PRIVACY POLICY & TERMS OF USE

Terms of Service

Use of our services

THE OSAKA STATION HOTEL, Autograph collection (West Japan Railway Hotel Development, Ltd., hereinafter referred to as the "Company") provides a website (hereinafter referred to as the "Site") and a system for procedures such as reservations, inquiries, and membership registration (hereinafter referred to as the "System"). Applies to all users.
Please read and agree to the following terms of use before using this site.
Please note that these Terms of Use may change without notice, so please be sure to check for the latest information.

Service content changes

The information and this System on The Website may change without prior notice.We may stop our service in the event of a maintenance work or system failure.

Copyright

All rights related to The Website generally belong to The Company. Do not use any information unless you have a written permission. Secondary use of the information posted on The Website is prohibited.

Warranty

We strive to ensure that all information on The Website is up-to-date and accurate. However, The Company does not guarantee its completeness.

Disclaimer

We shall be exempt from liability to you or any person for any reasonably foreseeable damages, whether direct or indirect, incurred by customers or third parties through the use of The Website unless it is due to our willful intent or gross negligence.

Website links

Regarding links to The Website, please inform us in advance and obtain prior written approval.

Contact

〒530-0011 West Japan Railway Hotel Development, Ltd. Base Development Department TEL: +81-(0)6-6105-1874

Privacy Policy

The Website creates a database of personal information upon making reservations and inquiries.
The Company acquires and uses personal information for providing necessary information on the products, new services. The Company does not use personal information beyond the scope of intended purposes of use without the consent of the Persons Concerned.
In case that Persons Concerned request The Company for a utilization cease, they have the right to decline to receive them.

Please see below for The Privacy Policy

September 1, 2023

Privacy Policy

1.Basic policy

West Japan Railway Hotel Development ,Ltd. (hereinafter referred to as "The Company") has established this privacy policy and the organizational system on the handling of the personal information of all stakeholders (customers, job applicants, external business partners of The Company, etc.) who use the corporate website of The Company (hereinafter referred to as "The Website") and strives for the appropriate protection of personal information.

(1) Acquisition of personal information

The Company acquires the following personal information for the purpose of providing services or business operations of The Company. The Company acquires personal information within the scope of its intended purposes of use and clearly explains purposes of use, the scope of utilization, and the inquiries office of The Company, etc.

(2) Prohibition on the use of personal information beyond the intended purposes and the provision of personal information to third parties

The Company uses personal information within the scope of its intended purposes of use, appoints a Personal Information Protection Manager and has established the organizational system for the protection of personal information. The Company deals with personal information adequately and does not provide or disclose personal information to third parties without the consent of Persons Concerned or request by laws and regulations.

(3) Assigning of personal information

In case that The Company entrusts all or part of personal information, The Company prohibits entrusted persons from leaking or providing personal information to third parties by contract and supervises entrusted persons appropriately.

(4) The rights of Persons Concerned

The specific individuals identified by personal information (hereinafter referred to as "Person/s Concerned") have the right to withdraw their consent to the use of personal information at any time even if they had consented to the intended purposes before. In addition, Persons Concerned have the right to request The Company for a utilization cease, disclosure etc. of the retained personal information pursuant to the provisions of applicable laws.

(5) Procedures of a utilization cease, disclosure etc. of personal information/span>

In case that Persons Concerned request The Company a utilization cease, disclosure etc. of the retained personal information, they shall contact the inquiries office specified by The Company. The Company shall respond as soon as reasonably possible.

(6) Observance of laws and regulations

The Company observes applicable laws, regulations and standards, provides in-house education, informs employees of this privacy policy and strives for the improvement of understandings of employees on the handling of the retained personal information.

(7) The review and improvement of the system for the protection of personal information

The Company will continuously evaluate and review this privacy policy and the systems for the protection of personal information. The Company will maintain and improve the actions for the protection of the retained personal information.

(8) Handling personal information by link destinations

The Company shall bear no responsibility with regard to the handling of personal information by other entities or individuals linked to The Website.

