Privacy Policy
for Pie Systems ApS except for persons in Japan
Last updated October 26, 2021
This Privacy Policy has been laid down by Pie Systems Inc. (”Pie Systems”, ”we”, ”us” or ”our” in this Privacy Policy) and applies to Pie Systems’ business. This Privacy Policy provides information about following:
1) About Pie Systems
2) What are personal data?
3) What types of personal data do we process about you and why?
4) Use of your personal data
5) Legal basis for the processing of your personal data
6) Sharing of personal data
7) Data integrity and data protection
8) Your rights
We consider responsible handling of personal data processed as part of the operation of our business to be essential to our business aim and reputation. This Privacy Policy explains how your personal data are collected and used if you are a customer of Pie Systems and how you may obtain access to your own personal data.
This Privacy Policy contains various information that we are obliged by law to provide to you. The Privacy Policy does not form part of your agreement with us and does not grant or impose on you any contractual rights or obligations.
About Pie Systems
Pie Systems is streamlining the process of VAT refunds for travellers, maximizing value and efficiency for both travellers and merchants alike. With Pie Systems’ fully digitized end-to-end solution, merchants can facilitate, and travellers can receive, VAT refunds at the tap of a few buttons on their mobile devices.
If you have any questions relating to this Privacy Policy or the processing by Pie Systems of personal data as part of the operation of our business, please contact us using the following contact details:
Pie Systems ApS
Havnegade 39, 1058 København, Denmark
CVR: 39877848
Danish CVR no. 39877848
Email: legal@piesystems.io.
What are personal data?
Personal data are any information concerning an identified or identifiable natural person. An identifiable natural person means a person who can be identified, directly or indirectly, in particular by reference to an identifier, e.g. a name, an identification number or one or more factors specific to the identity of a given person.
What types of personal data do we process about you and why?
The data we process about you will be used for various purposes in connection with your customer relationship and the operation of Pie Systems’ business. The data processed may vary depending on whether you are a customer, supplier or business partner, but will generally be data relating to customer management and supplier management, information used to improve our website and the Pie VAT app, and data relating to Pie Systems’ rights and obligations.
Any failure by you to provide personal data may mean that we at Pie Systems will be unable to fulfill our obligations relating to your customer or supplier relationship.
Pie Systems collects and processes general personal data only in connection with your customer or supplier relationship with Pie Systems.
Pie Systems will typically process the following data (the list is not exhaustive):
Data about our customers: Data that you provide to us when becoming a customer of Pie Systems, including contact details (name, address, email address, phone number and country of residence), your credit card, your picture, your geolocation, your marketing or communication preferences, and data that you provide to us when contacting us to ask a question or to report a problem or generally as part of your customer relationship with Pie Systems.
Data gathered:
To facilitate tax free services in accordance to government regulations, there are certain pieces of data and information Pie Systems will obtain including, but not limited to:
Passport Information
Address of Residence
Payment Information
Self-photograph
Security of data processing
Any personally identifiable information on the user should be encrypted at rest, and any person that can view or access this data should be limited to reading what they need to complete their task. Personal identifiable information should remain encrypted, and with limited access until the data is no longer required by financial service records. At this time the data can be deleted from the system.
Our services should remain accessible to the best of the ability of the operators, software, and companies that are supporting our business. Transmission and storage of data are secured and encrypted to industry standard.
Finally, no personal information will be logged in any known logs.
Storage period/erasure procedures
Personal data is stored for minimum 7 years after which the personal data is automatically erased. This is in accordance to law requiring 7 years of auditable financial information.
Upon termination of the provision of personal data processing services, the Pie Systems shall either delete or return the personal data.
Data about our suppliers and business partners: Data that you provide to us in connection with the conclusion of a supply or cooperation agreement, including contact details (workplace, job title, first name, middle name(s), last name, address, telephone number and email address), data that you provide to us on your marketing or communication preferences, and data that you provide to us when contacting us to ask a question or to report a problem or generally as part of our cooperative relations.
Data that we collect and process when you visit our website or use our app: Data on the way you navigate to and between our websites and the resources you access, information about your computer, device and browser, including in some instances your IP address, browser type, and other hardware and software information, the time and date of your use and other statistics. If you access our website from a mobile device, we may also collect the unique identification number of your device. At present, there is no industry standard for recognizing Do Not Track browser signals, so we do not respond to them.
Use of your personal data
Pie Systems processes your personal data for the purposes set out below. Please note that not all the specified purposes, categories of data, recipients of data or types of processing of data will in all instances apply to you.
Pie Systems processes your personal data solely to the extent necessary in connection with your customer or supplier relationship (in each case taking any interests into account) or according to current law.
· Customer relationship management: Creation and management of your customer relationship with Pie Systems as part of the operation of the Pie Systems business, including the maintenance of our CRM register containing information about our contact persons for our customers, customer service, invoicing, debt collection, marketing, statistics, etc.
· Statistics and analyses: As a general rule, the statistics and analyses provided by Pie Systems will be prepared in anonymous form and so do not contain data directly attributable to you as a natural person.[SL3] However, in certain cases, e.g. reports to tour groups, the provided data will have to be directly attributable to you as a natural person.
