Privacy Policy

This privacy policy (this "Policy") explains how PIA ("we", "us" and "our") collect through this Overseas ticket sales website (the "Website") the personal data of our customers ("you" and "your") and use such personal data. This Policy does not apply to any other websites operated by any of us, and those other websites carry their own respective privacy policies that you should consult when you use those websites.
This Policy does not form any contractual relationship between you and us, and we might amend it from time to time. If you continue to use this Website, we shall deem that you have agreed to this Policy.

1. WHO IS USING YOUR PERSONAL DATA

The Website is controlled and operated from Japan by PIA Corporation ("PIA") whose registered address is Shibuya First Tower, 1-2-20 Higashi, Shibuya-ku, Tokyo 150-0011, JAPAN. PIA is data controller for the personal data processed in the manner set out in this Policy. This means that we determine the purposes and means of processing your personal data.
For our address and representative, please refer to the link below.
https://corporate.pia.jp/en/corp/data/

“Personal data” used in this Article 1-5 shall apply by reading “personal data” as “personal information” as defined in the Act on the Protection of Personal Information of Japan (the “APPI”).

2. LAWFUL PROCESSING

We process your personal data in accordance with applicable data protection regulations. Please refer to the country-specific individual provisions regarding our legal basis for processing for each jurisdiction.

3. WHAT PERSONAL DATA WE COLLECT ABOUT YOU

We process the following types of personal data about you:

your name; your contact details, such as your email address and telephone number; your gender; your date of birth; your country of residence; your state of residence（if applicable）; and your payment details (such as your credit card number);
IP address as well as details of your access to our systems and the Website; and
your messages, feedback or contributions to surveys and questionnaires.
other personal data collected by us in connection with the Website (if required by applicable laws and regulations, we will collect such personal data after separately notifying you.)

It might be mandatory for you to provide us with your personal data in order to enable us to provide you with our services or to comply with our legal and regulatory obligations. If you fail to provide your personal data when requested, we might not be able to provide our services to you.

We take necessary measures to maintain the accuracy and completeness of your personal data that we store and to ensure all of your personal data is up to date. However, please promptly contact us if there are any changes to your personal data or if you become aware that we have inaccurate personal data relating to you. We will not be liable for any damage arising from any inaccurate, inauthentic, deficient or incomplete personal data that you provide to us.

4. HOW WE COLLECT PERSONAL DATA

We collect your personal data from the information you submit. Personal data is typically collected when you purchase our services(including applications for lottery sales).

5. HOW WE USE PERSONAL DATA

We process your personal data set out in 3.1 above for the following purposes:

to provide you with requested services(receipt, payment, video distribution, delivery or payment on the day);
to provide you with services incidental to services described in (a) above (e.g., change, discontinuation, additional sales, e-mail, postal and telephone notices, and confirmation communications deemed necessary for business);
for identification and authentication services;
to provide you with information about our services;
to conduct surveys and send gifts to you
to manage, develop and improve our services and websites;
for marketing research and analysis including analyzing and determining sales performance by country of residence ;
to make statistical information
for system maintenance, troubleshooting, provide of technical support, and other customer inquiries;
for fraud and crime prevention and detection purposes;
for administrative purposes in relation to the security of and access to the Website;
to comply with our legal and regulatory obligations; and
to comply with court orders and exercise or defend our legal rights.

6. WHEN WE MAY DISCLOSE YOUR PERSONAL DATA

We do not and will not sell, rent out or trade your personal data. We will disclose your personal data to the following recipients:

to third parties who process your personal data on our behalf (such as our IT service providers, payment service providers, cloud service providers, maintenance service providers,　video distribution service providers, customer service providers, and other entrusted parties);
to event organizers and the like who check your identity at entrance points into the event venue;
to event organizers and the like who inform you of the cancellation or postponement of events or any other changes or the like to events and refund you in such circumstances;
to PAYGENT which is the payment service provider used by us and to the card issuing company used by the customer for the purposes of detecting and preventing fraudulent use of credit cards. we provide personal data (customer identification ID card identification ID, telephone number, e-mail address, registered address information, shipping address, payment amount, account activity information, credit card registration date and time) to PAYGENT and the card issuing company used by the customer. If you use credit cards issued by credit card issuers in foreign countries, this information may be transferred to the country where your card issuer is located. Please confirm the location of the card issuers by yourself.
to any third parties to whom we assign or transfer any of our rights or obligations;
to any prospective buyer if we sell any part of our business or assets;
to any government, regulatory agency, enforcement or exchange body or court (if we are required to do so by applicable law or regulation or at their request);
to any third parties as long as there is a need to protect a human life, body or fortune, and when it is difficult to obtain a principal's consent;
to any third parties- with your consent; and
to any third parties as long as permitted under applicable laws and regulations.

