Agree to the Terms of Service
You must agree to the Terms of Use for the ExpoID and Privacy Policy.
Please scroll down to the bottom and confirm the contents of the policy. If you agree, please check the box.
Please scroll down to the bottom and confirm the contents of the policy. If you agree, please check the box.
Terms of Use for the ExpoID
Article １ (Purpose)
These Terms of Use for the ExpoID (hereinafter “These Terms”) by the Japan Association for the 2025 World Exposition (hereinafter “This Association”) set forth basic terms regarding the registration of, use of, handling of personal information in connection to, and other matters pertaining to the accounts (hereinafter “ExpoID”) to be registered by guests visiting or planning to visit the 2025 World Exposition (hereinafter “Guest” or “Guests”).
The Guests are asked to thoroughly read through and fully understand These Terms before submitting applications for registration. After the Guests have agreed to These Terms on the screen for agreeing to the Terms of Use displayed when registering on the website established by This Association, These Terms will apply to the provision of personal and required information by the Guests as well as any and all matters related to the ExpoID, including its registration, management, use, and deletion.
Article ２ (Definition and Description of Terms)
ExpoID refers to an account used for the purpose of identifying Guests when Guests apply for and use integrated services compatible with authentication using ICT-PF, which is provided by This Association.
ICT-PF refers to the ExpoID management system established and provided by This Association for the purpose of providing ExpoID services.
Integrated services refer to services developed and provided by This Association and other organizations for the 2025 World Exposition that incorporate the ExpoID as one of its authentication methods.
Authentication method refers to the method of identifying an ExpoID Registrant, and This Association adopts multi-factor authentication or two-step authentication. The multi-factor authentication uses either ExpoID/password and biometrics or ExpoID/password and a passcode or the like or a one-time password. The two-step authentication uses an ExpoID/password and a one-time password notified by email.
User device refers to a device (computer, smartphone, tablet) used by the Guests.
Screen for agreeing to the Terms of Use refers to the screen displayed when accessing the registration page of the website established by This Association from a user device, where Guests can choose whether to agree or disagree to the application of These Terms.
ExpoID Registrant refers to a Guest who has completed the registration of his/her ExpoID according to These Terms. Hereinafter in These Terms, those who have not completed the ExpoID registration will be referred to as Guests, and those who have registered will be referred to as ExpoID Registrants.
Proxy registration refers to the method of registration in which an ExpoID Registrant acts as a proxy to an unregistered family member or a friend, or as a proxy to a minor under the age of 16 requiring supervision in provision and management of personal information, and registers his/her ExpoID as a parent, legal guardian, etc.
Proxy registration menu refers to the menu for proxy registration appearing as one of the ExpoID menus indicated on a user device of the ExpoID Registrant. The proxy registration menu appears as one of the ExpoID menus on a user device if the Guest completed the registration him or herself, but it will not appear as one of the ExpoID menus if the Guest registered for an ExpoID via the proxy registration method.
Article ３ (Agreement to the Terms of Use, Required Information, Registration of the ExpoID)
1 Guests may apply for registration of the ExpoID only when they access the registration screen established by This Association from their user devices and agree to These Terms on the screen for agreeing to the Terms of Use.
As soon as the Guest provides personal and other information required for registration in a manner specified by This Association, the ExpoID registration is completed, and access to the ExpoID menu will be granted.
2 If a Guest is a minor under the age of 16, an ExpoID Registrant who is a parent, legal guardian, etc. (hereinafter “Guardian, Etc.”) must access the ExpoID menu, use the proxy registration function in the menu, and complete the proxy registration process for the Guest. When completing the proxy registration for a Guest, the Guardian, Etc. must agree to the Terms of Use for the ExpoID being applied to the Guest. The Guest may utilize the ExpoID menu only when the Guardian, Etc. agrees to the Terms of Use for the ExpoID being applied to the Guest.
3 If a Guest is aged 16 or older, but not accustomed to handling matters related to systems and accounts, the Guest may entrust the registration process to an ExpoID Registrant family member, etc., and have the ExpoID Registrant use the proxy registration function in the menu to complete the proxy registration process for the Guest. An ExpoID Registrant registered via proxy registration must agree to These Terms on the screen for agreeing to the Terms of Use that appears when accessing for the first time after registration. The Guest may utilize the ExpoID menu only when agreeing to These Terms being applied on the indicated screen for agreeing to the Terms of Use.
4 When the Guest’s ExpoID is registered via proxy registration, except in cases where malice or negligence is found in This Association, This Association will consider the ExpoID to be registered by an ExpoID Registrant at the behest of the Guest him or herself and will also consider the application for and use of integrated services as the Guest’s own actions. In addition, if the Guest is a minor aged 16 or older but under 18 and has registered for him or herself, This Association will consider that a Guardian, Etc. has agreed to These Terms being applied to the Guest.
5 For an ExpoID Registrant to use the ExpoID menu, an authentication method must be chosen and set up in addition to the ExpoID and password. However, ExpoID Registrants registered via proxy registration may use the ExpoID menu by only using the ExpoID authentication method (ExpoID and password). Beware that there is a difference in the menu content.
6 This Association does not assume responsibility for any damage suffered by the ExpoID Registrant or a third party incurred by the setup or use of the authentication method by the ExpoID Registrant. Regarding the setup, cancellation, and other matters for each of the authentication methods from a user device, please refer to the instruction manual of the user device or the guidance on the website.
7 ExpoID Registrants may cancel or change their authentication method at any time. Beware that cancellation of the authentication method my cause changes to the accessible content of the ExpoID.
8 If the ExpoID Registrant is no longer in control of the email address used for registration, the registrant must change the email address to one he or she has control over. This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by the ExpoID Registrant forgetting or waiting to change the email address.
Article ４ (Use of the ExpoID)
ExpoID Registrants may use the ExpoID menu and integrated services. However, use of the integrated services by a minor aged under 18 may require permission from the Guardian, Etc.
Article ５ (Management of the ExpoID and Password)
1 ExpoID Registrants should avoid the use of date of birth, address, phone number, or any other information easily guessable by a third party when setting up the ExpoID and the password.
2 For instances such as when the ExpoID Registrant forgets the ExpoID, the registrant may inquire about the ExpoID by following the procedure set forth by This Association. If the ExpoID Registrant forgets the password, the registrant may reset and reassign the password by following the procedure set forth by This Association.
3 ExpoID Registrants are responsible for managing their ExpoID and password and may not allow a third party to use them, lend them, transfer them, change the name of record on them, etc.
4 This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by illicit use of the ExpoID or other incidents caused by the ExpoID Registrant setting up an ExpoID and password easily guessable by a third party, or by the insufficient management, misuse, giving of permission for illicit use by a third party, etc. by the ExpoID Registrant.
5 ExpoID Registrants must take immediate and appropriate action, such as changing the password or deactivating the ExpoID, if the ExpoID or the password has been lost or stolen, when the ExpoID or the password has become known to a third party, or when they discover that their ExpoID or the password is being used by a third party.
6 Except in cases where malice or gross negligence is found in This Association, This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by the ExpoID Registrant registering for or using the ExpoID. However, this does not apply when Articles in These Terms violate the Consumer Contract Act.
7 This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by failing to provide necessary information, providing an incorrect email address, or other grounds not attributable to This Association when entering the registration information.
Article ６ (Deactivation by ExpoID Registrant)
1 The ExpoID Registrant can deactivate the ExpoID at any time using a prescribed procedure. After completing the deactivation procedure, the ExpoID will not be usable anymore.
2 After deactivation, should the Guest wish to use an ExpoID, he or she must undergo a new registration process. Beware that the data from the deactivated ExpoID will not be transferred to the new ExpoID.
Article ７ (Handling of Personal Information)
This Association will appropriately handle personal information obtained in relation to the use of ExpoIDs in accordance with This Association’s Privacy Policy
Article ８ (Prohibited Activities)
This Association prohibits all acts listed in the following items during registration and use of the ExpoID by the ExpoID Registrant.
① Acts that violate or exacerbate the violation of laws; court judgments, decisions or orders; or legally binding administrative actions
② Fraudulent or intimidating acts towards This Association, other ExpoID Registrants, or third parties
③ Acts contrary to public order and morals
④ Acts that infringe upon the intellectual property rights, trade secrets, restricted access data, image rights, privacy, reputation, and other rights or interests of This Association, other ExpoID Registrants, or third parties (including behaviour that directly or indirectly causes such infringements)
⑤ Act of providing the following information to This Association without obtaining prior written consent from This Association
a. Information that contains excessively violent or cruel expressions
b. Information that contains computer viruses or other harmful computer programs
c. Information that contains expressions that damage the reputation or credibility of This Association
d. Information that contains excessively obscene expressions
e. Information that contains expressions that encourage discrimination
f. Information that contains expressions that encourage suicide or self-harm
g. Information that contains expressions that encourage inappropriate use of drugs
h. Information that contains anti-social expressions
i. Information that contains expressions that cause discomfort to others
⑥ Acts that hinder or impede the operation of ICT-PF or related networks and systems, etc.
