PRIVACY POLICY

Komasa Kanosuke Jyozo Co., Ltd.  (hereinafter referred to as “Kanosuke”) is committed to protecting the personal data of you. Kanosuke processs personal data in compliance with the General Data Protection Regulation (GDPR), the United Kingdom General Deta Protection Regulation (UK GDPR), other applicable data protection laws, and this Privacy Policy (hereinafter referred to as “the Policy”). The provisions of the GDPR referenced in the Policy shall also encompass the corresponding provisions of the UK GDPR.

What Data We Collect

We collect and process following personal data in the context of our services.

  1. Identity Data and Account Data
    Name, postal code, address, phone number, email address, account password, delivery address, and age verification (confirmation of being drinking age).
  2. Transaction Data
    History of transactions with Kanosuke, including purchases of Kanosuke’s products and tours of Kanosuke distillery.
  3. Payment Data
    Payment methods and financial account details.
  4. Technical Data
    Online identifiers such as Cookie IDs, device information, browsing history, and usage data of the Websites (including access logs, IP addresses, and browser details).
  5. Communication Data
    Record of correspondence or inquiries via our contact form or other communication channels.

How We Collect Data

We collect your personal data in the following ways:

  1. Directly from You:
    When you create an account, make a purchase, resister for an event, or contact us through contact form or email.
  2. Automatically:
    Through Cookies, log files, and tracking technologies when you interact with the Websites.
  3. From Third Parties:
    We may receive personal date from our shopping sales platform provider, such as order details (e.g., names, contact information, shipping addresses, purchased products, and payment status) that you have provided during the purchasing process).
    We may also receive personal data from our tour reservation platform provider, such as reservation details (e.g., names, contact information, tour dates, and preferences) that you have provided during the booking process.

Certain personal data including Identity Data, Account Data, and Payment Data as defined above, is required for us to provide our services. If you choose not to provide the necessary information, we may be unable to offer you the requested services.

How We Use Your Personal Data

We use your personal data for the following purposes, in compliance with the General Data Protection Regulation (GDPR) and the United Kingdom General Deta Protection Regulation (UK GDPR), along with the applicable legal basis for each purpose:

  1. User Registration and Management
    Purpose: To verify your identity and manage your account when registering or using the Websites.
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).
  2. Product and Service Delivery
    Purpose: To deliver products and services you have purchased or requested.
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).
  3. Billing and Payment Processing
    Purpose: To charge fees for products and services provided.
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).
  4. Inquiry Responses and Communication
    Purpose: To respond to your inquiries and communicate with you as necessary.
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR) or performance of a contract (Article 6(1)(b) GDPR). Our legitimate interest is to respond to your inquiries and maintain necessary communication to provide efficient and effective service.
  5. Provision of Information About Products and Services
    Purpose: To provide information about our products and services.
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR). Our legitimate interest is to provide relevant information about our products and services to enhance the experience of you.
  6. Promotions, Events, and Newsletters
    Purpose: To notify you about new products, services, events, and campaigns, and to send newsletters.
    Legal Basis: legitimate interests (Article 6(1)(f) GDPR). Our legitimate interest is to inform you about our products, services, events, and campaigns to enhance your engagement with our offerings.
  7. Campaign Participation
    Purpose: To conduct lotteries and deliver prizes for various campaigns.
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR)
  8. Contractual and Legal Obligations
    Purpose: To exercise rights or fulfill obligations under contracts or applicable laws and regulations.
    Legal Basis: Compliance with a legal obligation (Article 6(1)(c) GDPR) or legitimate interests (Article 6(1)(f) GDPR). Our legitimate interest is to exercise our rights and fulfill obligations under contracts and comply with applicable laws and regulations.
  9. Marketing and Analytics
    Purpose: To analyze the usage of our products and services for marketing and improvement purposes.
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR, Recitals (47) GDPR). Our legitimate interest is to analyze the usage of our products and services to improve them and develop effective marketing strategies.
  10. Notices and Updates
    Purpose: To notify you of changes to terms, policies, or other important updates.
    Legal Basis: Legitimate interests (Article 6(1)(f) GDPR). Our legitimate interest is to keep you informed about changes to terms, policies, or other important updates to ensure transparency and compliance.

Your Rights

You have the following rights regarding your personal data:Directly from You:

  1. Access: Request confirmation of data processing and access your personal data.
  2. Rectification: Correct inaccurate or incomplete data.
  3. Erasure: Request deletion of your data under certain conditions.
  4. Restriction: Limit data processing in specific situations.
  5. Data Portability: Receive your data in a portable format or transfer it to another controller.
  6. Objection: Object to processing for marketing or based on legitimate interests.
  7. Withdraw Consent: Revoke consent at any time without affecting prior lawful processing.
  8. Complaint: File a complaint with a supervisory authority if your rights are violated.

To exercise your rights, please contact us using any of the methods listed under “Contact Information” below.

