1. Basic Concept

Japan Student Services Organization (hereinafter referred to as "JASSO") will collect and carefully handle personal data of all users of the official website of "Study in Japan" website (hereinafter referred to as the "Website") as pertains to General Data Protection Regulation 2016/679 (GDPR) of the European Union. JASSO will strive for appropriate management and operation of the data to the extent necessary for seamless operation of the services provided on the Website.

This privacy policy (hereinafter referred to as the "Privacy Policy") describes the processing of personal data of users in the European region (hereinafter referred to as the "EEA"), consisting of the EU Member States, Norway, Iceland, and Liechtenstein, and U.K. in relation to the services provided by JASSO.

Please refer to the privacy policy of the Website for the handling of personal information of users located outside of the EEA and U.K.

2. Personal Information Collected

When using the services provided by JASSO, you may be required to provide your personal data.

Personal data provided will be used within the scope necessary to achieve the purpose of use, and will not be used for any purpose other than the purpose of use without the consent of the user.

1. Among JASSO's services, the following are examples of those for which JASSO may require users to provide personal data:
   Registration for events such as fairs and seminars Inquiries
   Other services provided by JASSO (whether online or offline)
2. Examples of personal data you will provide:
   Name
   Affiliation (school name, etc.)
   Nationality and place of residence
   E-mail address
   Other information necessary for providing specific services

3. Purposes of Use of Personal Information

JASSO will use the personal data it has collected with respect to users for the following purposes. JASSO will use your personal data only to the extent necessary to achieve these purposes.

1. To accept user opinions and inquiries, and respond to such opinions and inquiries.
2. To implement and operate services, events, etc., for which the user has registered.
3. To conduct questionnaires concerning services, events etc. in which users participate, and to grasp the outcomes of such services, events, seminars, etc.
4. To provide information on JASSO's services, events and seminars.
5. To improve JASSO services to make them more user-friendly.
6. To analyze and collect statistics on users using JASSO's services.
7. To achieve other purposes of use which were clearly indicated at the time of acquiring the personal data of users.

4. Cookies and Google Analytics

When you visit the Website, we use cookies for purposes of user authentication, confirmation of the user's log-in status, and improvement of user convenience.

In addition, for purposes of improving the usability of the Website for users, the Website may record access logs, such as the client's IP address, date and time of access, link source, files accessed, and browsers used. We use log information automatically stored on the server and a technology called "web beacons" from Google Analytics, a service provided by Google, Inc., and cookies to create such records.

In addition, the Website uses content sharing functions provided by social media platforms such as Twitter and Facebook, as well as the video streaming function of YouTube.

For this purpose, cookies issued by these third parties, such as social media, are used to track information provided by users or derived from their usage history.

JASSO may also analyze your interests based on your behavioral history on this Website, such as the date and time of access and the files you accessed, for the purpose of providing you with useful information, etc.

For a detailed explanation of our use of cookies and cookie settings, please refer to the following link:

Cookie Policy

5. Lawfulness of Processing

JASSO will only process your personal data within the scope permitted by law. JASSO will process your personal data based on the following grounds:

1. Consent: This is when JASSO receives consent from the user for processing personal data. By indicating agreement with the Privacy Policy, the user is giving consent to the use of personal information by JASSO as indicated.
2. Performance of contractual obligations: This is when JASSO needs to process your personal data in order to perform a contract entered into with you.
3. Legal obligations: This is when JASSO needs to comply with legal obligations.
4. Legitimate interests: This is when processing of the user's personal data is necessary for the legitimate interests pursued by JASSO or by a third party, provided that the user's interests and fundamental rights are not overridden by the above interests.

6. Provision of Information Handled

JASSO may share your personal data with the following types of recipients.

1. Service providers: Service providers include companies in the IT industry, such as internet services, cloud service, information security and data analytics.
2. Subcontractors: This is when the processing of personal data is necessary for the execution of operations relating to JASSO's outsourcing of operations to a third party.
3. Co-organizers and supporters of events etc. for which users have participated: These include Embassies and Consulate-Generals of Japan, government-affiliated organizations and other organizations.