⑦ Act of unlawfully accessing This Association’s networks, systems, etc.; act of unlawfully rewriting or deleting information accumulated on equipment and devices of This Association; or other acts that incur damage to This Association
⑧ Act of using the ExpoID or password of other ExpoID Registrants
⑨ Act of registering with false information to impersonate other ExpoID Registrants or fictitious third parties
⑩ Acts that lead to benefitting antisocial forces, etc
⑪ Acts that go against the Terms of Use for the ExpoID or the intent and/or purpose of the ExpoID
⑫ Other acts deemed inappropriate by This Association
Article ９ (Steps for Non-Compliance of Terms, Etc.)
1 When the ExpoID Registrant violates the previous Article or other obligations stipulated in These Terms and such violating state is not rectified after This Association has issued a correction notice with a reasonable timeframe, This Association can deactivate or cancel the said ExpoID.
2 This Association does not assume any responsibility for damage incurred by cancellation of the ExpoID of the ExpoID Registrant pursuant to the previous Clause.
3 When one of the following applies, This Association may take certain measures, including suspending the use of the ExpoID by the ExpoID Registrant. For this Clause, the preceding Clause shall apply mutatis mutandis.
① When the wrong ExpoID password has been entered more than a certain number of times
② When This Association deems that the login is or may be unauthorized
③ When This Association deems necessary
4 This Association may temporarily stop the ExpoID services for system maintenance, system failure, etc. This Association will notify such suspensions in advance on its website, etc., except in cases of emergency and unavoidable circumstances.
This Association does not assume any responsibility for damage suffered by the ExpoID Registrant due to suspension or interruption of the ExpoIDs pursuant to this Clause.
Article １０ (Application of and Changes to These Terms)
When one of the following applies, This Association may change the contents of These Terms by announcing or notifying ExpoID Registrants in a manner deemed appropriate by This Association. The new Terms of Use shall apply from the date of change.
① When the changes to These Terms are in the general interests of the other party.
② When the changes to These Terms do not contradict the purpose of the contract, and when the necessity of the changes, the appropriateness of the changed content, the fact that These Terms may be changed in accordance with the provisions of this Article, and the content and other circumstances surrounding the change are reasonable.
Article １１ (Compensation for Damage)
1 When the ExpoID Registrant violates These Terms and thereby inflicts damage to This Association, the said ExpoID Registrant is liable for such damage suffered by This Association.
2 When the ExpoID Registrant violates These Terms and thereby inflicts damage to a third party, the said ExpoID Registrant must compensate for such damage suffered by the third party and shall not involve This Association in the dispute with such third party.
Article １２ (Period of Use of the ExpoID)
1 The ExpoID and the ExpoID menu can be used until November 30, 2025.
2 After the ExpoID services have ended, all personal information data collected upon ExpoID registrations will be deleted.
3 This Association may extend the period of use set forth in Clause 1 by following the procedures set forth in Article 10.
Article １３ (Governing Law, Jurisdiction)
These Terms shall be governed by and construed in accordance with Japanese laws.
Any dispute involving This Association in connection with ExpoIDs that may arise shall be subject to the exclusive jurisdiction of the Osaka District Court in the first instance.
Supplementary provisions
These Terms shall come into effect from November 1, 2023.
These Terms will be revised on July 24, 2024, and the revised content will apply from July 24, 2024.
These Terms of Use for the ExpoID (hereinafter “These Terms”) by the Japan Association for the 2025 World Exposition (hereinafter “This Association”) set forth basic terms regarding the registration of, use of, handling of personal information in connection to, and other matters pertaining to the accounts (hereinafter “ExpoID”) to be registered by guests visiting or planning to visit the 2025 World Exposition (hereinafter “Guest” or “Guests”).
The Guests are asked to thoroughly read through and fully understand These Terms before submitting applications for registration. After the Guests have agreed to These Terms on the screen for agreeing to the Terms of Use displayed when registering on the website established by This Association, These Terms will apply to the provision of personal and required information by the Guests as well as any and all matters related to the ExpoID, including its registration, management, use, and deletion.
Article ２ (Definition and Description of Terms)
ExpoID refers to an account used for the purpose of identifying Guests when Guests apply for and use integrated services compatible with authentication using ICT-PF, which is provided by This Association.
ICT-PF refers to the ExpoID management system established and provided by This Association for the purpose of providing ExpoID services.
Integrated services refer to services developed and provided by This Association and other organizations for the 2025 World Exposition that incorporate the ExpoID as one of its authentication methods.
Authentication method refers to the method of identifying an ExpoID Registrant, and This Association adopts multi-factor authentication or two-step authentication. The multi-factor authentication uses either ExpoID/password and biometrics or ExpoID/password and a passcode or the like or a one-time password. The two-step authentication uses an ExpoID/password and a one-time password notified by email.
User device refers to a device (computer, smartphone, tablet) used by the Guests.
Screen for agreeing to the Terms of Use refers to the screen displayed when accessing the registration page of the website established by This Association from a user device, where Guests can choose whether to agree or disagree to the application of These Terms.
ExpoID Registrant refers to a Guest who has completed the registration of his/her ExpoID according to These Terms. Hereinafter in These Terms, those who have not completed the ExpoID registration will be referred to as Guests, and those who have registered will be referred to as ExpoID Registrants.
Proxy registration refers to the method of registration in which an ExpoID Registrant acts as a proxy to an unregistered family member or a friend, or as a proxy to a minor under the age of 16 requiring supervision in provision and management of personal information, and registers his/her ExpoID as a parent, legal guardian, etc.
Proxy registration menu refers to the menu for proxy registration appearing as one of the ExpoID menus indicated on a user device of the ExpoID Registrant. The proxy registration menu appears as one of the ExpoID menus on a user device if the Guest completed the registration him or herself, but it will not appear as one of the ExpoID menus if the Guest registered for an ExpoID via the proxy registration method.
Article ３ (Agreement to the Terms of Use, Required Information, Registration of the ExpoID)
1 Guests may apply for registration of the ExpoID only when they access the registration screen established by This Association from their user devices and agree to These Terms on the screen for agreeing to the Terms of Use.
As soon as the Guest provides personal and other information required for registration in a manner specified by This Association, the ExpoID registration is completed, and access to the ExpoID menu will be granted.
2 If a Guest is a minor under the age of 16, an ExpoID Registrant who is a parent, legal guardian, etc. (hereinafter “Guardian, Etc.”) must access the ExpoID menu, use the proxy registration function in the menu, and complete the proxy registration process for the Guest. When completing the proxy registration for a Guest, the Guardian, Etc. must agree to the Terms of Use for the ExpoID being applied to the Guest. The Guest may utilize the ExpoID menu only when the Guardian, Etc. agrees to the Terms of Use for the ExpoID being applied to the Guest.
3 If a Guest is aged 16 or older, but not accustomed to handling matters related to systems and accounts, the Guest may entrust the registration process to an ExpoID Registrant family member, etc., and have the ExpoID Registrant use the proxy registration function in the menu to complete the proxy registration process for the Guest. An ExpoID Registrant registered via proxy registration must agree to These Terms on the screen for agreeing to the Terms of Use that appears when accessing for the first time after registration. The Guest may utilize the ExpoID menu only when agreeing to These Terms being applied on the indicated screen for agreeing to the Terms of Use.
4 When the Guest’s ExpoID is registered via proxy registration, except in cases where malice or negligence is found in This Association, This Association will consider the ExpoID to be registered by an ExpoID Registrant at the behest of the Guest him or herself and will also consider the application for and use of integrated services as the Guest’s own actions. In addition, if the Guest is a minor aged 16 or older but under 18 and has registered for him or herself, This Association will consider that a Guardian, Etc. has agreed to These Terms being applied to the Guest.
5 For an ExpoID Registrant to use the ExpoID menu, an authentication method must be chosen and set up in addition to the ExpoID and password. However, ExpoID Registrants registered via proxy registration may use the ExpoID menu by only using the ExpoID authentication method (ExpoID and password). Beware that there is a difference in the menu content.
6 This Association does not assume responsibility for any damage suffered by the ExpoID Registrant or a third party incurred by the setup or use of the authentication method by the ExpoID Registrant. Regarding the setup, cancellation, and other matters for each of the authentication methods from a user device, please refer to the instruction manual of the user device or the guidance on the website.
7 ExpoID Registrants may cancel or change their authentication method at any time. Beware that cancellation of the authentication method my cause changes to the accessible content of the ExpoID.
8 If the ExpoID Registrant is no longer in control of the email address used for registration, the registrant must change the email address to one he or she has control over. This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by the ExpoID Registrant forgetting or waiting to change the email address.
Article ４ (Use of the ExpoID)
ExpoID Registrants may use the ExpoID menu and integrated services. However, use of the integrated services by a minor aged under 18 may require permission from the Guardian, Etc.
Article ５ (Management of the ExpoID and Password)
1 ExpoID Registrants should avoid the use of date of birth, address, phone number, or any other information easily guessable by a third party when setting up the ExpoID and the password.
2 For instances such as when the ExpoID Registrant forgets the ExpoID, the registrant may inquire about the ExpoID by following the procedure set forth by This Association. If the ExpoID Registrant forgets the password, the registrant may reset and reassign the password by following the procedure set forth by This Association.
3 ExpoID Registrants are responsible for managing their ExpoID and password and may not allow a third party to use them, lend them, transfer them, change the name of record on them, etc.
