Privacy Policy

1. Categories of personal information subject to processing

Wavedash processes the following personal information of our customers.

- Registration information (your name, username, e-mail address, address, country of residence, date of birth, password, telephone number, device language settings, and payment methods)

- Service information (usage histories and payment histories for the Services of customers who have used them, and other personal information collected by Wavedash in connection with the Services (if required by applicable laws and regulations, Wavedash shall obtain such personal information after separately notifying the customers))

- Cookies and other online identifiers of customers who have accessed the Websites (including access tokens and refresh tokens of customers who have used the Services, IP addresses, provider information, terminal information, and web browser information of customers who have accessed the Websites) and attribute information of customers who have accessed the Websites (such as age, gender, interest categories, affinity categories, and in-market segments). For more information about interest categories, affinity categories, and in-market segments, please visit About Demographics and Interests - Analytics Help (google.com)

- Contact information (First and last names, e-mail addresses, inquiry items, and inquiry details of customers who have contacted Wavedash)

- Inferred information (information that infers customer preferences and interests based on the personal information of our customers)

- In addition to the above, we may also collect any other information you voluntarily provide to us while using the Services.

2. Purpose of collection and processing

Wavedash may process the personal information of our customers for the following purposes:

- to register for the Services and conduct identity authentication when using the Services;
- to manage customers of the Services;
- to provide, operate, and maintain the Services;
- to invoice customers when any charges are incurred for the Services;
- to prevent and respond to misconduct regarding the Services;
- to provide and introduce after-sales services for the Services;
- to conduct questionnaires and campaigns regarding the Services;
- to conduct research and analysis of marketing data and to examine and implement marketing measures;
- to provide, solicit, advertise, and otherwise market the products or services of Wavedash or our affiliated companies or partner companies in accordance with customer preferences and interests based on an analysis of the attributes and behavioral history of customers using the Services;
- to analyze the attributes of customers who accessed the Websites and personalize and improve our customers’ experience when they access the Websites;
- to improve the Services and plan and develop new services;
- to maintain the Websites, diagnose server problems, and fix faults;
- to respond to inquiries made by customers and to contact customers, etc.;
- to respond to disputes and litigation and to comply with our legal obligations;
- to develop new services and to use as a reference in order to acquire new content;
- to prepare statistical information and other non-personal information;
- with your consent, or as otherwise disclosed at the time information is collected;
- for our recordkeeping purposes;
- for training employees;
- to maintain the security of the Services and the Websites including for preventing fraud and cyber-attacks;
- to provide such customer personal information to third parties by the methods stated in this Global Privacy Policy;
- other operations required for providing the Services and services incidental thereto; and
- for other purposes permitted under applicable laws and regulations.

3. Legal basis, etc. for processing

Wavedash processes your personal information in accordance with applicable personal information protection regulations. Please refer to the country-specific exhibits regarding the relevant legal basis for our processing.

The provision of your personal information may be mandatory for reasons such as being a statutory or contractual requirement or being a necessary requirement for entering into a contract. Specifically, the provision of personal information may be required as set forth below:

- The provision of registration information is a necessary requirement for entering into a contract with Wavedash and is mandatory as a contractual requirement. If you do not provide us with the personal information we require, Wavedash may not allow you to register as a member or use the Services.

- The provision of service information and strictly necessary online identifiers is mandatory as a contractual requirement. If you do not provide us with such personal information, Wavedash may not provide you the Services.

- The provision of contact information is mandatory as a contractual requirement. If you do not provide us with such personal information, Wavedash may not be able to respond to your inquiries.

- In other such cases where you do not provide us with your personal information despite such being a necessary requirement, Wavedash may not provide the Services (including the use of the Websites) to you.

4. Retention period for personal information

In order to decide the appropriate retention period for personal information, we consider the following: the volume, nature, and confidentiality of the personal information; the potential risk of damage caused by unauthorized use or disclosure of the personal information; the purposes for which we process the personal information and whether we can achieve those purposes by other means; and applicable legal requirements. If your personal information collected by us becomes no longer necessary, we will delete or anonymize your personal information, and if such measures are impracticable (for example, if your personal information has been stored in back-up archives), we will retain your personal information safely until its deletion becomes practicable and ensure that any new processing will not be conducted with respect to your personal information.

5. Sources of personal information

Wavedash obtains personal information from you when you provide it directly to us and, in some cases by automatic means, such as for cookies and other terminal online identifiers. Wavedash may also collect your personal information indirectly from third parties. For example, we collect analytics and attribution information from Website Traffic Analysis Service Providers, such as Google LLC. Furthermore, if a customer uses PayPal as their payment method when using the Services, Wavedash indirectly obtains the name, address, and e-mail address that such customer has registered on PayPal from PayPal Pte. Ltd. In addition, we may infer your preferences and interests based on your personal information.

6. Sharing and disclosure of personal information

Wavedash shares with and discloses customers’ personal information to the following third parties in order to fulfill the purposes of processing personal information as set out above.

○ Sharing with credit card issuing companies, etc.
- Your personal information may be provided to credit reference agencies, payment companies (such as PayPal Pte. Ltd.), payment agencies, and credit card issuing companies for the purpose of preventing unauthorized payment and implementing smooth transactions.

