個人情報保護ポリシー【公式】東京スカイツリー TOKYO SKYTREE

当社は、お客様等の個人情報、仮名加工情報および匿名加工情報（以下個人情報、仮名加工情報および匿名加工情報をあわせて「個人情報等」といいます。）ならびに個人番号および特定個人情報（以下個人番号と特定個人情報をあわせて「特定個人情報等」といいます。）が重要な資産であると認識し、これを保護することは社会的責務と考え、お客様等の個人情報等および特定個人情報等の適正な取扱いについて、次のとおり個人情報等および特定個人情報等保護基本方針を定めます。

個人情報等および
特定個人情報等保護基本方針の目的

当社は、お客様等からの継続的な信頼を得るため、お客様等の個人情報等および特定個人情報等を的確に保護いたします。

個人情報等および
特定個人情報等保護基本方針

個人情報等および特定個人情報等の取得について
当社は、個人情報等および特定個人情報等を適法かつ公正な手段で取得します。
個人情報等および特定個人情報等の利用について
当社は、個人情報等の利用目的を明確にし、その目的の範囲内でのみ利用します。また、特定個人情報等については、法令に定める範囲内でのみ使用します。
個人情報等および特定個人情報等の第三者提供について
当社は、法令に定める場合を除き、個人情報等をあらかじめお客様等の同意を得ることなく第三者に提供することはしません。また、特定個人情報等については、法令等に定める場合を除き、第三者に提供しません。
個人情報等の処理業務の委託について
当社は、お客様へのお知らせの発送業務やキャンペーンの実施、顧客動向分析等の事務を第三者に委託することがあります。この場合、当社は個人情報保護法に従って、委託先に対する必要かつ適切な監督を行います。
仮名加工情報の利用について
当社は、新商品・新サービスの検討、開発等のため、他の情報と照合しない限りお客様を識別することができないように加工した仮名加工情報を利用する場合には、関係法令・ガイドライン等を遵守し、適正に取扱います。
関係法令・ガイドライン等の遵守について
当社は、個人情報および特定個人情報等の取扱いに関し、「個人情報の保護に関する法律」、「行政手続における特定の個人を識別するための番号の利用等に関する法律」、「個人情報の保護に関する法律についてのガイドライン（通則編）」および「特定個人情報の適正な取扱いに関するガイドライン（事業者編）」その他関連法令・ガイドライン等を遵守いたします。
安全管理措置に関する事項について
当社は、個人情報等および特定個人情報等の漏えい、滅失またはき損の防止その他の個人情報等および特定個人情報等の適切な管理のために、社内規程等を制定し、必要かつ適切な安全管理措置を実施いたします。
継続的改善について
当社は、個人情報等および特定個人情報等の取扱いを継続的に改善するよう努めます。

欧州経済領域内（以下「ＥＥＡ」といいます。）に所在のお客様等の個人データの取扱いについて

目的
当社の個人データ取扱いの目的は、下記の「個人情報保護法に基づく公表事項」第２項に記載のとおりです。
個人データ取扱いの法的根拠
当社は、以下の場合において、個人データを取り扱います。
1. お客様等の同意を得た場合
2. お客様等との契約の履行のため、または契約を締結する前にお客様等の要求に応じて手続きを実施するために取扱いが必要な場合
3. 当社を対象とする法的義務を遵守するために取扱いが必要な場合
4. 当社または第三者によって追求された正当な利益のために取扱いが必要な場合
同意の撤回
お客様等は、いつでも前号の同意を撤回することができます。
ＥＥＡ域外へのデータ移転
当社は、個人データをＥＥＡ域外の第三国へ移転することがあり、この場合、必要となる適切な保護措置を講じます。
個人データの保存期間
当社は、第１号の目的を達成するために必要な期間内で個人データを保持し、必要でなくなった場合は速やかに消去します。
監督機関への異議申立て
お客様等は、当社が行う個人データの取扱いについて、異議を申し立てることができます。
個人データを提供いただけない場合
個人データを提供いただけない場合、お客様等は、当社のサービスの全部または一部を利用できないことがあります。
Ｃｏｏｋｉｅ（クッキー）の利用
当社は、クッキーを用いて取得した情報を第１号の目的に加えて、情報提供、セキュリティの確保、保守管理および統計分析等に利用することがあります。

