日本語 English 简体中文 繁體中文 한국어 Français Español

Privacy policy

The Japan Association for the 2025 World Exposition (the “Association” “we” “our”), prescribes as follows its Privacy Policy covering the handling of personal information for domestic users, overseas users and related parties (the “Privacy Policy”) with respect to the services offered by the Association (“Services”) and other activities of the Association in connection to the Expo 2025 Osaka, Kansai, Japan (the “World Exposition”).

The term “User(s)” is used to refer collectively to general visitors of the World Exposition, users of the Association’s website and application, volunteer staff, freelance journalists, and other individuals who participate in or are involved with the World Exposition as individuals not belonging to any certain organization that participates in or is involved with the World Exposition.

Among the Users who receive the Services, “Privacy Policy (for domestic users)” applies to Users located in Japan and “Privacy Policy (for overseas users)” applies to Users located in countries other than Japan. 

Further, “Privacy Policy (for related parties)” applies to individuals who belong to certain organizations that participates in or is involved with the World Exposition, namely, related parties such as officials, employees, and personnel of the Association, pavilion exhibits, sponsors and sponsoring companies, foreign governments and international organizations (the Official Participants), and private exhibits (the Non-official Participants) (collectively, “Related Parties”).

Each of the Privacy Policy is prepared in Japanese. In the event of any discrepancy between each Privacy Policy prepared in Japanese and the content of the Privacy Policy translated into English or other languages provided by the Association, the Japanese provisions shall prevail.

Please refer to the appropriate Privacy Policy from the below.

Privacy Policy (for domestic users)

In order to comply with the Japanese Act on the Protection of Personal Information (the “Act”) and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of the Users, the Association hereby prescribes the following Privacy Policy (for domestic users) (in this Privacy Policy (for domestic users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services.
Although this Policy applies to our handling of all the personal information in relation to the Services, if there are separate rules and regulations applicable to the handling of the personal information in relation to the services when the User receives individual services, those rules and regulations shall be applied to the handling of the personal information in relation to such services.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.
This Policy shall be applied to the handling of personal information of Users located in Japan. For the handling of personal information of Users residing in countries other than Japan, a separate policy “Privacy Policy (for overseas users)” shall be applied and be referred to.

1. Personal Information We Collect and Purpose of Use

The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use, and shall not use personal information of Users for any purpose other than as stipulated in this Policy.

  1. Personal information we collect

    The personal information we collect consists of the following:

    • * Basic information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
    • * Payment and settlement information (credit card number, etc.);
    • * Location information;
    • * Biometric information (facial images, voice, etc.);
    • * Information regarding affiliation (company name, organization name, department name, position, etc.);
    • * Medical information (information regarding the presence or absence of disabilities, etc.);
    • * Information related to Social media (account information for LINE, X, Facebook, Instagram, Google, etc., and information regarding social media authentication status or results. This applies only if the Users have voluntarily and explicitly authorized the linking of their social media account with the Service.);
    • * Entered information (language settings, mail delivery settings, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above)); and
    • * Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.).

  2. Purposes of use of personal information we collect

    We use the personal information we collect from Users for the following purposes:

    • * To authenticate and confirm the identity of Users;
    • * To offer the Services to Users, such as ticket and merchandise sales, and event organization;
    • * For selection and registration of volunteer applications;
    • * To request feedback on the Services from the Users;
    • * To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association (including the delivery of optimized advertisements by analyzing acquired information such as browsing history and purchase history);
    • * To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
    • * To register the reservation information and manage and operate the event safely and smoothly;
    • * To respond to inquiries about the Services;
    • * To respond to actions that violate the Association’s terms or the like regarding the Services;
    • * To notify changes etc. of the terms or like regarding the Services;
    • * To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur;
    • * To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”; and
    • * In accordance with the agreement to this Policy, the Association will be provided with personal information or personally related information acquired by its business partners and will use such information for the purposes described in section “1. (2) Purpose of use of personal information we collect” in conjunction with the personal information already held by the Association regarding Users. The personally related information or personal information we obtain may include the following:

      Type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.

2. Provision of Personal Information to Third Parties

  1. We may provide personal information of the Users to third parties in accordance with applicable laws and regulations in the following cases.