· Supplier relationship and cooperative relations management: Pie Systems processes your personal data as part of the management of supplier relationships and/or cooperative relations where you are a supplier or business partner or a contact person of a supplier or business partner with which Pie Systems has business relations as part of the operation of our business, including the maintenance of our CRM register containing information about our contact persons for our suppliers and business partners.
· Operation and maintenance of our website and app: The provision of our online services at our website and app, including to support the ongoing evaluation and improvement of our website and app.
· Compliance with current laws and regulations: The compliance with laws and regulations to which Pie Systems is subject in connection with the operation of the business or to fulfil various duties of reporting or disclosure under current laws and regulations imposed on Pie Systems.
Pie Systems does not use your personal data to make decisions based solely on automatic processing, including profiling.
Pie Systems endeavours to ensure that all personal data processed by us are accurate and up to date. As a result, we request that you always inform us of any change in your data (e.g. any change of address or payment details) to enable us to ensure that the data are always accurate and up to date.
Legal basis for the processing of your personal data
Pie Systems will process your personal data only if we have a legal basis for doing so.
Non-sensitive data about you are generally processed on one of the following bases:
· Consent: You have given your consent to the processing of your personal data for one or more specific purposes. Processing based on consent is in accordance with Article 6(1)(a) of the General Data Protection Regulation (the “GDPR”).
· Contract: The conclusion or performance of your contract with Pie Systems. Processing based on contract is in accordance with Article 6(1)(b) of the GDPR.
· Legal obligation: Compliance with a legal obligation imposed on Pie Systems. Processing based on a legal obligation is in accordance with Article 6(1)(c) of the GDPR. The Danish Acts requiring Pie Systems to process personal data include:
a. The Danish Bookkeeping Act, which requires Pie Systems to retain all bookkeeping records for a minimum of 5 years.
b. The Danish Tax Control Act, which requires Pie Systems to report information to the Danish tax authorities.
In addition to the above, there may be other statutory regulations requiring Pie Systems to process personal data. That will be the case particularly in the event of any act or amendment to an act adopted after the preparation of this Privacy Policy or any act/executive order to which Pie Systems may later be subject due to changes in the enterprise, and in the event of any special factor coming into play.
· Our legitimate interests: The legitimate interests pursued by Pie Systems, i.e. the purposes described above. Processing based on our legitimate interests is in accordance with Article 6(1)(f) of the GDPR.
· Third-party legitimate interests: There may also be situations in which we process your personal data on the grounds of the legitimate interests pursued by a third party as regards the purposes described above, except where such interests are overridden by your interests. Processing based on the legitimate interests of a third party is in accordance with Article 6(1)(f) of the GDPR.
Sharing of personal data
Pie Systems will disclose data only to the extent necessary as part of the operation of our business.
Furthermore, Pie Systems may disclose your personal data and/or make them available to other suppliers and/or service providers in connection with the general operation of our business, e.g. in connection with the external administration of our IT systems, analysis tasks, marketing tasks, debt collection, audit, legal assistance, etc.
Pie Systems endeavors, wherever possible, to restrict the disclosure of personal data in a form enabling them to be attributed to a natural person in order to limit the instances of disclosure of data that could be attributed to you personally.
Pie Systems does not disclose your personal data unless such disclosure is necessary in order to perform our activities or fulfill your needs.
Notwithstanding the foregoing, Pie Systems may provide your personal data to Pie Systems Japan K.K., which will process your personal data and provide it to third parties pursuant to its own Privacy Policy.
Your personal data may in some cases be transferred to and processed in an unsecure country outside the EU/EEA area (e.g. the US) by our service providers. For the ongoing protection of your personal data, we will take appropriate steps to ensure that transfers of personal data are in accordance with applicable law and carefully managed to protect your privacy rights and interests and that transfers are limited to countries which are recognised as providing an adequate level of legal protection or where we can be satisfied that alternative arrangements are in place to protect your privacy rights (i.e. Privacy Shield Frameworks, EU Commission-approved standard contractual data protection clauses, etc.). Information about the countries to which we will, where appropriate, transfer your personal data and the safeguards implemented can be obtained upon request.
In the event that we enter into, or intend to enter into, a transaction that alters the structure of our business, such as a reorganization, merger, sale, joint venture, assignment, transfer, change of control, or other disposition of all or any portion of our business, assets or stock, we may share Personal Data with third parties in connection with such transaction. Any other entity which buys us or part of our business will have the right to continue to use your Personal Data, but subject to the terms of this Privacy Policy.
Data integrity and data protection
Personal data are retained for no longer than is necessary in relation to the purpose for which they were collected, unless retention is necessary to comply with national statutory requirements, including statutory retention periods relating to EU-subsidy control, bookkeeping, etc.
Pie Systems’ policy is to protect personal data by taking adequate technical and organizational security measures. Once your personal data are no longer needed, we will ensure that they are erased in a secure manner.
Your rights
You are entitled at all times to exercise your rights under the data protection legislation in force at any time. However, please note that we will not always be required to fulfill these rights in whole or in part. For example, you are not entitled to erasure of your personal data retained by Pie Systems if the law obliges Pie Systems to store such data.
· Your right of access: You may e.g. request access to the personal data held by us and information about e.g. the purpose(s) for which personal data are used and to whom they are disclosed.
