-1. Administrator
This website is operated by HOS Corporation (hereinafter referred to as "our company" or "HOS Corporation"), located at 16-45 Oge, Tosadomariura, Naruto-cho, Naruto City, Tokushima Prefecture.
-2. Purpose
This policy outlines the specific information we are obligated to provide to data subjects in Europe (EU), the European Economic Area (EEA), and the United Kingdom (UK) under the EU General Data Protection Regulation ((EU) 2016/679 GDPR) and the UK General Data Protection Regulation (UK GDPR). These regulations define data subject rights and policies regarding the processing of personal data.
-3. Scope of Application
This policy applies to our website http://www.aoawo-naruto.com/This explains how we handle your personal data.
-4. Contact information of the agent
4.1 EU Representative
Enobyte GmbH
Address: Augustenstr. 49, 80333 Munich, Germany
4.2 UK Agent
Enobyte GmbH
Address: c/o Regus HQ Bloomsbury 4/4a Bloomsbury Square, London, WC1A 2RP, United Kingdom
-5. Legal basis for data handling
We only process your personal data when there is a legal basis for doing so. Based on the GDPR and UK GDPR, the following three legal grounds are used:
(1) Consent (GDPR/UK GDPR Article 6, paragraph 1(a)) – If consent is provided voluntarily, we may process your personal data only for the purposes for which that consent was given.
(2) Contractual obligations (GDPR/UK GDPR Article 6, paragraph 1(b)) – If we have entered into a contract with you, we are required to store and use certain information about you. This also applies if we take necessary steps based on your request before entering into a contract.
(3) Legitimate interests (GDPR/UK GDPR Article 6, paragraph 1, subparagraph f) – Legitimate interests allow us to process personal data for legitimate purposes, provided that such interests do not take precedence over your interests or your fundamental rights and freedoms. Such processing and the interests we pursue are explained within this policy.
-6. About this website
When you access our website, the server automatically saves server log file information sent from your browser. This information includes:
Content data
- Input text and uploaded files
Usage data
- Websites accessed
- Date and time the request was made
Metadata
- Customer's IP address
- Your computer's time zone
- Date and time of your computer
- Requested website
- Which website did you access it from?
- Information about your browser (version, language, installed fonts and languages)
- Other information that a browser may send via the HTTP protocol
The temporary storage of IP addresses is necessary to display website content on your device. This information is used solely for maintaining the technical operation of the servers and network and for ensuring network security. This processing is based on our legitimate interest in providing you with a secure website (EU GDPR/UK GDPR Article 6(1)f).
Server logs are automatically deleted within 30 days. We retain the logs for this period to check for suspicious activity on the server and to protect the infrastructure from external attacks such as DDoS attacks.
6.1 Inquiry Form
When you use our contact form, we will receive and store the information you enter in addition to the data mentioned above. Some fields in the contact form are required, and you must fill them out when submitting the form. Other fields are optional, and you can choose whether or not to fill them out. We use the information you enter to reply to your messages and respond to your requests. Furthermore, unless we are legally required to retain the information for a longer period, we will delete your personal data once it is no longer needed for the purpose for which it was collected, and we will not use your personal data for any other purpose.
The required fields are as follows:
• Name: This will be used to identify you and to verify whether you have contacted us before.
• Email address: This will be used to reply to you.
·phone number
Customer messages
If you do not wish to provide certain information, you can enter false data. However, if information is missing, we may not be able to reply to your message. If your message concerns the purchase of our services or products, or is related thereto, the legal basis for this data processing is a contractual obligation. If it is a general request from you, the legal basis for this data processing is a legitimate interest.
6.2 Online Reservations
When you use our booking form, we receive and store the information you enter. Some fields on the booking form are required and must be filled out to complete your reservation. Other fields are optional, and you can choose whether or not to fill them out. We use the information you provide to complete your reservation and to respond to any requests you may have.
Furthermore, unless legally required to retain the information for a longer period, we will delete your personal data once it is no longer needed for the purpose for which it was collected, and will not use your personal data for any other purpose.
(1) Event Reservation
The required fields are as follows:
・Name
·phone number
・Email address
(2) Restaurant Reservations The required information is as follows:
・Name
·phone number
・Email address
(3) Hotel Reservation The required items are as follows:
・Name
·sex
·phone number
・Email address
·Street address
• Payment information
(4) Day trip booking The required items are as follows:
・Name
·phone number
・Email address
For day trips and restaurant reservations, our company uses the TableCheck service provided by TableCheck Co., Ltd. (Address: KR Ginza II 5F, 2-15-2 Ginza, Chuo-ku, Tokyo 104-0061, Japan).