4 This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by illicit use of the ExpoID or other incidents caused by the ExpoID Registrant setting up an ExpoID and password easily guessable by a third party, or by the insufficient management, misuse, giving of permission for illicit use by a third party, etc. by the ExpoID Registrant.
5 ExpoID Registrants must take immediate and appropriate action, such as changing the password or deactivating the ExpoID, if the ExpoID or the password has been lost or stolen, when the ExpoID or the password has become known to a third party, or when they discover that their ExpoID or the password is being used by a third party.
6 Except in cases where malice or gross negligence is found in This Association, This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by the ExpoID Registrant registering for or using the ExpoID. However, this does not apply when Articles in These Terms violate the Consumer Contract Act.
7 This Association does not assume any responsibility for damage suffered by the ExpoID Registrant or a third party incurred by failing to provide necessary information, providing an incorrect email address, or other grounds not attributable to This Association when entering the registration information.
Article ６ (Deactivation by ExpoID Registrant)
1 The ExpoID Registrant can deactivate the ExpoID at any time using a prescribed procedure. After completing the deactivation procedure, the ExpoID will not be usable anymore.
2 After deactivation, should the Guest wish to use an ExpoID, he or she must undergo a new registration process. Beware that the data from the deactivated ExpoID will not be transferred to the new ExpoID.
Article ７ (Handling of Personal Information)
This Association will appropriately handle personal information obtained in relation to the use of ExpoIDs in accordance with This Association’s Privacy Policy
Article ８ (Prohibited Activities)
This Association prohibits all acts listed in the following items during registration and use of the ExpoID by the ExpoID Registrant.
① Acts that violate or exacerbate the violation of laws; court judgments, decisions or orders; or legally binding administrative actions
② Fraudulent or intimidating acts towards This Association, other ExpoID Registrants, or third parties
③ Acts contrary to public order and morals
④ Acts that infringe upon the intellectual property rights, trade secrets, restricted access data, image rights, privacy, reputation, and other rights or interests of This Association, other ExpoID Registrants, or third parties (including behaviour that directly or indirectly causes such infringements)
⑤ Act of providing the following information to This Association without obtaining prior written consent from This Association
a. Information that contains excessively violent or cruel expressions
b. Information that contains computer viruses or other harmful computer programs
c. Information that contains expressions that damage the reputation or credibility of This Association
d. Information that contains excessively obscene expressions
e. Information that contains expressions that encourage discrimination
f. Information that contains expressions that encourage suicide or self-harm
g. Information that contains expressions that encourage inappropriate use of drugs
h. Information that contains anti-social expressions
i. Information that contains expressions that cause discomfort to others
⑥ Acts that hinder or impede the operation of ICT-PF or related networks and systems, etc.
⑦ Act of unlawfully accessing This Association’s networks, systems, etc.; act of unlawfully rewriting or deleting information accumulated on equipment and devices of This Association; or other acts that incur damage to This Association
⑧ Act of using the ExpoID or password of other ExpoID Registrants
⑨ Act of registering with false information to impersonate other ExpoID Registrants or fictitious third parties
⑩ Acts that lead to benefitting antisocial forces, etc
⑪ Acts that go against the Terms of Use for the ExpoID or the intent and/or purpose of the ExpoID
⑫ Other acts deemed inappropriate by This Association
Article ９ (Steps for Non-Compliance of Terms, Etc.)
1 When the ExpoID Registrant violates the previous Article or other obligations stipulated in These Terms and such violating state is not rectified after This Association has issued a correction notice with a reasonable timeframe, This Association can deactivate or cancel the said ExpoID.
2 This Association does not assume any responsibility for damage incurred by cancellation of the ExpoID of the ExpoID Registrant pursuant to the previous Clause.
3 When one of the following applies, This Association may take certain measures, including suspending the use of the ExpoID by the ExpoID Registrant. For this Clause, the preceding Clause shall apply mutatis mutandis.
① When the wrong ExpoID password has been entered more than a certain number of times
② When This Association deems that the login is or may be unauthorized
③ When This Association deems necessary
4 This Association may temporarily stop the ExpoID services for system maintenance, system failure, etc. This Association will notify such suspensions in advance on its website, etc., except in cases of emergency and unavoidable circumstances.
This Association does not assume any responsibility for damage suffered by the ExpoID Registrant due to suspension or interruption of the ExpoIDs pursuant to this Clause.
Article １０ (Application of and Changes to These Terms)
When one of the following applies, This Association may change the contents of These Terms by announcing or notifying ExpoID Registrants in a manner deemed appropriate by This Association. The new Terms of Use shall apply from the date of change.
① When the changes to These Terms are in the general interests of the other party.
② When the changes to These Terms do not contradict the purpose of the contract, and when the necessity of the changes, the appropriateness of the changed content, the fact that These Terms may be changed in accordance with the provisions of this Article, and the content and other circumstances surrounding the change are reasonable.
Article １１ (Compensation for Damage)
1 When the ExpoID Registrant violates These Terms and thereby inflicts damage to This Association, the said ExpoID Registrant is liable for such damage suffered by This Association.
2 When the ExpoID Registrant violates These Terms and thereby inflicts damage to a third party, the said ExpoID Registrant must compensate for such damage suffered by the third party and shall not involve This Association in the dispute with such third party.
Article １２ (Period of Use of the ExpoID)
1 The ExpoID and the ExpoID menu can be used until November 30, 2025.
2 After the ExpoID services have ended, all personal information data collected upon ExpoID registrations will be deleted.
3 This Association may extend the period of use set forth in Clause 1 by following the procedures set forth in Article 10.
Article １３ (Governing Law, Jurisdiction)
These Terms shall be governed by and construed in accordance with Japanese laws.
Any dispute involving This Association in connection with ExpoIDs that may arise shall be subject to the exclusive jurisdiction of the Osaka District Court in the first instance.
Supplementary provisions
These Terms shall come into effect from November 1, 2023.
These Terms will be revised on July 24, 2024, and the revised content will apply from July 24, 2024.
Privacy Policy
The Japan Association for the 2025 World Exposition (the “Association” “we” “our”), prescribes as follows its Privacy Policy covering the handling of personal information for domestic users, overseas users and related parties (the “Privacy Policy”) with respect to the services offered by the Association (“Services”) and other activities of the Association in connection to the Expo 2025 Osaka, Kansai, Japan (the “World Exposition”).
The term “User(s)” is used to refer collectively to general visitors of the World Exposition, users of the Association’s website and application, volunteer staff, freelance journalists, and other individuals who participate in or are involved with the World Exposition as individuals not belonging to any certain organization that participates in or is involved with the World Exposition.
Among the Users who receive the Services, “Privacy Policy (for domestic users)” applies to Users located in Japan and “Privacy Policy (for overseas users)” applies to Users located in countries other than Japan.
Further, “Privacy Policy (for related parties)” applies to individuals who belong to certain organizations that participates in or is involved with the World Exposition, namely, related parties such as officials, employees, and personnel of the Association, pavilion exhibits, sponsors and sponsoring companies, foreign governments and international organizations (the Official Participants), and private exhibits (the Non-official Participants) (collectively, “Related Parties”).
Each of the Privacy Policy is prepared in Japanese. In the event of any discrepancy between each Privacy Policy prepared in Japanese and the content of the Privacy Policy translated into English or other languages provided by the Association, the Japanese provisions shall prevail.
Please refer to the appropriate Privacy Policy from the below.
Privacy Policy (for domestic users)
In order to comply with the Japanese Act on the Protection of Personal Information (the “Act”) and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of the Users, the Association hereby prescribes the following Privacy Policy (for domestic users) (in this Privacy Policy (for domestic users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services.
Although this Policy applies to our handling of all the personal information in relation to the Services, if there are separate rules and regulations applicable to the handling of the personal information in relation to the services when the User receives individual services, those rules and regulations shall be applied to the handling of the personal information in relation to such services.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.
This Policy shall be applied to the handling of personal information of Users located in Japan. For the handling of personal information of Users residing in countries other than Japan, a separate policy “Privacy Policy (for overseas users)” shall be applied and be referred to.
1. Personal Information We Collect and Purpose of Use
The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use, and shall not use personal information of Users for any purpose other than as stipulated in this Policy.
(1) Personal information we collect
The personal information we collect consists of the following:
・ Basic information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
・ Payment and settlement information (credit card number, etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (whether or not the person is certified as disabled, etc.);
・ Information related to Social Media (accounts, profiles and password information for LINE, X, Facebook, Instagram, Google etc.);
・ Entered information (language settings, mail delivery settings, married or unmarried status, has children or not, hobbies and preferences, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above)); and
・ Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.).
(2) Purposes of use of personal information we collect
We use the personal information we collect from Users for the following purposes:
・ To authenticate and confirm the identity of Users;
・ To offer the Services to Users, such as ticket and merchandise sales, and event organization;
・ For selection and registration of volunteer applications;
・ To request feedback on the Services from the Users;
・ To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association (including the delivery of optimized advertisements by analyzing acquired information such as browsing history and purchase history);
・ To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
・ To register the reservation information and manage and operate the event safely and smoothly;
・ To respond to inquiries about the Services;
・ To respond to actions that violate the Association’s terms or the like regarding the Services;
・ To notify changes etc. of the terms or like regarding the Services;
・ To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur;
・ To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”; and
・ In accordance with the agreement to this Policy, the Association will be provided with personal information or personally related information acquired by its business partners and will use such information for the purposes described in section “1. (2) Purpose of use of personal information we collect” in conjunction with the personal information already held by the Association regarding Users. The personally related information or personal information we obtain may include the following:
Type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.