7. JOINT USE Of PERSONAL DATA WITH OUR GROUP COMPANIES

We jointly use personal data within the scope stated below in compliance with APPI .

Scope of joint users

this page

Items of Personal Data to be Jointly Used
Purpose of use by users

Person responsible for the management of personal information

8. INTERNATIONAL TRANSFERS OF PERSONAL DATA

This Website is controlled and operated from Japan and the file containing your personal data will be stored in our servers or those of our IT service providers. Those servers are located in Japan.
If we transfer personal data. we will take proper protection measures required by the personal data protection regulation of each country. For the protection measures of each country, please refer to the country-specific individual provisions.

9. HOW WE PROTECT YOUR PERSONAL DATA

We are committed to safeguarding and protecting your personal data and will introduce and maintain appropriate technical and organizational measures to ensure a level of security appropriate to protect your personal data from accidental or unauthorized destruction, loss, modification, disclosure or access.

10.　YOUR RIGHTS IN RELATION TO THE PERSONAL DATA WE COLLECT

We will respect the rights you have under applicable data protection regulations. You may require disclosure of personal data, correction, addition, and elimination of content, suspension and erasure of usage, disclosure of records for provision of personal data to third parties and suspension of provision to third parties in accordance with Japanese Act on Protection of Personal data. In addition, under data protection regulations of each country that will be applied to you, other rights may be granted to you. For rights granted in each country, please refer to the country-specific individual provisions. If we process your personal data using your consent as a legal basis for doing so, you will have the right to withdraw your consent at any time by a method separately designated by us at the time we seek your consent. However, your withdrawal of consent will not affect the legality of processing conducted based on consent we had obtained from you before you withdrew consent.
If you wish to exercise any of your rights, please contact us using the contact methods provided below. We might request that you prove your identity in order for us to comply with our security obligations and to prevent unauthorized disclosure of data.

11.　HOW LONG WE WILL HOLD YOUR PERSONAL DATA FOR

will delete your personal data 60 days after the end of the event you bought a ticket for on the Website.

12.　DIRECT MARKETING

We will not contact you for marketing purposes by email, phone or text message unless you have given your prior consent or otherwise permitted under applicable laws and regulations.

13.　PERSONAL DATA OF CHILDREN

We do not knowingly collect or solicit personal data about minors without legal grounds. If you are a minor, please do not send us any personal data without legal grounds. If we learn we have collected personal data from a minor without legal grounds, we will delete such information. If you believe that a minor may have provided personal data to us without legal grounds, please contact us by using contact information in 15 below.

14.　HOW WE UPDATE OR CHANGE THIS POLICY

We might change or update this Policy in order to maintain our compliance with applicable laws and regulations or following an update to our internal rules. We will make such changes or updates by updating this Policy. You will not necessarily be directly notified of such a change. Therefore, please ensure that you regularly check this Policy so you are fully aware of any changes or updates.

15.　HOW YOU CAN CONTACT US

If you have any queries about the contents of this Policy or your personal data that we store or wish to make a request in relation to your personal data, please contact us by using the details set out below:

Contact details of [the data protection manager]
Email : question_i@pia.co.jp
Post : PIA Corporation, Shibuya First Tower, 1-2-20 Higashi, Shibuya-ku, Tokyo 150-0011, JAPAN

16.　HOW TO LODGE A COMPLAINT TO THE DATA PROTECTION AUTHORITY
We will endeavor to resolve complaints about our use of your personal data. If you believe that we have violated your data protection rights, please contact us using the contact details set

Date Updated: December 1, 2022

Individual provision: EEA (European Economic Area) and UK

This Individual provision applies to customers located or residing in the EEA (European Economic Area) and the UK.

