Privacy And Cookie Policy

This Privacy Policy applies to “Nagoya is not boring” as an independent company registered at Aichi, Nagoya, Japan (hereinafter only referred to as “Nagoya is not boring” or ”we”); and the nagoyaisnotboring.com Websites (our mobile website, and any other web-based platforms, collectively, the “Websites”); and governs our data collection, processing, and usage. Access to and use of the Websites, and the services provided on the Website (collectively, the “Service”), will be subject to this Privacy Policy as set forth below.

Any information that we collect is subject to this Privacy Policy. We may, however, modify and revise this Privacy Policy from time to time. If we make any material changes to this Privacy Policy, we will notify you of those changes by posting them on the Services or by sending you an email or other notification, and we’ll indicate when those changes will become effective.

Subject of Data Protection

The subject of data protection is personal data. Data is personal if it can be assigned to an identified or identifiable natural person. This includes information such as names, addresses, email addresses, and telephone numbers.

Collection, Processing, and Use of Personal Data on Request

The use of our Services is generally possible without providing personal data. You are neither obliged to visit the Websites nor to provide any personal data. If you do not provide us with personal data, you might not be able to use individual functionalities of Services. Otherwise there will be no consequences for you. The collection of users’ personal data through our Services is always on a voluntary basis, except in the cases described in the following. We would like to point out that data transmission over the Internet (e.g. communication by email) can have security gaps. Complete protection of data against access by third parties is not possible.

We collect, process, and use your personal data (which you have provided us with) when making a booking on your behalf or registering an account for our member area, to the extent necessary in each case for the following purposes:

Registration and execution of the contract

  • Data that you provide when setting up an account, such as your name, email address, telephone number, birthdate, country, state, and data which will be provided depending on the Service you use
  • We collect, process and use transaction data regarding your activities while using Services (e.g. bookings)
  • Billing and other data you provide for bookings
  • Data collected in the context of reviews, chats, and correspondence on Services or by email, fax, and post
  • Other personal data that we may ask you to provide for special purposes
  • If you voluntarily provide us with additional personal data during registration, this data will also be used for the implementation of the usage relationship.

Registration and Contact establishmentof the contract

  • If you provide us with personal data for the purpose of contacting us, this data will be used by us as this is necessary for the purpose of the respective communication.

Marketing

  • “Nagoya is not boring” may process and use your personal data for marketing purposes, e.g. to send emails with general information or of an advertising nature (newsletter), on the basis of the declaration of consent you have given us.
  • You can revoke the declarations of consent granted to us in this regard at any time with effect for the future. If you wish to opt-out of receiving these emails from us, please follow the instructions contained in an applicable email you receive from us, which will allow you to opt-out of receiving these types of email communications from us. In addition, you can object to this use, insofar as we use your personal data within the legally permissible framework for e.g. postal marketing measures. In both cases, an email to the following address is sufficient: info@nagoyaisnotboring.com

Information you provide to payment processors

  • The payment you made for Services will be processed through Stripe, a third-party payment processor. Stripe has access to your personal data only for the purpose of performing the payment on our behalf and is expressly obligated not to disclose or use your personal data for any other purpose. We do not store your credit card information in our database.

Aggregate information

  • We may share your information with affiliated or unaffiliated third parties on an anonymous, aggregate basis. While this information will not identify you personally, in some instances these third parties may be able to combine this aggregate information with other data they have about you, or that they receive from third parties, in a manner that allows them to identify you personally.

Data Processing to Enable the Use of Services

When you use our Services, we collect the necessary data to enable you to use it (usage data). This includes your IP address and data about the start, end, and subject of your use of the Services as well as any identification data (e.g. your login data when you log into a secure area). This data is used to provide and design the Services according to users’ preference. This data is always deleted as soon as it is no longer required and if there are no storage obligations. For information on the processing of pseudonymous usage profiles, see Pseudonymous Usage Profiles for Advertising and Market Research (Web Tracking and Analysis) section.

Data Processing for Mobile Devices

When you use our mobile Services, we may collect information about you and your mobile device as described above in this statement. If we collect other personal data that is transferred as a result of your use of our mobile applications or your access to our Services with a mobile device, we will obtain your express consent in advance.