2.Definition of personal information

The term "personal information" in this privacy policy means information related to a living individual that can identify a specific individual by name, date of birth or other description contained in. (This includes the "personal information" defined by Article 2(1) of the Act on the Protection of Personal Information.)

3. Acquisition and purposes of use of personal information

The Company acquires and uses the following personal information for the following intended purposes. The Company does not use personal information beyond the scope of intended purposes of use without the consent of the Persons Concerned.

(1) Personal information of customers

1 Personal information acquired

Name, age, gender, date of birth, occupation, address, telephone number, email address, nationality, passport number and other information necessary for the following purposes of use.

2 Purposes of use

<1>For performing works required to provide services at The Company (accommodation, restaurants, shops, banquets, wedding receptions, catering).
<2>For offering on-line booking and other related businesses.
<3>For handling inquiries and requests, etc.
<4>For providing necessary information on the products, services, events and other related business activities of The Company.
<5>For providing information on the products, services and events of The Company to the customers who have consented to sending by direct mail, email and LINE, etc.
<6>For offering prizes or campaigns.
<7>For grasping and analyzing state of usage of the products, services and events of The Company to improve their quality.
<8>For exercising rights and performing duties based on laws and the provisions of terms and conditions for accommodation.
<9>For other purposes of use indicated at the time of acquisition of personal information.

(2) Personal information of job applicants

1 Personal information acquired

Name, age, gender, date of birth, address, telephone number, email address, and other information necessary for the following purposes of use.

2 Purposes of use

<1>For performing works required for recruitment activities and the procedures and contracts of employment.
<2>For handling inquiries and requests, etc.
<3>For other purposes of use indicated at the time of acquisition of personal information.

(3) Personal information of external business partners of The Company

1 Personal information acquired

Business card information and other information on external business partners of The Company necessary for the following purposes of use.

2 Purposes of use

<1>For concluding and performing contracts with external business partners of The Company and other works required.
<2>For handling inquiries and requests, etc.
<3>For other purposes of use indicated at the time of acquisition of personal information.

(4) Personal information of members of the "JR Hotel Members" organization.

1 Personal information acquired

Member number, password, name, age, gender, date of birth, address, telephone number, email address, employer information and history of providing and use of points, and other information necessary for the following purposes of use.

2 Purposes of use

<1>For performing works required within the scope of the purposes of use set forth in 3(1)2 of this privacy policy.
<2>For performing works required for the operation of the "JR Hotel Members" organization (hereinafter referred to as "The Members' Organization") by The Company.
<3>For providing important information such as changes to the membership agreement, terms of service or benefits of The Members' Organization.
<4>For other purposes of use indicated at the time of acquisition of personal information.

3 Other agreements of The Members' Organization

Membership agreement of the "JR Hotel Members" organization
Terms of service of the "JR Hotel Members" organization

4. Handling of personal information

(1) Appropriate management of personal information

The Company appropriately implements management of personal information, takes appropriate safety measures including reasonable technological measures to prevent unauthorized access, damage, falsification and leakage of personal information.
The Company continuously strives to maintain and enhance the management system of personal information.
The Company strives to keep the personal information accurate and up to date within the scope of purposes of use, limits the employees who can access or handle it and exercises appropriate supervision over them.

The Company stores the personal information on the database of The Company or third-party service providers that The Company has concluded contracts with.

The Company sets expiration dates for the storage of personal information within necessary period for purposes of use and deletes the personal information without delay after expiration dates unless otherwise specified in laws and regulations.

(2) Safety measures on the internet

The Company implements the following safety technologies in the use of its on-line booking system though these do not guarantee a complete security environment.

1 SSL
The Company uses SSL (Secure Sockets Layer) encryption technology on The Website where personal information is inputted.
With SSL, data is transmitted to the registered computer through a network after being encrypted. (SSL is a technology that prevents theft or alteration of data by encryption and authentication in communication between the browser and the WWW server.)

2 Cracking by unauthorized access
The Company installs a firewall to prevent unauthorized access from outside.

5. Sharing of personal information

The Company shares personal information within the scope of its intended purposes of use as follows.
When the sharing users have established policies for personal information, their policies shall be applied for their use.