2. Provision of Personal Information to Third Parties
(1) Except for the following cases, the Association shall not provide personal information to third parties without obtaining the prior consent of the User to whom the personal information pertains. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.
(i) When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
(ii) When the personal information is being provided as a result of the succession of business in a merger or otherwise;
(iii) When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the User;
(iv) When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the User;
(v) When there is a requirement to cooperate with a state organ, or local government, or an individual or a business operator entrusted by either of the former two in executing the affairs prescribed by laws and regulations, and obtaining the User’s consent is likely to impede the execution of the affairs concerned;
(vi) When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
(vii) Any other instance covered by the Act or other laws and regulations
(2) Notwithstanding the preceding paragraph, we may provide personal information of Users to the following third parties based on the Users’ consent to this Policy.
(i) Governments (including regulatory authorities foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(ii) Social media operators, advertising companies, advertising distributors, data analysis operators, DMP operators, media companies and other operators with which the Association has a business alliance.
(3) Based on the consent to this Policy, we may receive personal information of Users from the parties listed in the preceding paragraph.
3. Provision of Personal Information to Third Parties in Foreign Countries
We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the User to whom the personal information pertains, except in any of the following cases:
(i) The cases listed in the above Article 2, Paragraph 1, Items (iii) through (vi);
(ii) When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
(iii) Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
(iv) Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.
If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.
4. Secure Management of Personal Information
The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Associations’ employees, etc.
For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.
5. Supervision of Subcontractors for Personal Information
In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.
6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information
The Association understands that the User to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (“Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.
To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.
7. Thorough Protection of Personal Information
The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.
8. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.
Established: November 1, 2023
Privacy Policy (for overseas users)
In compliance with applicable data protection laws and regulations (including, but not limited to the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the United Kingdom General Data Protection Regulation (the “UK GDPR”), the China Personal Information Protection Law (the “PIPL”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”)), the Association hereby prescribes the following Privacy Policy (for overseas users) (in this Privacy Policy (for overseas users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services containing the User’s registered information.
This Policy applies to the handling of personal information of Users residing outside Japan, including, but not limited to, the European Economic Area (EEA), the United Kingdom, China and the State of California in the United States. For the handling of personal information of Users residing in Japan, a separate policy “Privacy Policy (for domestic users)” shall be applied and be referred to.
1. Categories of Personal Information We Collect
The Association will collect and handle the following personal information in relation to the Services.
・ Basic Information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
・ Payment and settlement information (credit card number, etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (whether or not the person is certified as disabled, etc.);
・ Information related to Social media (accounts, profiles and password information for LINE, X, Facebook, Instagram or Google);
・ Entered information (language settings, mail delivery settings, married or unmarried status, has children or not, hobbies and preferences, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above)); and
・ Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.).
2. Purposes of Use of Personal Information and Legal Grounds for Data Processing
The Association collects and handles personal information based on the User’s consent, performance of contract or legitimate interest for the following purposes of use in connection with the Services:
・ To authenticate and confirm the identity of Users;
・ To offer the Services to Users, such as ticket and merchandise sales, and event organization;
・ For selection and registration of volunteer applications;
・ To request feedback on the Services from the Users;
・ To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association;
・ To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
・ To register the reservation information and manage and operate the event safely and smoothly;
・ To respond to inquiries about the Services;
・ To respond to actions that violate the Association’s terms or the like regarding the Services;
・ To notify changes etc. of the terms or like regarding the Services; and
・ To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur.
3. Disclosure of Personal Information
The Association may provide the User’s personal information to the following businesses and organizations. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.
(i) The Association uses outsourcing companies such as service providers, marketing service providers and security service providers to offer the Services, and these contractors will access and process the Users’ personal information to the extent necessary to offer the Services.
(ii) The Association may provide personal information to government (including foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(iii) If the Association succeeds to a business through a merger or for other reasons, personal information may be provided to entities designated by the Association or the International Bureau of Exhibitions (BIE) as the Association's legacy successor entities, as well as to persons associated with such entities.
(iv) The Association may provide personal information to business partners or information collection module providers.
(v) The Association may disclose personal information to public authorities in accordance with applicable laws and regulations (including ordinances, court rulings, and administrative orders and recommendations)
4. Source of Personal Information
The Association primarily collects personal information directly from the Users. However, in certain cases, the Association may obtain personal information indirectly from (i) organizations, corporations, or entities to which Users belong or are associated with, (ii) World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors (iii) SNS operators such as LINE, X, Facebook, Instagram, Google, etc., (iv) administrators of websites and applications other than the Association, and (v) outsourcing companies listed in section 3 (i) above.
5. International Transfer of Personal Information
The Association may transfer the User’s personal information to countries outside of the User’s country of residence (for Users residing in the EU, to outside of the EU) (the “International Transfer”) for the purpose of offering the Services. These countries include countries where the level of protection of personal information is lower than laws and regulations applicable to the country where the User resides, including the country where the foreign government listed in section 3 (ii) above is located.
When the Association conducts International Transfer of Users’ personal information to these countries, it will: (i) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the GDPR, if the Users reside in the EU, (ii) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the UK GDPR if the Users reside in the UK, and (iii) if the Users reside in China, obtain consent from the Users and conclude a standard contract with the recipients of the personal information, and then conduct a Personal Information Protection Impact Assessment to understand the risks associated with the cross-border transfer and to reduce such risks. If you would like more information, such as obtaining a copy of the standard contractual clause, etc., please contact us at the contact information indicated under section “13. Inquiries” below.
6. Retention Period of Personal Information
The Association will retain Users’ personal information for as long as it is necessary to fulfil the purposes of use prescribed in this Policy.
To determine the appropriate retention period for the personal information we consider: (i) whether there is an ongoing relation with the User, (ii) whether the Association is legally obligated to store the personal information, and (iii) whether it is necessary to fulfill the contract with the User.
7. Processing Minor Child’s Personal Information
The Association does not knowingly collect or process personal information of Users under the age of 16 without the consent of a parent or guardian. Users under the age of 16 must provide their personal information to the Association only with the consent of a parent or guardian.
If the Association discovers that it has collected the personal information of a User under the age of 16 without the consent of the parent or guardian, it will immediately take appropriate action.
Parents and guardians are requested to agree that in the case of providing personal information to the Association on behalf of a User under the age of 16 for the purpose of Expo ID registration, the personal information directly obtained from the User under the age of 16 in connection with the various services provided by the Association using the relevant Expo ID will also be handled in accordance with this Policy. The various services provided by the Association to Users under the age of 16 using the Expo ID include, but are not limited to, the following services:
・To register for participation in the exhibition and pavilion
・To make reservations to experience the exhibits and use the transportation system;
・To purchase tickets, merchandise, etc.;
・To receive online services provided by the Association, such as content distribution, virtual expo experiences, guides of the ideal courses and routes within the exhibition, and creation of avatar images; and
・To receive optimal exhibition experiences and advertisements by analyzing online and offline behavior histories.
8. Rights for Disclosure, Correction, Addition, Deletion etc. of Personal Information
Users may have the following rights with respect to your own personal information, in accordance with applicable laws and regulations:
(i) right to seek access to personal information (including copies);
(ii) right to request correction;
(iii) right to seek removal (the right to be forgotten) when certain conditions are met;
(iv) right to restrict (stop the processing) the processing of personal information if certain conditions are met; and
(v) right to receive personal information in a structured, machine-readable form if certain conditions are met (the right to data portability).
These rights may be limited, on an exceptional basis, if complying with a User's request would infringe the rights of Association or a third party, or if we are required to delete information that we are required to retain in accordance with laws and regulations. Exceptions to these rights are set out in the applicable laws and regulations.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
9. Right to Object the Handling of Personal Information
Users may have the right at any time to object the handling of personal information that is being handled on the basis of legitimate interests under applicable laws and regulations. The handling of personal information in this context includes profiling (This refers to analyzing and predicting the behavior of users based on their information. The same shall apply hereafter.).
Users may have the absolute right under applicable laws and regulations to refuse direct marketing or to refuse profiling done for that purpose if their personal information is being handled for direct marketing purposes.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
10. Right to Withdraw Consent
Users have the right to withdraw your consent whenever the Association handles your personal information based on your consent. This withdrawal does not affect the legality of any treatment made on the basis of consent previously given.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
11. Required Personal Information
The personal information Users are required to provide for the provision of the Services is indicated in the form to be entered by the User. The User assumes no obligation to provide such personal information, but if such personal information is not provided, the Association is unable to offer the Services.
12. The Right to File a Complaint with a Supervisory Authority
Users may have the right to file a complaint with a supervisory authority under applicable laws and regulations. The supervisory authorities where complaints can be filed may include the supervisory authorities of the EU Member State where the User resides or works or where the GDPR complaint is filed, as well as the UK supervisory authorities.
13. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
The contact information for the Association’s representative in the EU is as follows:
TMI Avocats & Associés
40 avenue Niel, 75017, Paris, France
E-mail：2025WorldExpo_EUrep@tmi.gr.jp
The contact information for the Association’s representative in the UK is as follows:
TMI Associates London LLP
CityPoint One Ropemaker Street, London EC2Y 9SS, United Kingdom
E-mail：2025WorldExpo_UKrep@tmi.gr.jp
California residents can exercise their rights under the CCPA by contacting the below:
・Inquiries About the Handling Personal Information
Supplementary Provisions for Processing of Personal Information of California Residents
In addition to the provisions set forth above, the following provisions apply to the processing of personal information of residents residing in the state of California in the United States (that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household, hereinafter the same) in accordance with the CCPA.
1. Categories of Personal Information We Collect and the Parties Receiving the Information
The Association will collect and has collected in the last twelve (12) months, the following categories of personal information from the Users. Further, the Association has disclosed the personal information collected in the last twelve (12) months to the receiving party indicated below. The section numbers indicated under “Receiving Party” are the numbers indicated in section “3. Disclosure of Personal Information” above.
For details on personal information we collect, refer to section “1. Categories of Personal Information We Collect” above, for the business purpose and commercial purpose of personal information we collect, refer to section “2. Purposes of Use of Personal Information and Legal Grounds for Data Processing” above, for the source of personal information we collect, refer to section “4. Source of Personal Information” above, and for the retention period of the personal information we collect, refer to section “6. Retention Period of Personal Information” above.
2. Your Rights and Choices under CCPA
The CCPA provides residents of California with specific rights regarding personal information. If the User is a California resident, the following describes your rights under the CCPA and explains how to exercise those rights.
(1) Right to access personal information
Users have the right to request that the Association discloses certain information to you about our collection, sharing, disclosure or use of your personal information. Once the Association receives and confirms your verifiable user request, we will disclose the following information to you:
・ The categories of personal information we collected about the User;
・ The categories of sources for the personal information we collected about the User;
・ Our business or commercial purpose for collecting, selling, or sharing that personal information;
・ The categories of third parties with whom we share or sell that personal information; and
・ The specific pieces of personal information we collected about the User.
(2) Right to request deletion
Users have the right to request that the Association deletes any of Users’ personal information that we have collected from you and retained, subject to certain exceptions. Once the Association receives and confirms your verifiable user request, we will delete (and notify our contractors to delete the same) your personal information from our records, unless an exception applies.
The Association may deny the User’s deletion request if retaining the information is necessary for us or our contractors in order to:
・ Complete the transaction for which personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the User, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
・ Help to ensure security and integrity to the extent the use of the User’s personal information is reasonably necessary and proportionate for those purposes;
・ Debug products to identify and repair errors that impair existing intended functionality;
・ Exercise free speech, ensure the rights of other consumers to exercise their free speech rights, or exercise other rights provided for by law;
・ Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
・ Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent; and
・ Enable solely internal uses that are reasonably aligned with consumer expectations based on the relationship between the User and the Association; or
・ Comply with legal obligations.
(3) Right to request correction
Users have the right to request that the Association corrects any of your inaccurate personal information that we have collected from you and retained. Once the Association receives and confirms your verifiable user request, we will correct (and notify our contractors to correct the same), your inaccurate personal information. The Association may deny the User’s request for correction if we determine that the contested personal information is more likely than not to be accurate based on the totality of the circumstances.
(4) Right to opt-out of sale or sharing
The Association has not sold or shared personal information collected from Users in the past 12 months and it will not sell or share them in the future.
(5) Right to opt-in to sale or sharing of personal information
The Association will not sell or share the personal information of any User over the age of 13 and under the age of 16 without obtaining the prior consent of the User himself or herself, or the parent or guardian of the User if under the age of 13.
If a parent or guardian provides personal information to the Association on behalf of a User under the age of 16, please obtain the necessary consent for the Association to sell or share the personal information.
(6) Right to limit the use of sensitive personal information
The Association have not used and disclosed and will not use or disclose sensitive personal information collected from Users for any purpose other than the following:
・ To perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services;
・ To help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes;
・ For short-term, transient use (except those involving profiling or changes to the future consumer experience);
・ To perform services on behalf of the Association; and
・ To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the Association.
(7) Non-discrimination
The Association will not discriminate against California residents for exercising any of their rights under the CCPA. Moreover, unless permitted by the CCPA, we will not:
・ Deny the goods or services to the Users;
・ Charge Users different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
・ Provide Users a different level or quality of goods or services;
・ Suggest that Users may receive a different price or rate for goods or services or a different level or quality of goods or services; or
・ Retaliate against an employee, applicant for employment, or independent contractor.
(8) Exercising rights for disclosure request, deletion request and correction request
To exercise your rights for disclosure request, deletion request and correction request described above, please submit a verifiable user request to the Association by contacting us in the manner set forth in section “13. Inquiries”.
Only the User, a natural person or a person registered with the California Secretary of State that the User authorizes to act on the User’s behalf, or a person who has a power of attorney or is acting as a conservator for the User, may make a verifiable user request related to the User’s personal information. The User may also make a verifiable user request on behalf of the User’s minor child.
The verifiable user request must:
・ Provide sufficient information that allows the Association to reasonably verify you are the person about whom we collected the personal information or an authorized representative; and
・ Describe the User’s request with sufficient detail that allows us to properly understand, evaluate, and respond thereto.
Established: November 1, 2023
Privacy Policy (For related persons)
With respect to the implementation, etc. of the World Exposition, and in order to comply with the Act and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of our officers, employees and related persons (including, without limitation, staff or related persons of pavilion exhibitors, sponsors, supporting companies of World Exposition, the Official Participants from foreign governments and international organizations, and the Non-official Participants from pavilion exhibitors, but not including visitors and volunteers to World Exposition (collectively, “Related Persons”), the Association hereby prescribes the following Privacy Policy (for related persons) (in this Privacy Policy (for related persons) referred to as this “Policy”) to cover the handling of Related Persons’ personal information.
Although this Policy applies to our handling of the personal information of all Related Persons, if there are separate rules and regulations applicable to our handling of the personal information of Related Persons in individual cases, those rules and regulations shall take precedence over our handling of the personal information of Related Persons in the relevant cases.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.
1. Personal Information We Collect and Purpose of Use
The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use of the personal information we collect, and shall not use personal information of Related Persons for any purpose other than as stipulated in this Policy.
(1) Personal information we collect
The personal information we collect from Related Persons consists of the following:
・ Basic Information (name, gender, date of birth, address (postal code, prefecture, municipality), phone number, photo, e-mail address, passport number, nationality or country of residence, etc.);
・ Information on background (education, employment history, qualifications, history of disciplinary, criminal and administrative actions, etc.);
・ Information on family structure (family composition and other family-related information etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (health status, medical history, whether or not the person is certified as disabled, etc.);
・ Information for payroll transfer (payroll information, payroll transfer account, etc.);
・ Information obtained through internal communications (information obtained through personnel evaluations, internal audits or internal reporting, etc.);
・ Log-in information (ID, password, etc.) for our system;
・ Entered information (information entered or sent by Related Persons using the Association’s input form or other method prescribed by the Association);
・ Information obtained from the Related Persons’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.); and
・ Other information related to the above
(2) Purposes of use of personal information we collect
We use the personal information we collect from Related Persons for the following purposes:
・ To plan and operate World Exposition and related events (including official ceremonies and official events held on National Days and Special Days; the same shall apply hereinafter)
・ To carry out administrative procedures related to expositions and related events;
・ To contact Related Persons or to prepare a contact list;
・ To communicate and coordinate information among Related Persons;
・ To authenticate and confirm the identity of Related Persons;
・ To monitor the use of our systems by Related Persons, and to detect and prevent unauthorized log-ins or the like;
・ To pay salaries, bonuses, retirement allowances, reimbursement of expenses, and payment of costs;
・ To perform procedures related to employee benefits, tax, social insurance, and other administrative procedures required by laws and regulations;
・ To perform procedures related to employee benefits, tax, social insurance, and other legal administrative procedures, training and personnel development, and personnel evaluations and transfers;
・ To detect and prevent fraud and misconduct at an early stage;
・ To ensure occupational health and safety and other personnel and labor management operations (including those related to weddings, funerals and other family events); and
・ To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”
2. Provision of Personal Information to Third Parties
(1) Except for the following cases, the Association shall not provide personal information to third parties without obtaining the prior consent of the person to whom the personal information pertains:
(i) When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
(ii) When the personal information is being provided to the organizations designated by the Association or the Bureau International des Expositions (BIE) as legacy successor organizations of the Association and related persons of such organizations as part of a business handover as the result of a merger or the like;
(iii) When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the person;
(iv) When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the person;
(v) When there is a requirement to cooperate with a government agency or local government or a delegated organization in order for a legally required action to be carried out, and obtaining the person’s consent could have a detrimental effect on carrying out said action;
(vi) When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
(vii) Any other instance covered by the Act or other laws and regulations
(2) Notwithstanding the preceding paragraph, the Association may provide personal information of Related Persons to the following third parties based on the Related Persons’ consent to this Policy.
Governments (including regulatory authorities foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(3) Based on the consent to this Policy, we may receive personal information of Related Persons from the parties listed in the preceding paragraph.
3. Provision of Personal Information to Third Parties in Foreign Countries
We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the person to whom the personal information pertains, except in any of the following cases:
(i) The cases listed in Article 2, Paragraph 1, Items (iii) through (vi);
(ii) When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
(iii) Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
(iv) Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.