· Your right to object: You may object to the processing of your personal data, including object to automated decisions and profiling or to the use of your personal data for direct marketing.
· Your right to rectification: You may request correction of any incorrect information about yourself.
· Your right to restrict processing and erasure: You may request the restriction or erasure of information about yourself if the relevant conditions are met.
· Your right to data portability: Your right to data portability is applicable to information you have provided to us if the processing is based on your consent or a contract, and such portability is technically possible.
In addition, you have the right to withdraw your consent to processing of your personal data in case our processing is based on your consent.
If you withdraw your consent or request restriction of our processing of your personal data, it may mean that we will no longer be able to manage our agreement with you.
If you wish to exercise one or more of your rights, please contact us at legal@piesystems.io. Your request will be processed in accordance with the data protection legislation in force at any time.
Any complaint about the processing by Pie Systems of your personal data should be filed with:
The Danish Data Protection Agency
Borgergade 28, 5th floor
DK-1300 Copenhagen K
Email: dt@datatilsynet.dk
Updates To this Privacy Policy and Notifications
We may change this Privacy Policy from time to time to reflect new services, changes in our Personal Data practices or relevant laws. The "Last updated" legend at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes are effective when we post the revised Privacy Policy on the Services. We may provide you with disclosures and alerts regarding the Privacy Policy or Personal Data collected by posting them on our website and, if you are a User, by contacting you by email address and/or the physical address listed in your Pie Systems account. If applicable law requires that we obtain your consent or provide notice in a specified manner prior to making any changes to this Privacy Policy applicable to you, we will provide such required notice and will obtain your required consent.
Privacy Policy
Pie Systems Japan K.K.
Last Updated: February 4, 2026
Pie Systems Japan Co., Ltd. (hereinafter referred to as "the Company" or "we") operates the tax-free application "PIE VAT," provided by our group company Pie Systems ApS (Denmark), within Japan. In conducting our business, we acquire the personal information of our customers. We will handle and process such information responsibly (meaning any operation performed on personal information, whether by automated means or not, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction) in accordance with this Privacy Policy and applicable laws and regulations.
In this Privacy Policy, "Customer" refers to travelers who use "PIE VAT," as well as officers and employees of merchants (participating stores) and business partners. This Privacy Policy explains how our Customers' personal information is collected and used, and how Customers can access their own personal information. This Privacy Policy includes various information that we are required to provide to Customers by law.
Contact Information
If you have any questions regarding this Privacy Policy or the processing of personal information in our business operations, please contact us at the following:
Email Address: legal@piesystems.io
Address and Representative: Please refer to our website (Company Overview) for our address and the name of our representative.
What is Personal Information?
In this Privacy Policy, "Personal Information" means information defined as personal information under the applicable personal information protection laws of each country. Note that "Personal Information" under the Act on the Protection of Personal Information of Japan (APPI) means information relating to a living individual that (1) can identify a specific individual by name, date of birth, or other descriptions contained in such information (including information that can be readily collated with other information and thereby identify a specific individual), or (2) contains an individual identification code.
Types of Personal Information We Collect
Personal Information of Travelers using PIE VAT We acquire and process the following personal information of travelers using PIE VAT (if required by applicable laws, we will acquire such information after notifying the individual separately):
Attribute Information: Name, age, date of birth, gender, address, phone number, email address, status of residence, etc.
Information on Stay in Japan: Date of entry, date of departure, length of stay, etc.
Purchase History: Categories of purchased items, purchase amounts, purchase frequency, date and time of purchase, etc.
Purchase Store Information: Name, commercial facility name, store category, etc.
Location Information of Purchase Store: Address, latitude/longitude of the purchase store, etc.
App Usage Information: Information regarding the use of PIE VAT (specifically: login history, last login date/time, chat usage status, notification transmission/reception information, browsing history, records of consent, etc.).
Information regarding Ads/Campaigns/Offers/Coupons: Log information of travelers (number of transmissions, opens, views, clicks) and usage status regarding advertisements, campaigns, offers, and coupon distributions conducted by the Company.
Information regarding Joint Campaign Measures: Attributes/conditions of travelers and log information (number of transmissions, opens, views, clicks, etc.) regarding advertisements, campaigns, offers, and coupon distributions conducted jointly with partners.
Device Information: Information on the device used (OS, device type, language settings, etc.).
Inquiry Information: Name, email address, inquiry category, and content of the inquiry of travelers who contacted us.
Cookies, Mobile Advertising IDs, and Other Online Identifiers: (Note: We use Google Analytics for access analysis. Google Analytics collects customer access logs (IP address, device information, operation history, etc.) using Cookies, mobile IDs, etc. Please refer to Google's official website for details.)
Inferred Information: Information inferring hobbies, preferences, and interests obtained through the analysis of personal information regarding travelers.
Other: We may acquire information provided by consignors for the performance of entrusted business, and information voluntarily provided by travelers to us, within the scope of the purpose of use.
Personal Information of Officers and Employees of Merchants and Business Partners We acquire and process the following personal information of officers and employees of merchants and business partners (if notification to the individual is required by law, we will acquire such information after notifying the individual separately):
Contact Information: Name, address, phone number, email address, company name/location, etc.
Negotiation History and Transaction Information: Details of purchased products/services, negotiation details, quotation details, etc.
