PRIVACY POLICY

2. Definitions

In this Privacy Policy:

• your "personal data" means any information relating to an identified or identifiable natural person ('data subject'). It may include contact details, other personal information, photographs, and expressions of opinion about you, etc.;
• our "affiliates" include our subsidiaries and parent companies;
• "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• 'controller' means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing of personal data;
• 'joint controllers' are two or more controllers jointly determining the purposes and means of processing.

3. How We Collect Your Personal Data

We will collect and process the following personal data about you:

• Information you give us.
  This includes information obtained when you wish to purchase or use services at JUNGLIA, includes your basic information (name, e-mail address, address, phone number, gender, country of residence) and other information you voluntarily provide. We may also obtain your data when you use the official website or official application for JUNGLIA, including usage data.
• Information we collect about you.
  When you visit this website, it automatically collects certain types of data about you. This includes access logs and cookies. For more information about the use of cookie data, please refer to our cookie policy.
• Information we obtain from other sources.
  When using certain services at JUNGLIA, such as restaurant reservation service, we may obtain your personal information from third party sources such as travel agencies or the restaurant reservation system. This includes your name and reservation information.

4. Legal basis and Purpose of Processing Personal Data

We will process your personal data on the following legal bases.

• Contract.
  This is where we need to process your personal data to perform the contract we enter into with you.
• Legal Obligation.
  This is where we need to comply with a legal obligation.
• Legitimate Interests.
  This is where the processing of your personal data is necessary for legitimate interests pursued by us or a third party and your interests and fundamental rights do not override those interests.
• Your Vital Interests; Public Interest.
  Less commonly, we may process your personal data where it is necessary to protect your vital interests (or someone else's vital interests), or to perform a task carried out in the public interest.
• Consent.
  This is where you have given consent for us to process your personal data. However, even if we obtain consent from you, we may process your personal data based on other legal grounds. The withdrawal of your consent (please see Section 10(g) of this Privacy Policy below) shall not affect the lawfulness of processing performed based on the consent before your withdrawal.

We use the personal data that we hold about you for the following purposes. We will only use your personal data to the extent that it is necessary to do so to fulfil the purposes described below.

• Provision of products and services at this facility

  • Responding to various inquiries regarding the Guest Attraction Facility, responding to consultations and complaints (including inquiries to the Guest Contact Center and Guest Relations), contacting the Guest, contacting the Guest regarding repairs, lost items, etc., and delivery, and other Guest support
  • To respond to inquiries required by law and identity verification necessary for the operation of this facility

• Provision of services on this official ticket service or on the official website and app

  • To sell and ship tickets requested by guests , provide other official ticket services, and provide information on related services
  • User support regarding this official ticket service or the official website/app
  • Any communications regarding this official ticket service or the official website and app
  • Provision of other services related to this official ticket service, official website, app, or ancillary services

• Measures necessary for the safe operation of the facility, official ticket service, official website and app

  • Ensuring the safety of guests and staff at the facility and managing the safety of the facility and equipment
  • Contacting guests or providing first aid to guests as required for the operation of the Customer Acquisition Facility
  • To respond to inquiries required by law and identity verification required for the operation of the Facilities, the Official Ticket Service, or the Official Website and App

• To improve the products and services of this facility, this official ticket service, and our official website and app, and to develop and consider new products and services

• Advertisement and provision of information about the facility or our products and services

  • Sending survey emails to ask for opinions on this facility
  • Marketing activities for this facility and preparation of statistical data for said marketing activities
  • Information on the official website, app, or websites other than ours, and email distribution regarding the Customer Attraction Facility or our products, services, events, campaigns, etc.
  • Providing information on official websites, apps, or websites other than ours, and sending emails about the Attraction Facility or our products, services, events, campaigns, etc., in accordance with the hobbies and preferences of Guests
  • Notification of our activities (including sending or transmitting greeting cards, New Year's cards, etc.)
  • Provision of guest personal information to advertising-related businesses, etc. for various advertising and information provision purposes

5. Disclosure of Personal Data to Recipients

We may share your personal data with the following categories of recipients. We require any third party receiving your personal data to process it pursuant to contractual terms which require that the information is kept secure, is processed in accordance with applicable data protection laws, and is used only as we have instructed and not for the third party's own purposes.

• Your personal data may be disclosed to and shared with Katana Force LLC, the system licensee for the official ticket service on this website.
• Your personal data may also be disclosed to and shared by our affiliates (including their employees having authority to process the relevant personal data).
• Your personal data may be disclosed to and shared with service providers, marketing service providers and security service providers for services offered by JUNGLIA, to the extent necessary to use the services.
• In order to provide services, products and advertisements that match the hobbies and preferences of our guests by analyzing their browsing history and usage history on this official ticket service, official website, app or third-party platforms, we may provide personal information of our guests to various advertising-related businesses.

We may jointly use personal data with the following joint users within the scope of the purposes of use described in "2. Purposes of Use of Personal Information" above, in accordance with the framework of data sharing under the Act on Protection of Personal Information of Japan.

