Privacy Policy

Public Disclosure Based on the Act on the Protection of Personal Information

In response to the advancement of an information-intensive society and the growing use of personal information, we at our company recognize the importance of handling personal information carefully under the philosophy of respecting individual dignity, in accordance with the Act on the Protection of Personal Information (hereinafter referred to as “the Act”). We appropriately handle personal information and take necessary and appropriate safety management measures.

We are committed to building and continuously improving our management system to ensure the safe handling of personal information.

For our company’s address and the name of our representative, please refer to the following URL:
https://www.haneda-the-future.com/
 
1. Person in Charge

We appoint a person responsible for the protection of personal information and manage personal information appropriately and securely.
 
2. Acquisition of Personal Information

    1.    We acquire personal information only within the scope necessary for our business and through lawful and fair means.
    2.    When obtaining sensitive personal information, we will obtain the prior consent of the individual concerned, unless permitted by law.
 
3. Purpose of Use of Personal Information

We use the acquired personal information only within the scope necessary to achieve the following purposes and will not use it beyond that scope. If we change the purpose of use, it will be reasonably related to the original purpose, and we will notify or announce the new purpose.

    1.    For fulfilling obligations, exercising rights, and related actions regarding the management and operation of Tokyo International Airport (Haneda) passenger terminal facilities.

    2.    For safety and emergency response, we use video cameras installed in facilities, shops, and parking lots, as well as recordings of calls to our Disaster Prevention and Passenger Service Centers.

    3.    To provide or inform customers of our products and services.

    4.    To respond to customer inquiries and improve our business activities based on feedback.

    5.    For shipping products (including brochures) ordered by customers and related services.

    6.    To analyze browsing and purchase history to deliver advertisements tailored to preferences.

    7.    Regarding shareholder information:

      o    To exercise rights and fulfill obligations under laws.
      o    To offer shareholder benefits and conveniences.
      o    To improve relations between shareholders and the company.
      o    To manage shareholder data according to legal standards.
 
4. Provision of Personal Data to Third Parties

(a) We will not provide personal data to third parties without the customer’s consent, except in the following cases:

(i) when permitted by law;
(ii) when outsourcing data handling within the scope of the stated purpose of use (in which case we supervise the contractor to ensure proper security management); or
(iii) when sharing with group companies (see “5. Joint Use with Group Companies”).

(b) We may provide your Personal Data to third-party service providers for purposes such as marketing, including marketing activities conducted by SoGoo Co., Ltd. (such as advertising, promotions, and customer analysis) in connection with the sale of JMC’s products on the cross-border e-commerce platform “By Emotion International.”

 
5. Joint Use with Group Companies

We may jointly use customer personal information with our group companies to inform customers of products/services and for improvement and marketing purposes.
Items subject to joint use: name, address, phone/fax number, email, company/organization name, department, job title, workplace, gender, birthdate, transaction history, survey information, etc.

We are responsible for managing shared data, but our group companies will also manage it under strict standards.

Group Companies Include:
•    Japan Airport Terminal Co., Ltd.
•    Tokyo International Air Terminal Corporation
•    Tokyo Airport Restaurant Co., Ltd.
•    Japan Duty Free Fa-So-La Isetan Mitsukoshi Co., Ltd.
•    Cosmo Enterprise Co., Ltd.
•    Kokusai Kyosho Co., Ltd.
•    Nihon Airport Logitem Co., Ltd.
•    Big Wing Co., Ltd.
•    Nihon Airport Techno Co., Ltd.
•    Air BIC Inc.
•    Haneda Airport Enterprise Co., Ltd.
•    Haneda Airport Security Co., Ltd.
•    Haneda Passenger Service Co., Ltd.
•    Japan Airport Ground Handling Co., Ltd.
•    Sakura Trading Co., Ltd.
•    Hamashin Co., Ltd.
•    Kaikan Kaihatsu Co., Ltd.
•    HAZUO (Chengdu) Trading Co., Ltd.
•    LANI KE AKUA PACIFIC, INC.
 
6. Requests for Disclosure, Correction, etc. of Personal Data

Upon request by the customer, we will promptly respond, within a reasonable scope, to requests for disclosure, correction, addition, deletion, suspension of use, or provision to third parties, after confirming the requester’s identity.
 
7. Management of Personal Information

    1.    We keep personal information accurate and up-to-date within the scope necessary and make efforts to delete it promptly when no longer needed.

    2.    We implement necessary and appropriate measures to prevent leakage, loss, or damage of personal information.

    3.    We appropriately supervise employees handling personal information.

    4.    We establish internal rules and adopt organizational, physical, technical, and personnel measures for safety management of personal information.