Inquiry Information: Name, email address, inquiry category, and content of the inquiry of officers/employees of merchants and partners who contacted us.
Inferred Information: Information inferring business interests derived from personal information regarding officers and employees of merchants and business partners.
In addition to the above, we may acquire information provided by consignors for the performance of entrusted business, and information voluntarily provided by officers and employees of merchants and business partners to us, within the scope of the purpose of use.
Purposes of Use of Personal Information
We use Customers' personal information for the following purposes. Note that we do not make decisions that produce legal effects concerning Customers or similarly significantly affect them, such as suspending accounts or rejecting tax-free procedures, based solely on automated data processing (mechanically) such as profiling.
To provide, maintain, protect, and improve this Service: Including optimization of language settings, customization of display, etc.
To provide advertisements and information: Provision of advertisements, campaigns, coupons, offers, and other information regarding products and services of the Company or third parties via email or other means (including analyzing acquired information to provide information tailored to the Customer's behavior, hobbies, preferences, and interests).
To conduct marketing and surveys: Implementation of campaigns and questionnaires (including those conducted jointly with merchants and other businesses), analysis of the results, and improvement of our business based on such analysis.
For research and analysis of marketing data, and consideration/implementation of measures.
For planning, research, and development of new businesses.
To respond to inquiries and contact Customers.
To respond to disputes/litigation and to comply with our legal obligations.
To create and use statistical information and other information that cannot identify individuals.
To perform entrusted business: When personal information is provided by a consignor.
For provision to third parties: Limited to the methods and scope described in this Privacy Policy.
For other purposes incidental to the above purposes of use and purposes permitted by applicable laws.
Necessity of Providing Personal Information
We acquire and process Customers' personal information in accordance with applicable personal information protection regulations. The provision of personal information by Customers may be mandatory for the use of this Service due to laws (such as laws regarding tax-free procedures or the APPI) or contractual reasons. If necessary information is not provided, we may be unable to provide services (such as tax-free procedures) or respond to inquiries.
Retention Period of Personal Information
In determining the appropriate retention period for personal information, we consider the amount, nature, and sensitivity of the information, potential risk, purpose of use, and applicable legal requirements (such as retention obligations under tax laws). When we no longer need to retain Customers' personal information, we will promptly delete or anonymize it. If deletion is technically difficult (e.g., if stored in backup archives), we will securely store such personal information and take measures to prevent further use until deletion becomes possible.
Sources of Personal Information
We acquire Customers' personal information from the following sources:
Direct Acquisition: Provided by the Customer (entry into the app, etc.).
Automatic Acquisition: Cookies, online identifiers, log information, etc., during device operation.
Indirect Acquisition: Provided by Pie Systems ApS (Group Company), business partners, and analysis tool providers such as Google LLC.
Creation of Inferred Information: Information inferring preferences and interests by analyzing Customer data.
Sharing, Third-Party Provision, Entrustment, and Joint Use of Information
We provide, entrust, or jointly use Customers' personal information with third parties in accordance with laws and regulations as follows:
Third-Party Provision based on Laws (National Tax Agency, etc.) To fulfill tax-free procedures, we provide personal information such as purchase records and passport information to tax authorities such as the National Tax Agency (Japan) and Customs. We may also provide personal information when necessary for legal compliance, requests from public institutions, protection of human life/body/property, improvement of public health, etc.
Third-Party Provision to Ad Delivery Providers By agreeing to this Privacy Policy, the Customer is deemed to have consented to the following third-party provision: To deliver advertisements tailored to the Customer's interests and to confirm results, we provide the Customer's personal information (hashed email addresses, advertising identifiers, etc.) to partner ad delivery providers (Google LLC, Meta Platforms, Inc., X Corp., LY Corporation [LINE Yahoo], etc.). (Please refer to the section "Transfer of Personal Information to Outside the Country of Residence" for provision to third parties in foreign countries.)
Third-Party Provision to Merchants and Partners By agreeing to this Privacy Policy, the Customer is deemed to have consented to the following third-party provision: To provide useful information and services to the Customer, we provide the Customer's personal information (attribute information, purchase history, inferred interests, etc.) to the merchants (tax-free shops) where the Customer used this Service and to our partners.
Business Entrustment (Provision to Processors) We may entrust all or part of the personal information handling operations to external service providers (cloud providers, payment processing companies, etc.) within the scope necessary to achieve the purpose of use. In this case, we will appropriately supervise such trustees.
Joint Use among Group Companies We jointly use Customers' personal information within our group to provide comprehensive services as follows:
Items for Joint Use: Items described in "Types of Personal Information We Collect" in this Policy.
Scope of Joint Users: Pie Systems ApS (Denmark), Pie Systems Inc. (USA).
Purpose of Use: Within the scope described in "Purposes of Use of Personal Information" in this Policy.
Person Responsible for Management: Pie Systems Japan Co., Ltd. (Please refer to our website (Company Overview) for the address and name of the representative).
Business Transfer, etc. When personal information is provided in connection with the succession of business due to merger, company split, business transfer, or other reasons.
Transfer of Personal Information to Outside the Country of Residence
As a result of the above third-party provision and joint use, Customers' personal information may be transferred to third parties located in countries other than the Customer's country of residence (including Japan).
