Privacy Policy
Personal Information Protection Policy
1. Basic Policy
Hokkaido Airports Co., Ltd. (hereinafter, “This Company”) is aware of the importance of personal information and believes in the corporate responsibility to protect personal information. This Company will observe laws and regulations as well as internal regulations and appropriately acquire, use, and manage all personal information handled.
Please see the URL below for This Company’s address and the name of its representative.
https://www.hokkaido-airports.co.jp/company/
2. Protection of Personal Information
This Company will enact appropriate organizational, physical, personal, and technological measures related to the protection of the personal information handled and will take measures deemed necessary and appropriate to prevent the leakage, loss, or damage of said information and to manage said information.
Specifically, we will thoroughly implement the following measures regarding the management of personal information:
(1) Ensuring accuracy of information
We will endeavor to ensure that information provided by customers, business partners, etc. is always accurate and up-to-date.
(2) Safety control measures
We will enact strict internal regulations regarding the management of personal information, and following said regulations.
(3) Supervision of employees
We will formulate personal information protection regulations and ensure their strict implementation through employee education.
(4) Supervision of contractors
We will only entrust the handling of personal information to contractors who meet the requirements of the Personal Information Protection Regulations, and will manage the contractors accordingly.
(5) Storage time and erasure
We will set a storage period for the information that has been offered and will ensure suitable erasure once that period has ended. Further, even during that storage period, we will erase it immediately if we determine it is no longer needed.
(6) Ascertainment of the external environment
In the handling of personal information overseas, This Company will take measures to safely manage said information based on a regular gathering and ascertainment of information related to personal information protection systems in said countries.
3. Compliance in the Acquisition of Personal Information
This Company will comply with the following in the acquisition, usage, and disclosure of personal information.
(1) Acquisition of personal information
This Company will lawfully and fairly acquire the personal information that is deemed necessary for This Company’s scope of work.
(2) Purpose of Use of Personal Information
Except as required by law or with the consent of the individual, personal information acquired by This Company will not be used beyond the scope necessary to achieve the purposes of use set forth below.
①To ensure the safe and smooth management and operation of airports
② To keep records of airport conditions and conversations with customers for crime prevention purposes and in case of unforeseen accidents, etc.
③To make necessary contact regarding customers' opinions, requests, complaints, etc.
④ To perform promotions and market research as well as improve sales activities, etc.
(3) Disclosure of personal information
Excluding the following situations, This Company will not disclose personal information acquired from an individual based on their consent with a third party without that individual’s prior consent.
① In the event it is legally recognized
② When it is necessary for the protection of life, bodies, or assets and getting consent from the individual is difficult
③ When it is deemed to be particularly necessary for the improvement of public health or the promotion of the healthy fostering of children
④ When a national organization, local public body, or consigned party thereof requires cooperation in the carrying out of legally recognized work and either there is a risk that getting consent from the individual will interfere with the carrying out of said work or getting consent from the individual is difficult
⑤ When the relevant third party is an academic research institute, etc., and said third party requires the relevant personal data for the purposes of academic research (including situations in which only a portion of the purpose of the handling of the relevant personal information is academic research, and excluding situations in which there is a risk of the individual having their rights and interests unduly infringed upon)
⑥In the event the third party is a business that needs to respond to the opinions, requests, or inquiries of a customer, and This Company communicates relevant personal information (excluding personal data) to said third party
⑦ In the event This Company consigns the handling of personal data as is deemed necessary for the achievement of the purpose of use (In this situation, the consigned will undergo the necessary and appropriate monitoring to ensure that the personal information disclosed in consignment is safely managed)
⑧ In the event This Company discloses personal information related to business continuation due to a merger or other reason
⑨ In the event it is used jointly with This Company’s affiliated companies (see (4))
(4) Joint usage with affiliated companies
There may be cases, for the purpose of promotions, market research, improving sales activities, etc., where This Company and affiliated companies will jointly use personal information This Company has acquired. Information that may be jointly used includes names, addresses, telephone numbers (including cellphones and faxes), e-mail addresses, company and organization names, department names, job titles, workplace addresses, and other information related to contact details as well as sex, birthdate, transaction history, questionnaire information, and other information. While This Company bears the ultimate responsibility for managing acquired personal information, any affiliated companies that jointly use said information will be held to the same standards as This Company. Please see the URL below for This Company’s address and the name of its representative.
