Rakuten Travel Privacy Policy

2024.04.17

Welcome to the Privacy Policy for Rakuten Travel Rent-A-Car(collectively “we”, “us” or“our”). Rakuten Travel Rent-A-Car provides a website where users can book car rental services offered by car rental companies to international customers visiting Japan (“Service”).
Rakuten Travel Rent-A-Car is a service provided by Rakuten Group Inc. Rakuten Group Inc. is based in Tokyo, Japan. More information about Rakuten is available at https://global.rakuten.com/corp/about/company.
This Privacy Policy explains how we collect, use, share and protect your personal data. We also explain what options. and rights you have and how to use them.

Personal Data we collect and how

We collect personal data in different ways when you use our Service. The following is a list with the categories of personal data we collect, and how we obtain it.

Information that you directly provide to us

You provide personal data to us when you use our Service. This contains:

Basic information:
• personal details (name, date of birth);
• contact details (phone number, email address, postal address or mobile number);
• flight details (flight number, flight itinerary);
• booking details (car model, location of booking, period of booking);
Financial information:
• Payment details (bank details, credit card details)

Information we collect via cookies and tracking technologies:

When you use our service, we will collect the following data using tracking technologies placed in our website. These data types are:

Identifiers for devices you have used to access our Services:
• IP address (from which your approximate location can be inferred);
• Unique devices identifiers or MAC identifiers
• Advertising related identifiers
Internet activity information: information about your visits to our website and login sessions, and usage of the Services (include what you track).

Further information about our use of Cookies and Tracking Technologies is available on our Rakuten Travel Cookie Policy.

Information that will be inferred about you from how you use the Service :

  • • Interests;
  • • Age range;
  • • Gender.

For more details about how we process inferred information about you, including the purposes and the legal basis for which this data is collected, please see the [How we use your data and the basis on which we use it] Section.

How we use your data and the basis on which we use it

  • • We always need a proper reason to process your data.
  • • The basis shall be the collection of personal data for the purpose of performing our contract with you; where applicable, fulfilling our legitimate interests, only when we have a valid interest that shall not override yours (the collection of data in order to secure our Services); complying with our legal obligations; as well as, where applicable, processing personal data based on your consent (when you voluntarily request to participate in our marketing activities).
  • • Please see the table below for more information regarding the purposes for which we process the types of personal data listed above, as well as our basis for such processing operations.
See more +
Purpose of Use Type of Data Basis for Processing
Provide you with the Services
Personal details
• Device identifiers
• Contact details
Booking details
• Flight details
• IP address
• Resource identifiers (URLs)
Performance of a contract:
• We process your data to provide, operate and deliver to you our Services by providing a website where users can book car rental services offered by car rental companies to international customers visiting Japan.
Purchasing activities
Financial information
• bank details or credit card numbers);
• Payment details
Personal details
• Your contact details
• Device identifiers Performance of a contract:
Performance of a contract:
• We need your financial information to process and complete your booking with the car rental companies, where required. Your credit card number will be provided by you directly to the applicable payment service provider and we will not have access to this data.
Improve and customize the Services for you
Booking details
Personal details
Device identifiers
• IP address
• Resource identifiers (URLs)
Internet and activity information
Inferred interests;
Inferred age range;
Inferred gender.
Legitimate interest:
We use data about your usage of the service for:
• Service improvements;
• Internal analytics about how our service is used;
• Develop new services;
• Improving the technical functionality of the service;
• To improve your experience, by providing interactive or personalised elements and providing you with recommendations based on your interests.
Communication, support & customer services
Personal details
Your contact details (telephone & mobile numbers, email address)
Data we collect from your communications with us
Legitimate Interest:
We use your data to reply to your requests and inquiries, and to notify you about changes and updates to our Services.
Marketing and advertising activities
Personal details
• Your contact details (telephone & mobile numbers, email address)
• Device identifiers
Location
• IP address
• Resource identifiers (URLs)
Internet and activity information
Inferred interests;
Inferred age range;
Inferred gender.
Consent
We may send you marketing messages if you agree to it.
Profiling. We personalize, with your prior consent, the marketing messages we send you and deliver you with appropriate advertising and make them more relevant and interesting for you. For this purpose, we share your device data and unique IDs, age range, inferred gender, and IP address with third party advertising partners. Additional information (including how to opt-out of data collection using cookies) is available on our Rakuten Travel Cookie Policy.
Safety, security, and fraud prevention
Financial information
• bank details or credit card numbers);
• Payment details.
Legitimate interest:
We use data to protect our service from fraud and other threats. We analyze log-in patterns to protect your data against being accessed by someone else.
Automated decision. If our team has determined that an attempted booking is fraudulent, automatic exclusion of data associated with the fraudulent activity will be performed for future activities.
Compliance with legal requirements Depending on the circumstances, any data as detailed under “The personal information we use” section above.
Legal obligation
We may be required by law to disclose data to law enforcement bodies (such as to courts or to the police).

Your Choices

The rights and choices about your data may vary depending on your location. This includes the right to request:

  • • access to your data; either if you want to know what data we have about you; or
  • • get a copy of your data in a machine-readable format (right to data portability);
  • • correct any information that is wrong;
  • • delete your data;
  • • restrict usage to the bare minimum (for example, if you ask us to delete, but we still need to keep your order history for legal reasons, like tax audits of our business);
  • • object to specific uses (you can opt-out of marketing e-mails);
  • • ask us where we got certain data about you, how we use it and with whom we share it;
  • • withdraw your consent easily; if you do so, the lawfulness of processing based on your consent before its withdrawal will not be affected;

Please see below the rights available under the applicable law for your region.