7. Transfer of Personal Information Outside Europe

The personal data JASSO has with respect to users may be transferred to third parties outside the EEA or U.K. and may be retained by such third parties.

If JASSO transfers your personal data to a third party outside the EEA or U.K., we will ensure the following: The region to which the transfer is to be made has been certified by the European Commission or U.K. government as ensuring an adequate level of protection for the rights and freedoms of the users' personal data.

International transfer of personal information to Japan will be based on the European Commission's decision regarding the adequacy of personal information protections acquired by Japan. For information regarding the adequacy of personal information protections provided by Japan, please refer to the European Commission's website.

European Commission website

8. Data Retention Period

JASSO will retain personal data collected with respect to you during the period we provide you with our services.

Personal data related to users that is no longer needed after the service provision period will be deleted.

The retention period of personal data collected by JASSO will vary for each category of personal data, and personal data will be retained only for the period necessary for purposes of use according to each type of data.

However, this shall not apply to personal data that is required by law to be retained for a longer period, and such personal data will be retained for the period of time required by law.

9．Data Protection Measures

JASSO will take necessary measures to prevent the leakage, loss or damage of information it handles and to appropriately manage such information.

In addition, JASSO may outsource operation of this site. In such case, the outsourcer must also comply with GDPR and related laws, protect data against breaches, losses and other harm, and take all appropriate measures to provide for proper management of data.

10. Scope of Application

JASSO will not be able to manage your personal data at websites that are not under JASSO's control, including the websites of public/private organizations and institutions to which the Website links.

These websites may collect your personal information independently. JASSO recommends that you handle your personal information carefully and review the privacy policy of each website.

11. Rights of the Data Subject

Users have the following rights relating to the personal data JASSO retains about them.

1. The right to acquire information related to the processing of the user's personal data and the right to access the personal data held by JASSO with respect to the user.
2. The right to request the correction of any inaccurate or incomplete personal data of the user.
3. The right to request that JASSO erase your personal data under certain circumstances, including, but not limited to, the following circumstances: when JASSO is no longer required to retain your personal data in the light of the purpose for which it collected the personal data; when JASSO may process personal data only with the consent of a user and the user withdraws the consent; The user objects to the processing of their personal data by JASSO on the basis of legitimate interests, and JASSO's legitimate interests do not prevail over the user's own interests, rights, and freedoms.
4. The right to require JASSO to restrict JASSO's processing of personal data under certain circumstances, including, but not limited to, the following circumstances: when the user disputes the accuracy of their personal data (only for the period of time necessary for the Institution to verify its accuracy); when JASSO no longer needs to use the personal data, except to raise or exercise legal claims or defend against them; when the user objects to the processing of their personal data by JASSO on the basis of legitimate interests (limited to the period necessary to determine whether JASSO's legitimate interests override the user's own interests, rights and freedoms).
5. The right to object to JASSO in relation to the processing of the user's personal data.
6. The right to receive personal data in a structured, commonly used, and machine-readable form and/or to require JASSO to transfer such personal data directly to the recipient to the extent technically feasible, when processing personal data is based on your consent and other grounds are not applicable. Please be aware that this right is only permitted for personal data provided by you to JASSO.
7. The right to withdraw your consent to the processing of your personal data at any time. Please note, however, that JASSO may continue processing your personal data if it can rely on another legal basis.

You may exercise your rights by contacting JASSO as described in Section 14. If you believe that JASSO has violated your rights, you may file a complaint with a data protection authority.

12. Note

Some social networking services (SNS) provide "buttons" that when included on other websites will cause personal information such as user IDs and information about sites visited to be automatically transmitted to the SNS even if the button is not clicked.

For details, please refer to Note to All SNS Users (Personal Information Protection Commission website).

Note to All SNS Users

Please check the privacy policies, etc., of other social media services used on the Website on their respective websites.

13. Updates to Privacy Policy

When Privacy Policy is revised or updated, JASSO will post such revised or updated Privacy Policy, including the effective date of the revision or update, on the Website.

14. Contact Information

If you have any questions regarding this Privacy Policy, the exercise of your rights, or any other matters related to the protection of personal data, please contact the following contact address:

Published: October 15, 2021