Tabelog Privacy Policy for International Travelers

1. Business operator handling personal information

Kakaku.com, Inc.
Digital Gate Building, 3-5-7 Ebisu-Minami, Shibuya-ku, Tokyo
Representative Director and President Atsuhiro Murakami

2. Chief Privacy Officer

Kakaku.com, Inc. Senior Managing Executive Officer in charge of Risk Management
Contact: Personal Information Protection Committee

3. Acquisition of personal information

We acquire personal information in the following ways:
(1) Customer Information (Name, telephone number, email address, and other booking information; and credit card or other payment-related information): Obtained directly from users, customers, etc. (We will retain Customer Information for only as long as there is a business or legal need.) Certain payment-related information may be provided to us by our payment service providers involved in the transaction.
(2) Informative Data (Please see the Section 4. below): Recorded automatically by users, customers, etc., using the website or application. (We will retain Informative Data for only as long as there is a business or legal need.)

4. Acquisition and use of data regarding use of the website or app

(1) About Informative Data
In this policy, Informative Data refers to information about a user's computer, smartphone, cell phone, or other information communication device, behavioral history and other information related to an individual that cannot identify a specific individual by itself, recorded by cookies, local storage, web beacons, device identifiers, etc., and information. We may acquire and use Informative Data. Informative Data may be automatically collated with personal information in the system for the purpose of carrier payment, etc., or may be matched with personal information for the purpose of appropriate responses to inquiries from users, business partners, etc., system management, prevention, verification, and control of illegal activities, improvement of security, etc. In such cases, we will treat Informative Data as personal information as well.
Informative Data we obtain may include the following information:

• (i) Device identifiers such as your device ID or other information that allows us to identify the device you are using
• (ii) User Agent
• (iii) Operating system and internet connection related information
• (iv) Referrer
• (v) IP address
• (vi) Location information
• (vii) URLs viewed and time stamps of time viewed
• (viii) Number of web reservations, calls, page views, and other information recorded on our services
• (ix) Server log information other than the above

(2) Cookies, etc.
Cookies, local storage, IndexedDB, etc., are mechanisms by which website providers record data on the computers of site users through their browsers ("Cookies, etc.")
We use (i) Cookies, etc., that are essential for the operation of the website, (ii) Cookies, etc., that enable us to analyze the usage of the website, and (iii) Cookies, etc., that enable us to provide and advertise (including targeted advertisements) effective content related to users' interests and concerns. When a user visits our website, Cookies, etc., may be issued from us to the user's device, or a third party may issue Cookies, etc., to the user's device.
Cookies, etc., issued by third parties are managed by third parties and handled in accordance with such third party's privacy policy and other arrangements.
We may accumulate and use Cookies, etc., in the Data Management Platform (DMP).
If you wish to opt out (disable) Cookies, etc., issued by DMP and third parties, please refer to the following page where you can find information on the providers and opt-out methods.
here

(3) Device identifiers
We may collect device identifiers (including advertising identifiers such as IDFAs issued by Apple Inc. and AAIDs issued by Google Inc.) from smart devices that have downloaded our iOS and Android apps. We use device identifiers to analyze user access conditions, to provide services suited to user needs, to improve services, or to optimize marketing research and advertisement delivery. In addition, advertising identifiers such as IDFAs and AAIDs are used only for the purpose of optimizing the delivery of advertisements.
To stop targeted advertising by IDFAs, AAIDs, or other advertising identifiers, please opt-out (disable) in the "Settings" of the user's device.

(4) Location information
We use the GPS function of the user's device to obtain latitude and longitude information of the user's device when using our apps, only with the user's consent when using our apps.
We will use the user's location information, either alone or in combination with the user's usage history of our services, etc., for the purpose of delivering useful information to the user (recommended stores, fashion services, weather forecasts, etc.) and improving the quality of our services.
To stop us from obtaining location information, please opt-out (disable) in the "Settings" of your device.