Japan (Our location)
USA (Pie Systems Inc., and partners such as ad delivery providers)
EU (Denmark) (Pie Systems ApS)
Other countries/regions where ad delivery providers locate their servers
Special Provisions regarding Provision to Ad Delivery Providers, etc. As described in "Sharing, Third-Party Provision, Entrustment, and Joint Use of Information," we may provide personal information to ad delivery providers located in foreign countries (Google LLC, Meta Platforms, Inc., X Corp., LY Corporation, etc.) for advertisement delivery and analysis.
Identification of Transfer Destination Countries: The names of the foreign countries where Customers' personal information is provided vary depending on the ad delivery status at the time of access and the server operation status of each provider. Therefore, it is not possible to identify all of them at the time the Customer gives consent (at the time of agreeing to this Privacy Policy). Consequently, we cannot provide specific information on the personal information protection systems in the foreign countries of the recipients, but the USA is a primary candidate for provision.
Information on Personal Information Protection Systems in Foreign Countries: Please refer to the following website of the Personal Information Protection Commission (PPC).
US (Federal) System: Details here (PPC Site)
Other Foreign Systems: List here (PPC Site)
Measures Taken by Third Parties: We provide information only after confirming that the third party in the foreign country takes appropriate personal information protection measures corresponding to the 8 Principles of the OECD Privacy Guidelines or applicable local laws.
Special Provisions regarding Provision to Group Companies We transfer personal information to Pie Systems ApS located in the EU (Denmark) for joint use or entrustment. The EU is designated by the Personal Information Protection Commission as a country/region recognized as having a personal information protection standard equivalent to that of Japan.
Safety Management Measures
We take necessary and appropriate measures to prevent leakage, loss, or damage of Customers' personal information and to manage it securely. Furthermore, when handling personal information in a foreign country, we take necessary and appropriate measures for the safe management of personal information after grasping the external environment regarding the personal information protection system in said foreign country. If you contact the inquiry window below regarding the specific details of the safety management measures we are taking, we will respond without delay.
Cookies, Mobile Advertising IDs, and Similar Technologies
Use of Cookies, etc.: When Customers use our website or app (PIE VAT), we automatically acquire information such as the Customer's device information and behavioral history using Cookies, mobile advertising IDs (iOS IDFA, Android AAID, etc.), and similar technologies (collectively referred to as "Cookies, etc.") for the purpose of improving service convenience, analyzing usage status, and delivering advertisements.
Disabling Cookies (Opt-out): Customers can disable the use of Cookies, etc., by changing their browser or device settings.
Website: Please disable Cookies from your browser settings.
App: Please perform tracking refusal or reset the advertising ID from the settings screen of your device (iOS/Android).
Note: If Cookies, etc. are disabled, some functions of this Service may not operate correctly.
Use of Google Analytics: We use "Google Analytics" provided by Google LLC for service improvement and marketing purposes. Google Analytics collects and analyzes Customer information using Cookies, etc.
Mechanism of data collection/processing: [How Google uses information from sites or apps that use our services]
Disabling Google Analytics (Opt-out): [Google Analytics Opt-out Browser Add-on]
Rights of Customers
We respect the rights held by Customers under applicable personal information protection regulations. Based on the Act on the Protection of Personal Information of Japan, Customers may exercise the following rights against us:
Notification of Purpose of Use
Disclosure of Retained Personal Data
Correction, Addition, or Deletion
Suspension of Use or Erasure
Suspension of Third-Party Provision
Disclosure of Third-Party Provision Records
In addition, applicable personal information protection regulations of each country (such as GDPR) may grant additional rights such as data portability rights.
Procedures for Exercising Rights: If a Customer wishes to exercise these rights, please contact the "Inquiry Window" described at the end of this Privacy Policy. Please note that we may request the submission of a copy of a driver's license or passport for identity verification upon your request. Also, please be aware in advance that we may charge a fee or may be unable to respond to your request in accordance with the provisions of laws and regulations.
Revisions to this Privacy Policy
Revisions: We may revise this Privacy Policy from time to time to respond to changes in laws, the launch of new services, or changes in operations regarding the handling of personal information.
Effectiveness: The revised Privacy Policy shall take effect from the time it is posted on our website or the "PIE VAT" app. The "Last Updated" date at the beginning indicates the date this Privacy Policy was last revised.
Notification to Customers: In the event of significant changes, we will notify Customers by appropriate methods such as notifications within the app, emails to registered email addresses, or announcements on our website.
Legal Consent: If we make changes that require the Customer's consent under the law, we will obtain the Customer's consent again by a method prescribed by the Company.
Governing Language
This Privacy Policy is established in English. A Japanese translation is provided for reference purposes only. In the event of any conflict or inconsistency between the English version and the Japanese version, the English version shall prevail.
