privacy
policy

Privacy Policy

Article 1: Introduction

  1. Aquanet Hiroshima Co., Ltd. (hereinafter referred to as "we" or "our company") respects privacy and is committed to protecting the privacy of our customers, including visitors to our website and users of our services (hereinafter referred to as "customers"). We have established this Privacy Policy (hereinafter the “Policy”) to define how we properly handle customers’ personal information, and we process such information appropriately in accordance with this Policy. Before using our website, our services, or contacting us, please read this Privacy Policy carefully.
  2. The terms “Personal Information,” “Personal Data,” “Retained Personal Data,” and “Personally Related Information” used in this Policy have the meanings defined in the Act on the Protection of Personal Information of Japan (Act No. 57 of 2003, hereinafter the “APPI”) or other applicable laws and regulations.
  3. This Policy applies not only when the APPI is applicable, but also when we process personal data subject to privacy regulations in the European Economic Area (EEA), the United Kingdom (UK), such as the General Data Protection Regulation (GDPR) and the UK GDPR.

Article 2: Personal Information We Collect and How We Collect It

  1. Personal Information We Collect
    1. Full name
    2. Phone number
    3. Email address
    4. Name of accommodation facility
    5. Date and time of boarding
    6. Number of passengers, including breakdown of adults and children
    7. Fax number (only when applying via fax)
    8. Responses to surveys related to boarding reservations and boarding
    9. Inquiries and comments (as written in the remarks column)
  2. Methods of Collection
    1. Our website
    2. Fax
    3. Phone
    4. Application forms

Article 3: Purposes of Use of Personal Information

  1. We use the personal information we collect for the following purposes. The legal basis for purposes (1) to (4) is “performance of a contract,” and the legal basis for purpose (5) is “legitimate interests.” Except where required by law or defined in this Policy, we do not provide personal information to third parties without your consent.
    1. To manage reservation operations
    2. To provide information to customers in case of cancellations (e.g., due to weather or equipment issues)
    3. To provide services at accommodation facilities where customers stay
    4. To respond to inquiries (via website, email, fax, or phone)
    5. To improve our services

Article 4: Sharing of Personal Data

  1. We may share personal data with third parties if necessary to achieve the purposes described in the previous article. If we entrust the handling of personal data to a third party, we will appropriately supervise such parties through contracts or other means to ensure secure management.
  2. Details of third parties with whom we may share personal data and the purposes of sharing are as follows. Any changes will be announced in this Policy:

    1. Third party:SMS service provider

      Purpose:To notify customers about cancellations

    2. Third party:Accommodation facilities

      Purpose:To provide services at accommodation facilities where customers stay

  3. Except as permitted by law or as set out above, we will not provide personal data to third parties without the customer’s prior consent.

Article 5: Use of Sessions and Cookies

  1. Sessions
    1. Purpose of Use

      A session ID is issued to maintain communication between your browser and our server, and may be used to identify you. Specifically, it is used to improve convenience, such as retaining the information you entered on the reservation screen.

    2. Information Collected

      We collect information related to session IDs.

    3. Legal Basis

      The collection and use of session ID information are based on our legitimate interests. These legitimate interests include maintaining the security and functionality of the website, as well as improving the quality of our services.

  2. Cookies
    1. Purpose of Use

      A cookie is a small text file stored on your device when you visit a website. We use cookies to understand how customers use our site and to improve our services (for example, through the use of Google Analytics).

    2. Information Collected and Analytics Tools

      We use “Google Analytics,” a service provided by Google LLC. Google Analytics uses cookies to analyze your visits to our website and provides us with reports that we use to improve our site. Information collected through Google Analytics is managed in accordance with Google’s Privacy Policy. For details, please refer to the following URL:
      https://policies.google.com/privacy
      You can restrict or disable the use of cookies by changing your browser settings. In addition, you can disable Google Analytics by using the tool provided by Google at the following URL:
      https://tools.google.com/dlpage/gaoptout

    3. Legal Basis

      The collection and use of information about your site usage for the purpose of service improvement are based on our legitimate interests. These legitimate interests include maintaining website security and functionality, as well as improving service quality.

Article 6: Data Retention

  1. We do not retain personal data beyond the period necessary for its intended processing purpose.
  2. Data collected under Article 2 will be deleted within 180 days after the boarding date.