個人情報等および特定個人情報等の
取扱いに関する窓口

当社の個人情報等および特定個人情報等の取扱いに関するご意見やご質問等につきましては、以下の窓口にお問合わせください。

所在地: 東武タワースカイツリー株式会社
〒131-8634 東京都墨田区押上1-1-2
TEL: 0570-55-0634
受付時間: 11:00 ~ 19:00

更新日 : 2023年6月
東京都墨田区押上1-1-2 東京スカイツリーイーストタワー19F
東武タワースカイツリー株式会社
代表取締役社長 : 新家章男

Privacy Policy

We at Tobu Tower Skytree Co., Ltd (“we”, “us”, “our” or “Tobu Tower Skytree”) value your privacy and are committed to taking care of your Personal Data, which is a responsibility that we take very seriously.

This Privacy Policy explains how we may use the Personal Data we collect when you visit our website https://www.tokyo-skytree.jp/ (“Website”) or inquire about our products and/or services, such as booking a ticket with us. It also explains how we comply with EU legislation related to data protection (EU General Data Protection Regulation “GDPR”), the California Consumer Privacy Act (“CCPA/”CPRA”) and what your rights are under these legal frameworks.

Tobu Tower Skytree is the data controller of the services offered through this website. Our registered office is at 1-1-2 Oshiage, Sumida-ku, Tokyo, Japan.

1. Definitions

Unless otherwise indicated, capitalized terms used in this Privacy Policy are defined in Annex 1. Most of the definitions are derived from the EU General Data Protection which you can access from here.

2. What type of Personal Data do we collect from you?

Personal Data means any information relating to you which allows us to identify you, either directly from that data or because we combine that information with other data about you.

When you use our Website, including booking services with us or interact with us in relation to our services and/products, you may provide us with your Personal Data, or we may obtain Personal Data about you.

We may process the following Personal Data:

Contact details and personal identifiers: such as your name, email address, telephone number, address, date of birth, country of residence, gender;
Transaction and Payment data: information relating to your bank account, credit card details, payment and receipt details;
Records of your interactions with us: information such as, content of inquiry, other information provided during inquiries;
Service and booking data: booking details;
Internet information: including your use of and movements through our Website, IP address, browser information and history, country of access, browser type and plug-ins, cookies, device type and ID and other IT system identifying information.

3. Where do we collect your Personal Data from?

We will collect Personal Data from several sources. These include the following:

Directly from you: when you use our Website, book our services, contact us or communicate with us directly.
Our website: provides us with information about how you use it and the devices that you use to connect to our Website. Like many other Websites, we use so-called “cookies”. Cookies are small text files that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our Website. If you have given your consent to our use of cookies, we do so to improve the use of our Website, analyze our Website or to display advertising on our Website. You can revoke your consent to our use of cookies any time. Please refer to our Cookie Consent Banner for more information on the cookies we use.

4. Why do we collect your Personal Data and on what legal basis?

The table below describes the main purposes for which we process your Personal Data, the categories of your information involved and our lawful basis for being able to do this.

Table of purposes and legal basis on collecting personal data
Purpose	Personal Data used	Lawful basis
So that we can provide our website to you	IP address	We have a legitimate interest in our website working properly
Ensuring IT support and network security	Website activity, IP address, browser information and history, country of access, browser type and plug-ins, cookies, and other IT system identifying information	We have a legitimate interest in ensuring our systems are secure
To manage your bookings and provide our services to you	Name, phone number, email address, date of birth, gender, address, resident country credit card/bank account information, payment data, booking details	This is necessary to fulfil our contract with you
To invoice you and receive payments from you	Name, resident country credit card/bank account information, payment data, booking details	This is necessary to fulfil our contract with you
To deal with inquiries, and other communications from you	Name, resident country, telephone number, email address, content of inquiry	This is necessary to fulfil our contract with you
To analyse our website usage in order to improve and enhance our services	Website activity, IP address, browser information and history, country of access, browser type and plug-ins, cookies, device type and ID, and other IT system identifying information	We only process your personal data for analysing purposes if you gave us your consent
To optimize our ad delivery on our website	Website activity, IP address, browser information and history, country of access, browser type and plug-ins, cookies, device type and ID, and other IT system identifying information	We only process your personal data for advertisement purposes if you gave us your consent
Building trust and positive reputation	Name, country of residence, telephone number, email address, content of inquiries	We have a legitimate interest in building trust and a positive reputation.
Storage of records relating to you and also records relating to our business	All the personal information we collect about you	To be able to manage and fulfil our contract with you, we may have a legal and/or regulatory obligation to do so and we also have a legitimate interest to keep proper records.