○ Sharing with partner companies
- Your personal information may be provided to third parties that jointly provide services for ticket sales, etc. with Wavedash for the purpose of confirming, reporting, or consulting, etc. on a transaction, investigating any fraud, etc. pertaining to a transaction, or conducting any marketing, etc. related to a transaction.

○ Sharing with group companies
- Your personal information may be provided to our parent company and other group companies of Wavedash.

○ Sharing with processors (service providers)
Your personal information may be provided to:
- Website Traffic Analysis Service Providers such as Google LLC;
- Cloud Service Providers retained by the Customer Support Outsourcing Company such as Google LLC;
- external investigative organizations, etc. for the purpose of investigating, detecting, preventing, and responding to any unauthorized use or the like of the Services; and
- other contractors and service providers of Wavedash.

○ Legal compliance, etc.
In some instances, Wavedash may be required to disclose your personal information to public and governmental authorities within or outside your country of residence in accordance with the law and/or requests from competent authorities. Wavedash will also disclose your personal information if such disclosure is necessary or appropriate due to law enforcement purposes or handling other issues of public importance. Wavedash will also disclose your personal information if such disclosure is reasonably necessary to protect our rights, to pursue available remedies, to enforce our Terms of Use, to investigate fraud, or to protect our operations or customers.

○ Other
In addition, we may also share personal information of our customers with other parties, including in the following cases:
- as part of an actual or potential corporate sale, merger, acquisition, reorganization, or other transfer of all or part of our assets, including as part of a bankruptcy proceeding;
- cases in which there is a need to protect Wavedash, a human life, body, or assets, and when it is difficult to obtain the principal’s consent;
- with your consent; and
- other cases permitted under applicable laws and regulations.

7. Overseas transfer of personal information

As a result of the above sharing and disclosure, your personal information may be transferred to the following countries:
- United States of America
- Singapore
- Japan

In such cases, Wavedash will take the proper protection measures required by the personal information protection regulations of each country. For the protection measures of each country, please refer to the country-specific exhibits.

○ Provision of information pursuant to the Personal Information Protection Act of Japan
Wavedash may provide the personal information of our customers to third parties in foreign countries for the purposes set out above in “Sharing with credit card issuing companies, etc.” with the consent of customers to this Global Privacy Policy. Information related to the foreign countries in which the third parties to whom we provide customer personal information are located is as follows. In addition, the third parties to whom we provide customer personal information comply and handle customer personal information in accordance with the legal restrictions related to personal information protection in the country in which they are located.
Country name: Singapore
Information related to personal information protection systems in that country: Please click here for details.

8. Safety management measures

For management of customers’ personal information, in order to prevent the unauthorized disclosure, loss, or damage thereof, Wavedash takes the necessary and appropriate management measures. In addition, if Wavedash handles personal information in a foreign country, Wavedash will take necessary and appropriate measures for the safe management of personal data after ascertaining the external environment such as systems regarding the protection of personal information in such foreign country.

9. Cookies and similar technologies

When a customer accesses the Websites and such customer enables cookies, etc. (including tracking technologies such as flash cookies and web beacons, and other technologies; “Cookies, Etc.”), Wavedash may automatically collect information about the PC, mobile phone, tablet, or other information regarding the communication devices used by the customer, etc. If Wavedash collects such information, Wavedash will handle the information as personal information. If you do not wish to use cookies or other tracking technologies, you may disable them by changing your web browser settings. Please refer to Exhibit: EEA (European Economic Area) and UK for the legal basis for processing cookies with respect to customers located or residing in the EEA (European Economic Area) and the United Kingdom.

○ Analytics cookies
We may work with third parties that collect data about your use of the Websites over time. For example, the system may use Google Analytics for analytics and marketing purposes. In Google Analytics, user information will be collected by using Cookies, Etc. For more information about how Google Analytics collects and uses data when you use the Website, visit https://policies.google.com/technologies/partner-sites?hl=en, and to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout?hl=en.

10. Links, etc. to third-party websites

The Services may provide links to third-party websites or applications. We do not control the privacy practices of those websites or applications, and they are not covered by this Global Privacy Policy. You should review the privacy policies of other websites or applications that you use to learn about their data practices.

11. Rights of customers

Wavedash will respect the legal rights you hold regarding personal information protection regulations applicable to you. Customers subject to Japanese law may require disclosure of personal information, correction, addition, and elimination of content, suspension and erasure of usage, suspension of provision to third parties, and disclosure of records of provision to third parties in accordance with Japanese laws regarding protection of personal information. In addition, legal rights related to personal information laws will be applied to customers as applicable in their jurisdiction. For rights granted in each country, please refer to the country-specific exhibits. If you wish to exercise your rights, please make an inquiry using the contact in Article 13 (Contact Details) of this Global Privacy Policy.

12. Children’s personal information

We will not knowingly handle the personal information of children under the age of 18.

13. Contact Details

For questions, complaints, and other inquiries regarding the processing of personal information by Wavedash and this Global Privacy Policy, please contact the support desk stated below:

- E-mail address for inquiries: support@ticketsinjapan.com
Please refer to our corporate profile for our address and representative’s name.

14. Changes to this Global Privacy Policy

Wavedash may, in making changes to this Global Privacy Policy (including country-specific exhibits), change or add to all or part of this Global Privacy Policy by publishing such change or addition on the Websites, sending an e-mail thereof to customers, or giving notice by any other method that Wavedash deems appropriate (subject to applicable laws and regulations, if any). If there are any necessary procedures pursuant to personal information protection regulations that will apply after such change or addition, such procedures will be taken.

