NAGANO7 Season Pass Purchase System Privacy Policy

Operator Information

Operating Organization: Shinshu Iiyama Tourism Bureau (General Incorporated Association)
Address: 1110-1 Iiyama, Iiyama City, Nagano Prefecture, 389-2253, Japan
System Name: NAGANO7 Season Pass Purchase System
Effective date: October 1, 2025
Last updated: October 1, 2026

1. Basic Policy

The Shinshu Iiyama Tourism Bureau (hereinafter referred to as "the Corporation") recognizes the appropriate protection of customers’ personal information as an important responsibility in operating the NAGANO7 Season Pass Purchase System (hereinafter referred to as "this System"). The Corporation will handle personal information in accordance with this Privacy Policy.

2. Scope of Application

This Privacy Policy applies to all customers who apply for and purchase season passes through this System.

3. Personal Information Collected

3.1 Information Collected at Application

Basic Information

Full Name
Furigana (phonetic spelling; required for Japanese applications)
Gender
Date of Birth
Email Address
Phone Number

Address Information

Postal Code
Prefecture
City / Ward / Town / Village
Street Address / Building Name

Delivery Information (when delivery is selected)

Delivery Postal Code
Delivery Prefecture
Delivery City / Ward / Town / Village
Delivery Street Address / Building Name

Identity Verification Documents

Face photo (for pass issuance)
Copy of an identity document (required only when delivery is selected):
- Driver’s License
- Passport
- My Number Card
- Health Insurance Card
- Other government-issued ID

3.2 Information Automatically Collected by the System

IP Address
Browser Information (User-Agent)
Date and Time of Access
Language Settings (Japanese/English)
Cookie Information
Session Information

3.3 Payment Information

Payment Method (Credit Card (Stripe) / STORES payment / Bank Transfer)
Application Number
Product Information
Purchase Amount
Payment Status

4. Purpose of Use of Personal Information

Collected personal information will be used for the following purposes:

4.1 Service Provision

Accepting and processing season pass applications
Creating and issuing passes
Identity verification (KYC: Know Your Customer)
Delivery of passes (when delivery is selected)
Preparation and management for on-site pickup

4.2 Payment and Accounting

Executing payment transactions
Confirming bank transfers
Issuing receipts
Processing refunds (in case of cancellations)

4.3 Customer Support

Responding to inquiries
Sending important notifications
Notifying system maintenance information
Confirming and updating application status
Sending information and notices about season pass sales for the next and subsequent seasons (communications will be discontinued upon request)

4.4 Compliance with Legal Obligations

Responding to disclosure requests under laws and regulations
Preventing and investigating fraudulent use
Preventing fraudulent use (where fraudulent or suspected fraudulent use has occurred in the past, recording information such as names and contact details to the extent necessary and using it to verify new applications; access to this information is limited to operational administrators)
Responding to violations of the Terms of Use

4.5 Service Improvement

Creating statistical data (in a non-identifiable format)
Improving and enhancing system functionality
Developing new services

5. Management of Personal Information

5.1 Security Measures

Protection through AES-256 encryption (face photos, identity documents)
Encryption of communications via SSL/TLS
Strict management of access privileges
Regular security audits
Introduction of firewalls and intrusion detection systems

5.2 Access Control

Role-based access control (RBAC):
- Super Administrator
- Administrator
- Resort Administrator
Recording and storing audit logs
Recommended use of two-factor authentication (2FA)

5.3 Data Retention Period

Application Data: Retained while your account remains active (if you cancel your membership or request deletion, the data will be deleted, except for information that must be retained under applicable laws and regulations)
Face Photos: Deleted after the end of the relevant season and before sales for the following season begin
Identity Documents: Deleted after the end of the relevant season and before sales for the following season begin
Payment Information: Retained as required by law
Access Logs: Retained for 1 year

6. Provision of Information to Third Parties

6.1 General Principle

The Corporation will not provide customers’ personal information to third parties, except in the following cases:

6.2 Cases of Provision

With the customer’s consent
When required by law
- Courts, police, tax authorities, or other public agencies
Provision to contractors
- Delivery companies (Yamato Transport, Sagawa Express, Japan Post, etc.)
- Payment processing companies (Stripe, STORES)
- System maintenance contractors
Provision to partner ski resorts (for pass usage verification only):
- Shiga Kogen Mountain Resort
- Nozawa Onsen Snow Resort
- Togakushi Ski Resort
- Madarao Kogen Ski Resort
- Tangram Ski Circus
- Ryuoo Ski Park
- Snow Resort The Cupid of Romance

6.3 Scope of Information Provided

To delivery companies: Name, delivery address, phone number
To payment processors: Name, email address, payment amount
To partner ski resorts: Name, face photo, pass number, validity period

7. Use of Cookies

7.1 Purpose

Maintaining login sessions
Saving language settings (Japanese/English)
Temporarily storing application form entries
Enhancing security

7.2 Cookie Management

Customers can disable cookies in their browser settings. However, some functions of this System may become unavailable if cookies are disabled.

8. Use of Google Analytics

This System uses Google Analytics to analyze website usage and improve our services.

8.1 Information Collected

Page views
Time spent on site
Browser / OS used
Referring site

8.2 Opt-Out

If you do not wish for your data to be collected by Google Analytics, please use the Google Analytics Opt-out Add-on.

9. Customer Rights

9.1 Disclosure Requests

Customers may request disclosure of their personal information held by the Corporation.

9.2 Corrections, Additions, Deletions

Customers may request corrections, additions, or deletions if their registered information is incorrect.

9.3 Suspension of Use or Erasure

Customers may request suspension or deletion of their personal information. However, this does not apply to information that must be retained by law.

9.4 Request Procedures

Requests must be accompanied by identity verification documents and submitted to the contact point listed below.

10. Personal Information of Minors

If you are under 18 years of age, please obtain parental consent before using this System.

11. Personal Information Protection Manager

Personal Information Protection Manager
Address: 1110-1 Oaza Iiyama, Iiyama City, Nagano Prefecture
Name: Shinshu Iiyama Tourism Bureau (General Incorporated Association)
Representative: Yukari Ito

12. Contact Information

For inquiries regarding the handling of personal information, please contact:

NAGANO7 Season Pass Office

Shin’etsu Shizenkyo Activity Center
Phone: +81-269-62-7001
Email: info@powderdreampass.com
Hours: Open daily (April–November: 9:00–18:00 / December–March: 9:00–17:00)
Address: 772-6 Iiyama Station 1F, Iiyama City, Nagano Prefecture, 389-2253, Japan

13. Changes to this Privacy Policy

The Corporation may revise this Privacy Policy in accordance with changes in laws, social conditions, or technological developments.
If we make significant changes, we will post advance notice on this website.
The revised Privacy Policy will take effect upon publication on this System.

14. Governing Law and Jurisdiction

This Privacy Policy shall be governed by and construed in accordance with the laws of Japan.
Any disputes related to this Privacy Policy shall be subject to the exclusive jurisdiction of the Nagano District Court in the first instance.

15. Supplementary Provisions

Details of Data Processing

Encrypted Data

Face photo files (AES-256-CBC)
Identity document files (AES-256-CBC)
Personal information export files (ZIP format, AES-256)

Audit Log Items

Date and time of access
User ID and role of the accessor
Accessed target (application ID, file name)
Actions performed (view, edit, delete, etc.)
IP address

Backup

Daily backups (7 generations retained)
Weekly backups (4 generations retained)
Monthly backups (12 generations retained)