*Please scroll horizontally to view the table.

Some of your Personal Data may be required due to legal, contractual, or other obligations. Failure to provide this data may impact our ability to fulfil our contract with you or comply with relevant legal obligations. For other Personal Data, whilst you may not be under an obligation to provide it to us, if you do not provide it, we may not be able to properly perform our services for you. Without your Personal Data, you may be unable to complete bookings on our Website.

5. Who we share your Personal Data with?

In order to operate our Website and provide you with the services you have purchased we may need to share your Personal Data with third parties. This includes sharing your Personal Data with companies engaged by us to manage our relationship with you and provide you the services described above.

We may share your personal data with the following recipients:

Sub-contractors: such as our service technology providers, ad platform provider, analytics service provider, customer service provider and other sub-contractors.

We do not disclose Personal Data to anyone else except as set out above unless we have your consent, or we are legally obliged to do so. These recipients will only process your Personal Data to perform tasks and duties on our behalf and in compliance with this Privacy Policy and governing data protection laws.

6. International data transfers

In the course of our operations, it may be necessary to transfer your Personal Data to recipients located outside the European Economic Area (EEA). These transfers may be to our, partners or service providers who are located in regions, such as Japan with differing data protection laws than those in your country. When transferring your Personal Data internationally we implement appropriate safeguards to ensure the security and confidentiality of your data. These safeguards, when we cannot rely on an issued Adequacy Decision, may include for example Standard Contractual Clauses (SCCs) approved by the European Commission.

7. How long do we keep Personal Data for?

Generally, we will retain your Personal Data for as long as we need it for the purposes for which it was collected. The duration for which we retain your Personal Data will differ depending on the type of information and the reason why we collected it from you. However, in some cases Personal Data may be retained on a long-term basis: for example, Personal Data that we need to retain for legal purposes will normally be retained in accordance with usual commercial practice and regulatory requirements.

In addition, we may be allowed to retain Personal Data whenever you have given consent to such processing, as long as such consent is not withdrawn.

8. Data security

In addition, we may be allowed to retain Personal Data whenever you have given consent to such processing, as long as such consent is not withdrawn.

9. Your rights in relation to your Personal Data

If you are located in the European Union, you have the following rights in relation to your Personal Data:

Right of Access - you have the right to be informed about how we are using your Personal Data and the right to access that data that we hold about you.
Right to Erasure or "Right to be Forgotten" – you have the right to ask us to delete your Personal Data provided that there are no valid grounds for us to keep it, for example we may have to keep some or all of the Personal Data to comply with legal obligation or in respect of any legal claims.
Right to Data Portability – you have the right to receive the Personal Data you have provided to us in a digital format or in certain circumstances and where technically feasible the right to ask us to transmit the data to another organization.
Right of Rectification – you have the right to ask us to amend the Personal Data that we hold about you where believe it is inaccurate or incomplete.
Right to Object - in certain circumstances, you have the right to object to the processing of your Personal Data and to ask us to block, erase and restrict our use of your personal data.
Automated Decision Making – we may process your Personal Data by solely automated means (without human intervention), including for profiling. Where such processing may have a legal or similarly significant effect on you, you have the right not to remain subject to any decisions based on such automatic processing, except as otherwise provided by law. You have the right to understand when and how automated decisions are made about you, and the factors involved and you have the right to challenge these decisions, request human intervention, express your point of view, and seek a review of the decision.
Right to Withdraw Consent or Right of Opposition – if you have provided your consent to the collection, processing and transfer of your personal data, you have the right to fully or partly withdraw your consent. Once we have received notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented unless there is another legal ground for the processing.
Right of Limitation - you have the right to request the limitation of the Processing of your Personal Data, in the form of: (i) suspension of Processing or (ii) limitation of the scope of Processing to certain categories of Personal Data or purposes of Processing.
Right to complain – you have the right to complain to the supervisory authority, in addition to us.

The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged regarding its costs. The period for handling a request is 30 days unless it is a particularly complex request.