We encourage you to visit this page periodically to learn of any updates. You can see when this Global Privacy Policy (including country-specific exhibits) was last updated by checking the “last updated” date.

California

This California annex supplements the information contained in the Global Privacy Policy. This annex applies only to individuals residing in California.

Sources of Personal Information Collection

• Directly from you, such as when you complete our online forms, order a product or service, or otherwise engage with us;
• Through use of cookies and automated technologies that we have installed on the Websites and our other digital content that links to our Global Privacy Policy. For more information on our use of cookies and similar technologies, please review the “Cookies and similar technologies” section of our Global Privacy Policy; and
• From third parties. We may obtain your information from third-party sources, such as service providers and marketing partners.

Types of Personal Information Collected

The types of personal information we collected in the past 12 months may include:

• Identifiers, such as your name, date of birth, postal address, telephone number, email address, IP address, and other contact information.
• Information subject to protection under California law, such as the Identifiers above and our service providers may collect your credit card or debit card number.
• Commercial information, such as your purchase history, payment information including credit card numbers, and product reviews.
• Internet activity information, such as your IP address, device ID, device, or browser type, and browsing behavior.
• Geolocation data, such as your location inferred from your IP address, and other technologies to determine the approximate location of the devices from which you interact with us.
• Inferences, based on the information above to create profiles based on your purchasing habits.

Some of the information above may be considered Sensitive Personal Information, which we will use for legitimate business purposes, including to (i) perform services or provide goods reasonably expected by an average person; (ii) detect security incidents; (iii) resist malicious, deceptive or illegal actions; (iv) ensure the physical safety of individuals; (v) for short-term, transient use; (vi) perform or provide internal business services; or (vii) verify or maintain the quality or safety of a service or device. We do not sell or share (as defined under California law) any Sensitive Personal Information.

We may use and disclose personal information for the business and commercial purposes detailed in the “Purpose of collection and processing” and “Sharing and disclosure of personal information” sections of the Global Privacy Policy.

We retain your information as described in the “Retention period for personal information” section of the Global Privacy Policy.

We have not sold consumer information for any monetary value. However, our use of cookies, and tracking technologies may constitute “selling” or “sharing” under certain U.S. state consumer privacy laws. We have sold or shared the following categories of Personal Information with our advertising service providers and partners: Identifiers, Geolocation Data, and Internet Activity Information. We do not knowingly sell the Personal Information of minors under 18. To opt-out of targeted advertising, please use the “Do Not Sell or Share” link at the bottom of our home page, contact us at support@ticketsinjapan.com. For more information on opting-out, see the “Your California Rights” section below.

Shine the Light

California Civil Code Section 1798.83, also known as the “Shine The Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third-parties for direct marketing purposes and the names and addresses of all third-parties to which we disclosed personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

Your California Rights

If you are a California resident, you may have the following rights with respect to the personal information we process about you:

• Right to Know and to Access. You may have the right to request information about the categories of personal information we have collected about you, the categories of sources from which we collected the personal information, the purposes for collecting, selling, or sharing the personal information, and the categories of third-parties to whom we have disclosed your personal information, and the specific pieces of personal information we have collected about you.
• Right to Delete. You may have the right to request that we delete personal information that we have collected from you.
• Right to Correct. You may have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Opt-out of Sales or Sharing. You may have the right to opt-out of the “sale” or “sharing” of your personal information as such terms are defined by the California Consumer Privacy Act.
• Right to Non-Discrimination. Should you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand certain features of the Services may be unavailable to you.

Exercising Your California Rights

To exercise a California data privacy right, please use the “Do Not Sell or Share” link at the bottom of our home page, contact us at support@ticketsinjapan.com.

You can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable law.

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g. phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information ion provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

Contact Us

If you have questions about this notice or how we process your personal information, please contact us using the Contact Details section of the Global Privacy Policy.

Last updated: March 4, 2025

Additional U.S. States

These this annex supplements the information contained in the Global Privacy Policy. This annex applies only to residents of Nebraska and Texas.

Consumer Privacy Rights

You may have the following rights, subject to any applicable exemptions or limitations:

• Right to Access. You have the right to confirm whether we are processing your personal information and to access such personal information.
• Right to Correct. You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to Delete. You have the right to request that we delete your personal information under specific circumstances.
• Right to Opt-out. You have the right to object or opt-out of certain types of processing, including: (1) processing for the purpose of targeted advertising, (2) processing for the purpose of the sale of personal information, and (3) processing for the purpose of certain types of profiling and automated decision-making.
• Right to Data Portability. You have the right to request a copy of your personal information in an accessible format.
• Right to Equal Service. If you choose to exercise any of these rights, we will not discriminate against you in any way. If you exercise certain rights, understand that you may be unable to use or access certain features of our websites, services, or properties.
• Right to Appeal. If we do not grant your consumer request, you may have the right to appeal that denial.

You can exercise your privacy rights as described in “Submitting a Privacy Rights Request,” below.

Submitting a Privacy Rights Request

To exercise a data privacy right, please use the “Do Not Sell or Share” link at the bottom of our home page, contact us at support@ticketsinjapan.com.

Making a consumer request does not require you to create an account with us. Applicable law may limit the number of times that you can submit a particular request within a 12-month period. You can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable law.

