Privacy Policy

Effective date: 11/10/2024 .

JR Pass LC (hereinafter, “the Company”, “We”, “Us” and the like) is firmly committed to regulatory compliance and the privacy and protection of personal data. Accordingly, in the present Privacy Policy, you the User (hereinafter, “the User”, “you”, “your”) will find all the relevant information to better understand what we do with your personal data.

We may update this Privacy Policy according to new legislative or jurisprudential requirements and/or business needs, among others. Any update or modification of the present Privacy Policy will be considered applicable from the moment of its publication on the website. Therefore, the User is recommended to review this Privacy Policy regularly.

Without affecting your rights under current applicable legislation, the present Privacy Policy is not contractual or part of your contract with us.

What Does Personal Data Mean?

For the purposes of this Privacy Policy, “personal data” means all data that identifies you or that could be used to identify you, such as your contact details like your name, email/postal address, signature, position held and/or other information such as your IP address. It may also include information about how you use our website.

When does this Privacy Policy apply?

This Privacy Policy applies to the personal data that we collect, use and process from you as User of our website.

Our website may contain icons and/or links to redirect you to websites of third parties that give you access to functionalities and/or services such as to following us on our social media channels and/or sharing content on yours.

In this sense, please note that these third party websites are not operated by us, so we can not assume any responsibility for the information and content provided on them and/or the correct provision of the functionalities and/or services offered by these third parties, since we have no control over this.

In addition, please note that in order to access the functionalities and/or services of some of these third-party websites you must register as a user. In this regard, keep in mind that the controller of the personal data provided in the registration process will be the owner of the website and your personal data will be processed in accordance with its Privacy Policy, which is totally disconnected from ours. Therefore, we recommend that you consult the Privacy Policies of the websites you access and, where appropriate, register to better understand how your personal data will be processed.

When do we collect your personal data?

The personal data we collect from and about you is as follows:

Direct interactions: when you complete the forms on our website to request our products and/or when you contact us by post, telephone, or email for further information about our products and/or about us.
Automated technologies: we may automatically collect information like your IP address, the sections you consult on our website or the time that you remain on our website by using cookies, whether our own or from third parties. You can consult our Cookie Policy to obtain more information about the cookies of our website, their purposes and other information of interest.
Payment data: We will only request your credit or debit card information during the payment process of our products. The captured data will be sent securely to our certified payment service providers for the authorization of the transaction. In no case we visualize or access the complete data of your credit or debit card. We will never ask for your credit or debit card details by email, phone calls or any other unauthorized channel. It is the customer’s responsibility not to enter, provide or send his/her card information through channels not authorized by the company.

In order to be able to properly attend and manage your product’s request and/or answer your queries, you must provide us with accurate, updated and complete information. We will not assume any type of responsibility for circumstances that are beyond our reasonable control, such as being provided with erroneous, incomplete and/or fraudulent information from you as a user.

If you provide us with personal data of third parties, you confirm that you have informed them about the purposes for which their personal data will be processed and you guarantee us that you have obtained their prior and express consent to communicate us their personal data.

If you provide us with personal data of minors, meaning individuals under fourteen (14) years old, you confirm and guarantee to us that you have parental authority to do so or you are their legal guardian.

What do we use your personal data for?

Your personal data are processed for the following purposes:

To properly address your informational request or queries about us and/or our products;
To provide you with the requested products and to send you up-to-date information and/or operational communications regarding the status of your order and/or the status of our services;
For administrative purposes related to the process and management of the product’s orders and its delivery, verification of your payment information, accountancy and billing tasks;
To send you information, through electronic means, about products similar to those you have ordered, unless you object the processing of your personal data for this purpose;
To send you newsletters if you have given your consent;
To improve your user experience on our website, improve our products and customer support by analyzing you and other customers use of our website and/or your communications with us;
To comply with our legal obligations and/or to respond to judicial or police requirements;
To carry out periodic checks against fraudulent, unauthorized or illegal activity on/or through our website.

In all cases, we only collect personal data which is strictly necessary for the fulfillment of the purposes described above, not providing this information could result in the inability to complete your product order and/or its delivery and/or to adequately address your informational requests, etc.

What is the legal basis for processing your personal data?

We only process your personal data when there is a legal basis for doing so. The legal basis will depend on the reason we collect and process your personal data. In almost all cases the legal basis will be:

The consent that you provided us with for the processing of your personal data in connection to the purposes informed at the time of collection of your data (i.e. to receive the requested information or to sign up for a newsletter).
To fulfill the contract with you, means, to manage your order and provide you with the ordered product and/or process your informational request.
For compliance with our legal obligations and/or to attend to judicial or police requirements.
Our legitimate interest regarding (i) administrative purposes (ii) credit cards and other methods of payments verifications, (iii) address possible claims regarding our services, (iv) sending commercial communications about our products which are identical or similar to those you have previously ordered, (v) enhancing the user experience when you use this website and to operate it efficiently, (vi) enhance our products offers, (vii) monitor fraudulent activity in order to preserve the security and integrity of our website. Our legitimate interest will only be applied provided that your interests and fundamental rights do not prevail.