Article 7: Customer Rights

  1. Under applicable laws, customers are entitled to the following rights. For details, please refer to the European Commission website.
    1. Right of access - You may request access to your personal data and obtain a copy.
    2. Right to rectification - You may request correction of inaccurate or incomplete data.
    3. Right to erasure - You may request deletion of your data under certain conditions, such as: (i) The data is no longer necessary; (ⅱ) You withdraw consent and no other legal basis exists; (ⅲ) You object to processing and no overriding grounds exist; (ⅳ) The processing was unlawful; (ⅴ) Deletion is required by law; (ⅵ) The data was collected in connection with the provision of information society services (per GDPR Article 8.1).However, (ⅰ) we may refuse if the data is needed for freedom of expression, (ⅱ) legal obligations, (ⅲ) public interests, (ⅳ) health, archiving, (ⅴ) research, or (ⅵ) legal claims.

    4. Right to restrict processing - You may request restriction of processing in certain cases (e.g., pending accuracy verification or legal claims).
    5. Right to data portability - You may request to receive your data in a structured, machine-readable format and transfer it to another controller.
    6. Right to object - You may object to processing based on public interest or legitimate interests unless we have compelling legitimate grounds or legal claims.
    7. Right to withdraw consent - You may withdraw your consent at any time if processing is based on consent.
    8. Right to lodge a complaint - You may file a complaint with a supervisory authority. Please refer to the relevant website .
    9. Right not to be subject to automated decision-making - You may object to decisions based solely on automated processing, including profiling. However, we do not conduct such processing.
  2. How to Exercise Your Rights
    1. You may exercise your rights by postal mail (details below).
    2. If a request is clearly unfounded or excessive (e.g., repeated requests), we may charge a reasonable fee or decline the request.

Article 8: Security Measures

  1. We take appropriate organizational and technical measures to protect personal data from unauthorized access, loss, or alteration.
  2. Access to personal data is limited to employees, agents, contractors, and third parties who need access. These parties are bound by confidentiality obligations through employment or data processing contracts.

Article 9: Changes to This Privacy Policy

  1. We reserve the right to amend this Policy at any time. The most current version will always be posted on our website.
  2. If you continue using our services after a revised Policy is posted or notified, you are deemed to have accepted the changes. Where required by applicable laws, we will obtain your consent.

Article 10: Requests for Disclosure of Retained Personal Data, Inquiries, and Complaints

  1. Overview
    1. Requests for disclosure, other rights, and inquiries/complaints may be submitted using the method described below.
    2. We may ask for documents or information to verify your identity.
  2. Exercising Your Rights
    1. Content: We respond to requests for notification of purposes of use, disclosure of retained personal data or third-party provision records, correction, addition, deletion, suspension of use, or suspension of third-party provision.
    2. Procedure: Please mail the required documents and postage stamps covering the handling fee to:
      2-2-12 Kamiyacho, Naka-ku, Hiroshima-shi, Hiroshima, Japan
    3. Required Documents:"Personal Information Disclosure Request Form"
    4. Fees (for notification of purpose or disclosure): ¥2,000 per request
  3. Contact Information for Other Inquiries
    1. Email: privacy@aqua-net-h.co.jp
    2. Fax: +81 82-569-5906
    3. Mail: 2-2-12 Kamiyacho, Naka-ku, Hiroshima-shi, Hiroshima, Japan

Article 11: Company Information, Data Controller, and Data Protection Officer

  1. Company Information

    Company: Aquanet Hiroshima Co., Ltd.

    Representative Director: Maiko Tsujimura

    Address: 2-2-12 Kamiyacho, Naka-ku, Hiroshima-shi, Hiroshima, Japan

  2. Data Controller

    We are the data controller responsible for handling your personal data. See Articles 2-5 for details.

  3. Data Protection Officer

    Name: Kiyonori Sato

Last Revised: August 29th, 2025

Site Policy

Security

To protect your personal information, this website uses SSL on some pages. Personal information that is entered on these pages by the user is encrypted before being sent or received. The web page may not display correctly if your browser does not support SSL or if you are connecting to the Internet from behind a firewall. SSL (Secure Socket Layer): Industry standard encryption technology which encrypts transactions between web servers and web browsers. (From the viewpoint of the nature of the encryption technology, no warranty is given as to 100% safety.)

JavaScript

This website uses JavaScript to provide you with a better experience. Please note that if JavaScript is disabled in your browser, you may have problems using or browsing this website.