Data Collected from Other Sources

We may obtain additional information about you from third parties to supplement our account information to the extent permitted by law. This includes demographic and navigation data.

Cookies

When you visit our Services, information may be stored on your computer in the form of a cookie. This section describes the cookies we use and explains why we use cookies and how we deal with the collected information. It also explains how cookies enable our Services to function properly and why you may not be able to experience the full functionality of the Services if you disable the use of cookies. By visiting our Services without changing your settings, you agree to receive all cookies and other data collection tools; however, if you do not accept the use of these cookies, you can change your cookie settings at any time. All the companies or networks that we work with have their own privacy policies and offer a mechanism for users to opt out tracking and behavioral targeting available through the ad itself or through the opt-out mechanisms listed in the “How to control or delete cookies” section.

What types of cookies do we use?

The types of cookies used by us and our partners in connection with our Services can be classified into one of four categories, namely “cookies necessary for our essential purposes,” “performance and analytics cookies,” “advertising and tracking cookies,” and “social media cookies.” We have set out some further information about each category, and the purposes of the cookies we and third parties set in the following table.

  1. Cookies Necessary for Our Essential Purpose
    These cookies are essential in providing you with our Services. These cookies also support features, such as access to secure areas. Without these cookies, services you have asked for, such as transactional pages and secure login accounts, would not be possible.
  2. Performance and Analytics Cookies
    We use performance/analytics cookies to analyze how our Services are accessed, used, or is performing to provide you with better user experience and to maintain, operate and continually improve Services. For example, these cookies allow us to:
    1. Better understand the visitors of our Services in order to improve and ensure present and relevant content;
    2. Test different design ideas for particular pages, such as our homepage;
    3. Collect information about our Service visitors, such as where they are located and what browsers they are using;
    4. Determine the number of unique users that visit our Services;
    5. Improve our Services by measuring any errors that occur;
    6. Conduct research and diagnostics to improve product offerings. We use Google Analytics and many other analytics tools to help us understand how users engage with Services. These web analytics services use first-party cookies to track user interactions, in our case, this means they are used to collect information about how visitors are using our Services. This information is used to compile reports and create functions to help us improve our Services. The reports disclose Service trends without identifying individual visitors. Some methods will allow you to opt out of tracking with their software directly. For instance, while you cannot opt out of the use of cookies with our Services, you can opt out of Google Analytics without affecting how you visit our site – for more information on opting by Google Analytics across all Services you use, visit this Google page.
  3. Advertising and Tracking Cookies
    We may allow third-party companies, including advertising companies (such as Google), to place cookies on our Services. These cookies enable such companies to track your activity across various sites where they display ads and record your activities, so they can show ads that they consider relevant to you as you browse the Internet. These cookies store information about the content you are browsing together with an identifier linked to your device or IP address.
    These cookies also allow us and third parties to know whether you’ve seen an ad or a type of ad, and how long it has been since you’ve last seen it. This information is used for frequency capping purposes, to help tailor the ads you see, and to measure the effectiveness of ads.
  4. Third Party Cookies: There are various pages on our Services where third parties provide applications of their own cookies to track the success of their services (applications) or customize applications for you. Due to how these cookies work, we cannot access the cookies, nor can the third parties access the data in cookies used by us. Some pages of our Services may also contain embedded content and these third-party sites may set their own cookies.

How long we retain your data

You have the right to accept or stop cookies from being stored on your device at any time by modifying the settings in your web browser to reflect your cookie preferences.

Please be aware that you may not be able to use all the interactive features of the Services once cookies are disabled.

Most browsers offer instructions on how to change your cookie settings. These settings will typically be found in the “options” or “preferences” menu of your browser.

If you only want to limit third-party advertising cookies, you can turn such cookies off by visiting the following links:

  • Your Online Choices (www.youronlinechoices.com/uk/)
  • Network Advertising Initiative (www.networkadvertising.org/)
  • Digital Advertising Alliance (www.aboutads.info/consumers)

Please bear in mind that there are many more companies listed on these sites than those that drop cookies via our Services.

