Privacy Policy
1. Controller and Contact
- Operator: JPANNAI (sole proprietor / individual operator)
- Contact: contact@jpannai.com
- Data Protection Contact: JPANNAI Operator (use the email above)
We have not appointed a Data Protection Officer (DPO), as our processing does not meet the thresholds under GDPR Art. 37. For all data protection inquiries, please contact us at the email above.
2. Information We Collect
We do not require user accounts and do not directly collect names, addresses, or phone numbers. However, the following data may be collected automatically:
- Server access logs
- IP address, user agent, referrer, timestamp, requested URL. Used for site operation, security, and traffic analytics.
- Cookies and similar technologies
- Browser identifiers set by us and third-party vendors. Used for site functionality, analytics, and advertising (see our Cookie Policy).
- Geolocation
- Latitude and longitude provided by your browser only when you grant explicit permission for the "Find stores near me" feature. Not stored on our servers (see Section 3).
3. Geolocation (Important)
When you use the "Find stores near me" feature, your browser's Geolocation API provides latitude and longitude to our server as a one-time query parameter only. We do not store these coordinates in any database or persistent storage. Server access logs that may temporarily contain coordinate data are regularly purged or masked.
4. Purposes of Processing and Legal Bases (GDPR Art. 6)
| Purpose | Data | Legal basis |
|---|---|---|
| Operating and maintaining the Site | Access logs, essential cookies | Legitimate interests (Art. 6(1)(f)) |
| Security and fraud prevention | Access logs, IP | Legitimate interests (Art. 6(1)(f)) |
| "Find stores near me" feature | Geolocation | Consent (Art. 6(1)(a)) |
| Analytics (planned) | Cookies, anonymized IP | Consent (Art. 6(1)(a)) |
| Personalized advertising (Google AdSense) | Cookies, IP, browsing data | Consent (Art. 6(1)(a)) for EEA/UK/CH |
| Compliance with legal obligations | Various | Legal obligation (Art. 6(1)(c)) |
5. Third-Party Advertising (Google AdSense)
This Site uses the third-party advertising service Google AdSense. Google and other third-party vendors use cookies to serve ads based on your prior visits to this Site and other sites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this Site and/or other sites on the Internet.
You may opt out of personalized advertising at:
- Google Ads Settings: adssettings.google.com
- DAA (US): aboutads.info/choices
- EDAA (EEA): youronlinechoices.eu
- NAI: networkadvertising.org/choices
6. Recipients and International Transfers
| Recipient | Service | Data | Country | Safeguards |
|---|---|---|---|---|
| Google LLC | AdSense | Cookies, IP, browsing data | USA | EU SCCs; EU-US Data Privacy Framework |
| Google LLC | Analytics (planned) | Cookies, anonymized IP | USA | EU SCCs; EU-US Data Privacy Framework |
7. Retention
- Access logs: up to 12 months
- Cookies: per cookie expiry (see Cookie Policy)
- Geolocation: not stored
8. Your Rights
- GDPR / UK GDPR: access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to a supervisory authority.
- Japan APPI: notification of purpose, disclosure, correction, addition, deletion, suspension of use.
- Korea PIPA: access, correction, deletion, suspension of processing.
Email contact@jpannai.com. We will respond within one month (GDPR), 10 days (PIPA), or as required by applicable law. Identity verification may be required.
9. Security
- HTTPS (TLS) encryption for all communications
- IP allowlist and authentication for the admin interface
- Access log retention controls
- Rate limiting
10. Children
This Site is not directed to children under 13 (under 16 for EEA, under 14 for Korea). We do not knowingly collect personal data from such children. If you believe a child has provided personal data, please contact us for prompt deletion.
11. Data Sources
Store location data is partly sourced from OpenStreetMap (© OpenStreetMap contributors), licensed under the Open Database License (ODbL).
12. Changes
We may update this policy. Material changes will be announced on the Site.
13. Authoritative Language
The Japanese version (jp.jpannai.com) is the authoritative version. This English version is provided for reference. Where local mandatory law of your residence provides otherwise, that law prevails.