    1. When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
    2. When the personal information is being provided as a result of the succession of business in a merger or otherwise;
    3. When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the User;
    4. When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the User;
    5. When there is a requirement to cooperate with a state organ, or local government, or an individual or a business operator entrusted by either of the former two in executing the affairs prescribed by laws and regulations, and obtaining the User’s consent is likely to impede the execution of the affairs concerned;
    6. When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
    7. Any other instance covered by the Act or other laws and regulations

  2. We may provide personal information of the Users to the following third parties based on the Users’ consent to this Policy, depending on the specific contents of the Service used by the Users. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.

    • * Individuals and entities who exhibit pavilions or events at the World Exposition (including corporations, organizations, official participants’ pavilion and local governments), regulatory authorities related to the World Exposition, sponsors of the World Exposition, and other related parties.

  3. Based on the consent to this Policy, we may receive personal information of Users from the parties listed in the preceding paragraph.

3. Provision of Personal Information to Third Parties in Foreign Countries

We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the User to whom the personal information pertains, except in any of the following cases:

  1. The cases listed in the above Article 2, Paragraph 1, Items (iii) through (vi);
  2. When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
  3. Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
  4. Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.

If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.

4. Secure Management of Personal Information

The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Associations’ employees, etc.
For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.

5. Supervision of Subcontractors for Personal Information

In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.

6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information

The Association understands that the User to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (“Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.
To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.

7. Thorough Protection of Personal Information

The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.

8. Inquiries

For inquiries regarding personal information, please contact the below:

Office of the Japan Association for the 2025 World Exposition
*Inquiries About the Handling of Personal Information click [here].

This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.

Established: March 28, 2025

Privacy Policy (for overseas users)

In compliance with applicable data protection laws and regulations (including, but not limited to the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the United Kingdom General Data Protection Regulation (the “UK GDPR”), the China Personal Information Protection Law (the “PIPL”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”)), the Association hereby prescribes the following Privacy Policy (for overseas users) (in this Privacy Policy (for overseas users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services containing the User’s registered information.
This Policy applies to the handling of personal information of Users residing outside Japan, including, but not limited to, the European Economic Area (EEA), the United Kingdom, China and the State of California in the United States. For the handling of personal information of Users residing in Japan, a separate policy “Privacy Policy (for domestic users)” shall be applied and be referred to.

1. Categories of Personal Information We Collect

The Association will collect and handle the following personal information in relation to the Services.

  • * Basic Information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
  • * Payment and settlement information (credit card number, etc.);
  • * Location information;
  • * Biometric information (facial images, voice, etc.);
  • * Information regarding affiliation (company name, organization name, department name, position, etc.);
  • * Medical information (information regarding the presence or absence of disabilities, etc.);
  • * Information related to social media (account information for LINE, X, Facebook, Instagram, Google, etc., and information regarding social media authentication status or results. This applies only if the Users have voluntarily and explicitly authorized the linking of their social media account with the Service.);
  • * Entered information (language settings, mail delivery settings, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above); and
  • * Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.).

2. Purposes of Use of Personal Information and Legal Grounds for Data Processing

The Association collects and handles personal information based on the User’s consent, performance of contract or legitimate interest for the following purposes of use in connection with the Services:

  • * To authenticate and confirm the identity of Users;
  • * To offer the Services to Users, such as ticket and merchandise sales, and event organization;
  • * For selection and registration of volunteer applications;
  • * To request feedback on the Services from the Users;
  • * To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association;
  • * To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
  • * To register the reservation information and manage and operate the event safely and smoothly;
  • * To respond to inquiries about the Services;
  • * To respond to actions that violate the Association’s terms or the like regarding the Services;
  • * To notify changes etc. of the terms or like regarding the Services; and
  • * To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur.

3. Disclosure of Personal Information

The Association may provide the User’s personal information to the following businesses and organizations. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.

