※For customers from all other countries, please refer to our privacy policy here.
This Policy is applicable only to personal data concerning data subjects (“you” or “your”)in the member states of the European Union and the three EEA/EFTA states – Iceland, Liechtenstein and Norway (collectively, the “EU”） and the UK.
1.Contact Information
MK Co., Ltd（MK Travel）(“we”，”us” or “our”) processes your personal data collected in the context of our travel services (“Services”) in accordance with the General Data Protection Regulation (the “GDPR”) and this GDPR Privacy Policy (this “Policy”).
・Data Controller
MK Co., Ltd（MK Travel） is responsible for your personal data as a data controller. If you have any question or would like to uphold your rights, please contact us at;
Mail: 〒601-8002 Ibis Styles Kyoto Station 1F, 47 Kamitonoda-cho, Higashikujo, Minami-ku, Kyoto
Email:info@tourism-mk.com
2.Categories of personal data we collect
We collect and process the following personal data in the context of our Services.
2-1.Information You Provide
・Account Information – When you register an account in our Services, you will need to provide us with;
your name／ address／ date of birth／ language／ phone number／ email address／
personal identification number／ nationality／ gender／ institution／ passport ID／ Passport expiration date
2-2.Information We Collect Automatically
・Usage Information – When you interact with our websites, we automatically collect technical data regarding your usage of our Services,including pages that you visit and links you click on, online identifier(cookie, IP address, etc.) or device information (language, browser type, etc.).
・Location Data – When your device is set to provide location information, we automatically collect information about your general location (e.g. IP address).
2-3.Cookies Policy
To learn more about our use of cookies or similar technology please check our Cookies Policy.
You are required to provide us with certain personal data when you sign in our Services. Personal data that is mandatory is indicated in the relevant forms. We are not able to provide our Services to you if such data is not provided.
3.How we use your personal data
We use personal data for the following purposes:
- to take and handle orders, deliver products and services and process payments. The lawful basis for these uses is to perform our contract with you.
- to communicate with you about orders, products and services. The lawful basis for these uses is to perform our contract with you, to comply with our legal obligations or to pursue our legitimate interests in improving our Services and giving our users the best experience.
- to decide which information to show you, where you give us your consent. The lawful basis for this use is your consent.
(d) to protect our customers from fraudulent, unauthorized or illegal activity on our Services and to respond to requests by the government or law enforcement authorities conducting an investigation. The lawful basis for these uses is our legal obligations.
4.How we share your personal data
We share your personal data with the following recipients:
(a) Any of our Group Companies; and
(b) Our service providers that provide services on our behalf, such as tech vendors who support our websites and other business systems, operational companies, and payment service providers who help us process your payments. Our service providers are located in Japan.
5.Data retention
We will retain your personal information for as long as it is necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required or permitted by law.
6.Your rights
Under the GDPR you have the right to ask us: for a copy of your personal data; to correct or delete your personal data; to restrict (stop any active) processing of your personal data; and to send you a copy of your personal data you have provided to us in a structured, machine readable format. In addition, you can object to the processing of your personal data under certain conditions (for further information, see the section below entitled “Your right to object to processing”). Please note that these rights are subject to the exceptions under the GDPR and applicable local laws.
To exercise any of these rights, please contact us in writing at the postal address or the email address listed in Contact Information above.
7.Your right to object to processing
You have the right to object at any time to the processing of your personal data which is based on our legitimate interests, including “profiling” (i.e. analyzing or predicting your behavior based on your information). When we process your personal data for direct marketing purposes, you have an absolute right to opt out of such processing.
To exercise this right, please contact us in writing at the postal address or the email address listed in Contact Information above.
8.Withdrawing consent
Wherever we rely on your consent in order to process your personal data, you have the right to withdraw that consent at any time. Such withdrawal does not affect the lawfulness of any processing performed pursuant to the consent given prior to the withdrawal.
To exercise this right, please contact us in writing at the postal address or the email address listed in Contact Information.
9.Your right to complain to a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular, in the member state of the EU [or the UK] where you have a habitual residence or place of work or where the alleged infringement of the GDPR took place.
10. Changes to our Privacy Policy
We may revise or update this Policy from time to time. Any changes we may make to our Policy in the future will be posted on this webpage. If we make changes which we believe are significant, we will inform you through the website to the extent possible and seek your consent where applicable.