End
プライバシーポリシー
株式会社Pie Systems Japan
最終更新日：2026年2月4日
株式会社Pie Systems Japan（以下「当社」といいます。）は、グループ会社であるPie Systems ApS（デンマーク）が提供する免税アプリケーション「PIE VAT」を日本において展開する事業を行っています。当社が事業を行うにあたり、当社はお客様の個人情報を取得しますが、当社は本プライバシーポリシーおよび該当する法令に従い、これらを責任をもって処理（自動的な手段によるか否かを問わず、取得、保管、記録、編集、開示、削除を含む、個人情報に対して行われる一切の作業を意味します。）します。
なお、本プライバシーポリシーにおける「お客様」とは、「PIE VAT」を利用する旅行者、並びに加盟店及び提携パートナーの役員及び従業員をいいます。 本プライバシーポリシーは、当社のお客様の個人情報がどのように収集・利用されるか、またお客様が自身の個人情報にどのようにアクセス可能かについて説明するものです。 本プライバシーポリシーには、法令により当社がお客様に対して提供することを義務付けられている各種の情報が含まれます。
当社の連絡先等について
本プライバシーポリシー又は当社の事業運営における個人情報の処理に関して質問がある場合は、以下の連絡先にて当社までお問い合わせください。
メールアドレス：legal@piesystems.io
住所及び代表者： 当社の住所及び代表者の氏名等については、当社のホームページ（会社概要） をご覧ください。
個人情報とは
本プライバシーポリシーで、「個人情報」とは適用ある各国の個人情報保護法制に照らして個人情報として定義される情報を意味します。 なお、日本の個人情報保護法に基づく個人情報とは、生存する個人に関する情報であって、(1) 当該情報に含まれる氏名、生年月日その他の記述等により特定の個人を識別することができるもの（他の情報と容易に照合することができ、それにより特定の個人を識別することができることとなるものを含む。）、及び(2)個人識別符号が含まれるものを意味します。
当社が取得する個人情報の種類
（１）PIE VATを利用する旅行者の個人情報
当社は、PIE VATを利用する旅行者の以下の個人情報を取得・処理します（適用される法令上必要な場合は、ご本人に別途通知した上で取得します。）。
属性情報（氏名、年齢、生年月日、性別、住所、電話番号、メールアドレス、在留資格等）
日本滞在期間に関する情報（入国日、出国日、滞在期間等）
購買履歴（購入商品のカテゴリ、購入金額、購入頻度、購入日時等）
購入店舗の名称等（名称、商業施設名、店舗カテゴリ等）
購入店舗の位置情報（購入店舗の住所、緯度・経度等）
アプリの利用に関する情報 （PIE VATの利用に関する情報。具体的には、ログイン履歴、最終ログイン日時、チャット利用状況、通知の授受情報、閲覧履歴、同意の有無の記録等）
広告・キャンペーン・オファー・クーポン配信等に関する情報（当社が行う広告・キャンペーン・オファー・クーポン配信に関して、旅行者のログ情報（送信・開封・閲覧・クリックの回数）、およびそれらの利用の有無等）
共同キャンペーン施策に関する情報（提携先と共同で行う広告・キャンペーン・オファー・クーポン配信に関して、旅行者の属性等条件、ログ情報（送信・開封・閲覧・クリックの回数）等）
使用端末に関する情報（使用端末情報等（OS・デバイスの種類等、言語設定情報））
お問い合わせ情報（当社にお問い合わせをされた旅行者の氏名、電子メールアドレス、お問い合わせ項目、お問い合わせ内容等）
Cookie、モバイル広告ID、その他のオンライン識別子 （※当社は、アクセス解析のためにGoogle Analyticsを使用しています。Google Analyticsは、CookieやモバイルID等を利用して、お客様のアクセスログ（IPアドレス、デバイス情報、操作履歴等）を収集します。詳細については Googleの公式サイト をご覧ください。）
推測情報（旅行者に関する個人情報の分析等により得られた、趣味・嗜好や関心等を推測した情報）
その他当社は、受託業務遂行のために委託元から提供を受けた情報、及び、旅行者から当社に対して任意に提供された情報を利用目的の範囲内で取得することがあります。
（２）加盟店並びに提携パートナーの役員及び従業員
当社は、加盟店並びに提携パートナーの役員及び従業員の以下の個人情報を取得・処理します（ご本人への通知が法令で必要とされている場合には、ご本人に別途通知した上で取得します。）。
連絡先情報（氏名、住所、電話番号、メールアドレス、所属会社の名称・所在地等）
商談履歴、取引内容情報（ご契約いただいた商品・サービスの内容、商談内容、お見積もり内容等）
お問い合わせ情報（当社にお問い合わせをされた加盟店並びに提携パートナーの役員及び従業員の氏名、電子メールアドレス、お問い合わせ項目、お問い合わせ内容等）
推測情報（加盟店並びに提携パートナーの役員及び従業員に関する個人情報から、そのビジネス上の関心等を推測した情報）
当社は、上記の情報に加え、受託業務の遂行のための委託元から提供を受けた情報、及び、加盟店並びに提携パートナーの役員及び従業員から当社に対して任意に提供された情報を利用目的の範囲内で取得することがあります。
個人情報の利用目的
当社は、以下の目的でお客様の個人情報を利用します。 なお、プロファイリング等の自動的なデータ処理のみに基づいて（機械的に）、アカウントの停止や免税手続きの拒否等、お客様に法的な不利益や重大な影響が生じるような決定を行うことはありません。