https://www.hokkaido-airports.co.jp/company/
[Companies affiliated with This Company]
Chitose Airport Fueling Facilities Co., Ltd. (CFF)
4. Management of Personal Information
This Company will keep accurate and up-to-date customer personal information; will prepare necessary measures such as the maintenance of a security system, the maintenance of a management structure, and the thorough education of employees to prevent events such as unauthorized access, loss, destruction, falsification, leakage of said personal information; and will implement safety measures and carefully manage said personal information.
5. Changes to Personal Information Purpose of Use
This Company will, in principle, not change the purpose of use specified in 3 (2) without prior consent from the individual from whom the personal information was acquired. However, an exception is made when the new purpose of use is judged to be reasonably related to the original purpose. In such a case, the new purpose of use will be disclosed to the public before enactment.
6. Improvements and Revisions to the Handling of Personal Information
This Company will monitor the handling of personal information, management systems, and initiatives and will continually improve and revise as necessary.
7. Discarding of Personal Information
When personal information is no longer necessary in light of the purpose of its use, This Company will erase or discard the said personal information. Such deletion and disposal will be carried out in a necessary and appropriate manner so as to prevent leakage to outside parties and other such misuse.
8. Complaint and Inquiry Desk
This Company will establish the following complaint and inquiry desk related to the handling of personal information.
Individuals should contact the Personal Information Complaint and Inquiry Desk below for requests related to the purpose of use notifications, disclosure, amendment to, addition to, or deletion of details, purpose of use or erasure, the stopping of disclosure to a third party, etc., for their own personal information, or for the sharing of opinions or consultations related to the handling of personal information.
[Hokkaido Airports Co., Ltd.]
〒066-0012
987-22 Bibi, Chitose-shi, Hokkaido
Tel: 0123-46-2990
Personal Information Complaint and Inquiry Desk
GDPR Privacy Policy
The "GDPR Privacy Policy" (hereinafter referred to as "this Policy") provides information on how Hokkaido Airports Co., Ltd. (hereinafter referred to as “we”, "our Company") processes the personal data of users of this website (hereinafter referred to as "User") located in the European Economic Area, as the data controller, for the website operated by our Company (hereinafter referred to as "this Site").
1. User personal data handled by our Company
We process the following categories of personal data in operating the Site:
- Personal Identification Information: Name (This will only be collected from those who contact our Company using the contact details in Section 7 regarding the User rights in Section 5 or this Policy.)
- Contact information: Phone number and email address (This will only be collected from those who contact our Company using the contact details in Section 7 regarding the User rights in Section 5 or this Policy.)
- Technical data: Information associated with the use of cookies and other similar technologies (please see the Cookie Policy for details on the processing of cookies, etc.), browsing history (the history of Users browsing this Site, including IP addresses, country (region) of residence inferred from IP address, timestamp, etc.), and location data (if the site includes route-search functionality, this includes information about your current location when using that feature).
2. Handling of personal data
We process Users’ personal data for the purposes identified in this Policy. We ensure that the personal data processed is adequate, relevant and limited to what is necessary in relation to the purposes for which it is to be used. We will notify Users if we process their personal data for reasons other than those for which it was originally intended.
