before its withdrawal.

You may exercise any of your rights by contacting us via the contact details set forth in section 9 below. You may also lodge a complaint with the relevant data protection authority if you believe that we have infringed any of your rights.

9. Our Contact Details
If you have any questions about this Privacy Policy, your rights, or any other matter relating to the protection of personal data, please contact us via the following contact information:

https://www.jrkyushu.co.jp/contact/Inquiry.html