(1) Sharing of personal information on the business of The Company (accommodation, restaurants, shops, banquets, wedding receptions, catering.)

1 Scope of the sharing users

Member companies of The Members' Organization, the JR Hotel Group and JR-East Hotels.

2 Purposes of sharing use

For providing services at The Company (accommodation, restaurants, shops, banquets, wedding receptions, catering) and offering on-line booking reservations, and other related businesses.

3 Categories of sharing Information

Member number, password, name, age, gender, date of birth, address, telephone number, email address, employer information and history of providing and use of points and other information necessary for the above purposes of sharing use.

4 Name of a person responsible

West Japan Railway Hotel Development, Ltd.

(2) Sharing of personal information for the service at all tenant shops in the hotels that The Company operates

1 Scope of the sharing users

All tenant shops in the hotels that The Company operates.

2 Purposes of sharing use

For providing services at The Company (accommodation, restaurants, shops, banquets, wedding receptions, catering) and other related businesses.

3 Categories of sharing Information

Name, age, gender, date of birth, address, telephone number, email address, and other information necessary in the scope of above purposes of sharing use.

4 Name of a person responsible

West Japan Railway Hotel Development, Ltd.

6. Provision of personal information to third parties

The Company does not provide personal information to third parties without obtaining the consent of Persons Concerned in advance except in cases set forth in the following categories.

(1) Cases where The Company provides personal information to third parties

1 Cases based on laws and regulations
2 Cases where there is a need to protect a human life, body or fortune, and when it is difficult to obtain the consent of Persons Concerned
3 Cases where there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain the consent of Persons Concerned
4 Cases where there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing public affairs, and when there is a possibility that obtaining the consent of the Persons Concerned would interfere with the performance of the said public affairs
5 Cases where disclosure or provision to a third party has been requested clearly by Persons Concerned

(2) Disclaimer regarding provision to a third party

In the following cases, The Company will bear no responsibility whatsoever with regard to the acquisition of personal information by third parties.

1 Cases where personal information is disclosed to an accommodation facility by Persons Concerned (if Persons Concerned discloses personal information of companions at the time of reservation, it is assumed that the consent of those companions is obtained at the responsibility of the Person Concerned)
2 Cases where personal information is disclosed to third parties by Persons Concerned
Cases where personal information is provided to or used on external websites linked to The Website by Persons Concerned
4 Cases where third parties obtain information that could identify an individual (password, etc.) for reasons not attributable to The Company

(3) Appropriate management and supervision over entrusted persons

In case of The Company entrusts the handling of personal information to third parties within the scope of intended purposes of use, The Company shall take appropriate consideration for the selection of entrusted persons, conclude a non-disclosure contract with them, guide them for the proper management of personal information and exercise appropriate supervision over them.

7. Transfer of personal information outside of the European Economic Area (EEA)

The Company may transfer the personal information of Persons Concerned who reside in the European Economic Area (EEA) to the terrain outside of the EEA and use within the scope of intended purposes of use. In these cases, The Company shall appropriately and strictly handle the personal information under applicable laws. " Please see below for the handling of the personal data of persons who are in the EEA"

8. Rights of Persons Concerned

Persons Concerned have the right to demand actions such as the notification of the purposes of use, disclosure, correction, deletion, utilization cease, or ceasing of provision to third parties (hereinafter referred to as "Utilization cease, Disclosure, etc.") of the retained personal information pursuant to the provisions of applicable laws.
Persons Concerned have the right to withdraw their consent to the use of personal information at any time even if they had consented to the intended purposes before.
Persons Concerned have the right to object to their local supervisory authorities with jurisdiction over the protection of personal information if they are dissatisfied with the handling of personal information by The Company.

9. Procedures of Utilization cease, Disclosure, etc.

In case that Persons Concerned request The Company for Utilization cease, Disclosure, etc., The Company shall respect the will of the Persons Concerned, confirm the identification of the Person Concerned and respond for the reasonable period pursuant to the provisions of applicable laws.