In addition, we will process Users’ personal data for the following purposes based on the following legal bases below. Furthermore, we will not use Users’ personal data for any exclusively automated processing, including systematic profiling.
| Purpose | Categories of personal data | Legal basis |
|---|---|---|
| To provide the services offered on this Site | Technical data Contact Information |
Legitimate interests Fulfillment of a contract |
| Marketing | Technical data | Consent |
| To enhance the usability, improve, add features to, and develop new content for this Site | Technical data | Consent |
| Security measures for this Site | Technical data | Legitimate interests |
| Response to inquiries (when contacted at the contact details in Section 7 regarding the User rights in Section 5 or this Policy.) | Personally identifiable information Contact information |
Legitimate interests |
*For activities based on legitimate interests, we will provide more detailed information regarding our assessment upon the User's request.
3. Storage times for personal data
Except in cases where such storage is mandated by law, we will retain Users' personal data for as long as it takes to handle it for the aforementioned purposes. We are required to process Users’ personal data for as long as our relationship with Users continues in the operation of this Site. Even after such a relationship has ended, to the extent allowed by applicable laws, we may need to retain Users’ personal data for a certain period of time in order to conduct our business.
4. Sharing of personal data
In order to operate this Site efficiently, we may share Users’ personal data with our following affiliates:
- Amazon Web Services (AWS) (US): Cloud Hosting Services
- Google LLC (US): Data analysis using Google Analytics services
- OneTrust LCC (US): User consent management
- Contractor (Japan): This refers to an outsourced contractor for the installation and maintenance of information equipment, and the development, maintenance, monitoring, and support of information systems.
If we transfer Users' personal data outside the European Economic Area, we shall ensure an appropriate legal framework by establishing standard contractual clauses as defined by the European Commission in accordance with Article 46(2)(c) of the GDPR. You can request a copy of the aforementioned non-confidential information about the safeguards related to our data transfers by contacting us using the details below. We may transfer personal data to Amazon Web Services (AWS) (US), Google LLC. (US), OneTrust LLC (US), and contractors (Japan). In the context of an investigation or legal proceedings, it may be necessary for us to disclose Users’ personal data to the relevant authorities or courts, and we may be obligated to do so at the direction of the relevant authorities or courts. We may also disclose Users’ personal data if we believe in good faith that disclosure is reasonably necessary to defend our rights and obtain available remedies.
5. User rights
Users have the following rights regarding our processing of their personal data:
- Information about the processing of Users’ data: The Users have the right to obtain from us all necessary information about our personal data processing activities.
- Access to personal data: The Users have the right to ask us to confirm whether or not personal data concerning them is being processed and, if such is the case, have the right to access that personal data and information pertaining to it to an extent.
- Restrictions on handling of personal data: Under certain conditions, the Users have the right to ask us to restrict the processing of their personal data.
- Objection to the processing of personal data: Under certain conditions, the Users have the right to object at any time to our processing of their personal data on grounds relating to their personal circumstances.
- Data portability of personal data: Under certain conditions, Users have the right to request that their personal data be provided in a structured, commonly used, and machine-readable format, and under certain conditions, they also have the right to transmit that data to another controller without hindrance from us.
- Withdrawal of consent: Users can withdraw their consent at any time, and the withdrawal will not affect the legality of the processing carried out based on the consent prior to the withdrawal. To withdraw consent, please use the consent management tool on this Site. After receiving notification of the withdrawal of consent from the User, our Company will no longer process the User's data for the purposes initially consented to.
If you wish to exercise any of the above rights, please contact us via the contact information below.
If you are not satisfied with how we respond to your request or have a complaint about how we handle your personal data, you may lodge a complaint with the supervisory authority in the Member State in which you live or work or which has jurisdiction over a breach of the GDPR.
6. Updates to this Privacy Policy
We may revise or update this Policy from time to time. Any changes to this Policy will become effective when we post the updated Policy on this Site.
7. Contact information
If you have any questions or requests regarding this Policy, please contact us via the following:
[Hokkaido Airports Co., Ltd.]
〒066-0012
987-22 Bibi, Chitose-shi, Hokkaido
Tel: 0123-46-2990
Personal Information Complaint and Inquiry Desk