PRIVACY POLICY
We at Vista Hotel Management Co., Ltd. (“we”, “us”, “our” or “Vista Hotel Management”) value your privacy and are committed to taking care of your Personal Data, which is a responsibility that we take very seriously.
This Privacy Policy explains how we may use the Personal Data we collect when you visit our website https://www.hotel-vista.jp/ (“Website”), inquire about our services, or use our products and/or services such as making a booking with us. It also explains how we comply with EU legislation related to data protection (EU General Data Protection “GDPR”), with UK legislation related to data protection (UK General Data Protection “GDPR”) and the UK data protection law Data Protection Act 2018 (“Data Protection Act”) and the California Consumer Privacy Act (“CCPA/”CPRA”) and what your rights are under these legal frameworks.
Vista Hotel Management Co., Ltd is the data controller of the services offered through this website. Our registered office is at 2-7, Nihonbashi Ōdenmachō, Chuo-ku, 103-0011, Tokyo, Japan.
Personal Data means any information relating to you which allows us to identify you, either directly from that data or because we combine that information with other data about you.
When you use our Website, including booking services and/or products with us, or interact with us in relation to our services and/or products, you may provide us with your Personal Data, or we may obtain Personal Data about you.
We may process the following Personal Data:
We will collect Personal Data from several sources. These include the following:
The table below describes the main purposes for which we process your personal data, the categories of your information involved and our lawful basis for being able to do this.
| Purpose | Personal Data used | Lawful basis |
|---|---|---|
| So that we can provide our website to you | IP address and consent information | We have a legitimate interest in our website working properly. |
| Ensuring IT support and network security | Use of and movements through our Website, the date and time of your visit or use of our Website, IP addresses, device information such as type and ID, browser type and ID, plug-ins, country of access, browsing history | We have a legitimate interest in ensuring our systems are secure. |
| Handling of accommodation reservations and guest management | Name, phone number, email address, gender, address, companion information (gender), company/corporate name, passport/ID document data, special category data (dietary restrictions, accessibility requirements), age, affiliation/workplace information, companion information |
This is necessary to fulfil our contract with you. Some of the information you provide (e.g. dietary requirements or accessibility needs) may constitute health data under data protection law. We will only process this data based on your explicit consent, which we will obtain separately before collecting it. |
| To invoice you and receive payments | Name, phone number, email address, payment details (credit card number, CVC) | This is necessary to fulfil our contract with you. |
| Analysing the usage of our website | Cookies, IP address, browser type/plug-in, device type and ID, country of access, browsing history, activities on the website | We only use your personal data for analytical purposes if you gave us your consent. |
| Optimizing ad delivery on our website | Cookies, IP address, browser type/plug-in, device type and ID, country of access, browsing history, activities on the website | We only use your personal data for advertisement purposes if you gave us your consent. |
| To deal with inquiries, and other communications from you | Name, phone number, email address, address, purpose and content of inquiry | This is necessary to fulfil our contract with you. |
| For the purpose of complying with any legal and regulatory requirements | Name, address, telephone number, e-mail address, date of birth, credit card details/account details, contact history, information on services used | We have a legal obligation to comply with any legal or regulatory requirements. |
| Storage of records relating to you and also records relating to our business | All the personal information we collect about you | To be able to manage and fulfil our contract with you, we may have a legal and/or regulatory obligation to do so and we also have a legitimate interest to keep proper records. |
Some of your Personal Data may be required due to legal, contractual, or other obligations. Failure to provide this data may impact our ability to fulfil our contract with you or comply with relevant legal obligations. For other Personal Data, whilst you may not be under an obligation to provide it to us, if you do not provide it, we may not be able to properly perform our services for you. Without your Personal Data, you may be unable to complete bookings or purchases on our Website.
In order to operate our Website and provide you with the services and/or products you have booked we may need to share your Personal Data with third parties. This includes sharing your Personal Data with and companies engaged by us to manage our relationship with you and provide you the services described above.