However, The Company may refuse said request:
➤ where there is a possibility of violating the laws or regulations,
➤ where there is a possibility of harming third party’s life, body, fortune or other rights and interests,
➤ where there is a possibility of interfering with The Company implementing its business,
➤ where the said personal information does not exist,
➤ where The Company cannot confirm the identification of the Persons Concerned,
➤ and where Persons Concerned do not pay the prescribed fee.

When Persons Concerned request Utilization cease, Disclosure, etc., please contact the personal information inquiries office below.

(1) Personal information inquiries office

[Personal information inquiries office]

Address:
JR Kyoto Station Central Exit,
Shiokoji-sagaru, Karasuma-dori, Shimogyo-ku, Kyoto
600-8216

Personal Information Inquiries Office:
General Affairs Department, West Japan Railway Hotel Development, Ltd.

(2) Purpose of use of personal information acquired due to requests for Utilization cease, Disclosure, etc.

The Company will use personal information acquired due to requests for Utilization cease, Disclosure, etc. within the scope of purposes required for the procedures for Utilization cease, Disclosure, etc.
The Company will appropriately dispose of the documents submitted in the procedures for Utilization cease, Disclosure, etc.

10.Protection of the personal information of minors

The Company handles the personal information of minors appropriately in accordance with this privacy policy. When Persons Concerned is minor, The Company may require the consent of persons in parental authority for acquiring the personal information. If Persons Concerned is less than 13 years of age, The Company shall require the consent of persons in parental authority and give special consideration to the handling of their personal information.

11.Use of cookies

The Website may use cookies to improve the information and services provided and to offer comfortable use of The Website. For details, please refer to the " Cookie Policy " of The Website.

12.Handling of access logs

The Website may acquire access logs to improve the use of The Website and to analyze statistical data. The Company does not disclose access logs to third parties unless otherwise provided by laws and regulations. If you refuse to send access logs, you may not use The Website properly.

13.Revision of this privacy policy

The Company will revise this privacy policy to respond to changes in related laws, regulations or the social environment, etc. The Company will post the revised privacy policy on The Website.

14.Personal information inquiries office

Please contact the personal information inquiries office below when you have any inquiries about this privacy policy.
Personal Information Inquiries Office, West Japan Railway Hotel Development, Ltd.
Address:
JR Kyoto Station Central Exit,
Shiokoji-sagaru, Karasuma-dori, Shimogyo-ku, Kyoto
600-8216
email address: hr@granvia-kyoto.co.jp
Office hours: 10:00 a.m. - 5:00 p.m. (excluding weekends and public holidays)
Personal Information Protection Manager: General Manager,
General Affairs Department, West Japan Railway Hotel Development, Ltd.

[April 1, 2021]
West Japan Railway Hotel Development, Ltd.

Cookie Policy

1.About this cookie policy

(1)General provisions

West Japan Railway Hotel Development Ltd. (hereinafter referred to as "The Company") uses cookies to ensure security and improve convenience of the corporate website (hereinafter referred to as "The Website"). Cookies are mainly used to retain access logs to The Websiteby users (hereinafter referred to as "Users"), to follow up cart information and to increase convenience of The Website. We recommend to turn the cookie settings of the browser you use to "On" when using The Website. Please understand that if you disable cookies, some of the functions of The Website may not work properly. The types of cookies used on The Website and the above setting method by Users aredescribed in this cookie policy.

(2)About the relationship with the privacy policy

The Company has separately established a privacy policy on the handling of personal information. For details, please refer the " Privacy Policy " of The Website.

2.What are cookies?

Cookies are small data files that The Website writes on devices of Users when they access The Website. Cookies are used to keep the access history of Users and other information. Cookies are exchanged via a User's browser. By using cookies, it becomes possible to provide more user- friendly services on The Website, by keeping the past purchasing history or Users account information. Cookies are also used to distribute targeting advertisement by using access history.

(1)About first-party and third-party cookies

Cookies belong to a domain specified in advance. The term "first-party cookies" means cookies that are issued by The Website. Further, the term "third-party cookies" means cookies that are issued by the domain of a third party other than The Company.

(2)About session and persistent cookies

Cookies are classified into "session cookies" and "persistent cookies" in accordance with their lifespan. Session cookies are temporary and automatically deleted when Users leave The Website or close the browser. Persistent cookies remain on Users’ devices for a period until it expires, or they are deleted from the browser.