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g. phone or email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. If, however, we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity, and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

Contact Us

If you have questions about this notice or how we process your personal information, please contact us using the Contact Details section of the Global Privacy Policy.

Last updated: March 4, 2025

Country-specific Exhibits

Hong Kong:

Rights of customers

Customers located in Hong Kong have the right to request access to, and right to correction of, the personal information held about them. To exercise these rights, customers may make such request to our support desk using the contact method outlined in Article 13 of this Global Privacy Policy.

Last updated: April 15, 2025

1. 處理之個人資料類別

本公司處理以下客戶之個人資料。

• 註冊資訊（姓名、用戶名、電子郵件地址、住所、居住國家、出生年月日、密碼、電話號碼、使用語言、支付方式）

• 服務資訊（客戶使用本服務之使用紀錄、支付紀錄及其他本公司就本服務所取得之個人資料（依所適用法令，本公司於必要時，將另行通知客戶後取得該資訊。））

• 造訪本公司網站客戶之Cookie及其他網路身分識別碼（包含使用本服務客戶之存取令牌、更新令牌、造訪本公司網站客戶之IP位址、網路服務提供者資訊、使用終端設備資訊及使用網頁瀏覽器資訊）及屬性（年齡、性別、興趣類別、喜好類別、有意消費者區隔等。關於興趣類別、喜好類別、有意消費者區隔之詳細資訊，請參閱網站（用戶屬性及興趣類別 – 協助分析 (google.com)））

• 查詢資訊（向本公司提出查詢之客戶姓名、電子郵件地址、查詢項目、查詢內容）

• 推測資訊（從客戶之個人資料中推測出客戶之偏好及其感興趣資訊）

• 除以上資訊外，本公司可能會在客戶使用本服務時，獲取客戶任意提供給本公司之資訊。

2. 蒐集及其他處理資訊之目的

本公司將以下列目的處理客戶之個人資料。

• 本服務之註冊及使用本服務時之本人身分驗證
• 本服務之客戶管理
• 本服務之提供、營運及維護
• 在使用本服務中產生對價時，針對該對價之請求
• 防止及應對與本服務相關之不正行為等
• 提供及介紹與本服務相關之售後服務
• 實施與本服務相關之問卷調查及促銷活動
• 調查及分析行銷數據，以及檢討及實施行銷策略
• 根據本服務客戶之屬性及軌跡紀錄分析，就符合客戶興趣及關心之本公司或本公司關聯公司或合作公司之商品及服務所為之提供、推薦、廣告及其他行銷實施。
• 分析造訪本公司網站之客戶屬性，以協助提升本公司網站之個人化及改善本公司網站
• 改善本服務，並策劃及開發新服務
• 維護本公司網站，調查伺服器障礙及修復缺陷
• 查詢答覆及與客戶等之聯絡
• 應對紛爭及訴訟等，及遵守本公司之法定義務
• 作為開發新服務及獲取新內容之參考
• 製作統計資訊及其他非個人資料
• 為客戶已同意之目的及蒐集時另行揭露給客戶之目的
• 為本公司之紀錄保存
• 為培訓員工
• 為確保本服務及本公司網站之安全性，包含防止網路攻擊
• 為依本全球隱私政策所記載之方法而向第三方提供資訊
• 為提供其他本服務及其附隨服務所必需之業務
• 為其他適用法規上所受容許之目的

3. 處理之法律依據等

本公司依據所適用之個人資料保護規範處理客戶之個人資料。有關各國處理資訊之法律依據，請參閱各國附加條款。

客戶提供個人資料，可能係基於成文法上之要件、契約上之要件或締結契約之必要條件等理由所必須。具體而言，被要求提供個人資料之情形如下：

• 提供註冊資訊是與本公司締結契約之必要條件，亦為契約上之義務要件。若客戶不提供該等資訊，本公司可能無法為客戶註冊會員，亦可能無法向客戶提供本服務。

• 提供服務資訊及嚴格必須之網路身分識別碼為契約上之義務要件。若客戶不提供該等個人資料，本公司可能無法向客戶提供本服務。

• 提供查詢資訊為契約上之義務要件。若客戶不提供查詢資訊，本公司可能無法回答客戶之問題。

• 於其他情形下，若提供個人資料為必要之條件，而客戶不提供其個人資料時，本公司可能無法向客戶提供本公司服務（含本公司網站）。

4. 個人資料之保存期限

為決定個人資料之適當保存期限，本公司將考慮個人資料之數量、性質及機密性，個人資料被不當使用或揭露之潛在損害風險、本公司處理個人資料之目的，及是否能透過其他方式以達成此類目的，以及所適用之法定要件。當本公司不再需要所蒐集之客戶個人資料時，本公司將刪除或將個人資料為匿名化處理；若無法刪除或為匿名化處理（例如，個人資料經儲存在備份歸檔等情形），本公司將安全地保管客戶之個人資料，並確保不再處理該個人資料，直至該資訊得經刪除為止。

