Niseko Distillery Co., Ltd. and its affiliates (“Companies”), as business operators handling personal information, recognize the importance of their duty to properly protect the personal information provided them by customers, business partners, and all other persons (“Information Owners”), and strive to protect personal information through establishing the following handling policy.
1. Definition of personal information
Personal information shall mean the information defined as personal information in article 2, paragraph 1, of the Act on the Protection of Personal Information (Personal Information Protection Act).
2. Acquisition of personal information
Companies acquire personal information in a legal and appropriate manner.
3. Purposes of use of personal information
Companies use personal information only to the extent necessary to achieve the following purposes of use. Unless with prior consent, Companies use personal information exclusively for the following purposes.
- For confirming and responding to inquiries.
- For the introduction, provision, management, and operation of products and services.
- For confirming applications and sending information concerning events, seminars, and visitor tours, etc.
- For contacting applicants for job openings and for recruitment selection.
- For aggregation, analysis, preparation of statistical data, and data disclosure in anonymized form precluding personal identification.
- For company-internal and external information dissemination, and preservation and utilization as recorded materials.
- For business communication and contract fulfillment related to transactions.
- For paperwork such as billing, collection, and payment, etc.
- For providing other related information.
- For processing matters incidental to the above purposes.
- In addition to the above, for purpose of use individually determined in services and questionnaires, etc.
4. Management of personal information
In order to prevent leakage, falsification, and loss of personal information, and use for unauthorized purposes, Companies practice rigorous personal information management in appropriately secured environments compliant with relevant laws, guidelines, and internal rules.
Moreover, Companies conduct employee training and awareness activities for the appropriate handling of personal information.
5. Disclosure of personal information to third parties
Companies disclose no personal information to any third party except in the following cases.
- In cases where the consent of the Information Owner has been obtained.
- In cases of disclosure within the scope necessary for attaining the purpose of use to agents and outsourcing service providers, etc., (collectively, “Business Partners”) obliged to Companies to preserve confidentiality.
- In case one or more entities of Companies are succeeded to by another company (Companies shall to the extent possible strive also at a successor to prevent personal information leakage and use for unauthorized purposes, etc.).
- In cases of disclosure as statistical data anonymized to preclude person identification.
- In cases where disclosure is deemed necessary for the benefit of the Information Owner or the public good.
- In addition to the above, in cases when disclosure to a third party is permitted by relevant laws and guidelines.
6. Shared use of personal information
Companies may make shared use of personal information.
In such a case, Companies comply with this policy and make use of personal information to the minimum extent necessary to carry out their business.
- 1. Information items subject to shared use
- Name, employer information (name of employer and department, etc.), job title, address, phone number, fax number, e-mail address, voice mail, product purchases (including lease and rental transactions), service usage history, inquiry and request history
- 2. Scope of sharing users
- Companies and partner companies
- 3. Purposes of shared use
- The purposes of use notified or announced by Companies to an Information Owner at the time of information acquisition
Investigations and records based on laws and regulations, notifications and reports to government offices, etc., and judicial and administrative action
- 4. Manager responsible for the administration of information for shared use
- Niseko Distillery Co., Ltd.
7. Inquiries regarding personal information
If an Information Owner wishes to inquire, change, or correct their personal information, Companies will respond promptly in accordance with the prescribed procedures upon contact from the Information Owner to the department to which the personal information was provided or to the person in charge (if provided through a website, the contact information displayed on that website).
In such a case, in order to prevent unauthorized acquisition and falsification of personal information by a third party, Companies may verify that the inquiry was made by the Information Owner. Information Owners are requested to cooperate in this verification.
Inquiries regarding a customer’s personal information are taken at the information desk where the customer originally provided the information to Companies or the information desk in charge where the customer received guidance.
For questions concerning the information desks mentioned above the following contact is available.
Niseko Distillery Co., Ltd.
8. Handling of opinions and requests, etc.
Opinions, requests, and suggestions, etc., received by Companies can be used freely by Companies unless purposes of use have been specifically restricted.
However, in case of public release or disclosure to a third party in a form that enables the Information Owner’s identification, the Information Owner’s consent shall be obtained in advance.
9. Handling of personal information, etc., on websites
- To identify and resolve the cause of a server failure or problem
- To improve the content of Websites and e-mails, etc.
- To customize the content of Websites and e-mails, etc., for individual users
- To use the browsing history and questionnaire results, etc., of Information Owners for marketing activities for membership services in which Information Owners register their personal information in advance
However, in this case restrictions may arise that prevent the use of some functions such as customization, etc.
9.2 Use of Google Analytics
Companies may use Google Analytics on Websites to understand Websites’ usage. Google Analytics uses first-party cookies to collect information on access to Websites without personal identification.
More information about Google Analytics is available on the following page:
(Google Analytics ™ is a trademark of Google Inc.)
9.3 SSL (Secure Sockets Layer) and TLS (Transport Layer Security)
When Information Owners provide Companies with personal information through Websites of Companies, SSL (Secure Sockets Layer) or TLS (Transport Layer Security) encryption or equivalent security technology is used to prevent eavesdropping by third parties during communication.
However, in rare cases these technologies may not be available depending on the computer environment of the Information Owner.
Notably, SSL/TSL technology may partly not be supported.
Links from Websites
Websites may contain links to sites other than those of Companies.
Although great care is taken in selecting linked sites, Companies cannot be held responsible for the protection of personal information or the content of sites other than those of Companies.
10. Continuous improvement
Companies make ongoing improvements to ensure the proper handling of personal information.
April 1. 2022
Niseko Distillery Co., Ltd.