For more information on data protection at TableCheck Co., Ltd., please refer to the following link:
-7. Cookies used on this website
Cookies are small text files that can be written to your browser by any website. These cookies can be set by us (first-party cookies) or by third parties (third-party cookies). Cookies set by us cannot be read by other websites. However, if a cookie is set by a third party, other websites that use that third party can read the information stored in the cookie.
This enables tracking across multiple websites. When we use third-party cookies, we always obtain your consent before setting them.
The first-party cookies we use are as follows:
Name | content | Objective | Storage period |
_ga | Unique identifier | It is used to distinguish between users. | 399 days |
_ga_LSF3J0YYZF | Unique identifier | It is used to track how many times a website has been visited. | 399 days |
_trust360_ | Digital information used to verify user authentication and access rights. | It is used to evaluate security and reliability. | 1 years |
ds | Session data | It is used to temporarily record settings and status while a user is using a website or app. | session |
ds_access | Authentication token | It is used for authentication and access control. | session |
ds_en | Language setting | This is used to save the language setting (English). | session |
ds_en_access | Access control token | It is used to control access to English content. | session |
ds_chs | Language setting | This is used to save the language setting (Simplified Chinese). | session |
ds_chs_access | Access control token | This is used to control access to Simplified Chinese content. | session |
ds_cht_access | Access control token | This is used to control access to Traditional Chinese content. | session |
ds_kor | Language setting | This is used to save the language setting (Korean). | session |
ds_kor_access | Access control token | This is used to control access to Korean language content. | session |
scroll down | Scroll position data | This is used to save the user's scroll position. | session |
The third-party cookies we use are as follows:
Company name | Name | content | Objective | Storage period |
webfont.fontplus.jp | FP-DLV | Font loading settings | This is used to load customized web fonts. | session |
.Google. com | NID | Encrypted user ID | This is used to save user settings and personalize Google services. | 6 months |
.Google. com | SOCS | Consent settings | This is used to store your cookie consent decision. | 13 months |
.youtube.com | VISITOR_INFO1_LIVE | Unique identifier | It is used to automatically adjust the video quality based on the user's internet connection speed. | 6 months |
.youtube.com | VISITOR_PRIVACY_METADATA | Privacy Settings | This is used to save your YouTube privacy settings. | 6 months |
.youtube.com | YSC | Session identifier | This is used to track user interactions with embedded YouTube videos. | session |
.Google. com | __Secure-ENID | Encrypted user ID | It will be used to enhance the security and functionality of Google services. | 13 months |
.youtube.com | __Secure-ROLLOUT_TOKEN | security token | This is used for YouTube's features. | 6 months |
-8. Third-party
This website may embed graphics, videos, social media buttons, and other features provided by external service providers' servers. When you access a website that embeds such content, your IP address will be transmitted to a third party. In some cases, these tools may contain web beacons (invisible graphics) used for statistical purposes. If you discover any such web beacons, please contact us and we will endeavor to remove them from our website as quickly as possible.
Some third-party content may set cookies to store certain information about your usage of the tools or content in your browser.
In some cases, third parties may combine information collected on our website with other information to create your profile.
8.1 Google Tag Manager
This website uses Google Tag Manager, provided by Google Ireland Ltd. (located at Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google"). This service allows you to manage your website's tools through a centralized interface. Google Tag Manager itself does not handle personal data, but it is used to load other tools and content that may process personal data.
8.2 Google Analytics
With your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The data controller in the EU/EEA and Switzerland is Google Ireland Ltd, located at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). The legal basis for this data processing is your consent (GDPR/UK GDPR Article 6(1)a).
Google Analytics uses cookies to analyze how our website is used. Information obtained from cookies is typically transferred to and stored on Google servers in the United States.
Google Analytics 4 has IP anonymization enabled by default. This anonymization shortens your IP address by EU or EEA. Exceptionally, your full IP address may be sent to a Google server in the US where it may be shortened. According to Google, IP addresses sent through Google Analytics are not combined with other Google data.