(5) Use of Other Companies' Services
We use an external service provided by Google, LLC. Your usage information (limited to information that cannot identify a specific individual) regarding our service may be used by us and Google, LLC to improve the quality and convenience of the service, such as usability and security. You agree to this before using our Service.
Please review Google's Use of Your Data When You Use Google Partner Sites and Apps for more information

5. Purpose of use of personal information and Informative Data

We use personal information and Informative Data for the following purposes:
(1) Customer Information (Use for the performance of contracts with users, customers, etc.)

• (i) For identification purposes when logging in
• (ii) To contact customers for providing services through our websites
• (iii) To respond to inquiries from customers, business partners, etc.
• (iv) To provide Customer Information to restaurants and/or our partner companies (payment agency companies, credit card companies, subcontractors), in accordance with the contents of customers' applications

(2) Customer Information and Informative Data (Use based on consent by users, customers, etc., where required)

• (i) To distribute information such as e-mail newsletters
• (ii) To send e-mails and other information from designated restaurants when customers consent. Inquiries regarding distribution of such contents, suspension of distribution, etc., shall be made directly to the restaurant concerned
• (iii) To effectively deliver advertisements (including targeted advertisements) regarding products or services provided by Kakaku.com, Kakaku.com group companies, or partners of Kakaku.com/Kakaku.com group companies or advertisers, and to measure the effectiveness of such advertisements
• (iv) To distribute advertisements and other information that Kakaku.com deems beneficial to users in Kakaku.com's or third parties' media
• (v) To provide the information to our group companies, ad-serving companies, advertisers, advertising agencies, Affiliate Service Providers (ASP), our business partners, and other third parties for the purposes of use described in the preceding items
• (vi) To confirm the identity of customers when using functions linked to external services

(3) Customer Information and Informative Data (Use based on consent by users, customers, etc., or use for purposes of the legitimate interests of Kakaku.com or third parties)

• (i) To create statistical data in a format that does not allow individuals to be identified, and to use the data for the development of our new services
• (ii) To operate websites and applications of Kakaku.com or its group companies and provide products or services
• (iii) To understand and analyze the usage of Kakaku.com's or its group companies' websites and applications
• (iv) To improve (e.g., detect and track fraud, improve operability, security, quality, and convenience) or develop products or services provided by Kakaku.com or its group companies
• (v) To develop and execute business utilizing data with our business partners
• (vi) To disclose statistical data such as the number of service users and page views as IR information
• (vii) To provide the information to our group companies, ad-serving companies, advertisers, advertising agencies, ASP, our business partners, and other third parties for the purposes of use described in the preceding items

Please refer to Section 4(2) for information on how to disable (opt-out) cookies, etc., issued by each service provider.

6. Provision to third parties

We will properly manage the personal information we have obtained and will not provide it to third parties unless we have obtained your consent or unless otherwise required or permitted by applicable laws and regulations, including in the following cases:

• (1) when providing information to a restaurant that the customer has applied for use or to our business partner's (payment agency companies, credit card companies, subcontractors).
• (2) when providing information - including e-mail addresses, IP addresses, and other data related to your internet usage environment, as well as other necessary information - to the card issuer (referring to the company that issued the credit card used for payment of our service) via electronic means for the purpose of identity verification to detect and prevent unauthorized credit card use.
  Please note that if the card issuer is located outside of Japan, your personal information may be transferred outside of Japan. Since we cannot identify the specific card issuer or the country where it is located based on the information collected from you, we are unable to ascertain or provide the following details regarding personal information protection measures. For information concerning the personal information protection systems in various countries, please refer to the website of the Personal Information Protection Commission (https://www.ppc.go.jp/).
  - The name of the foreign country where the recipient is located
  - Information regarding the personal information protection system of said country
  - Personal information protection measures taken by the card issuer
• (3) Based on laws and regulations;
• (4) There is a need to protect the life, wellbeing, or property of an individual, and it is difficult to obtain the consent of the identifiable person;
• (5) There is a special need to improve public wellbeing or promote healthy child development, and it is difficult to obtain the consent of the identifiable person;
• (6) There is a need to cooperate with a national government agency, local government, or person entrusted thereby with performing the functions prescribed by laws and regulations, and obtaining the consent of the identifiable person is likely to interfere with the performance of those functions;
• (7) cases in which personal data is provided to an academic research institution or the equivalent, and they need to handle the personal data for academic research purposes (including cases in which a part of the purpose of handling the personal data is for academic research purposes, and excluding cases in which there is a risk of unjustly infringing on individual rights and interests); or
• (8) when providing information to Affiliate Service Providers (including those located outside Japan) for the purpose of measuring advertising performance and paying affiliate fees, with your consent.