Examples:
•    Appointment of a person in charge and definition of roles and responsibilities.
•    Reporting systems for incidents or violations.
•    Regular training for employees.
•    Access control, ID/password management, anti-virus measures.
 
Basic Policy on the Proper Handling of Specific Personal Information

We establish this policy to ensure proper handling of specific personal information (e.g., “My Number”).

    1.    Company Name
Haneda Future Research Institute Co., Ltd.

    2.    Compliance with Laws and Guidelines
We comply with the My Number Act, Act on the Protection of Personal Information, and relevant guidelines.

    3.    Purpose of Use of Personal Numbers

      o    For business partners: preparation of payment records, etc.
      o    For officers/employees and their dependents:
            ・Tax documents
　　　 ・Local tax filings
　　　 ・Employment insurance procedures
            ・Health and pension insurance filings
　　　 ・Workers’ compensation insurance filings
　　　 ・National Pension No.3 procedures
　　　 ・Asset-building savings filings
　　　 ・Shareholder reporting for employee stock programs
　　　 ・Inheritance tax procedures
　　　 ・Pension benefits

    4.    Safety Management Measures We implement organizational, physical, technical, and personnel measures for handling specific personal information, following relevant guidelines.

    5.    Ongoing Improvement We strive to continuously improve our handling of specific personal information.
 
Contact for Inquiries

For questions, requests, or complaints regarding personal or specific personal information, please contact:

By Phone:
Haneda Future Research Institute Co., Ltd. – Administration Dept.
Personal Information Protection Team
03-5757-8070

By Mail:
3-3-2 Haneda Airport, Ota-ku, Tokyo 144-0041 (Inside Tokyo International Airport)
Haneda Future Research Institute Co., Ltd.
Administration Dept. – Personal Information Protection Team
Please note: We do not accept in-person inquiries.

 

Addendum for Customers in the EEA and UK

 

1.     About This Addendum

This Addendum for customers in the EEA and UK applies to the Processing of Personal Data that Haneda Future Research Institute Incorporated (“we”, “us,” and “our”) collects from customers who reside in the EEA or the UK when they fill out the JMC Customer Information Form.

We will Process your Personal Data in compliance with any applicable laws and any laws that may replace them in the future (including the General Data Protection Regulation (EU Regulation 2016/679) and the United Kingdom General Data Protection Regulation, as it forms a part of the law of England, Wales, Scotland, and Northern Ireland by virtue of Section 3 of the European Union (Withdrawal) Act 2018 (collectively, the “GDPR”)).

In this addendum, we provide you with information based on the GDPR related to the Processing of Personal Data you provide us through the JMC Customer Information Form. Please take the time to read and fully understand this addendum.

 

2.     Definitions

In this addendum:

(a)  “Personal Data” means any data which relates to you from which you can be identified. It includes your contact details, other personal information, and photographs; and

(b) “Processing” means any activity or operation that is carried out in respect of your Personal Data, such as collecting, storing, using, transferring, or deleting it.

 

3.     Controller for Personal Data Processing

For purposes of the GDPR, we are a data controller in respect of your Personal Data, and we are committed to respecting your privacy. Our contact details are as follows:

(a)      Main Office Address: Terminal 1, 3-3-2 Haneda Airport, Ohta-ku, Tokyo 144-0041, Japan

(b)      Email Address: info＠hfri-co.com

(c)      Phone Number: +81-3-5757-8070

 

4.     Personal Data Collected and Processed

We collect and Process the Personal Data you provide us through the JMC Customer Information Form, including your name, e-mail address, gender, birthdate, region, and interest in services and products.

 

5.     Purpose of Processing Personal Data; Legal Basis Therefor

We Process your Personal Data to inform you of our products and services, typically by sending marketing emails. We may also use your Personal Data for fulfilling obligations, exercising rights, and conducting related actions regarding the management and operation of Tokyo International Airport (Haneda) passenger terminal facilities.

The legal bases for the Processing of your Personal Data are as follows:

(a)   provision of your consent in accordance with Art. 6 (1)(a) of the GDPR;

(b)   where the Processing of your Personal Data is necessary to comply with applicable laws in accordance with Art. 6 (1)(c) of the GDPR; and

(c)   where the Processing of your Personal Data is necessary to pursue our legitimate interests in accordance with Art. 6 (1)(f) of the GDPR (e.g., management and operation of facilities).