Data Sharing and Third Parties

We may share your personal data with following recipients:

  1. Shipping Providers
    To ensure the delivery of purchased products, we may share your name, address, and contact details with shipping providers.
    Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).
  2. Product Sales Platform Providers
    To process transactions and manage orders, we share data such as account data, order details and payment information with third-party sales platform provider.
  3. Tour Reservation Platform Providers
    To manage and confirm your reservations, we share your name, contact information with third-party tour reservation platform provider.
  4. Email Marketing Providers
    To manage customer communications and marketing campaigns related to our shopping platform, we share data such as account data and order details with a third-party email marketing provider.
  5. Website Development and Maintenance Providers
    The company responsible for our website renewal will have access to certain data as necessary for site development and maintenance.
  6. International Data Transfers
    United States: Data shared with product sales platform provider may be transferred to and processed in the United States. The legal basis of international date transfer to United States is Standard Contractual Clauses (SCCs) or other appropriate safeguards (Article 46 GDPR).
    Japan: Data shared with tour reservation platform provider may be transferred to and processed in Japan. The legal basis of international date transfer to Japan is adequacy decision issued by the European Commission (Article 45 GDPR).

Data Security

We are committed to protecting your personal data and have implemented appropriate technical and organizational measures to safeguard it against unauthorized access, disclosure, alteration, and destruction.

  1. Preventing Unauthorized Access
    We take necessary measures to prevent unauthorized access (including access by external or internal actors without proper authority) to the computer networks we own and operate. We continuously evaluate and improve these measures to ensure their effectiveness.
  2. Comprehensive Deta Protection
    Regardless of whether personal data is managed electronically or otherwise, we take appropriate measures to prevent the loss, alteration, or leakage of personal information. These include:
    • Regular inspections of facilities and systems handling personal data.
    • Ongoing training and supervision of employees to ensure compliance with data security protocols.
  3. Encryption and SSL Technology: The Websites use SSL (Secure Sockets Layer) technology to secure the transmission of personal data. SSL encrypts information to prevent interception, tampering, or alteration during transmission, ensuring safer data exchange between your device and our servers.
  4. Data Retention: Personal data will be stored for no longer than necessary and will be securely deleted or anonymized once it is no longer needed for the purposes for which it was collected.
  5. Data Retention: Personal data will be stored for no longer than necessary and will be securely deleted or anonymized once it is no longer needed for the purposes for which it was collected.

Date Retention

We retain your personal data for a period of three months after your account is deleted, unless a longer or shorter retention period is required by applicable laws or regulations. After the applicable retention period, your personal data will be securely deleted or anonymized to prevent unauthorized access or use.

Cookies and Similar Technologies

  1. Cookies
    We use cookies to enhance your experience on our website. Cookies collect non-identifiable information such as browsing history and service usage. You can manage your cookie preferences through browser settings, but disabling cookies may affect website functionality. The use of cookies is based on your consent, which you can adjust anytime via cookie banner.
    Types of Cookies we use are:
    (a) Essential Cookies: Necessary for website functionality, such as navigating pages and accessing secure areas. For example, user input cookies retain data across forms during a session.
    (b) Functional Cookies: To remember user preferences (e.g., language, location) to personalize the experience.
    (c) Performance Cookies: To analyze site usage and improve performance, including third-party analytics cookies (e.g., Google Analytics) .
    (d) Advertising Cookies: To deliver relevant advertisements to you.
    (e) Social Media Cookies: Enable features like “Like” or “Share” buttons and enhance content services (e.g., video playback). Some may be used for analytics or targeted advertising.

  2. Google Analytics
    We use Google Analytics to analyze website usage and improve services. Data collected is anonymized and used only for understanding and enhancing website functionality. For more details, visit: How Google uses information from sites or apps that use our services.

Social Media Integration Buttons

The Websites feature buttons that allow integration with social media platforms (SNS), such as “Like” or “Share” buttons. When you visit a page with these buttons, your access data may be automatically transmitted to the social media platform, even if you do not actively interact with the buttons. This transmission occurs without your explicit action and may include information about your visit.
Please be aware that the social media platform’s privacy policy and terms of use apply, and it is important for you to review them to understand how your data is handled. We encourage you to make informed decisions when using these services and interacting with the social media buttons.

Disclaimer

We take the utmost care in protecting the privacy and personal data of our you. By using the Websites, you agree to indemnify us from any damages, losses, or disruptions arising from the following circumstances:

  1. Site disruptions caused by server hacking
  2. Damages, losses, or disruptions caused by software or communication failures
  3. Site disruptions due to software bugs
  4. Damages arising from the use of information obtained from other websites linked to our sites

Contact Information

Kanosuke is responsible for your personal date as a date controller. If you have any question or would like to uphold your rights, please contact us at:

Contact Form: https://kanosuke.com/en/pages/contact
Mail: 845-3 Kaminokawa, Hiyoshi-cho, Hioki-shi, Kagoshima 899-2421 Japan
Email: info@kanosuke.com
Phone: (+81)-99-201-7700

Policy Updates

We reserve the right to update or modify the Policy from time to time. Any updates or modifications will be posted on our website or other designated locations specified by us. Such changes will become effective from the date of posting unless otherwise stated. We encourage you to review the Policy periodically to stay informed about how we are protecting your personal data.