本サービスの提供、維持、保護及び改善のため（言語設定の最適化、表示のカスタマイズ等を含みます）
広告・情報の提供のため 電子メールその他の手段による、当社又は第三者の商品やサービスに関する広告、キャンペーン、クーポン、オファーその他の情報の提供（取得した情報を分析し、お客様の行動、趣味、嗜好、関心に応じた情報を提供することを含みます）
マーケティング・アンケート実施のため キャンペーンやアンケートの実施（加盟店や他の事業者と共同で実施するものを含みます）、それらの結果分析、および分析に基づく当社事業の改善のため
マーケティングデータの調査・分析、施策の検討・実施のため
新規事業の企画・研究・開発のため
お問い合わせ対応及びお客様等へのご連絡のため
紛争・訴訟等の対応、および当社の法的義務を遵守するため
統計情報その他の個人を特定できない情報の作成・利用のため
受託業務を遂行するため（委託元から個人情報の提供を受けた場合）
第三者提供のため（本プライバシーポリシーに記載する方法・範囲に限ります）
その他、上記利用目的に付随する目的のため、および適用される法令上許容される目的のため
個人情報の提供の必要性
当社は、適用のある個人情報保護規制に従って、お客様の個人情報を取得し処理しています。 お客様による個人情報の提供は、法令（免税手続きに関する法律や個人情報保護法等）や契約上の理由により、本サービスの利用に必須とされている場合があります。 必要な情報をご提供いただけない場合、サービスの提供（免税手続き等）や、お問い合わせへの回答ができないことがあります。
個人情報の保存期間
当社は、個人情報の適切な保存期間を決定するにあたり、情報の量、性質、機密性、リスク、利用目的、および適用される法令上の要件（税法上の保存義務等）を考慮します。 当社は、お客様の個人情報を保持する必要がなくなった場合、速やかに削除または匿名化します。 なお、技術的に削除が困難な場合（バックアップアーカイブに保存されている場合など）は、削除が可能になるまでの間、当該個人情報を安全に保管し、新たな利用が行われないよう措置を講じます。
個人情報の取得源
当社は、以下の情報源からお客様の個人情報を取得します。
直接取得： お客様ご本人からの提供（アプリへの入力等）
自動取得： 端末操作時のCookie、オンライン識別子、ログ情報等
間接取得： Pie Systems ApS（グループ会社）、提携パートナー、およびGoogle LLC等の分析ツール提供事業者からの提供
推測情報の作成： お客様のデータを分析し、その嗜好や関心等を推測した情報
情報の共有・第三者提供、委託及び共同利用
当社は、お客様の個人情報を、法令に従い、以下のとおり第三者に提供、委託または共同利用します。
1. 法令に基づく第三者提供（国税庁等） 当社は、免税手続きを履行するために、国税庁（日本）等の税務当局や税関に対して、購入記録やパスポート情報等の個人情報を提供します。 また、法令遵守、公的機関からの要請、人の生命・身体・財産の保護、公衆衛生の向上等のために必要がある場合にも、個人情報を提供することがあります。
2. 広告配信事業者への第三者提供 お客様は、本プライバシーポリシーへの同意をもって、以下の第三者提供に同意したものとします。 当社は、お客様の関心に応じた広告配信や成果確認のため、提携する広告配信事業者（Google LLC、Meta Platforms, Inc.、X Corp.、LINEヤフー株式会社等）に対し、お客様の個人情報（ハッシュ化したメールアドレス、広告識別子等）を提供します。 （※なお、外国にある第三者への提供については、本ポリシー「居住国外等への個人情報の移転」の項目をご参照ください。）
3. 加盟店及び提携先への第三者提供 お客様は、本プライバシーポリシーへの同意をもって、以下の第三者提供に同意したものとします。 当社は、お客様にとって有用な情報やサービスを提供するために、お客様が本サービスを利用した加盟店（免税店）及び提携先に対して、お客様の個人情報（属性情報、購買履歴、推測された関心事項等）を提供します。
4. 業務委託（処理者への提供） 当社は、利用目的の達成に必要な範囲内で、個人情報の取り扱い業務の全部または一部を外部のサービスプロバイダー（クラウド事業者、決済代行会社等）に委託することがあります。この場合、当社は当該委託先を適切に監督します。
5. グループ会社間での共同利用 当社は、グループ全体で包括的なサービスを提供するため、以下のとおりお客様の個人情報を共同利用します。
共同利用する項目: 本ポリシー「取得する個人情報の種類」に記載の項目
共同利用する者の範囲: Pie Systems ApS（デンマーク）、Pie Systems Inc.（米国）
利用目的: 本ポリシー「利用目的」に記載の範囲内
管理責任者: 株式会社Pie Systems Japan （住所及び代表者氏名は当社のホームページ（会社概要）をご参照ください
6. 事業譲渡等 合併、会社分割、事業譲渡その他の事由による事業の承継に伴って個人情報が提供される場合。
居住国外等への個人情報の移転
上記の第三者提供および共同利用等の結果、お客様の個人情報が、お客様の居住国以外の国（日本を含みます）にある第三者に移転される場合があります。
日本（当社所在地）
米国（Pie Systems Inc.、および広告配信事業者等の提携先）
EU（デンマーク）（Pie Systems ApS）
その他、広告配信事業者がサーバーを設置している国・地域
