User information and Security

Handling of User information

Basic Privacy Policy

Kintetsu Railway Co., Ltd. (hereinafter referred to as "the Company") recognizes the importance of personal information obtained from users in the course of using the Service (hereinafter referred to as “Personal Information”) and is committed to the following measures.

• The Company implements strict and appropriate measures to manage Personal Information and maintain its confidentiality.
• The Company keeps entered User information for one year from the day following the date of boarding the train indicated on a purchased Limited Express e-ticket for the purpose of responding to inquiries from User, credit card companies and other purposes.
• The Company shall handle Users' personal information obtained in the course of using this Service in accordance with the Company's "Privacy Policy". However, such information may be disclosed in the following cases:
  • (1) Where User consents to disclose the information;
  • (2) Where the Company is required to disclose User information under laws and ordinances;
  • (3) Where the Company, or a subsidiary or a related company of Kintetsu Group Holdings Co., Ltd., discloses statistical data that are collected to analyze trends of use of this Service (information that cannot identify individuals).
  • (4) When the information is jointly used by Kintetsu Group companies in accordance with paragraph 4.
• The Company shall jointly use user information in accordance with the following provisions.
  • (1) Items of Personal Information to be Jointly Used
    Email addresses converted into random character strings and information related to the purchased or used Limited Express tickets.
  • (2) Scope of Joint Users
    The Company and other Kintetsu Group companies (including their subsidiaries and affiliated companies).
  • (3) Purpose of Use
    For the improvement and research of services, the planning and development of new services, and for conducting surveys and analyses aimed at providing services tailored to user needs.
  • (4) Party Responsible for Managing Personal Information
    Kintetsu Railway Co., Ltd.
    For more details, please refer to our Privacy Policy.
• If the Company creates pseudonymized information or anonymized information based on the customer information it has obtained, it shall disclose such handling in its "Privacy Policy" as prescribed by the Company.
• The handling of Personal Information in connection with credit card payments shall be as follows.
  • (1) In the case of credit card payments, the personal information obtained by the Company from the User, such as name and e-mail address, will be provided to the credit card issuer used by the User for the purpose of detecting and preventing fraudulent use of credit cards.
  • (2) If the credit card issuer used by the User is in a foreign country, such information may be transferred to the country in which the issuer is located. However, since the Company cannot identify the specific card issuer or the country to which it belongs based on the information collected from the User, the Company is unable to provide the following information regarding personal information safeguards:
    a.Name of the foreign country to which the information is provided.
    b.Information on the personal data protection syfstem of said country.
    c.Measures taken by the card issuer to protect personal information.
    
• The Company shall comply with all applicable laws and regulations concerning the Personal Information it holds, and will duly review and improve the measures described above as necessary.

Security

Security protection using SSL encryption technology is provided.

Kintetsu Railway Co.,Ltd. (hereinafter referred to as "the Company") will uses SSL encrypted communication in user registration and various transactions between users and the Company. By doing this, the security of user's personal information and the contents of each transaction will be ensured.

Database Management

The database of users' personal information is installed in a facility that is under strict control. The Company has installed firewall and other security programs and equipment and use data encryption to prevent unauthorized access.
These programs and equipment as well as the personal information database are managed by Kintetsu Information System Co., Ltd.

Credit Card Information Management

Users' credit card information will be retained and managed by a settlement company (that complies with PCI DSS, the international payment card industry data security standard) designated by us.