7. Entrustment

We may subcontract the work to third parties such as restaurants and/or our partner companies (payment agency companies, credit card companies, subcontractors) to the extent necessary to achieve the purpose of use of personal information.
In such case, we require the trustee to protect the personal information and implement appropriate supervision.

8. Procedures for Responding to Requests for Disclosure, etc.

We have established procedures to respond to requests based on the rights of the data subjects (the right to access (including disclosure of records of provision to third parties), notification of purpose of use, correction, addition or deletion of personal data, the right to request restriction or suspension of use, elimination, or suspension of provision to third parties, to object, the right to data portability, and other rights recognized by law) (collectively, "Requests for Disclosure, etc.").

(1) Contact for Request for Disclosure, etc.
To make a Request for Disclosure, etc., please fill in the necessary information in our designated application form and send it by mail to the following address:
Postal Code 150-0042
Address Shibuya PARCO DG Bldg., 12-14F, 15-1, Udagawa-cho, Shibuya-ku, Tokyo
Kakaku.com, Inc. Personal Information Protection Committee Secretariat

(2) Documents (Forms), etc., to be submitted upon Request for Disclosure, etc.
Please prepare documents A and B below.

• (A) Application Form for Disclosure, etc., of Personal Information (click here to download)
  Please print and fill in the required information.
• (B) Identification documents (driver's license, passport, student ID, or other official identification documents issued by a competent government authority)
• [In the case that your agent makes a request on your behalf]
  If the "Request for Disclosure, etc.," is made by an agent, please enclose the following documents in addition to the documents listed in A and B above.
• In the case of a privately appointed agent
  i) Power of Attorney (download here) (1 copy)
  Please affix your signature to your power of attorney.
  ii) Notarization of the Power of Attorney by a Notary Public
  iii) Identification of the agent (copy of driver's license, passport, or other official identification documents issued by a competent government authority)
• Application by legal representative
  i) Documents verifying the existence of the statutory authority of representation (e.g., Power of attorney, Birth Certificate, Court Order, or other equivalent official documents issued by a competent government or judicial authority)
  ii) Identification of the legal representative (copy of driver's license, passport, or other official identification documents issued by a competent government authority)

(3) Fees for Requests for Disclosure, etc.
For your reasonable requests, we generally do not charge any fees. However, for repeated requests that exceed reasonable limits, we may charge a certain cost based on the situation. We may refuse requests that are groundless, require excessive technical measures (such as developing a new system or fundamentally changing existing practices), pose risks to the legitimate rights and interests of others, or are very impractical (such as those involving information stored on backup tapes) to the extent permitted by applicable laws and regulations.

(4) Method of response to Requests for Disclosure, etc.
We will respond to your request for disclosure of personal information by the disclosure method indicated on the Application Form for Disclosure, etc., of Personal Information.
Please note, however, that if we find it difficult to respond to you by the disclosure method you have indicated, we will respond to you in writing at the address you have indicated on the application form.

(5) Purpose of Use of personal information obtained in connection with Requests for Disclosure, etc.
Personal information obtained by us as a result of each application will be used only to the extent necessary to conduct an investigation, verify the identity of the applicant, and respond to each application in order to process the application.

9. Reasons for not taking the requested measures

In the following cases, we may decline the Requests for Disclosure, etc., in which case we will notify you to that effect.

• (1) In the event we are unable to verify the identity of the applicant or the authority of representation of the agent
• (2) In the event of any defect in the documents submitted
• (3) Cases in which we have the legal basis to decline the request according to the provisions regarding to the Request for Disclosure, etc., set forth under the law

10. Measures for Managing the Security of Personal Data

We have taken the necessary and appropriate measures as follows in order to prevent the leakage, loss or damage of personal data and otherwise ensure the safe management of personal data.