5. 個人資料之取得來源

本公司會直接從客戶端、或透過Cookie及其他網路識別碼自動取得其個人資料。此外，本公司也可能間接從第三方蒐集客戶之個人資料。例如，本公司會從Google LLC等分析本公司網站使用情形之服務提供者端，間接取得造訪本公司網站客戶之分析及其屬性資訊。此外，若客戶在使用本服務時選擇Paypal作為其支付方式時，本公司將從PayPal Pte. Ltd.間接取得客戶在Paypal所註冊之姓名、住所地址及電子郵件地址。此外，本公司可能會根據客戶之個人資料推測客戶之喜好及其感興趣資訊。

6. 個人資料之共享及揭露

本公司為達成上述個人資料處理之目的，會在以下情形與第三方共享及揭露客戶之個人資料。

○ 與信用卡發行公司等共享資訊
• 為防止付款時之不正行為及順利進行交易，本公司將與信用查詢機構、支付公司（如PayPal Pte. Ltd.等）、第三方支付公司、信用卡發行公司共享資訊。

○ 與合作公司共享
• 對與本公司共同提供如票券銷售等服務之第三方，就交易進行確認、報告及諮詢等，或進行不正調查、行銷等目的所為之資訊提供。

○ 與集團公司共享
• 向本公司之母公司及集團公司提供資訊。

○ 與處理者（服務提供者）共享
• Google LLC等分析本公司網站使用情形之服務提供者
• Google LLC等支援客戶之外包公司所委託之雲端服務事業
• 為調查、檢驗、預防及應對不當使用本服務之情形為目的，而向外部調查機構等提供資訊
• 其他本公司所委託對象

○ 法令遵循等
根據客戶居住國內或居住國外之法律及／或公家機關及政府當局之請求，本公司可能會需要向該等機關及當局揭露客戶之個人資料。此外，為執行法律或應對其他重要公共問題，本公司在必要或適當之情形下，可能會揭露客戶之個人資料。為保護本公司之權利、獲得可能之救濟、執行本公司之使用規約、調查詐欺行為或保護本公司之營運或客戶，本公司於合理必要之情形況下，可能會揭露客戶之個人資料。

○ 其他
在以下情形，本公司可能會與第三方共享客戶之個人資料。
• 實際或潛在之企業出售、合併、收購、重組或其他移轉資產之全部或一部（包含破產程序之一部）時所伴隨共享個人資料之情形
• 為保護本公司或第三人之生命、身體或財產所必要，而難以取得客戶同意之情形
• 客戶同意時
• 其他適用法規容許時

7. 個人資料之國際傳輸

依上述共享及揭露之結果，客戶之個人資料可能會被傳輸至以下國家：
• 美國
• 新加坡
• 日本

於此情形，本公司將依各國個人資料保護規範之要求實施適當保護措施。有關各國之保護措施，請參閱各國附加條款。

○ 依據日本個人資料保護法提供資訊
本公司在客戶同意本全球隱私政策之情形下，為上述「與信用卡發行公司等共享資訊」，可能向國外之第三方提供客戶個人資料。有關接受資訊提供之第三方之所在國家資訊如下。再者，接受資訊提供之第三方將遵守該第三方所在國之個人資料保護相關法規範，處理客戶之個人資料。
【國家名稱】 新加坡
【該國之個人資料保護制度相關資訊】 詳情請參考此網頁

8. 安全管理措施

本公司為防止客戶個人資料洩漏、遺失或毀損等，基於管理之目的，將採取必要且適當之措施。此外，本公司在國外處理個人資料時，將於充分了解該國之個人資料保護制度等外部環境之基礎上，採取必要且適當之措施以確保安全管理個人資料。

9. Cookie及類似技術

當客戶造訪本公司網站，並且啟用Cookie等（含Flash Cookie、網頁信標等追蹤技術及其他技術，下稱「Cookie等」）時，本公司可能會自動獲取客戶所使用之電腦、手機、平板電腦及其他資訊通信終端設備之相關資訊。本公司取得此等資訊時，本公司將以此等資訊作為個人資料進行處理。若客戶不希望使用Cookie等，得透過變更網頁瀏覽器之設定予以停用。有關位於或居住在EEA（歐洲經濟區）及英國客戶之處理Cookie之法規依據，請參閱EEA（歐洲經濟區）及英國之附加條款。

○ 關於分析Cookie
本公司可能與長期蒐集客戶使用本公司網站相關數據之第三方合作。例如，為分析或行銷目的而可能使用Google Analytics。 Google Analytics會使用Cookie等蒐集客戶之資訊。關於客戶使用本公司網站時，Google Analytics將如何蒐集、使用資訊，請參閱網站（https://policies.google.com/technologies/partner-sites）。若客戶希望停止使用Google Analytics，請進入此網站（https://tools.google.com/dlpage/gaoptout）。

10. 導入第三方網站之連結等

本服務可能會向客戶提供導入第三方網站或應用程式之連結。本公司不會針對該等網站或應用程式將如何處理個人資料進行管理，該等網站或應用程式不在本全球隱私政策之適用範圍內。客戶須確認其所使用之其他網站或應用程式之隱私政策，以了解該等網站或應用程式如何處理個人資料。

11. 客戶之權利

本公司尊重客戶在所適用之個人資料保護規範下所享有之權利。依日本之個人資料保護法，客戶得請求揭露個人資料、更正、補充或刪除內容，及停止利用、刪除或停止向第三方提供個人資料，以及揭露提供第三方之紀錄。此外，根據所適用之各國個人資料保護規範，可能賦予客戶其他權利。關於各國所賦予之權利，請參閱各國附加條款。若客戶希望行使權利時，請洽詢本全球隱私政策第13條（聯絡方式）中所載之聯絡人。