If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.
4. Secure Management of Personal Information
The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Association’s employees, etc.
For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.
5. Supervision of Subcontractors for Personal Information
In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.
6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information
The Association understands that the person to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (collectively, “Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.
To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.
7. Thorough Protection of Personal Information
The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.
8. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.
Established: November 1, 2023
The term “User(s)” is used to refer collectively to general visitors of the World Exposition, users of the Association’s website and application, volunteer staff, freelance journalists, and other individuals who participate in or are involved with the World Exposition as individuals not belonging to any certain organization that participates in or is involved with the World Exposition.
Among the Users who receive the Services, “Privacy Policy (for domestic users)” applies to Users located in Japan and “Privacy Policy (for overseas users)” applies to Users located in countries other than Japan.
Further, “Privacy Policy (for related parties)” applies to individuals who belong to certain organizations that participates in or is involved with the World Exposition, namely, related parties such as officials, employees, and personnel of the Association, pavilion exhibits, sponsors and sponsoring companies, foreign governments and international organizations (the Official Participants), and private exhibits (the Non-official Participants) (collectively, “Related Parties”).
Each of the Privacy Policy is prepared in Japanese. In the event of any discrepancy between each Privacy Policy prepared in Japanese and the content of the Privacy Policy translated into English or other languages provided by the Association, the Japanese provisions shall prevail.
Please refer to the appropriate Privacy Policy from the below.
Privacy Policy (for domestic users)
In order to comply with the Japanese Act on the Protection of Personal Information (the “Act”) and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of the Users, the Association hereby prescribes the following Privacy Policy (for domestic users) (in this Privacy Policy (for domestic users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services.
Although this Policy applies to our handling of all the personal information in relation to the Services, if there are separate rules and regulations applicable to the handling of the personal information in relation to the services when the User receives individual services, those rules and regulations shall be applied to the handling of the personal information in relation to such services.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.
This Policy shall be applied to the handling of personal information of Users located in Japan. For the handling of personal information of Users residing in countries other than Japan, a separate policy “Privacy Policy (for overseas users)” shall be applied and be referred to.
1. Personal Information We Collect and Purpose of Use
The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use, and shall not use personal information of Users for any purpose other than as stipulated in this Policy.
(1) Personal information we collect
The personal information we collect consists of the following:
・ Basic information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
・ Payment and settlement information (credit card number, etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (whether or not the person is certified as disabled, etc.);
・ Information related to Social Media (accounts, profiles and password information for LINE, X, Facebook, Instagram, Google etc.);
・ Entered information (language settings, mail delivery settings, married or unmarried status, has children or not, hobbies and preferences, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above)); and
・ Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.).
(2) Purposes of use of personal information we collect
We use the personal information we collect from Users for the following purposes:
・ To authenticate and confirm the identity of Users;
・ To offer the Services to Users, such as ticket and merchandise sales, and event organization;
・ For selection and registration of volunteer applications;
・ To request feedback on the Services from the Users;
・ To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association (including the delivery of optimized advertisements by analyzing acquired information such as browsing history and purchase history);
・ To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
・ To register the reservation information and manage and operate the event safely and smoothly;
・ To respond to inquiries about the Services;
・ To respond to actions that violate the Association’s terms or the like regarding the Services;
・ To notify changes etc. of the terms or like regarding the Services;
・ To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur;
・ To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”; and
・ In accordance with the agreement to this Policy, the Association will be provided with personal information or personally related information acquired by its business partners and will use such information for the purposes described in section “1. (2) Purpose of use of personal information we collect” in conjunction with the personal information already held by the Association regarding Users. The personally related information or personal information we obtain may include the following:
Type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and AAID, etc.
2. Provision of Personal Information to Third Parties
(1) Except for the following cases, the Association shall not provide personal information to third parties without obtaining the prior consent of the User to whom the personal information pertains. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.
(i) When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
(ii) When the personal information is being provided as a result of the succession of business in a merger or otherwise;
(iii) When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the User;
(iv) When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the User;
(v) When there is a requirement to cooperate with a state organ, or local government, or an individual or a business operator entrusted by either of the former two in executing the affairs prescribed by laws and regulations, and obtaining the User’s consent is likely to impede the execution of the affairs concerned;
(vi) When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
(vii) Any other instance covered by the Act or other laws and regulations
(2) Notwithstanding the preceding paragraph, we may provide personal information of Users to the following third parties based on the Users’ consent to this Policy.
(i) Governments (including regulatory authorities foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(ii) Social media operators, advertising companies, advertising distributors, data analysis operators, DMP operators, media companies and other operators with which the Association has a business alliance.
(3) Based on the consent to this Policy, we may receive personal information of Users from the parties listed in the preceding paragraph.
3. Provision of Personal Information to Third Parties in Foreign Countries
We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the User to whom the personal information pertains, except in any of the following cases:
(i) The cases listed in the above Article 2, Paragraph 1, Items (iii) through (vi);
(ii) When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
(iii) Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
(iv) Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.
If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.
4. Secure Management of Personal Information
The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Associations’ employees, etc.
For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.
5. Supervision of Subcontractors for Personal Information
In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.
6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information
The Association understands that the User to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (“Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.
To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.
7. Thorough Protection of Personal Information
The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.
8. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.
Established: November 1, 2023
Privacy Policy (for overseas users)
In compliance with applicable data protection laws and regulations (including, but not limited to the General Data Protection Regulation (EU) 2016/679 (the “GDPR”), the United Kingdom General Data Protection Regulation (the “UK GDPR”), the China Personal Information Protection Law (the “PIPL”), the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (the “CCPA”)), the Association hereby prescribes the following Privacy Policy (for overseas users) (in this Privacy Policy (for overseas users) referred to as this “Policy”) to cover the handling of personal information in relation to the Services containing the User’s registered information.
This Policy applies to the handling of personal information of Users residing outside Japan, including, but not limited to, the European Economic Area (EEA), the United Kingdom, China and the State of California in the United States. For the handling of personal information of Users residing in Japan, a separate policy “Privacy Policy (for domestic users)” shall be applied and be referred to.
1. Categories of Personal Information We Collect
The Association will collect and handle the following personal information in relation to the Services.
・ Basic Information of the Users (name, alias, gender, date of birth, address (postal code, prefecture, municipality), phone number, e-mail address, passport number, nationality or country of residence, etc.);
・ Payment and settlement information (credit card number, etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (whether or not the person is certified as disabled, etc.);
・ Information related to Social media (accounts, profiles and password information for LINE, X, Facebook, Instagram or Google);
・ Entered information (language settings, mail delivery settings, married or unmarried status, has children or not, hobbies and preferences, and other information entered or sent by Users using the Association’s input form or other method prescribed by the Association (excluding information contained in the above)); and
・ Information obtained from the Users’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.).
2. Purposes of Use of Personal Information and Legal Grounds for Data Processing
The Association collects and handles personal information based on the User’s consent, performance of contract or legitimate interest for the following purposes of use in connection with the Services:
・ To authenticate and confirm the identity of Users;
・ To offer the Services to Users, such as ticket and merchandise sales, and event organization;
・ For selection and registration of volunteer applications;
・ To request feedback on the Services from the Users;
・ To provide Users with promotional marketing, advertising and publicity relating to the Service, services related to the Service, the Association as well as related entities of the Association;
・ To investigate and analyze the usage of the Services by Users and to maintain, protect and improve the Services, etc.;
・ To register the reservation information and manage and operate the event safely and smoothly;
・ To respond to inquiries about the Services;
・ To respond to actions that violate the Association’s terms or the like regarding the Services;
・ To notify changes etc. of the terms or like regarding the Services; and
・ To prevent the occurrence of failures, malfunctions, and accidents in the systems of the Services, and to respond to them when they occur.
3. Disclosure of Personal Information
The Association may provide the User’s personal information to the following businesses and organizations. Users may be able to withdraw their consent to the provision of personal information to a third party by using control functions on the platform provided by the Association.
(i) The Association uses outsourcing companies such as service providers, marketing service providers and security service providers to offer the Services, and these contractors will access and process the Users’ personal information to the extent necessary to offer the Services.
(ii) The Association may provide personal information to government (including foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(iii) If the Association succeeds to a business through a merger or for other reasons, personal information may be provided to entities designated by the Association or the International Bureau of Exhibitions (BIE) as the Association's legacy successor entities, as well as to persons associated with such entities.
(iv) The Association may provide personal information to business partners or information collection module providers.
(v) The Association may disclose personal information to public authorities in accordance with applicable laws and regulations (including ordinances, court rulings, and administrative orders and recommendations)
4. Source of Personal Information
The Association primarily collects personal information directly from the Users. However, in certain cases, the Association may obtain personal information indirectly from (i) organizations, corporations, or entities to which Users belong or are associated with, (ii) World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors (iii) SNS operators such as LINE, X, Facebook, Instagram, Google, etc., (iv) administrators of websites and applications other than the Association, and (v) outsourcing companies listed in section 3 (i) above.
5. International Transfer of Personal Information
The Association may transfer the User’s personal information to countries outside of the User’s country of residence (for Users residing in the EU, to outside of the EU) (the “International Transfer”) for the purpose of offering the Services. These countries include countries where the level of protection of personal information is lower than laws and regulations applicable to the country where the User resides, including the country where the foreign government listed in section 3 (ii) above is located.