• We may share personal information such as names, addresses, telephone numbers, and email addresses with our affiliated companies. In such cases, our company will be responsible for managing such personal data.

• We will engage in the following joint use of information with EVENTIFY Inc., which operates the ticket sales management system " Funity ".

  • Items of personal information to be shared: name, postal code, address, telephone number, email address, gender, date of birth
  • Purpose of joint use: Purpose of use as stipulated in Article 2 of Funity's "Terms of Use for Personal Information Protection"
  • Personal data management officer: EVENTIFY Co., Ltd.

6. Transfers of personal data outside the European Economic Area and the United Kingdom

The personal data that we hold about you may be transferred to, and stored by, a third party outside the EEA or the United Kingdom.

Where we transfer your personal data to a third party outside the EEA or the United Kingdom, we will ensure that :

(a) the recipient destination has been subject to a finding from the European Commission or has been designated by the government of the United Kingdom as ensuring an adequate level of protection for the rights and freedoms that you possess in respect of your personal data;

or

(b) the recipient enters into standard data protection clauses with us that have been approved by the European Commission or the government of the United Kingdom.

You can obtain more details of the protection given to your personal data when it is transferred outside the EEA or the United Kingdom (including a copy of the standard data protection clauses which we have entered into with recipients of your personal data) by contacting us in accordance with the information indicated below in Section 13.

7. Security Control Measures

In addition to establishing internal rules, such as personal information protection rules, we implement measures necessary and appropriate for security control of personal data that we collect about you, such as by taking the following measures:

• limiting the number of officers and employees who are granted authority to access personal data;
• controlling access to facilities where personal data is primarily managed;
• requiring the use of passwords and other means to access systems and data;
• using encryption for remote access and data transfer/communication;
• training employees thoroughly; and
• auditing performance of operations

In addition, we conduct appropriate supervision of contractors and employees processing personal data. When processing personal data in a foreign country, we take appropriate security control measures after understanding the legislation relating to the protection of personal data in the relevant foreign country.

If you wish to know more about our security control measures, please contact us using the contact information indicated below in Section 12.

8. Storage limit of personal data

We will retain the personal data that we collect about you for a period necessary to process personal data for purposes set forth in Section 3, except to the extent that we are required by law to retain it for a longer period of time in which case, we will retain it for the period required by law.

9. Your rights

You have a number of legal rights in relation to the personal data that we hold about you. These rights may vary depending on where you are located and which data protection laws will apply to the relationship between you and us, but would typically include:

• the right to obtain information regarding the processing of your personal data and access to the personal data which we hold about you;
• the right to request that we rectify your personal data if it is inaccurate or incomplete;

• the right to request that we erase your personal data in certain circumstances. This may include (but is not limited to) circumstances in which:

  • it is no longer necessary for us to retain your personal data for the purposes for which we collected it;
  • we are only entitled to process your personal data with your consent, and you withdraw your consent; or
  • you object to our processing of your personal data for our legitimate interests, and our legitimate interests do not override your own interests, rights and freedoms;

• the right to request that we restrict our processing of your personal data in certain circumstances. This may include (but is not limited to) circumstances in which:

  • you dispute the accuracy of your personal data (but only for the period of time necessary for us to verify its accuracy);
  • we no longer need to use the personal data except for the establishment, exercise or defence of legal claims; or
  • you object to our processing your personal data for our legitimate interests (but only for the period of time necessary for us to assess whether our legitimate interests override your own interests, rights and freedoms);
• the right to object to us about our processing of your personal data.
• the right to receive any personal data which we process about you on the basis of your consent or on a contract (as opposed to any other legal ground) and where the processing is carried out by automated means in a structured, commonly used and machine-readable format and/or request that we transmit that data to a recipient where this is technically feasible. Please note that this right only applies to personal data which you have provided to us;
• the right to withdraw your consent to our processing of your personal data at any time. Please note, however, that we may still be entitled to process your personal data if we can rely on another legal ground for doing so.

You can exercise your rights by contacting us using the information about us indicated below in Section 12. You can also lodge a complaint with the data protection regulator if you think that any of your rights have been infringed by us.

10. Children's Privacy

When handling personal data of guests under the age of 16 and when we process personal data based on consent as the legal ground for that, we may collect his or her personal data on the basis of consent given by the holder of parental responsibility over the minor. If the user is a minor under 16, and you intend to send us your personal data, please make sure that your parent has consented to your action. If we learn that we have collected information from a child under the age of 16 without a lawful basis, we will promptly take all reasonable steps to delete the data from our system.

11. Changes to This Privacy Policy

We may modify this Privacy Policy from time to time and will post the updated Privacy Policy with a "Last Updated" effective date of the revisions. We recommend that you review this Privacy Policy periodically. If we make a material change to this Privacy Policy, you will be provided with appropriate notice such as it being posted on a website.

12. Contacts

If you have any questions about this Privacy Policy, your rights, or any other issues regarding the protection of your personal information, you can reach us using the contact information below.

privacy@japan-entertainment.co.jp

You can also contact our EU representative or UK representative by using the contact information below.
[to be provided]