12. 兒童之個人資料

本公司不處理未滿18歲兒童之個人資料。

13. 聯絡方式

有關本公司個人資料之處理及本全球隱私政策之問題、投訴或其他詢問，請聯繫以下諮詢窗口。

・透過電子郵件進行詢問:support@ticketsinjapan.com
此外，有關本公司地址及代表人姓名，請參閱公司簡介。

14. 本全球隱私政策之變更

本公司變更本全球隱私政策（含各國附加條款）時，得透過在本公司網站上發布、向客戶寄送電子郵件或其他本公司認為適當之方式（如所適用之法規有要求之必要方式，將依循該方式）通知客戶，從而變更或增訂本全球隱私政策之全部或一部。若有其他所適用之個人資料保護規範要求之程序，本公司將採取該相應之程序。

本公司建議客戶定期造訪此頁面確認更新情形。客戶得透過查看「最後更新日期」以確認本全球隱私政策（含各國附加條款）之最近一次更新時間。

隱私政策附加條款（台灣）

株式会社ウェイブダッシュ（Wavedash Co., Ltd.）（下稱「本公司」）為蒐集、處理及利用客戶之個人資料，爰依據台灣個人資料保護法第8條第1項規定告知下列事項，請客戶詳閱並同時參閱本公司「全球隱私政策」：

一、蒐集之目的：

請參閱「全球隱私政策」第2條。

二、蒐集之個人資料類別：

請參閱「全球隱私政策」第1條。

三、個人資料利用之期間、地區、對象及方式：

（一）期間：
原則上為個人資料蒐集之特定目的存續期間，並請參閱「全球隱私政策」第4條。
（二）對象：
請參閱「全球隱私政策」第6條。
（三）地區：
請參閱「全球隱私政策」第7條。
（四）方式：
符合個人資料保護相關法令以自動化機器或其他非自動化之方式，包括但不限於書面、電話、簡訊、傳真、電子郵件、網際網路、紙本或其他基於蒐集目的且合於當時科學技術之適當方式等進行利用。

四、依據個人資料保護法第3條規定，客戶就本公司保有客戶之個人資料得行使下列權利，並請參閱「全球隱私政策」第11條：

（一）查詢或請求閱覽。
（二）請求製給複製本。
（三）請求補充或更正。
（四）請求停止蒐集、處理或利用。
（五）請求刪除。

五、不提供個人資料所致權益之影響：

除本公司為履行法定義務所必要之資料外，客戶得自由選擇是否提供個人資料。有關拒絕提供或提供不完整個人資料所致權益之影響，請參閱「全球隱私政策」第3條。

各國附加條款

香港:

客戶之權利

位於香港的客戶有權要求查閱和更正本公司所持有關於他們的個人資料。要行使這些權利，客戶可以透過本全球隱私政策第13條中列出的聯繫方式向本公司的諮詢窗口提出此類請求。

最後更新日期：2025年4月15日

1. 属于处理对象的个人信息的种类

本公司处理您的下列个人信息：

• 注册信息（姓名、用户名、电子邮件、地址、居住国、出生年月日、密码、电话号码、使用语言、结算方式）

• 服务信息（您使用本服务的使用记录、结算记录及其他本公司就本服务取得的个人信息（适用法律法规要求时，本公司另行向您通知之后再取得。））

• 访问本公司网站的您的Cookie及其他在线标识符（包括使用本服务的您的访问令牌、刷新令牌、访问本公司网站的您的IP地址、网络服务商信息、使用终端信息及使用浏览器信息）及属性（年龄、性别、兴趣类别、亲和类别、购买意向较强的细分等。兴趣类别、亲和类别、购买意向较强的细分的详细信息请参见此处（受众特征和兴趣简介 - Google Analytics（分析）帮助）。）

• 咨询信息（向本公司咨询的您的姓名、电子邮件、咨询项目、咨询内容）

• 推测信息（根据您的相关个人信息推测的您的偏好及关注点的信息）

• 除上述信息外，本公司还有可能取得您在使用本服务时任意向本公司提供的信息。

2. 收集及其他处理的目的

本公司出于下列目的处理您的个人信息：

• 进行本服务的注册及使用时的本人认证
• 进行本服务的用户管理
• 提供、运营、维持本服务
• 本服务中产生对价时进行请款
• 防止和应对本服务相关的不正当行为等
• 提供、介绍本服务相关售后服务
• 实施本服务相关的问卷调查、促销活动
• 调查、分析营销数据以及探讨、实施营销政策
• 结合对本服务中您的属性、行为记录的分析得出的您的兴趣及关注点等，提供本公司或本公司的关联公司或合作公司的商品及服务或进行劝诱、广告及其他营销活动
• 为了分析访问本公司网站的您的属性，以助于本公司网站的个性化和改善
• 改善本服务，以及进行新服务的企划和开发
• 維进行本公司网站的维护、服务器的故障调查以及问题的修复
• 应对咨询及与用户等联络
• 为了应对纠纷及诉讼等以及遵守本公司的法律义务
• 用作开发新服务及获取新内容的参考
• 为了制作统计信息及其他非个人信息
• 为了实现您同意的目的以及在收集时另行向您披露的目的
• 用于本公司保存记录
• 为了培养员工
• 为了确保本服务以及本公司网站的安全，包括防止网络攻击
• 为了按照本全球隐私政策中记载的方法向第三方提供
• 提供本服务及其附带服务所需的其他业务
• 为了实现其他适用法律法规允许的目的