1. 広告配信事業者等への提供に関する特記事項 当社は、本プライバシーポリシーの「情報の共有・第三者提供、委託及び共同利用」に記載のとおり、広告配信および分析のために、外国にある広告配信事業者（Google LLC、Meta Platforms, Inc.、X Corp.、LINEヤフー株式会社等）に個人情報を提供することがあります。
(1) 移転先国の特定について お客様の個人情報が提供される外国等の名称は、アクセス時点の広告配信状況や各事業者のサーバー運用状況によって変動するため、お客様から同意をいただく時点（本プライバシーポリシー同意時）において、すべてを特定することができません。 したがって、提供先の外国における個人情報保護制度に関する具体的な情報を提供することができませんが、主な提供先の候補として米国が挙げられます。
(2) 外国の個人情報保護制度に関する情報 以下の個人情報保護委員会のウェブサイトをご参照ください。
米国（連邦）の制度： 詳細はこちら（PPCサイト）
その他の外国の制度： 一覧はこちら（PPCサイト）
(3) 第三者が講ずる措置 当社は、提供先となる外国にある第三者が、OECDプライバシーガイドライン8原則や現地の適用法令等に対応する適切な個人情報保護措置を講じていることを確認した上で提供を行います。
2. グループ会社への提供に関する特記事項 当社は、EU（デンマーク）に所在するPie Systems ApSに対し、個人情報の共同利用または委託に伴う移転を行います。なお、EUは日本と同等の個人情報保護水準にあると認められる国・地域として、個人情報保護委員会により指定されています。
安全管理措置
当社は、お客様の個人情報の漏えい、滅失又は毀損の防止等、その管理のために、必要かつ適切な措置を講じます。また、当社は、外国において個人情報を取り扱う場合、当該外国の個人情報の保護に関する制度等外的環境を把握した上で、個人情報の安全管理のために必要かつ適切な措置を講じます。 なお、当社が講じている安全管理措置の具体的な内容については、下記のお問い合わせ窓口までご連絡いただければ、遅滞なく回答いたします。
クッキー、モバイル広告IDおよび類似技術
1. クッキー等の利用について 当社は、お客様が当社のウェブサイトやアプリ（PIE VAT）を利用する際、サービスの利便性向上、利用状況の分析、および広告配信等のために、クッキー（Cookie）、モバイル広告ID（iOSのIDFA、AndroidのAAID等）、および類似の技術（以下総称して「クッキー等」といいます。）を使用し、お客様のデバイス情報や行動履歴等の情報を自動的に取得します。
2. クッキー等の無効化（オプトアウト） お客様は、ブラウザや端末の設定を変更することにより、クッキー等の利用を無効にすることができます。
ウェブサイトの場合: ご利用のブラウザの設定からクッキーを無効にしてください。
アプリの場合: ご利用の端末（iOS/Android）の設定画面から、トラッキングの拒否または広告IDのリセットを行ってください。 ※なお、クッキー等を無効にした場合、本サービスの一部機能が正常に動作しない可能性があります。
3. Googleアナリティクスの利用について 当社は、サービスの改善やマーケティングを目的として、Google LLCが提供する「Googleアナリティクス」を使用しています。Googleアナリティクスは、クッキー等を利用してお客様の情報を収集・分析します。
データの収集・処理の仕組み: Googleのサービスを使用するサイトやアプリから収集した情報のGoogleによる使用
Googleアナリティクスの無効化（オプトアウト）: Google アナリティクス オプトアウト アドオン
お客様の権利
当社は、お客様に適用される個人情報保護規制において、お客様が有する権利を尊重します。 お客様は、日本の個人情報保護法に基づき、当社に対して以下の権利を行使することができます。
利用目的の通知
保有個人データの開示
訂正・追加・削除
利用停止・消去
第三者提供の停止
第三者提供記録の開示
これに加えて、適用される各国の個人情報保護規制（GDPR等）により、データポータビリティ権等の追加の権利が付与される場合があります。
権利行使の手続き お客様がこれらの権利の行使を希望される場合は、本プライバシーポリシー末尾に記載の「お問い合わせ窓口」までご連絡ください。 なお、ご請求にあたっては、ご本人確認のために運転免許証やパスポート等の写しをご提出いただく場合があります。また、法令の定めに従い、手数料を頂戴する場合や、ご請求に応じられない場合がありますので、あらかじめご了承ください。
本プライバシーポリシーの改定
1. 改定について 当社は、法令の変更、新サービスの開始、または個人情報の取り扱いに関する運用の変更等に対応するため、本プライバシーポリシーを随時改定することがあります。
2. 効力の発生 改定後のプライバシーポリシーは、当社ウェブサイトまたはアプリ「PIE VAT」上に掲載された時点から効力を生じるものとします。 冒頭の「最終更新日」は、本プライバシーポリシーが最後に改訂された日を示します。
3. お客様への通知 重要な変更がある場合には、アプリ内の通知、ご登録メールアドレスへの送信、または当社ウェブサイト上での告知等、適切な方法でお客様に通知します。
4. 法令上の同意 法令上、お客様の同意が必要となる内容の変更を行う場合は、当社所定の方法により、改めてお客様の同意を取得します。
言語
本プライバシーポリシーは英語版をオリジナルとし、日本語訳は参照目的でのみ提供されます。英語版と日本語版の間に矛盾や不一致がある場合、英語版が優先するものとします
以上