We may share your personal data with the following recipients:
We do not disclose Personal Data to anyone else except as set out above unless we have your consent, or we are legally obliged to do so. These recipients will only process your Personal Data to perform tasks and duties on our behalf and in compliance with this Privacy Policy and governing data protection laws.
In the course of our operations, it may be necessary to transfer your Personal Data to recipients located outside the European Union (EU), the European Economic Area (EEA) or the United Kingdom (UK). These transfers may be to our, partners or service providers who are located in regions, with differing data protection laws than those in your country, such as the United States (US), South Korea, China or Singapore. When transferring your Personal Data internationally we implement appropriate safeguards to ensure the security and confidentiality of your data. These safeguards, when we cannot rely on an issued Adequacy Decision, may include for example Standard Contractual Clauses (SCCs) approved by the European Commission and as modified by the UK Approved Addendum.
Generally, we will retain your Personal Data for as long as we need it for the purposes for which it was collected. The duration for which we retain your Personal Data will differ depending on the type of information and the reason why we collected it from you. However, in some cases Personal Data may be retained on a long-term basis: for example, Personal Data that we need to retain for legal purposes will normally be retained in accordance with usual hospitality practices and regulatory requirements.
In addition, we may be allowed to retain Personal Data whenever you have given consent to such processing e.g., analytical purposes as long as such consent is not withdrawn.
We take the security of your information very seriously and only handle Personal Data as permitted by data protection regulations. We use a variety of technical and organizational measures to help protect your Personal Data from unauthorized access, disclosure, modification, loss or destruction in accordance with applicable data protection laws. When handling Personal Data, our employees are obliged to comply with the regulations of the EU GDPR.
You have the following rights in relation to your Personal Data:
The period for handling a request is 30 days unless it is a particularly complex request.
Once our specified retention period has expired, we shall delete the relevant Personal Data. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of such retention period.
Vista Hotel Management does not knowingly collect Personal Data from persons who are not legally permitted to book our services without obtaining parental consent. If it comes to our attention that we have collected or processed Personal Data from such a person, we may delete this information without notice. If you have reason to believe that this has occurred, please contact us using the contact details in the section “Contact Information”.
We may need to make changes to this Privacy Policy to ensure that it complies with current legal requirements or to implement changes to the services detailed in the Privacy Policy, e.g., when introducing new services and products. In this case, your future visits to our Website will be subject to the updated Privacy Policy.
We value your Data Subject Rights under the GDPR and have therefore appointed Prighter as representative according to Art 27 GDPR. We provide you with an easy way to submit a privacy related request like a request to access or erase your personal data by visiting: https://app.prighter.com/portal/18758902380
What personal information we collect and disclose
This section provides details about the categories of personal information we have collected from consumers over the past 12 months. It also outlines the sources of this information, the business or commercial purposes for its collection, and whether we have disclosed any categories of personal information to third parties during the same period.
| Categories of personal information | Source from which we collected information | Purpose for collecting the information | Categories of third parties to whom the information was disclosed |
|---|---|---|---|
| Identifiers, such as name, address, email address, IP address | Directly from you *From the person you are travelling with |
|
Service technology providers |
| Personal information, such as telephone number, payment data, booking details | Directly from you |
|
Service technology providers |
| Characteristics of protected classifications, such as date of birth, and gender | Directly from you |
|
Service technology providers |
| Internet or other electronic network activity information, such as your IP address, browser type and information, device ID and type, cookie information, plug-ins, browsing history, website activity, date and time of access, | Directly from you |
|
Service technology providers |
| Geolocation data, such as the country of your access | Directly from you |
|
Service technology providers |
| Sensitive information, such as credit card/bank account information | Directly from you |
|
Payment service provider |
| Health information, such as information concerning special needs for assistance due to health conditions, including dietary restrictions and accessibility requirements | Directly from you |
|
n/a |
Sale or sharing of personal information
We did not sell any personal information in the preceding 12 months. However, we have shared personal information with third parties for the purpose of cross-context behavioural advertising, as defined in section 1798.140 (ah)(1) of the CCPA/CPRA.