3. 处理的法律依据等

本公司根据所适用的个人信息保护规制处理您的个人信息。本公司处理各国个人信息的法律依据请参见各国附件。

提供个人信息属于成文法上规定的必要条件、合同上规定的必要条件或签订合同时的必要条件等的情况下，您必须提供个人信息。要求提供个人信息的情形具体如下：

• 提供注册信息，是与本公司签订合同时的必要条件，也是合同上规定的必要条件。如果您不提供该等信息，本公司可能无法为您注册会员，也无法为您提供本服务；

• 提供服务信息以及绝对必要的在线标识符，是合同上规定的必要条件。如果您不提供该个人信息，本公司可能无法向您提供本服务；

• 提供咨询信息，是合同上规定的必要条件。如果您不提供咨询信息，本公司可能无法向您答复；

• 其他的提供个人信息为必要条件而您不提供个人信息的情形下，本公司可能无法为您提供本公司的服务（包括本公司的网站）。

4. 个人信息的保存期限

为确定适当的个人信息保存期限，本公司将综合考虑个人信息的数量、性质及保密性、个人信息被不正当使用或披露而造成潜在损害的风险、本公司处理个人信息的目的、能否以其他方式实现该等目的以及所适用的法律要件。如果本公司不再需要所收集的您的个人信息，本公司会把该个人信息删除或匿名化，如果无法删除或匿名化（例如，个人信息已被存储在备份档案中等），本公司会安全地存储您的个人信息，并使其不能进行任何进一步的处理，直到可以删除为止。

5. 个人信息来源

本公司通过您的直接提供取得您的个人信息，或者自动取得Cookie及其他在线标识符。另外，本公司可能会从第三方间接收集您的个人信息。例如，访问本公司网站的用户的分析及属性信息，从Google LLC等本公司网站使用情况分析服务提供商间接取得。如您在使用本服务时使用Paypal进行结算，则本公司会从PayPal Pte. Ltd.间接取得您在Paypal注册的姓名、地址、电子邮件。本公司还会根据您的相关个人信息推测您的偏好及关注点。

6. 个人信息的共享及披露

为实现上述个人信息的处理目的，本公司在下列情况下向第三方共享、披露您的个人信息：

○ 向信用卡发行公司等共享
• 为了防止支付中的不正当行为以及实现交易的顺利进行，向信用查询机构、结算公司（PayPal Pte. Ltd.等）、结算代理公司、信用卡发行公司提供

○ 向合作公司共享
• 以进行交易相关的确认、报告、咨询等或不正当行为调查等或营销等为目的，向与本公司共同提供门票销售等服务的第三方提供

○ 向集团公司共享
• 向本公司的母公司及集团公司提供

○ 向处理者（服务提供商）共享
• Google LLC等本公司网站使用情况分析服务提供商
• Google LLC等负责用户支持的外部受托方雇用的云服务经营者
• 以调查、发现、预防及应对本服务中的不正当使用等为目的，向外部调查机构等提供
• 其他本公司的业务受托方

○ 合规等
根据您的居住国境内或境外的法律以及/或官方机构及政府当局的要求，本公司可能需要向该等机构及当局披露您的个人信息。为了应对执法或其他重要公共问题而有必要披露或进行披露较为妥当时，本公司可能会披露您的个人信息。进行披露为本公司为了保护本公司的权利、追求可以利用的救济、执行本公司的使用规约、调查欺诈行为或为了保护本公司的运营或用户而合理所需时，本公司也有可能会披露您的个人信息。

○ 其他
此外，下列情形下，本公司会向第三方共享您的个人信息：
• 因实际的或潜在的企业的出售、合并、收购、重组及其他资产的全部或部分的转移（包括破产程序的一部分）而共享个人信息时；
• 为了保护本公司或第三方的生命、身体或财产而需要共享，且难以取得您的同意时；
• 您同意时；
• 其他适用法律法规允许的情形。

7. 向境外转移个人信息

经上述共享及披露，您的个人信息有可能被转移到以下国家：
• 美国
• 新加坡
• 日本

届时，本公司将采取各国的个人信息保护规制要求的妥善的保护措施。各国的保护措施请参见各国附件。

○ 基于日本的个人信息保护法提供信息
本公司在您同意本全球隐私政策的前提下，为了上述“向信用卡发行公司等共享”，可能会将您的个人信息提供给位于外国的第三方。接受提供的第三方所在国家的信息如下。接受提供的第三方遵守该第三方所在国家的个人信息保护相关法律规制，处理您的个人信息。
【国家名称】 新加坡
【该外国的个人信息保护制度相关信息】 详见此处

8. 安全管理措施

为了对您的个人信息进行管理，如防止其发生泄露、丢失或损坏等，本公司会采取必要且适当的措施。另外，本公司在外国处理个人信息时，会在了解该外国的个人信息保护相关制度等外部环境的基础上，采取必要且适当的措施安全管理个人数据。