All the electronic commercial communications include an unsubscribe link, so you can object to receiving it at any time. We will try to process your unsubscription request immediately, but sometimes this process may take a number of days to become effective, during this period you may still receive our communications.

Please be informed that if you contact our Customer Service via telephone, your phone call will be recorded for security purposes and to improve the quality of the telephone service, this being a standard practice in many companies. You will be informed in advance that your call will be recorded and you will also have access to the information on how the Company processes the personal data you will be required to provide during the call to verify your identity as a Customer and the subscription plan you have contracted in order to properly attend to your request. Please be informed that your call will only be recorded if you give us your express consent for it, which will be understood to be granted if you do not hang up and wait to be attended to by an agent from the Customer Service team. If you do not want to be recorded, then you must hang up and not continue with your call and contact our Customer Service by email [email protected].

How long do we keep your personal data?

We will process your personal data for as long as necessary to fulfill the purposes for which they were collected and, beyond that, your personal data will be retained, duly blocked, for the necessary period we need to keep them. For example, it will be kept for as long as necessary to comply with our legal obligations and/or address possible claims related to the products sold; to finish the investigation of a fraudulent or illicit activity detected; to retain the Cookies’ information providing that you do not revoke its consent, etc. Once the necessary retention period has ended, your personal data will be securely deleted from our information systems.

Furthermore, if you have provided us with your consent to process your personal data for specific purposes, note that you can withdraw said consent at any time. Upon receiving your withdrawal request, we will proceed to delete your personal data.

The Company, as an official vendor of Japan Rail Pass, will communicate the personal data of customers that has purchased this product to Nippon Travel Agency Co, Ltd., which is the distributor of Japan Rail Pass on behalf of Japan Railways, for the issuance of the Japan Rail Pass ticket in the Japan Rail Exchanges Offices.

For all Products, we also may communicate your personal data to the following third parties, including but not limited to:

credit/debit card companies to process payments and (when necessary) carry out fraud controls;
courier service providers to delivery the products requested by you;
technology service providers which host our information systems and/or or that offer us tools or technological support;
complying with our legal obligations;
administrative, judicial and/or police authorities in response to requirements, as long as they are required in accordance with the applicable law and regulations;
law firms responding to claims regarding the products sold and/or to protect our legitimate interests.

The third parties mentioned above may have their headquarters outside the country of your residence involve an international transfer of personal data. In this regard, we inform you that we only transfer personal data to recipients located in countries that offer a level of personal data protection comparable to the laws and regulations of data protection of European countries or, failing that, we will apply the appropriate safeguards required by the current applicable law and regulations on the protection of personal data, in order to ensure the privacy and security of your personal data and that your individual rights and freedoms are guaranteed.

How do we protect your personal data?

Your personal data is securely stored securely in our information systems and we have established the technical and organizational measures in order to ensure the confidentiality and integrity of your personal data and to protect it against unauthorized or unlawful processing and/or accidental loss, destruction or damage.

Likewise, we have taken reasonable measures to guarantee that all our staff, as well as the suppliers or collaborators with access to your personal data, have received adequate training regarding the processing of the personal data collected.

Although we will do our best to guarantee the protection of your personal data transmitted through our website and/or that you may provide us by others means such as email or phone, please bear in mind that you should also take precautions to keep safe your personal data such as e.g you must not enter or confirm bank details by means of fake messages and/or websites.

What Rights Do You Have and How Can You Exercise Them?

You may, with any cost, exercise your rights of: access, rectification, erasure, restriction of processing, to object, as well as the right to the portability of your personal data, by a written request addressed to Us, sent by email to: [email protected], telephone, or by post.

You may modify the “privacy settings” of your web browser to set up tracking cookies at any time. Also, you can install programs or add-ons to your browser, known as “Do Not Track” tools, which will allow you to choose the Cookies you want to allow.

For security reasons and when we consider it necessary, we may request a copy of a document proving your identity before proceeding to address your data protection right request.

Your data protection right request will be responded to within one (1) month; but occasionally, this period may be extended by two (2) further months where necessary, taking into account the complexity and/or number of requests you may have made. In this case, we will notify you of such an extension together with the reasons for the delay.

When you consider it appropriate, you have the right to file a claim with the competent Data Protection Authority, such as e.g when you consider that your data protection rights have not been adequately addressed.

We remain at your disposal for any doubts or questions about the present Privacy Policy or about the processing of your personal data you may have, so don’t hesitate to contact us: [email protected].