Once our specified retention period has expired, we shall delete the relevant Personal Data. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of such retention period.

10. Processing data in relation to children

Tobu Tower Skytree does not knowingly collect Personal Data from persons who are not legally permitted to use our services without obtaining parental consent. If it comes to our attention that we have collected or processed Personal Data from such a person, we may delete this information without notice. If you have reason to believe that this has occurred, please contact us using the following methods:
[Contact form]

11. Changes to our data protection provisions

We may need to make changes to this Privacy Policy to ensure that it complies with current legal requirements or to implement changes to the services detailed in the Privacy Policy, e.g., when introducing new services. In this case, your future visits to our Website will be subject to the updated Privacy Policy.

12. California Residents

At Tobu Tower Skytree, we are committed to protecting your privacy and ensuring transparency in how we handle your personal information. This section outlines your rights under the California Consumer Privacy Act (“CCPA/”CPRA”), the types of personal information we collect, how we use it, and your options for managing your personal information.

What personal information we collect and disclose

This section provides details about the categories of personal information we have collected from consumers over the past 12 months. It also outlines the sources of this information, the business or commercial purposes for its collection, and whether we have disclosed any categories of personal information to third parties during the same period.

Categories of what personal information we are collecting
Categories of personal information	Source from which we collected informationd	Purpose for collecting the information	Categories of third parties to whom the information was disclosed
Identifiers, such as name, address, email address, IP address	Directly from you	To manage your bookings and provide our services to you To invoice you and receive payments from you To deal with inquiries, and other communications from you To optimize our ad delivery on our website	Service technology providers
Personal information such as telephone number, payment data, booking details	Directly from you	To manage your bookings and provide our services to you To invoice you and receive payments from you To deal with inquiries, and other communications from you	Service technology providers
Characteristics of protected classifications, such as date of birth, and gender	Directly from you	To manage your bookings and provide our services to you To invoice you and receive payments from you To deal with inquiries, and other communications from you	Not applicable
Commercial information, such as the services booked with us	Directly from you	To manage your bookings and provide our services to you	Not applicable
Internet or other electronic network activity information, such as your IP address, browser type and information, device ID and type, cookie information, plug-ins, URL of the page viewed, referrer, browsing history, website activity, date and time of access, marketing preferences, email activity	Directly from you	To analyse our website usage in order to improve and enhance our services To optimize our ad delivery on our website	Service technology providers
Geolocation data, such as the country of your access	Directly from you	To optimize our ad delivery on our website To analyse our website usage in order to improve and enhance our services	Service technology providers
Sensitive information, such as credit card/bank account information	Directly from you	To manage your bookings and provide our services to you To invoice you and receive payments from you	Not applicable

*Please scroll horizontally to view the table.

Sale or sharing of personal information

We did not sell any personal information in the preceding 12 months. However, we have shared personal information with third parties for the purpose of cross-context behavioural advertising, as defined in section 1798.140 (ah)(1) of the CCPA/CPRA.

California residents have the right to direct us to stop sharing their personal information. For more information on how to exercise this right, including how to opt out of sharing, please refer to the section “Consumer Rights under the CCPA/CPRA - Right to opt-out of third-party sales and sharing”.
Tobu Tower Skytree does not sell any personal information.

No sale or sharing of minors' personal Information

We do not have actual knowledge that we sell or share personal information about minors under the age of 16.

Sensitive personal Information

We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.

Consumer rights under the CCPA/CPRA

If you are resident in California, you have the following rights in respect of your Personal Information:

Right to Know - you have the right to request that we disclose what personal information we collect, use, disclose, sell or share. Specifically, you may request that we disclose to you the following:
- The categories of personal information we have collected about you.
- The categories of sources from which the personal information is collected.
- The business or commercial purpose for collecting, selling or sharing personal information.
- The categories of third parties with whom we disclose personal information.
- The specific pieces of personal information we have collected about you.
You may also request that we inform you about:
- The categories of personal information that we have sold or shared about you and the categories of third parties to whom the personal information was sold or shared, by category or categories of personal information for each third party to whom the personal information was sold or shared.
- The categories of personal information that we disclosed about you for a business purpose and the categories of persons to whom it was disclosed for a business purpose.
Right to deletion - you have the right to request that we delete any personal information about you which we have collected from you. If it is necessary for us to maintain your personal information for certain purposes, we are not required to comply with your deletion request. If we determine that we will not delete your personal information when you request us to do so, we will inform you and tell you why we are not deleting it.
Right to Correct Inaccurate Personal Information - you have the right to request that we correct inaccurate personal information we maintain about you, taking into account the nature of the personal information and the purposes of the processing of the personal information.
Right to opt-out of third-party sales and sharing – we do not sell your personal information; you have the right to opt-out of third-party sharing of your Personal Information for cross-context behavioural advertising purposes and selling this data. This means that whenever you request us to stop selling and/or sharing your data, we will abide by your request. Such requests can be made freely, at any time, without submitting any verifiable request, by accessing the following link Cookie Settings
Right to Limit Use and Disclosure of Sensitive Personal Information (SPI) – you have the right to limit the use and disclosure of your SPI to that which is necessary for us to perform the services or provide the goods we provide.
Right to Opt-Out of ADM technology – you have the right to opt-out of being subject to automated decision-making processes, including profiling.
No Discrimination - you have the right not to be discriminated against because you exercised any of your rights under the CCPA/CPRA set out in this section above.

The exercise of your rights is free of charge. The response to requests based on the provisions of the CCPA/CPRA should be provided within a maximum of 45 days. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. However, for requests to opt out or limit the use of sensitive personal information (SPI), we will respond within 15 days.

How you can exercise your rights under CCPA/CPRA

To exercise any of the rights described above, please send us a verified request using the methods listed below. Your request must:

Include enough information for us to confirm your identity or the identity of your authorized representative.
Clearly explain your request so we can understand, evaluate, and respond to it.

If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use personal information provided in a verifiable request to verify the requestor’s identity or authority to make the request.

Financial Incentive Notice

Tobu Tower Skytree does not offer a financial incentive for the collection, sale, or deletion of personal information. Tobu Tower Skytree primarily collects personal data from customers in order to fulfil ticket purchases

13. Contact Information

If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, or your choices and rights regarding such use please do not hesitate to contact us using the following methods:
[Contact form]

This Policy was last updated: October 1st, 2025

Glossary of privacy policy
ADM	means Automated decision-making;
CCPA	means the California Consumer Privacy Act (CCPA) signed into law on June 28, 2018, to amend Part 4 of Division 3 of the California Civil Code. http://leginfo.legislature.ca.gov/faces/billNavClient.xhtml?bill_id=201720180AB375
Consent of the Data Subject	means any freely given, specific, informed and unambiguous indication of the Data Subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the Processing of Personal Data relating to him or her;
Contract Performance	means concluding, maintaining, and completing of a contract concluded between the Controller and a Data Subject, including Processing activities which take place at the request of the Data Subject before entering into a contractual relation;
Controller	means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the Processing of Personal Data; where the purposes and means of such Processing are determined by Union or Member State law, the Controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Data Subject	is any natural person whose Personal Data is being collected, held or processed. Examples of a Data Subject can be an individual, a customer, a prospect, an employee, a contact person, etc;
Direct Marketing	means personal data processed to communicate a marketing or advertising message. This definition includes messages from commercial organisations, as well as from charities and political organisations;
General Data Protection Regulation (GDPR)	is a regulation in EU law on data protection and privacy in the European Union (EU) and the European Economic Area (EEA); Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) https://eur-lex.europa.eu/eli/reg/2016/679/oj ;
Legitimate Interest	means the Controller’s interest to process Personal Data in order to carry out tasks related to the Controller ‘s business activities. The processing of Personal Data in that context may not necessarily be justified by a legal obligation or carried out to execute the terms of a contract with a Data Subject;
Personal Data	means any information relating to an identified or identifiable natural person ('Data Subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. This includes but is not limited to the term ‘Personal Information’ according to Section 1798.140. (v) (1-3) of the CPRA.;
Personal Information	means information of the types set out in Section 1798.140. (v) (1-3) of the CPRA where it identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
Processing	means any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Processor	means a natural or legal person, public authority, agency or other body which processes Personal Data on behalf of the Controller;
Recipient	means a natural or legal person, public authority, agency or another body, to which the Personal Data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as Recipients; the Processing of those Personal Data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the Processing;
Sell, Selling, Sale or Sold	means selling, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for monetary or other valuable consideration, according to Section 1798.140. (ad) (1-2) of the CPRA.
Share, Shared or Sharing	means sharing, renting, releasing, disclosing, disseminating, making available, transferring, or otherwise communicating orally, in writing, or by electronic or other means, a consumer’s personal information by the business to a third party for cross-context behavioral advertising, whether or not for monetary or other valuable consideration, including transactions between a business and a third party for cross-context behavioral advertising for the benefit of a business in which no money is exchanged.
Sensitive Personal Information	means personal information that reveals: the social security, driver’s license, state identification card, or passport number. An account log-in, financial account, debit card, or credit card number, or credentials allowing access to an account, the precise geolocation, racial or ethnic origin, religious or philosophical beliefs, or union membership, content of a consumer’s mail, email and text messages unless the business is the intended recipient of the communication, and genetic data, the processing of biometric data for the purpose of uniquely identifying a consumer, personal information collected and analyzed about a consumer’s health, sex life or sexual orientation according to Section 1798.140. (ae) (1-3) of the CPRA.