When you visit a website, your actions are recorded as "events." These events include:
- Page views
- First visit to the website
- Session Start
- Web pages viewed
- Customer "click paths" (interactions with the website)
- Scrolling (when you scroll down to the bottom 90% of the page)
- Clicking on an external link
- Internal search queries
- Interaction with videos
- Download file
- Ads displayed, ads clicked
The following will be recorded:
- Approximate location information (region)
- Date and time of visit
- IP address (abbreviated form)
- Technical information about your browser and device (e.g., language settings, screen resolution)
- Your Internet service provider
- Referrer URL (which website or advertising medium led to accessing this website)
Google uses this information to evaluate website usage and create reports on web activity. These reports are provided by Google Analytics 4 and help analyze website performance.
The following three companies may receive this data:
- Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Processor under Article 28 of the GDPR)
- Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
- Alphabet Inc, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
Regarding the United States, the European Commission approved a new adequacy decision on July 10, 2023. Google LLC is certified under the EU-US Privacy Framework. Google's servers are deployed worldwide, and we cannot completely rule out the possibility that data may be transferred to third countries (e.g., Singapore). Therefore, we have entered into Standard Contractual Clauses (SCCs) with Google to establish appropriate data protection levels in those countries.
Data sent by our company and associated with cookies is automatically deleted after 12 months. Google Analytics cookies are stored for up to 2 years. Data that has exceeded its storage period is automatically deleted every month.
You can withdraw your consent at any time by changing your selection in the cookie settings, and the changes will be applied in the future. The legality of any actions taken based on your consent up to the time of withdrawal will not change.
You can prevent cookies from being saved by adjusting your browser settings at the initial stage. However, if you set your browser to reject all cookies, functionality on this website and other websites may be limited. Additionally, you can prevent Google from collecting and processing data generated from cookies and data related to your website usage (including your IP address) by using the following methods.
- I do not agree to the setting of cookies.
- Download and install the browser plugin from the link below.
For more information about Google and how it handles data, please refer to the following link.
- terms of service: https://marketingplatform.google.com/about/analytics/terms/us/
- Data protection: https://support.google.com/analytics/answer/6004245?hl=en
- Use of cookies:
- privacy policy: https://policies.google.com/privacy?hl=en
8.3 Google Fonts
This website uses Google Fonts, provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google"). These fonts are loaded from third parties to speed up browser loading or due to licensing restrictions from font providers. The legal basis for this data handling is our legitimate interest in providing fonts to our website securely, efficiently, and maintenance-free.
When you load our website, Google can find out which websites you visited and what your IP address is. The information collected is used only to display embedded fonts and to compile statistics on preferred fonts.
For more details, please refer to the following link:
FAQ: https://developers.google.com/fonts/faq#what_does_using_the_google_fonts_api_mean_for_the_privacy_of_my_users
8.4 Google Translation
This website uses Google Translation, provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google"), to offer language translation functionality. This service allows us to provide multilingual content, improve accessibility, and enhance the user experience. Our legal basis for using Google Translation is our legitimate interest in making our website accessible to a wider audience and improving usability.
For more information about Google's data processing, please refer to the following link:
8.5 YouTube
Some of our web pages display a "Watch Video" button below certain images. Clicking this button will take you to YouTube, provided by Google Ireland Ltd. (located at Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google"). When you click this button and access YouTube, your IP address is notified to Google, and they are also notified that you have watched a video. If you are logged into YouTube, this information may be associated with your user account (if you wish to avoid this, please log out of YouTube before watching a video). In addition, Google may store cookies in your browser to save additional information about your interactions while watching the video (for example, when you paused it).
The legal basis for linking to these videos is a legitimate interest under Article 6(1)f of the GDPR/UK GDPR.
For more information on how Google handles your personal data and how to adjust your ad settings (including turning off personalized ads), please see Google's Privacy and Terms page via the link below: https://policies.google.com/privacy
8.6 Google Maps
We use Google Maps, provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google"), to guide you to our website. When you access a webpage with an embedded Google Map, Google may collect your IP address, date and time of visit, websites visited, and location information related to your interaction with Google Maps and your use of the route planner feature. Google can only collect location data if you have consented to its provision through your device settings when using a mobile device. The embedding of maps is based on our legitimate interest in making it easier for you to access our website.
-9. Social Media
We operate social media pages for promotional and marketing purposes. Currently, we share information on Facebook, Instagram, TikTok, YouTube, and Pinterest.