  1. The Association uses outsourcing companies such as service providers, marketing service providers and security service providers to offer the Services, and these contractors will access and process the User’s personal information to the extent necessary to offer the Services.
  2. The Association may provide the User’s personal information to individuals and entities who exhibit pavilions or events at the World Exposition (including corporations, organizations, official participants’ pavilion and local governments), regulatory authorities related to the World Exposition, sponsors of the World Exposition, and other related parties.
  3. If the Association succeeds to a business through a merger or for other reasons, personal information may be provided to entities designated by the Association or the International Bureau of Exhibitions (BIE) as the Association’s legacy successor entities, as well as to persons associated with such entities.
  4. The Association may provide personal information to business partners or information collection module providers.
  5. The Association may disclose personal information to public authorities in accordance with applicable laws and regulations (including ordinances, court rulings, and administrative orders and recommendations)

4. Source of Personal Information

The Association primarily collects personal information directly from the Users. However, in certain cases, the Association may obtain personal information indirectly from (i) organizations, corporations, or entities to which Users belong or are associated with, (ii) World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors (iii) SNS operators such as LINE, X, Facebook, Instagram, Google, etc., (iv) administrators of websites and applications other than the Association, and (v) outsourcing companies listed in section 3 (i) above.

5. International Transfer of Personal Information

The Association may transfer the User’s personal information to countries outside of the User’s country of residence (for Users residing in the EU, to outside of the EU) (the “International Transfer”) for the purpose of offering the Services. These countries include countries where the level of protection of personal information is lower than laws and regulations applicable to the country where the User resides, including the country where the foreign government listed in section 3 (ii) above is located.
When the Association conducts International Transfer of Users’ personal information to these countries, it will: (i) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the GDPR, if the Users reside in the EU, (ii) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the UK GDPR if the Users reside in the UK, and (iii) if the Users reside in China, obtain consent from the Users and conclude a standard contract with the recipients of the personal information, and then conduct a Personal Information Protection Impact Assessment to understand the risks associated with the cross-border transfer and to reduce such risks. If you would like more information, such as obtaining a copy of the standard contractual clause, etc., please contact us at the contact information indicated under section “13. Inquiries” below.

6. Retention Period of Personal Information

The Association will retain Users’ personal information for as long as it is necessary to fulfil the purposes of use prescribed in this Policy.
To determine the appropriate retention period for the personal information we consider: (i) whether there is an ongoing relation with the User, (ii) whether the Association is legally obligated to store the personal information, and (iii) whether it is necessary to fulfill the contract with the User.

7. Processing Minor Child’s Personal Information

The Association does not knowingly collect or process personal information of Users under the age of 16 without the consent of a parent or guardian. Users under the age of 16 must provide their personal information to the Association only with the consent of a parent or guardian.
If the Association discovers that it has collected the personal information of a User under the age of 16 without the consent of the parent or guardian, it will immediately take appropriate action.
Parents and guardians are requested to agree that in the case of providing personal information to the Association on behalf of a User under the age of 16 for the purpose of Expo ID registration, the personal information directly obtained from the User under the age of 16 in connection with the various services provided by the Association using the relevant Expo ID will also be handled in accordance with this Policy. The various services provided by the Association to Users under the age of 16 using the Expo ID include, but are not limited to, the following services:

  • * To register for participation in the exhibition and pavilion
  • * To make reservations to experience the exhibits and use the transportation system;
  • * To purchase tickets, merchandise, etc.;
  • * To receive online services provided by the Association, such as content distribution, virtual expo experiences, guides of the ideal courses and routes within the exhibition, and creation of avatar images; and
  • * To receive optimal exhibition experiences and advertisements by analyzing online and offline behavior histories.

8. Rights for Disclosure, Correction, Addition, Deletion etc. of Personal Information

Users may have the following rights with respect to your own personal information, in accordance with applicable laws and regulations:

  1. right to seek access to personal information (including copies);
  2. right to request correction;
  3. right to seek removal (the right to be forgotten) when certain conditions are met;
  4. right to restrict (stop the processing) the processing of personal information if certain conditions are met; and
  5. right to receive personal information in a structured, machine-readable form if certain conditions are met (the right to data portability).

These rights may be limited, on an exceptional basis, if complying with a User’s request would infringe the rights of Association or a third party, or if we are required to delete information that we are required to retain in accordance with laws and regulations. Exceptions to these rights are set out in the applicable laws and regulations.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.