*Please scroll horizontally to view the table.

Cookie Policy

This Cookie Policy set by the TOBU TOWER SKYTREE Co., Ltd.("we", "us", or "our"), provides information to individuals located in the European Economic Area (EEA) and the United Kingdom what cookies are, the types of cookies used, the data that we or third parties may collect using cookies when you access our website, the purposes for which such data is collected, and how you can control cookie settings. Please refer to our https://www.tokyo-skytree.jp/privacy/ for further information on how we obtain, store, and process your personal data, including cookies.

1. What is Cookie

“Cookie” refers to a small text file that is stored in a browser storage of your device (such as a computer or smartphone) when you visit a website. They are generally used for purposes including provision of website’s functions, analyzing access status and other related information, improving the user experience, and delivering advertisements.

2. Types of Cookie

(1) Categorization Based on Purposes

Cookies are used for various purposes. The following are the categorizations of Cookie based on the purposes for which they are used.

* Please note that cookies may fall into more than one of the following classifications. For example, some cookies are used to record your choices to improve your experience and also be used to deliver online advertisements.

Required Cookies: The cookie that is the essential element to provide requested service of a website. For example, they are used to retain information entered into shopping carts and forms, and for security purposes such as fraud detection. If a cookie is categorized under this category and it is considered as personal data, our legal basis for this process of the personal data is based on our “legitimate interests”(GDPR Article 6(1)(f)) to operate our website.
Analytical Cookies: The cookie that is used to analyze how you use our website (access status, browsing history, service usage history, traffic, etc.). For example, this cookie tracks the number of visitors to each page and figure out visitors' behavior on the website. If a cookie is categorized under this category and considered as personal data, the legal basis for this process of the personal data is based on your “consent” (GDPR Article 6(1) (a)) for such processing.
Marketing Cookies: This type of cookie is used for advertising delivery and marketing. For example, they are used to deliver advertisements based on your activity on the website and to measure the effectiveness of those advertisements. If a cookie is categorized under this category and considered as personal data, the legal basis for this process of personal data is based on your “consent” (GDPR Article 6(1) (a)) for such processing.

(2) Categorization Based on the Issuer

Cookies are categorized as 1st party cookie and 3rd party cookie based on the issuer of the cookie.

1st Party Cookie: The cookie issued by the domain of the website that you are accessing.
3rd Party Cookie: The cookie issued by the domain other than the domain of the website that you are accessing (such as an ad-serving company).

(3) Categorization Based on Retention Period

Cookies are generally categorized into two categories depending on how they will be stored on your device. Please refer to section 3 for the specific retention period of each cookie we use (although, depending on the type of browser you use, they may be erased in a shorter period of time than described in section 3.).

Session Cookie: The cookie is stored only while you are browsing the website and is deleted when you close your browser.
Persistent Cookie: The cookie that will continuously be stored until the expiration date unless deleted by the user before the expiration date.

3. Cookies Used on Our Website

The details of the cookies used on our website are as follows.

(1) Required Cookies

Information on required cookie
Cookie Name	Tool Name	Tool Provider	Data Location	Basis for Transfer to a Third Country	1st or 3rd	3rd Party domain	Retention
_trust360_***	trust360	Priv Tech, Inc.	Japan	Japan adequacy decision	1st	-	365 days

*Please scroll horizontally to view the table.