Cookies that have been set in the past

If you have disabled one or more cookies, we may still use information collected from cookies prior to your disabled preference being set, however, we will stop using the disabled cookies to collect any further information.

Pseudonymous Usage Profiles for Advertising and Market Research (Web Tracking and Analysis)

“Nagoya is not boring” uses web tracking systems for advertising, market research and to make your use of our Services as pleasant as possible. This allows us to further develop our Services and tailor content to your needs. Nagoya is not boring and third-party businesses may use the information collected through the Services using cookies, web beacons, and other similar technologies to help manage online advertising programs. This information may enable us and our third-party advertising services and other third-party businesses to track the actions of users online over time and across different websites or platforms to measure statistics relating to marketing efforts and to deliver electronic advertisements that may be more relevant to individual consumers and that will improve the consumer experience. For information about how tracking works for online advertising purposes, and what happens when you elect a do-not-track option, visit http://www.aboutads.info/choices. In addition, some third-party businesses may provide a mechanism to opt-out of their technology. For more information about the opt-out process, you may visit the Network Advertising Initiative website, available at: http://www.networkadvertising.org/managing/opt_out.asp.

Legal Basis for Data Processing

If you reside within the European Economic Area (EEA), our processing of your personal information will be legitimized as follows:

  1. Whenever we require your consent for the processing of your personal information such processing will be justified pursuant to Article 6(1) lit. (a) of the General Data Protection Regulation (EU) 2016/679 (“GDPR”). This article in the GDPR describes when processing can be done lawfully.
  2. If the processing of your personal data is necessary for the performance of a contract between you and “Nagoya is not boring” or for taking any pre-contractual steps upon your request, such processing will be based on GDPR Article 6(1) lit. (b).”). If this data is not processed, “Nagoya is not boring” will not be able to execute the contract with you.
  3. Where the processing is necessary for us to comply with a legal obligation, we will process your information on the basis of GDPR Article 6(1) lit. (c), for example, complying in the fields of employment law.
  4. And where the processing is necessary for the purposes of Nagoya is not boring’s legitimate interests, such processing will be made in accordance with GDPR Article 6(1) lit. (f), for example, to detect fraud.

Transmission to Third Parties

Your personal data will only be transmitted to third parties if this is legally permitted or if you have given your prior consent. In particular, we will not sell your data to third parties or market it in any other way. We will only disclose your data to government authorities as part of legal obligations or as a result of an official order or court decision. We have bound our employees and partners to secrecy and to comply with data protection regulations.

Your personal data will only be transmitted to third parties if this is legally permitted or if you have given your prior consent. In particular, we will not sell your data to third parties or market it in any other way. We will only disclose your data to government authorities as part of legal obligations or as a result of an official order or court decision. We have bound our employees and partners to secrecy and to comply with data protection regulations.

How We Share Your Personal Data with Third Parties

Except as set forth in this Privacy Policy or when specifically agreed to by you, we will not disclose personal information we gather from you to third parties unless we are required to share this information to complete your request or for legitimate business purposes. “Nagoya is not boring” shares personal information in the following circumstances: We may share your information with vendors or third parties who deliver or provide goods and services or otherwise act on behalf of or at the direction of Nagoya is not boring. These third parties may include, for example, our third-party (technology) providers, Hosts, and partners. These third-party service providers will only have access to the information needed to perform these limited functions on our behalf.

Data Transmission to Countries Outside the EU

Since our Services are based in Japan, we will transmit your data outside the EU. We ensure that the data recipient guarantees an appropriate level of data protection and that no other interests worthy of protection conflict with the data transmission. Nagoya is not boring relies on derogations as set forth in Article 49 of the GDPR in the event no “adequacy” decision and no other safeguards under the GDPR are in place (for example binding corporate rules on the transfer outside the EEA). In particular, we collect and transfer to countries outside the EU personal data only: with your explicit consent; to perform a contract with you; in a manner that does not outweigh your rights and freedoms. If this data is not processed and transferred, “Nagoya is not boring” will not be able to execute the contract with you or you will not have access to any or all of the benefits and features associated with your transaction. We endeavor to apply suitable safeguards to protect the privacy and security of your personal data and to use it only consistent with your relationship with Nagoya is not boring and the practices described in this Privacy Policy. In the event that you have any questions to this end, please contact us at info@nagoyaisnotboring.com.