9. Right to Object the Handling of Personal Information

Users may have the right at any time to object the handling of personal information that is being handled on the basis of legitimate interests under applicable laws and regulations. The handling of personal information in this context includes profiling (This refers to analyzing and predicting the behavior of users based on their information. The same shall apply hereafter.).
Users may have the absolute right under applicable laws and regulations to refuse direct marketing or to refuse profiling done for that purpose if their personal information is being handled for direct marketing purposes.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.

10. Right to Withdraw Consent

Users have the right to withdraw your consent whenever the Association handles your personal information based on your consent. This withdrawal does not affect the legality of any treatment made on the basis of consent previously given.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.

11. Required Personal Information

The personal information Users are required to provide for the provision of the Services is indicated in the form to be entered by the User. The User assumes no obligation to provide such personal information, but if such personal information is not provided, the Association is unable to offer the Services.

12. The Right to File a Complaint with a Supervisory Authority

Users may have the right to file a complaint with a supervisory authority under applicable laws and regulations. The supervisory authorities where complaints can be filed may include the supervisory authorities of the EU Member State where the User resides or works or where the GDPR complaint is filed, as well as the UK supervisory authorities.

13. Inquiries

For inquiries regarding personal information, please contact the below:

Office of the Japan Association for the 2025 World Exposition
* Inquiries About the Handling of Personal Information click [here].

The contact information for the Association’s representative in the EU is as follows:
TMI Avocats & Associés
40 avenue Niel, 75017, Paris, France
E-mail: 2025WorldExpo_EUrep@tmi.gr.jp

The contact information for the Association’s representative in the UK is as follows:
TMI Associates London LLP
CityPoint One Ropemaker Street, London EC2Y 9SS, United Kingdom
E-mail: 2025WorldExpo_UKrep@tmi.gr.jp

California residents can exercise their rights under the CCPA by contacting the below:
* Inquiries About the Handling Personal Information click [here].

Supplementary Provisions for Processing of Personal Information of California Residents

In addition to the provisions set forth above, the following provisions apply to the processing of personal information of residents residing in the state of California in the United States (that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household, hereinafter the same) in accordance with the CCPA.

1. Categories of Personal Information We Collect and the Parties Receiving the Information

The Association will collect and has collected in the last twelve (12) months, the following categories of personal information from the Users. Further, the Association has disclosed the personal information collected in the last twelve (12) months to the receiving party indicated below. The section numbers indicated under “Receiving Party” are the numbers indicated in section “3. Disclosure of Personal Information” above.

Category Receiving Party
Identifiers (1)(4)
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). (1)(4)
Protected classification characteristics under California Law or Federal Law (1)(4)
Commercial information (1)(4)
Biometric information (1)(4)
Internet or other electronic network activity information (1)(4)
Location data (1)(4)
Voice, electronic, visual, thermal, olfactory and other similar information (1)(4)
Information regarding occupation or employment (1)(4)
Sensitive personal information (1)(4)

For details on personal information we collect, refer to section “1. Categories of Personal Information We Collect” above, for the business purpose and commercial purpose of personal information we collect, refer to section “2. Purposes of Use of Personal Information and Legal Grounds for Data Processing” above, for the source of personal information we collect, refer to section “4. Source of Personal Information” above, and for the retention period of the personal information we collect, refer to section “6. Retention Period of Personal Information” above.

2. Your Rights and Choices under CCPA

The CCPA provides residents of California with specific rights regarding personal information. If the User is a California resident, the following describes your rights under the CCPA and explains how to exercise those rights.

  1. Right to access personal information

    Users have the right to request that the Association discloses certain information to you about our collection, sharing, disclosure or use of your personal information. Once the Association receives and confirms your verifiable user request, we will disclose the following information to you:

    • * The categories of personal information we collected about the User;
    • * The categories of sources for the personal information we collected about the User;
    • * Our business or commercial purpose for collecting, selling, or sharing that personal information;
    • * The categories of third parties with whom we share or sell that personal information; and
    • * The specific pieces of personal information we collected about the User.