3.About the cookies used on The Website

The following types of cookies are used on The Website.

(1)Strictly necessary cookies

Strictly necessary cookies are essential in using the services and functions of The Website.These cookies enable The Website to function optimally by ensuring security and improving convenience. Users can disable or delete these cookies using their browser configuration.However, please note that if you do that, some of The Website or its services may not work properly.

(2)Performance cookies

Performance cookies collect information on the state of use of The Website and the state of access by Users. These cookies are used to improve the performance of The Website by providing Users’ history such as the pages they visit, the time they stay, whether or not they have had error message. The Website uses third-parties services such as Google Analytics to analyze the state of use by Users and uses these cookies to improve the performance of The Website. Please refer to the Google Analytics support page for how to handle data.

(3)Targeting cookies

Targeting cookies are used for marketing purposes, such as the personalizing content or targeting advertisement. These cookies record access logs, Users’ profiles etc. By using these cookies on The Website, Users' information can be used for advertising services by third parties by linked Users’ profile to access history of their websites.

4.About the setting of cookies by Users

(1)Browser configuration

Users can change the cookie settings on their browsers whether accepting or disabling them.Users can also delete cookies from their terminals through their browser. For details, please refer to the support page of each browser.

Setting methods on various browsers (examples)
For Microsoft Edge™:
https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
For Internet Explorer™:
https://support.microsoft.com/en-us/windows/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d
*Microsoft Edge and Internet Explorer are registered trademarks of Microsoft Corporation in the United States and other countries.
For Safari™:
https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
*Safari is a trademark of Apple Inc. registered in the United States and other countries.
For Google Chrome™:
https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
*Google Chrome is a trademark or registered trademark of Google LLC.
For Opera™(English page):
https://help.opera.com/en/latest/web-preferences/
*Opera is a trademark or registered trademark of Opera Software ASA.

Users can disable the cookies on The Website with the abovementioned browser configuration. However, please understand that if cookies are disabled, some of the functions of The Website may not work properly. The Company shall bear no responsibility whatsoever with regard to the effects caused by Users' setting changes unless there is intention or neglect on the part of The Company.

(2)Selections on the "Cookie Preferences" menu

The Company provides a function whereby Users can set whether to allow or disable cookies for themselves. For details, please refer to the "Cookie Preferences" of the applicable website.

5.About revision of this cookie policy

The Company will revise this cookie policy to respond to changes in related laws, regulations or the social environment, etc. The Company will post the revised cookie policy on The Website.

6.Inquiries office about this cookie policy

Please contact the personal information inquiries office below when you have any inquiries about this privacy policy. Personal Information Inquiries Office, West Japan Railway Hotel Development, Ltd.
Address:
JR Kyoto Station Central Exit,
Shiokoji-sagaru, Karasuma-dori, Shimogyo-ku, Kyoto
600-8216
email address: hr@granvia-kyoto.co.jp
Office hours: 10:00 a.m. - 5:00 p.m. (excluding weekends and public holidays)
Personal Information Protection Manager: General Manager,
General Affairs Department, West Japan Railway Hotel Development, Ltd.

Revised April 1, 2021.

[April 1, 2021]
West Japan Railway Hotel Development, Ltd.

Privacy Policy on the Handling of the Personal Data of Persons Who are in the EEA

West Japan Railway Hotel Development, Ltd. (hereinafter referred to as "The Company") values your privacy and is committed to protecting your personal data in accordance with applicable privacy laws. This Privacy Policy (the “Privacy Policy on the Handling of the Personal Data of Persons Who are in the EEA”) is aiming to confirm to handle your personal data located in EEA legally and appropriately.

1.What personal data is collected about you?

Certain activities on our Site require the collection of your personal data. The categories of personal data we may collect and process include:

・contact information that assists us in communicating with you, including your name, age, mailing address, nationality, telephone numbers, email address and occupation etc.you provide on our website
・As needed, credit card information etc. to provide the service requested by our customers

2.How and for which purposes does use the personal data that has been collected?