When the Association conducts International Transfer of Users’ personal information to these countries, it will: (i) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the GDPR, if the Users reside in the EU, (ii) take necessary measures for the protection of personal information such as the conclusion of standard contractual clauses under Article 46 (2) of the UK GDPR if the Users reside in the UK, and (iii) if the Users reside in China, obtain consent from the Users and conclude a standard contract with the recipients of the personal information, and then conduct a Personal Information Protection Impact Assessment to understand the risks associated with the cross-border transfer and to reduce such risks. If you would like more information, such as obtaining a copy of the standard contractual clause, etc., please contact us at the contact information indicated under section “13. Inquiries” below.
6. Retention Period of Personal Information
The Association will retain Users’ personal information for as long as it is necessary to fulfil the purposes of use prescribed in this Policy.
To determine the appropriate retention period for the personal information we consider: (i) whether there is an ongoing relation with the User, (ii) whether the Association is legally obligated to store the personal information, and (iii) whether it is necessary to fulfill the contract with the User.
7. Processing Minor Child’s Personal Information
The Association does not knowingly collect or process personal information of Users under the age of 16 without the consent of a parent or guardian. Users under the age of 16 must provide their personal information to the Association only with the consent of a parent or guardian.
If the Association discovers that it has collected the personal information of a User under the age of 16 without the consent of the parent or guardian, it will immediately take appropriate action.
Parents and guardians are requested to agree that in the case of providing personal information to the Association on behalf of a User under the age of 16 for the purpose of Expo ID registration, the personal information directly obtained from the User under the age of 16 in connection with the various services provided by the Association using the relevant Expo ID will also be handled in accordance with this Policy. The various services provided by the Association to Users under the age of 16 using the Expo ID include, but are not limited to, the following services:
・To register for participation in the exhibition and pavilion
・To make reservations to experience the exhibits and use the transportation system;
・To purchase tickets, merchandise, etc.;
・To receive online services provided by the Association, such as content distribution, virtual expo experiences, guides of the ideal courses and routes within the exhibition, and creation of avatar images; and
・To receive optimal exhibition experiences and advertisements by analyzing online and offline behavior histories.
8. Rights for Disclosure, Correction, Addition, Deletion etc. of Personal Information
Users may have the following rights with respect to your own personal information, in accordance with applicable laws and regulations:
(i) right to seek access to personal information (including copies);
(ii) right to request correction;
(iii) right to seek removal (the right to be forgotten) when certain conditions are met;
(iv) right to restrict (stop the processing) the processing of personal information if certain conditions are met; and
(v) right to receive personal information in a structured, machine-readable form if certain conditions are met (the right to data portability).
These rights may be limited, on an exceptional basis, if complying with a User's request would infringe the rights of Association or a third party, or if we are required to delete information that we are required to retain in accordance with laws and regulations. Exceptions to these rights are set out in the applicable laws and regulations.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
9. Right to Object the Handling of Personal Information
Users may have the right at any time to object the handling of personal information that is being handled on the basis of legitimate interests under applicable laws and regulations. The handling of personal information in this context includes profiling (This refers to analyzing and predicting the behavior of users based on their information. The same shall apply hereafter.).
Users may have the absolute right under applicable laws and regulations to refuse direct marketing or to refuse profiling done for that purpose if their personal information is being handled for direct marketing purposes.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
10. Right to Withdraw Consent
Users have the right to withdraw your consent whenever the Association handles your personal information based on your consent. This withdrawal does not affect the legality of any treatment made on the basis of consent previously given.
If you wish to exercise these rights, please use the contact details listed in section “13. Inquiries” below.
11. Required Personal Information
The personal information Users are required to provide for the provision of the Services is indicated in the form to be entered by the User. The User assumes no obligation to provide such personal information, but if such personal information is not provided, the Association is unable to offer the Services.
12. The Right to File a Complaint with a Supervisory Authority
Users may have the right to file a complaint with a supervisory authority under applicable laws and regulations. The supervisory authorities where complaints can be filed may include the supervisory authorities of the EU Member State where the User resides or works or where the GDPR complaint is filed, as well as the UK supervisory authorities.
13. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
The contact information for the Association’s representative in the EU is as follows:
TMI Avocats & Associés
40 avenue Niel, 75017, Paris, France
E-mail：2025WorldExpo_EUrep@tmi.gr.jp
The contact information for the Association’s representative in the UK is as follows:
TMI Associates London LLP
CityPoint One Ropemaker Street, London EC2Y 9SS, United Kingdom
E-mail：2025WorldExpo_UKrep@tmi.gr.jp
California residents can exercise their rights under the CCPA by contacting the below:
・Inquiries About the Handling Personal Information
Supplementary Provisions for Processing of Personal Information of California Residents
In addition to the provisions set forth above, the following provisions apply to the processing of personal information of residents residing in the state of California in the United States (that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household, hereinafter the same) in accordance with the CCPA.
1. Categories of Personal Information We Collect and the Parties Receiving the Information
The Association will collect and has collected in the last twelve (12) months, the following categories of personal information from the Users. Further, the Association has disclosed the personal information collected in the last twelve (12) months to the receiving party indicated below. The section numbers indicated under “Receiving Party” are the numbers indicated in section “3. Disclosure of Personal Information” above.
| Category | Receiving Party |
| Identifiers | (1)(4) |
| Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)). | (1)(4) |
| Protected classification characteristics under California Law or Federal Law | (1)(4) |
| Commercial information | (1)(4) |
| Biometric information | (1)(4) |
| Internet or other electronic network activity information | (1)(4) |
| Location data | (1)(4) |
| Voice, electronic, visual, thermal, olfactory and other similar information | (1)(4) |
| Information regarding occupation or employment | (1)(4) |
| Sensitive personal information | (1)(4) |
For details on personal information we collect, refer to section “1. Categories of Personal Information We Collect” above, for the business purpose and commercial purpose of personal information we collect, refer to section “2. Purposes of Use of Personal Information and Legal Grounds for Data Processing” above, for the source of personal information we collect, refer to section “4. Source of Personal Information” above, and for the retention period of the personal information we collect, refer to section “6. Retention Period of Personal Information” above.
2. Your Rights and Choices under CCPA
The CCPA provides residents of California with specific rights regarding personal information. If the User is a California resident, the following describes your rights under the CCPA and explains how to exercise those rights.
(1) Right to access personal information
Users have the right to request that the Association discloses certain information to you about our collection, sharing, disclosure or use of your personal information. Once the Association receives and confirms your verifiable user request, we will disclose the following information to you:
・ The categories of personal information we collected about the User;
・ The categories of sources for the personal information we collected about the User;
・ Our business or commercial purpose for collecting, selling, or sharing that personal information;
・ The categories of third parties with whom we share or sell that personal information; and
・ The specific pieces of personal information we collected about the User.
(2) Right to request deletion
Users have the right to request that the Association deletes any of Users’ personal information that we have collected from you and retained, subject to certain exceptions. Once the Association receives and confirms your verifiable user request, we will delete (and notify our contractors to delete the same) your personal information from our records, unless an exception applies.
The Association may deny the User’s deletion request if retaining the information is necessary for us or our contractors in order to:
・ Complete the transaction for which personal information was collected, fulfill the terms of a written warranty or product recall conducted in accordance with federal law, provide a good or service requested by the User, or reasonably anticipated by you within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
・ Help to ensure security and integrity to the extent the use of the User’s personal information is reasonably necessary and proportionate for those purposes;
・ Debug products to identify and repair errors that impair existing intended functionality;
・ Exercise free speech, ensure the rights of other consumers to exercise their free speech rights, or exercise other rights provided for by law;
・ Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.);
・ Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information’s deletion may likely render impossible or seriously impair the research’s achievement, if you previously provided informed consent; and
・ Enable solely internal uses that are reasonably aligned with consumer expectations based on the relationship between the User and the Association; or
・ Comply with legal obligations.
(3) Right to request correction
Users have the right to request that the Association corrects any of your inaccurate personal information that we have collected from you and retained. Once the Association receives and confirms your verifiable user request, we will correct (and notify our contractors to correct the same), your inaccurate personal information. The Association may deny the User’s request for correction if we determine that the contested personal information is more likely than not to be accurate based on the totality of the circumstances.
(4) Right to opt-out of sale or sharing
The Association has not sold or shared personal information collected from Users in the past 12 months and it will not sell or share them in the future.
(5) Right to opt-in to sale or sharing of personal information
The Association will not sell or share the personal information of any User over the age of 13 and under the age of 16 without obtaining the prior consent of the User himself or herself, or the parent or guardian of the User if under the age of 13.
If a parent or guardian provides personal information to the Association on behalf of a User under the age of 16, please obtain the necessary consent for the Association to sell or share the personal information.
(6) Right to limit the use of sensitive personal information
The Association have not used and disclosed and will not use or disclose sensitive personal information collected from Users for any purpose other than the following:
・ To perform the services or provide the goods reasonably expected by an average consumer who requests such goods or services;
・ To help to ensure security and integrity to the extent the use of your personal information is reasonably necessary and proportionate for those purposes;
・ For short-term, transient use (except those involving profiling or changes to the future consumer experience);
・ To perform services on behalf of the Association; and
・ To undertake activities to verify or maintain the quality or safety of a service or device that is owned, manufactured, manufactured for, or controlled by the Association.