  2. Right to request deletion

    Users have the right to request that the Association deletes any of Users’ personal information that we have collected from you and retained, subject to certain exceptions. Once the Association receives and confirms your verifiable user request, we will delete (and notify our contractors to delete the same) your personal information from our records, unless an exception applies.
    The Association may deny the User’s deletion request if retaining the information is necessary for us or our contractors in order to:

    • * Complete the transaction for which personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the User, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
    • * Help to ensure security and integrity to the extent the use of the User’s personal information is reasonably necessary and proportionate for those purposes;
    • * Debug products to identify and repair errors that impair existing intended functionality;
    • * Exercise free speech, ensure the rights of other consumers to exercise their free speech rights, or exercise other rights provided for by law;
    • * Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
    • * Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent; and
    • * Enable solely internal uses that are reasonably aligned with consumer expectations based on the relationship between the User and the Association; or
    • * Comply with legal obligations.

  3. Right to request correction

    Users have the right to request that the Association corrects any of your inaccurate personal information that we have collected from you and retained. Once the Association receives and confirms your verifiable user request, we will correct (and notify our contractors to correct the same), your inaccurate personal information. The Association may deny the User’s request for correction if we determine that the contested personal information is more likely than not to be accurate based on the totality of the circumstances.

  4. Right to opt-out of sale or sharing

    The Association has not sold or shared personal information collected from Users in the past 12 months and it will not sell or share them in the future.

  5. Right to opt-in to sale or sharing of personal information

    The Association will not sell or share the personal information of any User over the age of 13 and under the age of 16 without obtaining the prior consent of the User himself or herself, or the parent or guardian of the User if under the age of 13.
    If a parent or guardian provides personal information to the Association on behalf of a User under the age of 16, please obtain the necessary consent for the Association to sell or share the personal information.

  6. Right to limit the use of sensitive personal information

    The Association have not used and disclosed and will not use or disclose sensitive personal information collected from Users for any purpose other than the following:

    • * To perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services;
    • * To help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes;
    • * For short-term, transient use (except those involving profiling or changes to the future consumer experience);
    • * To perform services on behalf of the Association; and
    • * To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the Association.

  7. Non-discrimination

    The Association will not discriminate against California residents for exercising any of their rights under the CCPA. Moreover, unless permitted by the CCPA, we will not:

    • * Deny the goods or services to the Users;
    • * Charge Users different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
    • * Provide Users a different level or quality of goods or services;
    • * Suggest that Users may receive a different price or rate for goods or services or a different level or quality of goods or services; or
    • * Retaliate against an employee, applicant for employment, or independent contractor.

  8. Exercising rights for disclosure request, deletion request and correction request

    To exercise your rights for disclosure request, deletion request and correction request described above, please submit a verifiable user request to the Association by contacting us in the manner set forth in section “13. Inquiries” .
    Only the User, a natural person or a person registered with the California Secretary of State that the User authorizes to act on the User’s behalf, or a person who has a power of attorney or is acting as a conservator for the User, may make a verifiable user request related to the User’s personal information. The User may also make a verifiable user request on behalf of the User’s minor child.
    The verifiable user request must:

    • * Provide sufficient information that allows the Association to reasonably verify you are the person about whom we collected the personal information or an authorized representative; and
    • * Describe the User’s request with sufficient detail that allows us to properly understand, evaluate, and respond thereto.

Established: March 28, 2025

Privacy Policy (For related persons)

With respect to the implementation, etc. of the World Exposition, and in order to comply with the Act and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of our officers, employees and related persons (including, without limitation, staff or related persons of pavilion exhibitors, sponsors, supporting companies of World Exposition, the Official Participants from foreign governments and international organizations, and the Non-official Participants from pavilion exhibitors, but not including visitors and volunteers to World Exposition (collectively, “Related Persons”), the Association hereby prescribes the following Privacy Policy (for related persons) (in this Privacy Policy (for related persons) referred to as this “Policy”) to cover the handling of Related Persons’ personal information.

Although this Policy applies to our handling of the personal information of all Related Persons, if there are separate rules and regulations applicable to our handling of the personal information of Related Persons in individual cases, those rules and regulations shall take precedence over our handling of the personal information of Related Persons in the relevant cases.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.

1. Personal Information We Collect and Purpose of Use

The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use of the personal information we collect, and shall not use personal information of Related Persons for any purpose other than as stipulated in this Policy.