When you visit our sites, these platforms may collect data based on your behavior and interests and provide us with anonymized user group and interaction analyses. We have no involvement in the generation or display of such analyses, nor can we stop the collection or processing of this data.
Our company may receive the following data, categorized by user:
- Total number of visits
- Interactions to our posts
- Comment:
- Gender ratio of visitors
- Number of clicks on specific content such as maps and contact information
- Reach of posts
If you directly engage with our posts by liking or reposting them, we will be able to identify you. If you wish to avoid this identification, please use the unfollow function on the platform you are using.
(1) Facebook and Instagram
Facebook and Instagram are social media platforms provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, D04 X2K5, Ireland), whose parent company is located at 1 Hacker Way, Menlo Park, California 94025, United States.
We have a co-administration agreement with Meta. Please see the link below for details:
You can review the key points of the contract via the following link:
Customers can exercise their rights against us or the platform at any time. However, please note that in all cases, the platform will be responsible for responding to any requests. If you have any questions, please contact us using the contact information provided.
Meta's privacy policy can be found here:
If you have a Facebook account, you can stop being targeted for advertising purposes here:
(2) TikTok
TikTok is a social media platform operated by TikTok Technology Limited (located at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland), and its parent company is ByteDance Ltd. (located at 43rd Floor, One Island East, Taikoo Place, Quarry Bay, Hong Kong).
TikTok's privacy policy can be found here:
Here is the information on TikTok's privacy settings:
To adjust your personalized ad settings, please refer to the following page:
If you have any questions regarding data privacy or wish to exercise your rights under applicable data protection laws, please contact us using the contact information above or contact TikTok Technology Limited directly.
(3) X
X is a social media platform provided by X Corp. (located at One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland) and its parent company, Twitter, Inc. (located at 1355 Market Street #900, San Francisco, California 94103).
X's privacy policy can be found here:
https://x.com/en/privacy
Here is the information about the privacy settings provided by X:
You can change your advertising privacy options here:
https://help.x.com/en/safety-and-security/privacy-controls-for-tailored-ads
(4) YouTube
YouTube is a video platform provided by Google Ireland Ltd. (located at Gordon House, Barrow Street, Dublin 4, Ireland), and its parent company is Google LLC (located at 1600 Amphitheatre Parkway, Mountain View, California 94043).
Our Privacy Policy can be found here:
You can change your ad and personalized ad settings here:
https://adssettings.google.com/authenticated ：
https://help.x.com/en/safety-and-security/privacy-controls-for-tailored-ads
(5) Pinterest
Pinterest is a social media platform provided by interest Europe Ltd. (located at Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), and its parent company is Pinterest, Inc. (located at 05 Brannan Street, San Francisco, California 94107, United States).
Printerest's privacy policy can be found here:
Here is the privacy settings information provided by Printerest: https://help.pinterest.com/en/article/manage-account-privacy
To manage your ad personalization settings, please see the following link:
If you have any questions regarding data privacy or wish to exercise your rights under applicable data protection laws, please contact us using the contact information above or contact Pinterest Europe Ltd. directly.
-10. Transfer of personal data to third countries
We may transfer your personal data to third countries (including countries that do not have adequate data protection standards) for the purpose of fulfilling contracts or pre-contractual procedures. When transferring your personal data, we will take appropriate security measures and maintain confidentiality in accordance with this Privacy Policy and applicable laws and regulations.
-11. Retention period for personal data
As a general rule, we will delete your personal data once it is no longer needed for the purpose for which it was collected.
However, if legal obligations prevent deletion for a certain period, access to the information will be suspended, it will be stored securely, and deleted after the legal obligations have ended.
-12. Customer Rights
You can exercise your rights at any time by contacting us or your agent directly. However, please note that we may ask you to verify your identity to protect other data subjects.
Customers have the following rights:
(1) Access rights
(2) Right of correction and deletion
(3) Right to restrict handling
(4) Data portability rights
(5) The right to withdraw consent
-12.1 Right to file a complaint
Customers can file a complaint with the supervisory authority at any time regarding our data handling activities.
-12.1.1 EU
You can find information on the supervisory authorities of each EU member state via the following link:
-12.2 Right to object
You have the right to object to our processing of your personal data if your specific circumstances affect our balance of interests. Unless we can demonstrate a legitimate basis that overrides your interests, rights, and freedoms, and unless we do not need your personal data to establish, exercise, or defend a legal claim, we will not process your personal data any further.