California residents have the right to direct us to stop sharing their personal information. For more information on how to exercise this right, including how to opt out of sharing, please refer to the section “Consumer Rights under the CCPA/CPRA - Right to opt-out of third-party sales and sharing”.
Vista Hotel Management does not sell any personal information.
No sale or sharing of minors' personal Information
We do not have actual knowledge that we sell or share personal information about minors under the age of 16.
Sensitive personal Information
We do not use or disclose sensitive personal information for purposes other than those specified in Section 7027(m) of the CCPA regulations.
Consumer rights under the CCPA/CPRA
If you are resident in California, you have the following rights in respect of your Personal Information:
The exercise of your rights is free of charge. The response to requests based on the provisions of the CCPA/CPRA should be provided within a maximum of 45 days. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. However, for requests to opt out or limit the use of sensitive personal information (SPI), we will respond within 15 days.
How you can exercise your rights under CCPA/CPRA
To exercise any of the rights described above, please send us a verified request using the methods listed below. Your request must:
If we cannot verify your identity or authority to make the request, we will not be able to comply with your request. We will inform you if we cannot verify your identity or authority. We will only use personal information provided in a verifiable request to verify the requestor’s identity or authority to make the request.
Contact us using one of the following methods:
Financial Incentive Notice
Vista Hotel Management does not offer a financial incentive for the collection, sale, or deletion of personal information. Vista Hotel Management primarily collects personal data from customers in order to fulfil booking and reservation requests.
If you have any questions or comments about this Privacy Policy, the ways in which we collect and use your Personal Data, or your choices and rights regarding such use please do not hesitate to contact us by:
Email: Contact us via email
Postal Address: 2-7, Nihonbashi Ōdenmachō, Chuo-ku, 103-0011, Tokyo, Japan.
Date of Enactment October 6, 2026
COOKIE POLICY
Vista Hotel Management Co., Ltd.("we", "us", or "our") uses cookies on its website. This Cookie Policy explains the types of cookies used on our website, the information collected through them, the purposes for which they are used, and how they are managed.
This Cookie Policy includes information based on the General Data Protection Regulation (GDPR), the UK GDPR and the CCPA/CPRA, assuming access by individuals residing in the European Economic Area (EEA) , the United Kingdom (UK) and California.
Please refer to our Privacy Policy for further information on how we obtain, store, and process your personal data.
“Cookie” refers to a small text file that is stored in a browser storage of your device (such as a computer or smartphone) when you visit a website. They are generally used for purposes including provision of website’s functions, analyzing access status and other related information, improving the user experience, and delivering advertisements.
Cookies are used for various purposes. The following are the categorizations of Cookie based on the purposes for which they are used.
* Please note that cookies may fall into more than one of the following classifications. For example, some cookies are used to record your choices to improve your experience and also be used to deliver online advertisements.
Cookies are categorized as 1st party cookie and 3rd party cookie based on the issuer of the cookie.
Cookies are generally categorized into two categories depending on how they will be stored on your device. Please refer to section 3 for the specific retention period of each cookie we use (although, depending on the type of browser you use, they may be erased in a shorter period of time than described in section 3.).
The details of the cookies used on our website are as follows.
Almost every browser enables the use of certain cookies by default, but you can limit or disable the use of cookies by changing your browser settings. You may also choose the type of cookies you wish to use from the cookie banner that appears on our website.
However, please be advised that if you restrict or disable cookies, you may not be able to use certain website features or some pages may not display properly, as described above.
Cookies will remain on your device until their retention period expires, but you can delete them at any time on your own.
The procedure for changing cookies and other usage settings differs depending on the browser you use. Please refer to the links below for instructions on how to change the settings in commonly used browsers.
*If you use a different device browser to access the website, you will need to adjust each browser on each device individually to conform to your preferences.
Email: Contact us via email
Phone: +81-3-6369-5560
Mail: 2-7, Nihonbashi Ōdenmachō, Chuo-ku, 103-0011, Tokyo, Japan
Date of Enactment October 6, 2026