  1. Personal information we collect

    The personal information we collect from Related Persons consists of the following:

    • * Basic Information (name, gender, date of birth, address (postal code, prefecture, municipality), phone number, photo, e-mail address, passport number, nationality or country of residence, etc.);
    • * Information on background (education, employment history, qualifications, history of disciplinary, criminal and administrative actions, etc.);
    • * Information on family structure (family composition and other family-related information etc.);
    • * Location information;
    • * Biometric information (facial images, voice, etc.);
    • * Information regarding affiliation (company name, organization name, department name, position, etc.);
    • * Medical information (health status, medical history, information regarding the presence or absence of disabilities, etc.);
    • * Information for payroll transfer (payroll information, payroll transfer account, etc.);
    • * Information obtained through internal communications (information obtained through personnel evaluations, internal audits or internal reporting, etc.);
    • * Log-in information (ID, password, etc.) for our system;
    • * Entered information (information entered or sent by Related Persons using the Association’s input form or other method prescribed by the Association);
    • * Information obtained from the Related Persons’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.); and
    • * Other information related to the above

  2. Purposes of use of personal information we collect

    We use the personal information we collect from Related Persons for the following purposes:

    • * To plan and operate World Exposition and related events (including official ceremonies and official events held on National Days and Special Days; the same shall apply hereinafter)
    • * To carry out administrative procedures related to expositions and related events;
    • * To contact Related Persons or to prepare a contact list;
    • * To communicate and coordinate information among Related Persons;
    • * To authenticate and confirm the identity of Related Persons;
    • * To monitor the use of our systems by Related Persons, and to detect and prevent unauthorized log-ins or the like;
    • * To pay salaries, bonuses, retirement allowances, reimbursement of expenses, and payment of costs;
    • * To perform procedures related to employee benefits, tax, social insurance, and other administrative procedures required by laws and regulations;
    • * To perform procedures related to employee benefits, tax, social insurance, and other legal administrative procedures, training and personnel development, and personnel evaluations and transfers;
    • * To detect and prevent fraud and misconduct at an early stage;
    • * To ensure occupational health and safety and other personnel and labor management operations (including those related to weddings, funerals and other family events); and
    • * To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”

2. Provision of Personal Information to Third Parties

  1. We may provide personal information of the Related Persons to third parties in accordance with applicable laws and regulations in the following cases.

    1. (i) When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
    2. (ii) When the personal information is being provided to the organizations designated by the Association or the Bureau International des Expositions (BIE) as legacy successor organizations of the Association and related persons of such organizations as part of a business handover as the result of a merger or the like;
    3. (iii) When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the person;
    4. (iv) When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the person;
    5. (v) When there is a requirement to cooperate with a government agency or local government or a delegated organization in order for a legally required action to be carried out, and obtaining the person’s consent could have a detrimental effect on carrying out said action;
    6. (vi) When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
    7. (vii) Any other instance covered by the Act or other laws and regulations

  2. We may provide personal information of Related Persons to the following third parties based on the Related Persons’ consent to this Policy.

    • * Individuals and entities who exhibit pavilions or events at the World Exposition (including corporations, organizations, official participants’ pavilion and local governments), regulatory authorities related to the World Exposition, the Bureau International des Expositions (BIE), sponsors of the World Exposition, and other related parties.

  3. Based on the consent to this Policy, we may receive personal information of Related Persons from the parties listed in the preceding paragraph.

3. Provision of Personal Information to Third Parties in Foreign Countries

We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the person to whom the personal information pertains, except in any of the following cases:

  1. The cases listed in Article 2, Paragraph 1, Items (iii) through (vi);
  2. When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
  3. Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
  4. Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.

If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.

4. Secure Management of Personal Information

The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Association’s employees, etc.

For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.

5. Supervision of Subcontractors for Personal Information

In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.

6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information

The Association understands that the person to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (collectively, “Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.

To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.

7. Thorough Protection of Personal Information

The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.

8. Inquiries

For inquiries regarding personal information, please contact the below:

Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information click [here].

This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.

Established: March 28, 2025

Please also refer to the supplementary document that provides additional explanation of the content of the above Privacy Policy regarding the handling of personal information of users obtained by the Association in relation to Expo IDs.
Guide to Handling Personal Information Related to Expo IDs