1.　Legal basis for processing

The legal basis for our processing of personal data under the General Data Protection Regulation 2016/679 (the GDPR) and the GDPR as it is incorporated into UK law by the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (EU Exit) Regulations 2019 (the UK GDPR) (hereinafter the GDPR and the UK GDPR shall collectively be referred to as the “GDPR”) is as follows. There may be cases where we obtain some kind of consent from you in connection with your personal data, but unless item (2) below applies, even in such a case, the legal basis for processing will be processing is necessary for the pursuit of legitimate interests.

(1) Processing is necessary for the pursuit of legitimate interests (GDPR Article 6(1)(f))
We process your personal data on the basis that processing is necessary for the pursuit of legitimate interests (GDPR Article 6(1)(f)) for the purposes specified in Section 5 of the Privacy Policy (for details of the balancing test for legitimate interests, please contact us using the contact details specified in Section 13 of the Privacy Policy.

(2) We obtain your consent in advance (GDPR Article 6(1)(a))
Where required by law, we will obtain your consent before engaging in direct marketing.

2.　Overseas transfer of personal data

When we transfer personal data to countries where adequacy decisions are made, we do so on the basis of adequacy decisions (Article 45 of GDPR). For adequacy decisions to Japan, please refer to this link.
When we transfer personal data to countries other than the EEA, UK, and countries to which adequacy decisions are made, we will do so in accordance with GDPR Articles 46 or 49.

3.　Your rights

The GDPR gives you certain rights regarding your personal data. You may ask us to take the following actions regarding your personal data obtained and processed by us:

Access to your personal data: You have the right to obtain from us confirmation as to whether personal data concerning you are being processed, and, if so, the right to access the personal data and certain related information.
-Rectification of your personal data: You have the right to have us correct inaccurate personal data concerning you without undue delay and the right to have us complete any incomplete personal data.
- Deletion of your personal data: You have the right to have us delete personal data concerning you without undue delay.
-Restriction on processing of your personal data: You have the right to have us restrict processing of personal data concerning you.
-Objection to processing of your personal data: You will have the right to object to our reliance on our legitimate interests as the legal basis of our processing of personal data concerning you that impacts you rights.
-Withdrawal of your consent: this right only exists where we are relying on consent to process your personal data. In particular, you have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing at any time.
-Data portability: You have the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and the right to transfer those data to another controller without hindrance from us.

These rights may be limited where they would infringe the rights of a third party (including our rights), for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law to keep or have compelling legitimate interests in keeping. Relevant exemptions are included in the GDPR, and in local data protection laws. We will inform you of relevant exemptions we rely upon when responding to any request you make.

You can also lodge a complaint in relation to our processing of your personal data directly to the relevant Supervisory Authority here if you are in the EEA or to the Information Commissioner’s Office if you are in the UK.

4.　Contact details of the EU and the UK representative [DataRep]

＜EU representative＞
PIA Corporation, which processes the personal data of individuals in the European Union, in the role of ‘data controller’, has appointed DataRep as its Data Protection Representative for the purposes of GDPR. If you want to raise a question to PIA Corporation., or otherwise exercise your rights in respect of your personal data, you may do so by:
・sending an email to DataRep at datarequest@datarep.comquoting in the subject line “site name”,
・contacting us on our online webform at www.datarep.com/data-request , or
・mailing your inquiry to DataRep at the Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland

PLEASE NOTE: when mailing inquiries, it is ESSENTIAL that you mark your letters for ‘DataRep’ and not ‘PIA Corporation.’, or your inquiry may not reach us. Please refer clearly to PIA Corporation in your correspondence. On receiving your correspondence, PIA Corporation is likely to request evidence of your identity, to ensure your personal data and information connected with it is not provided to anyone other than you.

＜UK representative＞
As PIA Corporation are based outside of the UK, UK GDPR required that we appoint an UK representative to handle certain data subject requests and queries.
In compliance with this, we have appointed DataRep Group to act as our representative.
If you want to raise a question to PIA Corporation, or otherwise exercise your rights in respect of your personal data, you may do so by:
・sending an email to DataRep at datarequest@datarep.com quoting PIA Corporation in the subject line,
・contacting us on our online webform at www.datarep.com/datarequest , or
・mailing your inquiry to the following address.
DataRep, 107-111 Fleet Street, London, EC4A 2AB, United Kingdom