We uses your personal data collected on The Website to:

・manage our customer relationship, including interacting with you, fulfilling your orders and requests
・send you from time to time information on products and services, promotions etc. subject to your consent where required
・research and analyze the use trend of customer

3.Legal Grounds

We may collect and process your personal data based on the following legal grounds:

・your consent
・performing a contract with you
・addressing legal obligations
・protecting public interests, performing the public authority for the public interests
・protecting our customers’important interests
・or based on the legitimate interests of the company, which are our usual business activities.

4.With whom may your personal data be shared?

The company will share your personal data only with the following business partners and third parties:

・The company sometimes uses third parties, such as IT service providers, to perform tasks on its behalf and may need to share your personal information with them for the purpose described in the above paragraph 2. Any processing of that personal data will be on our instructions and compatible with the original purposes.
・As required by law, The company may disclose your personal data to law enforcement officials, in order to comply with legal requirements, court orders, government or law enforcement agency requests, including to meet national security or law enforcement requirements, and including to agencies and courts in the countries where we operate.

5.The kind of security measures that are in place to protect your personal data

・We apply technical, physical and organizational measures that are designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access, and against other unlawful forms of processing.
・Access to personal data is restricted to authorized recipients on a need-to-know basis. We also maintain a data security practice that is proportionate to the risks associated with the processing of your personal data. The practice is continuously adapted to protect personal data, taking into account industry-accepted practices.
・The company is not responsible for the safety of your personal data transmitted to the websites of any other companies that may be linked to this Site. Visitors to any such websites should refer to such websites’ privacy policies and practices.

6.Your rights regarding your personal data

You have the right to:
・Right of access by the data subject (GDPR Article 15);
・Right to rectification (GDPR Article 16);
・Right to erasure ('right to be forgotten') (GDPR Article 17);
・Right to restriction of processing (GDPR Article 18);
・Right to data portability (GDPR Article 20);
・Right to object (GDPR Article 21);
・Automated individual decision-making, including profiling (Article 22);

7.Access

By accessing and using The Website, you understand and agree to the collection, processing, international transfer and use of your personal data as set forth in this Privacy Policy. Where required by law, we will ask your explicit consent. You may always object to the use of your personal data for direct marketing purposes or withdraw any consent previously granted for a specific purpose by clicking on relevant links on our websites, following the directions contained in an email or by contacting us at the email address described in the below paragraph 11.

8.Retention

We may retain your personal data no longer than necessary for the purposes for which they were collected or as required by applicable law.

9.Cookies

As is the case with many websites, our Site may use cookies and other automated information collection means, subject to your consent where required. Cookies are information about you from our website that is stored on your browser or hard drive. Cookies save you time because you do not need to manually re-enter the information stored on your hard drive. Cookies also help us upgrade our website by showing when and how users use our website. You can set your browser to notify you when a cookie is sent or refuse cookies altogether, but certain features of our website might not work without cookies.

10.Changes to this Policy

As this Privacy Policy can be modified at any moment without prior notice, we will update the updated date at the bottom of this policy when we change this policy, so please refer to it on a regular basis.

11.Contact

If you request the right to be performed described in the above paragraph 6 or if you have any inquiries about this privacy policy and the protection/processing of the personal data, please contact the below.
Regarding the personal data provided for the inquiries, we will use them only to respond to the inquiries etc.

[ EU/UK representative ]

You may contact our EU/UK representative using the contact details below.

EU Representative: DP-Dock GmbH
Address: Ballindamm 39, 20095 Hamburg, Germany
Website: https://www.dp-dock.com/
E-mail Address: westjapanrailway-hotel-development@gdpr-rep.com

UK Representative: DP Data Protection Services UK Ltd.
Address: 16 Great Queen Street, Covent Garden, London, WC2B 5AH, United Kingdom
Website: https://www.dp-dock.com/
E-mail Address: westjapanrailway-hotel-development@gdpr-rep.com

12.Supplementary Provision

These terms are translated from the original Japanese. The original Japanese version takes precedence over this English translation.

Updated: [April 1, 2024]
West Japan Railway Hotel Development, Ltd.
[April 1, 2021]
West Japan Railway Hotel Development, Ltd.