9. Cookie及类似技术

您访问本公司网站时，且您将Cookie等（包括Flash Cookie、网站信标等跟踪技术、其他技术，以下称“Cookie等”）设为有效时，本公司有可能会自动取得您使用的PC、手机终端、平板终端等信息通讯终端相关信息。本公司取得该等信息时，本公司将该等信息作为个人信息处理。如您不希望使用Cookie等，可以通过变更网络浏览器的设置使其无效。位于或居住在EEA（欧洲经济区）及英国的用户相关的Cookie处理法律依据，请参见EEA（欧洲经济区）及英国附件。

○ 关于分析Cookie
本公司可能会与长期收集用户使用本公司网站的相关数据的第三方合作。例如，出于分析及营销的目的，本公司可能会使用Google Analytics。
Google Analytics使用Cookie等收集您的信息。关于您使用本公司网站时Google Analytics如何收集、使用信息，请参见此处（https://policies.google.com/technologies/partner-sites）。
如您希望停用Google Analytics，请点击此处（https://tools.google.com/dlpage/gaoptout）。

10. 指向第三方网站等的链接等

本服务有可能向您提供指向第三方网站或应用程序的链接。本公司并不对该网站或应用程序如何处理个人信息进行管理，该网站或应用程序不在本全球隐私政策的范围之内。您需要确认所使用的其他网站或应用程序的隐私政策，并了解该网站或应用程序如何处理个人信息。

11. 您的权利

本公司根据适用于您的个人信息保护规制，尊重您享有的权利。您可以根据日本的个人信息保护相关法律，要求本公司披露个人信息，更正、追加、删除其内容，停止使用、消除、停止向第三方提供，披露向第三方提供的记录。除此之外，根据所适用的各国个人信息保护规制，您还有可能被赋予其他权利。各国赋予用户的权利请确认各国附件。您行使权利时，请咨询本全球隐私政策第13条（联系方式）记载的联系窗口。

12. 儿童的个人信息

本公司不处理未满18岁的儿童的个人信息。

13. 联系方式

如您就本公司的个人信息处理及本全球隐私政策有疑问、投诉及其他咨询，请联系下列咨询窗口：

・邮件咨询:support@ticketsinjapan.com
本公司的地址及代表人的姓名请参见公司概要。

14. 本全球隐私政策的变更

本公司变更本全球隐私政策（包括各国附件）时，经在本公司网站上登载、向您发送电子邮件或通过其他本公司认为适当的方式（所适用的法律法规规定了必要的方式时，从其规定）通知后，可变更或追加本全球隐私政策的全部或一部分。所适用的个人信息保护规制中规定了其他必要程序的，履行该程序。

建议您定期访问本页面，确认是否有更新。您可以通过“最终更新日”来确认本全球隐私政策（包括各国附件）最后的更新日期。

中国附件

生效日：2025年4月15日

本附件适用于居住于/位于中华人民共和国（不包括香港、澳门及台湾。以下称“中国”）的您。

1. 个人信息处理的法律根据

本公司在处理个人信息时，经取得您的同意后按照合法、正当、必要及诚信原则予以处理。您对全球隐私政策（以下称“本政策”）及本附件的同意包含有关该个人信息处理的同意。但是，符合以下规定事由时，本公司根据个人信息保护法无需经您同意即可处理个人信息。

• 为签订、履行以您作为一方当事人的合同所必需；
• 按照依法制定的劳动规章制度和依法签订的集体合同实施人力资源管理所必需；
• 为履行法定职责或法定义务所必需；
• 为应对突发公共卫生事件，或在紧急情况下为保护自然人的生命健康和财产安全所必需；
• 为公共利益实施新闻报道、舆论监督等行为，在合理的范围内处理您的个人信息；
• 依照中国的个人信息保护法规定在合理的范围内处理您自行公开或者其他已经合法公开的个人信息；
• 法律、行政法规规定的其他情形。

2. 向中国境外转移个人信息

本公司在本政策中记载的范围内，可能会向位于中国以外的国家/地区转移您的个人信息。您对本政策和本附件的同意包含将该个人信息转移至中国境外的同意。另外，本公司采取必要措施，保障境外接受方处理个人信息的活动达到个人信息保护法规定的个人信息保护标准。

3. 您的权利

本公司保障您对自己的个人信息行使以下权利。但是，法律、行政法规中另有规定的不在此限。

• 知情权与决定权：您对您的个人信息的处理享有知情权、决定权，有权限制或者拒绝他人对您的个人信息进行处理。
• 查阅、复制：您有权向本公司查阅、复制您的个人信息。您请求查阅、复制您的个人信息的，本公司将及时提供。
• 转移：您请求将个人信息转移至您指定的个人信息处理者，符合国家网信部门规定条件的，本公司将提供转移的途径。
• 更正与补充：您发现您的个人信息不准确或者不完整的，有权请求本公司更正、补充。您请求更正、补充您的个人信息的，本公司将对您的个人信息予以核实，并及时更正、补充。
• 删除：有下列情形之一的，您有权请求本公司删除个人信息： (1)处理目的已实现、无法实现或者为实现处理目的不再必要；(2)本公司停止提供产品或服务，或者保存期限已届满；(3)您撤回同意；(4)本公司违反法律、行政法规或者违反约定处理个人信息；或者(5)法律、行政法规规定的其他情形。
• 要求说明处理规则的权利：您有权要求本公司对您的个人信息处理规则进行解释说明。
• 撤回同意：基于您的同意处理个人信息的，您有权撤回同意。