(2) Analytical Cookies

Information on Analytical cookie
Cookie Name	Tool Name	Tool Provider	Data Location	Basis for Transfer to a Third Country	1st or 3rd	3rd Party domain	Retention
_trust360_***	trust360	Priv Tech, Inc.	Japan	Japan adequacy decision	1st	－	365 days
_ga	Google Analytics	Google LLC	US	adequacy decision	1st	－	400 days
_ga_***	Google Analytics	Google LLC	US	adequacy decision	1st	－	400 days
_gat	Google Analytics	Google LLC	US	adequacy decision	1st	－	1 days
_gcl_au	Google Analytics	Google LLC	US	adequacy decision	1st	－	90 days
_gid	Google Analytics	Google LLC	US	adequacy decision	1st	－	1 days
MR	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.c.bing.com	7 days
SRM_B	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.c.bing.com	390 days
ANONCHK	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.clarity.ms	1 days
MR	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.clarity.ms	7 days
SM	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.clarity.ms	SESSION
MUID	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	.clarity.ms	390 days
_clck	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	1st	－	365 days
_clck	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	1rd	－	1 days
CLID	Microsoft Clarity	Microsoft Corporation	US	adequacy decision	3rd	www.clarity.ms	365 days

*Please scroll horizontally to view the table.

(3) Marketing Cookies

Information on Analytical cookie
Cookie Name	Tool Name	Tool Provider	Data Location	Basis for Transfer to a Third Country	1st or 3rd	3rd Party domain	Retention
_fbp	Facebook/ Instagram	Meta Platforms, Inc.	US	adequacy decision	1st	－	90 days
IDE	Google Ads	Google LLC	US	adequacy decision	3rd	.doubleclick.net	400 days
NID	Google Ads	Google LLC	US	adequacy decision	3rd	.google.com	183 days
MUID	Microsoft Advertising	Microsoft Corporation	US	adequacy decision	3rd	.bing.com	390 days
g	Microsoft Advertising	Microsoft Corporation	Japan	adequacy decision	3rd	.smartnews-ads.com	400 days
snexid	Microsoft Advertising	Microsoft Corporation	Japan	adequacy decision	1st	–	400 days
__cf_bm	X	X Corp.	US	adequacy decision	3rd	.t.co	1 days
muc_ads	X	X Corp.	US	adequacy decision	3rd	.t.co	400 days
__cf_bm	X	X Corp.	US	adequacy decision	3rd	.twitter.com	1 days
guest_id	X	X Corp.	US	adequacy decision	3rd	.twitter.com	400 days
guest_id_ads	X	X Corp.	US	adequacy decision	3rd	.twitter.com	400 days
guest_id_marketing	X	X Corp.	US	adequacy decision	3rd	.twitter.com	400 days
personalization_id	X	X Corp.	US	adequacy decision	3rd	.twitter.com	400 days
_yjsu_yjad	Yahoo! JAPAN Ads	LY Corporation	Japan	adequacy decision	1st	–	365 days
XA	Yahoo! JAPAN Ads	LY Corporation	Japan	adequacy decision	3rd	.yahoo.co.jp	365 days
XB	Yahoo! JAPAN Ads	LY Corporation	Japan	adequacy decision	3rd	.yahoo.co.jp	400 days
VISITOR_INFO1_LIVE	YouTube	Google LLC	US	adequacy decision	3rd	.youtube.com	180 days
YSC	YouTube	Google LLC	US	adequacy decision	3rd	.youtube.com	SESSION
__Secure-ROLLOUT_TOKEN	YouTube	Google LLC	US	adequacy decision	3rd	.youtube.com	180 days

*Please scroll horizontally to view the table.

4. How to Refuse Cookies

Almost every browser enables the use of certain cookies by default, but you can limit or disable the use of cookies by changing your browser settings. You may also choose the type of cookies you wish to use from the cookie banner that appears on our website.

However, please be advised that if you restrict or disable cookies, you may not be able to use certain website features or some pages may not display properly, as described above.

Cookies will remain on your device until their retention period expires, but you can delete them at any time on your own.

The procedure for changing cookies and other usage settings differs depending on the browser you use. Please refer to the links below for instructions on how to change the settings in commonly used browsers.

*If you use a different device browser to access the website, you will need to adjust each browser on each device individually to conform to your preferences.