Deletion of Data

We retain data for the duration of your business relationship with us and otherwise as required under applicable law. Personal data will be kept for no longer than is necessary for the purposes for which your personal data are processed. We will retain your personal data as long as you have a member account or require our Services.

If you are in the European Economic Area, at the moment you withdraw your consent for the processing of your personal data, all your personal data received and stored are erased if no longer needed by us. Unless we are required to retain this personal data by law or to comply with our regulatory obligations. In such a case, we will only keep this personal data for as long as necessary. For more information please contact our data privacy resource at info@nagoyaisnotboring.com

Data Security

“Nagoya is not boring” has taken the necessary technical and organizational measures to protect the personal data provided by you against loss, destruction, manipulation and unauthorized access. Our employees and all persons involved in data processing are obliged to comply with the data protection laws and to treat personal data confidentiality. Our employees have been trained accordingly. Both internal and external audits ensure compliance with all data protection processes at Nagoya is not boring.

We use a secure online transmission procedure, the so-called “Secure Socket Layer” (SSL) transmission, to protect the personal data of our users. You can see this from the fact that an “s” (https://) is added to the address component http://, or a green, closed lock icon is displayed. By clicking on the icon, you will receive information about the SSL certificate used. The display of the icon depends on the browser version used by you. The SSL encryption guarantees that your data is transmitted in an encrypted and complete way.

European Union Data Subjects Right

The European Union’s General Data Protection Regulation and other countries’ privacy laws provide certain rights for data subjects. If you wish to confirm that “Nagoya is not boring” is processing your personal data, or to have access to the personal data “Nagoya is not boring” may have about you, or have other questions, please contact us at info@nagoyaisnotboring.com

You may also request information about: the purpose of the processing; the categories of personal data concerned; who else outside “Nagoya is not boring” might have received the data from us; what the source of the information was (if you did not provide it directly to “Nagoya is not boring”); where the personal data is stored and how long it will be stored. You have a right to correct (rectify) the record of your personal data maintained by us if it is inaccurate. You may request that we erase that data or cease processing it, subject to certain exceptions. You may also ask us for your personal data to be supplemented or updated, or for their transformation into anonymous format or to block any data held in violation of the law, as well as to oppose their treatment for any and all legitimate reasons. You may withdraw your consent for the processing of personal data or the further processing of personal data by us at any time. You may also request that “Nagoya is not boring” ceases using your data for direct marketing purposes. In many countries (including EEA countries), you have a right to lodge a complaint with the appropriate data protection authority if you have concerns about how “Nagoya is not boring” processes your personal data. When technically feasible, we will—at your request—provide your personal data to you or transmit it directly to another controller. You have the right to receive your personal information in a structured and standard format.

In addition to the information contained in this Privacy Policy, you may be provided with additional and contextual information concerning particular services or the collection and processing of your personal data upon request.

No Automated Individual Decision

We do not use your personal data for automated individual decisions.

How Can You Contact Us?

You will find our contact details as the responsible body in the imprint.

If you have any questions about our Privacy Policy, you can contact us at the following email address:

info@nagoyaisnotboring.com

Changes to the Privacy Policy

From time to time, we may need to update or modify this Privacy Policy, to reflect changes in our business practices, data collection practices or organization. We reserve the right to amend this Privacy Policy at any time, for any reason, without notice to you, other than the posting of the amended Privacy Policy on our Services, or, if you have provided your email address to us, sending you an email notifying you of the amended Privacy Policy. It is strongly recommended to check the Services often, referring to the date of the last modification listed at the top. We will in any case not reduce your rights under this Privacy Policy without your explicit and informed consent. If you do not agree to the changes, you should discontinue your use of Services, and cease providing personal information to us, prior to the time the modified Privacy Policy takes effect. If you continue using Services or provide personal information after the modified Privacy Policy takes effect, you will be bound by the modified Privacy Policy.

Last Updated: April 15, 2020