 

6.     Disclosure and Provision of Personal Data to Recipients

We may share your Personal Data with recipients in the following situations:

(a)   Internal use by us: Our employees who are authorized, and who have a need, to access such data;

(b)   Group companies: We may share your Personal Data with the Group Companies described in the Privacy Policy (5. Joint Use with Group Companies) in accordance with the GDPR;

(c)   Subcontractors: To the extent necessary to accomplish the purposes described in this addendum, we may subcontract certain duties to external parties (companies that provide web servers, systems development/maintenance vendors, etc.) and disclose and provide Personal Data to the extent required for those subcontractors to perform the duties delegated to them. In that case, we will supervise the subcontractors to the extent necessary and appropriate to ensure safe management of the delegated Personal Data;

(d)   Service providers: We may provide your Personal Data to third-party service providers for purposes such as marketing, including marketing activities conducted by SoGoo Co., Ltd. (such as advertising, promotions, and customer analysis) in connection with the sale of JMC’s products on the cross-border e-commerce platform “By Emotion International”;

(e)   Legal procedures and security: We may disclose your Personal Data to legal or government regulatory authorities as required by any applicable laws. We may also disclose your Personal Data to third parties as required by any applicable laws in connection with any claims, disputes, or legal proceedings, when otherwise required by any applicable laws, or if we determine that such disclosure is necessary to protect the health and safety of you or any other person or to enforce our legal rights or contractual commitments that you have made; and

(f)    Business transfers: Your Personal Data may be disclosed as a part of a corporate business transaction, such as a merger, acquisition, company split, business transfer, or joint venture, or the financing or sale of company assets, and may be transferred to a third party as one of the business assets in such a transaction. Your Personal Data may also be disclosed in the event of insolvency, bankruptcy, or receivership.

 

7.     Transfers of Personal Data outside the EEA and the UK

Personal Data that we hold about data subjects residing in the EEA and/or the UK may be transferred to, and stored by, third parties outside the EEA and/or the UK. In cases where we transfer such Personal Data outside the EEA and/or the UK, we will ensure that:

(a)   the recipient destination is designated as a country or territory that ensures an adequate level of protection for the rights and freedoms that data subjects possess with respect to Personal Data under the GDPR; or

(b)   the recipient enters into standard data protection clauses with us as required by the GDPR.

You may obtain more details on the protection given to such Personal Data when it is transferred outside the EEA and/or the UK (including copies of the standard data protection clauses and the binding corporate rules) by contacting us using the information about us provided in Section 3 above.

 

8.     Period of Storage of Personal Data

We will retain your Personal Data for a period of five (5) years from the date on which it was collected or from our latest contact with you, except to the extent that we are required by law to retain it for a longer period of time, in which case, we will retain it for the period required by law.

 

9.     Your Rights

You have a number of legal rights in relation to the Personal Data that we hold about you. These rights may vary depending on where you are located and which data protection laws apply to the relationship between you and us, but will typically include the following:

(a)     The right to obtain information regarding the Processing of your Personal Data and to access the Personal Data that we hold about you;

(b)     The right to request rectification of your Personal Data if it is inaccurate or incomplete;

(c)     The right to request erasure of your Personal Data in certain circumstances. This may include circumstances in which:

(i)   it is no longer necessary for us to retain your Personal Data for the purposes for which we collected it;

(ii) we are only entitled to Process your Personal Data with your consent, and you withdraw such consent;

(iii) you object to our Processing of your Personal Data for our legitimate interests, and such legitimate interests do not override your own interests, rights, or freedoms; or

(iv) your Personal Data has been unlawfully Processed by us;

(d)     The right to request that we restrict our Processing of your Personal Data in certain circumstances. This may include circumstances in which:

         (i)   you dispute the accuracy of your Personal Data (but only for the period of time necessary for us to verify its accuracy);

         (ii)  we no longer need to use the Personal Data except to establish, exercise, or defend legal claims;

         (iii) you object to our Processing of your Personal Data for our legitimate interests (but only for the period of time necessary for us to assess whether such legitimate interests override your own interests, rights, or freedoms); or

         (iv) your Personal Data has been unlawfully Processed by us, but you oppose the erasure of your Personal Data and instead request the suspension of its use;

(e)   The right to object to our Processing of your Personal Data;

(f)     The right to receive any Personal Data which we Process about you on the basis of your consent (as opposed to any other legal grounds) and where such Processing is carried out by automated means in a structured, commonly used, and machine-readable format and/or to request that we transmit such Personal Data to a recipient where this is technically feasible. Please note that this right only applies to Personal Data which you have provided to us;

(g)     The right to withdraw your consent to our Processing of your Personal Data at any time. However, please note that we may still be entitled to Process your Personal Data if we can rely on another legal ground for doing so; and

(h)     As a general matter, if you are a child under the age of 16 and your Personal Data is to be Processed based on consent, the consent of the party with custodial responsibility over you will be required.

 

You may exercise any of your rights above by contacting us using the information about us provided in Section 3 above. You may also lodge a complaint with the competent data protection authority if you believe that any of your rights have been infringed by us.