See more +
Access Portability Correction Deletion Objection Consent
withdrawal
Taiwan Access Portability Correction Deletion Objection Consent withdrawal
Hong Kong Access Portability Correction Deletion Objection Consent withdrawal
South Korea Access Portability Correction Deletion Objection Consent withdrawal
Taiwan Hong Kong South Korea
Access Taiwan Hong Kong South Korea
Portability Taiwan Hong Kong South Korea
Correction Taiwan Hong Kong South Korea
Deletion Taiwan Hong Kong South Korea
Objection Taiwan Hong Kong South Korea
Consent
withdrawal
Taiwan Hong Kong South Korea

If you want to exercise your rights with us, please get in touch with us by using the Contact section below. We will always try to find an amicable solution together.

Data Sharing

We share your data with:

  • •Service providers and business partners, who help us make our service possible (they are data processors). We ensure they only have access to such information that is strictly necessary for us to provide the Services. These parties are required to secure the data they receive and to use the data for pre-agreed purposes only, while ensuring compliance with all applicable data protection regulations.
  • •Law enforcement bodies where we are required to share data or with a court if necessary to enforce our claims or other legal rights.
  • •Asset purchasers. In case our service or our company are fully or partly purchased by another company, data will be shared. The acquiring company will be bound by this privacy policy.
  • •Advertising partners. We disclose or share your personal data, where you consent if it is required, for advertising purposes. Further information about data sharing using cookies and other device identifying technologies is available on our Rakuten Travel Cookie Policy.

Find here the list with our services providers, business and advertising partners, the data we share and the countries where they are located.

See more +
Categories of recipients Recipients name Country Data Shared
Car Rental Companies
We share your personal data for purposes of your booking.
The relevant Car Companies that you have made a booking with Japan Your personal details
•Financial information
•Booking information
Payment services
We share your personal data with them, to process secure payments
Rakuten Europe Bank Grand Duchy of Luxembourg (Luxembourg) •Financial information
•Your personal details
•Your contact details
Client Relationship Management
We share your personal data with them, to send newsletters, marketing emails, support emails and messaging services to respond to your inquiries.
Salesforce Japan •Your contact details
•Data we collect from your communications with us
Fraud Management
We share your personal data with them to prevent fraud within our services.
TIS
IT communications
Japan
Japan
Financial information
•Your personal details
•Your contact details
Advertising partners
Disclose or share your personal data, where you consent if it is required, to provide you advertising. See more details here .
Google
Meta
Criteo
Japan
Japan
Japan
•Advertising identifier and technical data about you (language preference, country, age range, gender and device data).

Because we operate as part of a global business, the recipients referred to above may be located outside the jurisdiction in which you are located (or in which we provide the services). See the section on "International Data Transfers" below for more information.

International Data Transfers

We are a global business. That means your data will be shared to other Rakuten Group companies around the world. We also use service providers in different countries. Data are sent to them as well as indicated in the Data Sharing section above. We have taken steps to keep your data safe. We are always watching out to ensure they are trustworthy, and we have strict contracts in place.

Inside the Rakuten Group, we have BCRs (Binding Corporate Rules), a set of privacy internal rules that we apply across all the Rakuten Group companies. The BCRs are Rakuten’s global standard for the protection of privacy and processing of personal data. Rakuten’s BCRs allow secure transfers of data within the Rakuten Group companies and have been approved by the relevant Data Protection Authorities in Luxembourg and the United Kingdom. You can find them here.

Security

We have strict security measures in place in accordance with high security standards to ensure that your data are safe with us. Some of these are technical, like password rules and monitoring of log-in patterns. Others are organizational, like having proper processes and access rules in place. We do so to prevent unauthorized access or unauthorized disclosure of your information, to maintain the accuracy of such information and, when necessary, to ensure its proper destruction.
When collecting or transferring your personal information, we employ data encryption technology, and restrict access only to those persons who require it to fulfil their job responsibilities. We conduct periodic reviews of our practices to ensure that our safeguards are properly implemented and remain state of the art. We make sure to always keep up with the latest developments.

Retention

We will keep your personal information necessary to fulfil our contractual obligations for as long as we have a relationship with you. We will only retain your personal information after this time if we are required to do so to comply with the applicable laws, or if there are outstanding claims or complaints that will reasonably require your personal information to be retained.

Contact Us

Rakuten Group Inc. is responsible for the personal data we collect and process. Our main offices are in Rakuten Crimson House, 1-14-1 Tamagawa Setagaya-ku, Tokyo 158-0094.
For any questions or concerns, or if you want to make use of your rights, feel free to reach out to us anytime via this contact form or travel-cars-cs-en@faq.rakuten.co.jp. Please note that when contacting us, we may ask you for certain information to verify your identity and respond to your request appropriately.
Our data protection officer can be contacted at rakuten-privacy@mail.rakuten.com. If you have any complaint, we hope we can work with you to achieve a good solution. If we are not able to, you can contact your local data protection authority.

Change to this Policy

We may update this privacy policy from time to time. If there is going to be a substantial change, we will notify you in advance.