(7) Non-discrimination
The Association will not discriminate against California residents for exercising any of their rights under the CCPA. Moreover, unless permitted by the CCPA, we will not:
・ Deny the goods or services to the Users;
・ Charge Users different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
・ Provide Users a different level or quality of goods or services;
・ Suggest that Users may receive a different price or rate for goods or services or a different level or quality of goods or services; or
・ Retaliate against an employee, applicant for employment, or independent contractor.
(8) Exercising rights for disclosure request, deletion request and correction request
To exercise your rights for disclosure request, deletion request and correction request described above, please submit a verifiable user request to the Association by contacting us in the manner set forth in section “13. Inquiries”.
Only the User, a natural person or a person registered with the California Secretary of State that the User authorizes to act on the User’s behalf, or a person who has a power of attorney or is acting as a conservator for the User, may make a verifiable user request related to the User’s personal information. The User may also make a verifiable user request on behalf of the User’s minor child.
The verifiable user request must:
・ Provide sufficient information that allows the Association to reasonably verify you are the person about whom we collected the personal information or an authorized representative; and
・ Describe the User’s request with sufficient detail that allows us to properly understand, evaluate, and respond thereto.
Established: November 1, 2023
Privacy Policy (For related persons)
With respect to the implementation, etc. of the World Exposition, and in order to comply with the Act and any other laws, regulations and guidelines applied to our handling of personal information and to properly handle the personal information of our officers, employees and related persons (including, without limitation, staff or related persons of pavilion exhibitors, sponsors, supporting companies of World Exposition, the Official Participants from foreign governments and international organizations, and the Non-official Participants from pavilion exhibitors, but not including visitors and volunteers to World Exposition (collectively, “Related Persons”), the Association hereby prescribes the following Privacy Policy (for related persons) (in this Privacy Policy (for related persons) referred to as this “Policy”) to cover the handling of Related Persons’ personal information.
Although this Policy applies to our handling of the personal information of all Related Persons, if there are separate rules and regulations applicable to our handling of the personal information of Related Persons in individual cases, those rules and regulations shall take precedence over our handling of the personal information of Related Persons in the relevant cases.
Unless otherwise specified in this Policy, the definitions of terms used in this Policy shall be in accordance with the definitions in the Act.
1. Personal Information We Collect and Purpose of Use
The Association shall collect personal information via appropriate processes in accordance with the Act, including clarifying the purposes of use of the personal information we collect, and shall not use personal information of Related Persons for any purpose other than as stipulated in this Policy.
(1) Personal information we collect
The personal information we collect from Related Persons consists of the following:
・ Basic Information (name, gender, date of birth, address (postal code, prefecture, municipality), phone number, photo, e-mail address, passport number, nationality or country of residence, etc.);
・ Information on background (education, employment history, qualifications, history of disciplinary, criminal and administrative actions, etc.);
・ Information on family structure (family composition and other family-related information etc.);
・ Location information;
・ Biometric information (facial images, voice, fingerprints, etc.);
・ Information regarding affiliation (company name, organization name, department name, position, etc.);
・ Medical information (health status, medical history, whether or not the person is certified as disabled, etc.);
・ Information for payroll transfer (payroll information, payroll transfer account, etc.);
・ Information obtained through internal communications (information obtained through personnel evaluations, internal audits or internal reporting, etc.);
・ Log-in information (ID, password, etc.) for our system;
・ Entered information (information entered or sent by Related Persons using the Association’s input form or other method prescribed by the Association);
・ Information obtained from the Related Persons’ terminals (type of terminal, OS, terminal identifier, IP address, browser type and other browser information, referrer information, cookie ID, information related to browsing history and purchase history obtained by using cookies and cookie-like technologies, advertising identifiers such as IDFA and Google Play advertising ID, etc.); and
・ Other information related to the above
(2) Purposes of use of personal information we collect
We use the personal information we collect from Related Persons for the following purposes:
・ To plan and operate World Exposition and related events (including official ceremonies and official events held on National Days and Special Days; the same shall apply hereinafter)
・ To carry out administrative procedures related to expositions and related events;
・ To contact Related Persons or to prepare a contact list;
・ To communicate and coordinate information among Related Persons;
・ To authenticate and confirm the identity of Related Persons;
・ To monitor the use of our systems by Related Persons, and to detect and prevent unauthorized log-ins or the like;
・ To pay salaries, bonuses, retirement allowances, reimbursement of expenses, and payment of costs;
・ To perform procedures related to employee benefits, tax, social insurance, and other administrative procedures required by laws and regulations;
・ To perform procedures related to employee benefits, tax, social insurance, and other legal administrative procedures, training and personnel development, and personnel evaluations and transfers;
・ To detect and prevent fraud and misconduct at an early stage;
・ To ensure occupational health and safety and other personnel and labor management operations (including those related to weddings, funerals and other family events); and
・ To provide personal information to third parties in accordance with section “2. Provision of Personal Information to Third Parties”
2. Provision of Personal Information to Third Parties
(1) Except for the following cases, the Association shall not provide personal information to third parties without obtaining the prior consent of the person to whom the personal information pertains:
(i) When the Association delegates all or part of the handling of personal information required to achieve the purposes of use;
(ii) When the personal information is being provided to the organizations designated by the Association or the Bureau International des Expositions (BIE) as legacy successor organizations of the Association and related persons of such organizations as part of a business handover as the result of a merger or the like;
(iii) When the disclosure is necessary in order to protect the life, body, or property of an individual, and it is difficult to obtain the consent of the person;
(iv) When the provision of personal information is particularly necessary in order to improve public health or promote the sound growth of children, and it is difficult to obtain the consent of the person;
(v) When there is a requirement to cooperate with a government agency or local government or a delegated organization in order for a legally required action to be carried out, and obtaining the person’s consent could have a detrimental effect on carrying out said action;
(vi) When the third party is an academic research institution, etc., and such third party needs to handle the personal information for academic research purposes (including cases where part of the purpose of handling the personal information is for academic research purposes, but excluding cases where there is a risk of unjustified infringement on the rights and interests of individuals); or
(vii) Any other instance covered by the Act or other laws and regulations
(2) Notwithstanding the preceding paragraph, the Association may provide personal information of Related Persons to the following third parties based on the Related Persons’ consent to this Policy.
Governments (including regulatory authorities foreign governments and local governments associated with the World Exposition), the Bureau International des Expositions (BIE), World Exposition sponsoring companies, related parties of World Exposition such as pavilion exhibitors.
(3) Based on the consent to this Policy, we may receive personal information of Related Persons from the parties listed in the preceding paragraph.
3. Provision of Personal Information to Third Parties in Foreign Countries
We will not provide personal information to third parties in foreign countries without obtaining the prior consent of the person to whom the personal information pertains, except in any of the following cases:
(i) The cases listed in Article 2, Paragraph 1, Items (iii) through (vi);
(ii) When personal information is provided to a third party located in a country that is defined by the Rules of the Personal Information Protection Commission as being a foreign country that has a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals;
(iii) Where a system is established with the third party to whom the personal information is provided that conforms to the standards prescribed by the Rules of the Personal Information Protection Commission as being necessary to continuously take measures in an appropriate and reasonable manner for the handling of the personal information by such third party, in accordance with the purpose of Chapter 4, Section 2 of the Act; or
(iv) Where the third party to whom personal information is provided is accredited in accordance with an international framework for the handling of personal information.
If you wish to know the details of the measures taken by us in the case of (iii) above, which are necessary to ensure the third party’s continuous implementation of the corresponding measures, please use the contact details listed in section “8. Inquiries” below.
4. Secure Management of Personal Information
The Association shall correctly and securely manage personal information, shall take appropriate measures to prevent any loss, tampering and leakage of personal information, and shall provide necessary and appropriate supervision of the Association’s employees, etc.
For details on the security control measures we take, please use the contact details listed in section “8. Inquiries” below.
5. Supervision of Subcontractors for Personal Information
In the event that the Association outsources all or part of the processing of personal information to a subcontractor, we shall impose on such subcontractor the obligation to securely manage such personal information, and shall exercise necessary and appropriate supervision thereof.
6. Disclosure, Correction, Addition, Deletion, etc. of Personal Information
The Association understands that the person to whom the personal information pertains has the right to request the disclosure, correction, addition, deletion, suspension of use, elimination, suspension of provision to third parties, disclosure of records of provision to third parties of their personal information (collectively, “Disclosure, Etc.”), and if such a request is made, the Association will promptly respond thereto in accordance with the Act.
To make a request for Disclosure, Etc. from the Association, please use the contact details listed in section “8. Inquiries” below.
7. Thorough Protection of Personal Information
The Association shall comply with the Act and other relevant laws, regulations and guidelines applied to our processing of personal information, shall thoroughly inform all officers, employees and staff of the Association, as well as all contractors and other relevant parties, about the importance of protecting personal information, and shall aim to provide training and raise awareness regarding the protection of personal information.
8. Inquiries
For inquiries regarding personal information, please contact the below:
Office of the Japan Association for the 2025 World Exposition
・Inquiries About the Handling of Personal Information
This Policy may be partially or entirely revised by the Association. In the event of a revision, notification detailing the revision shall be posted on the Association’s website.
Established: November 1, 2023