(1) Formulation of basic policy
In order to ensure the proper handling of personal data, we have established a Personal Information Protection Management System as well as a "Personal Information Protection Policy".

(2) System for handling personal data
We have established "Personal Information Protection Regulations" and other rules for handling personal data, including handling methods at each stage of acquisition, use, storage, provision, and deletion/disposal.

(3) Organizational safety control measures
We have appointed a Chief Privacy Officer and have established an organizational structure to implement measures for the safe management of personal data. In addition, we have formulated and are implementing regulations and other rules governing safety control measures for personal data.
A reporting and liaison system is in place for the Chief Privacy Officer in the event that he/she becomes aware of facts or signs of violation of the law or handling regulations, and to deal with accidents or violations involving personal data.
We maintain a means to list the status of personal data handling, and regularly evaluate, review, and improve the status of personal data handling, as well as conduct audits.

(4) Personal safety control measures
Kakaku.com regularly informs, educates, and trains its employees on the points to keep in mind and internal rules regarding the handling of personal data.
In addition to stating matters concerning the protection of personal data in its employment regulations, Kakaku.com requires its employees to submit a written pledge of confidentiality when signing employment contracts. In addition, when the handling of personal data is outsourced, a confidentiality agreement is concluded with the outsourcing company.

(5) Physical safety control measures
In areas where personal data is handled, Kakaku.com controls the access of employees and implements measures to prevent unauthorized persons from viewing personal data.
In addition, Kakaku.com takes measures to prevent theft or loss of equipment, electronic media, and documents that handle personal data, and physically protects the equipment and devices.

(6) Technical safety control measures
Access to personal data is identified and authenticated, appropriate access privileges are set, and access is recorded for management and operation.
We have introduced a system to protect information systems that handle personal data from unauthorized access from outside or unauthorized software, and operate them appropriately. In addition, we take security measures by utilizing automatic updating functions for equipment and software, and by collecting and responding to security information.
Measures against loss or leakage of personal data during transportation or transmission are implemented, such as encryption and password protection.
We design information systems that handle personal data securely in accordance with IPA and other guidelines. We also conduct periodic security assessments before and after operation, and respond to any problems that are discovered as needed.
We encrypt the path and content of communications containing personal data.

(7) Understanding the external environment
In principle, we handle personal data in Japan.
However, some personal data may be stored in foreign countries (for example, the data center of an external cloud service where we store personal data may be located in a foreign country) (please refer to the link below for the names of foreign countries where we may handle personal data and their systems regarding the protection of personal information).
In such cases, we will implement safety control measures after understanding the systems for the protection of personal information in the relevant foreign country.

11. Contact for Complaints

Contact for complaints at Kakaku.com
Please use the " Contact Form".
[Name of the business operator handling personal information] Kakaku.com, Inc.
[Contact] Personal Information Protection Committee Secretariat

Name and contact for complaints to the Accredited Personal Information Protection Organization we belong to:
JIPDEC PrivacyMark Promotion Center
Personal Information Protection Organization Secretariat
Roppongi First Building, 1-9-9 Roppongi, Minato-ku, Tokyo 106-0032
TEL: 0120-700-779
Please note that the above phone number is not a contact for inquiries about our services.

12. Voluntary provision of personal information

The provision of personal information to us is voluntary. However, please be advised in advance that failure to provide personal information may cause disadvantages to you due to hindrance of our business processing.
You may withdraw your consent to the handling of your personal information at any time, but this will not affect the handling of your personal information that we have conducted prior to such withdrawal.

13. Scope of this Policy

This policy applies to the following services operated by us in common. In the event that other terms of use enacted by us stipulate a different handling of personal information than this policy, the personal information shall be handled in accordance with this policy.

https://tabelog.com/en/
https://tabelog.com/cn/
https://tabelog.com/tw/
https://tabelog.com/kr/