1. Personal Data Controller and Processor 

The personal data controller (Data Controller) for the Website is:

Japan External Trade Organization (JETRO)
ARK Mori Building, 1-12-32 Akasaka, Minato-ku, Tokyo 107-6006, Japan

The Office, engaged by JETRO, operates the Website and processes associated personal data as a data processor (Data Processor) in accordance with JETRO’s instructions.

The Office may also use external service providers for website development, operation, maintenance, and other necessary services, to the extent approved by JETRO or permitted under contract.

3. Purposes of Processing Personal Data 

JETRO handles personal data collected through the Website to the extent necessary for the following purposes. The Office processes personal data for these purposes in accordance with JETRO’s instructions.

 • To provide, operate, and maintain the Website

 • To ensure the security of the Website, prevent unauthorized access, and investigate the causes of incidents or malfunctions

 • To understand and analyze use of the Website and prepare statistical information

 • To improve the content, structure, functionality, and usability of the Website

 • To respond to inquiries concerning the Website

 • To perform other activities related to the foregoing

7. International Transfers of Personal Data

Personal data may be transferred outside the country or region in which a user is located if service providers, servers, or other information systems used by the Website are located elsewhere.

When transferring personal data internationally, JETRO takes necessary steps in accordance with applicable data protection laws, including implementing appropriate safeguards permitted by law, such as adequacy decisions and Standard Contractual Clauses (SCCs).

The Office processes personal data within the scope of such safeguards in accordance with JETRO’s instructions.

For details of the safeguards applicable to international transfers, please contact the inquiry point specified in this Privacy Policy.  

8. Retention Periods for Personal Data

JETRO determines retention periods for personal data collected through the Website as necessary to fulfill the respective purposes of use.

The Office retains or processes personal data only for those periods in accordance with JETRO’s instructions.

Personal data that is no longer necessary after the relevant purpose has been fulfilled will be appropriately deleted or anonymized, unless retention is required by law.

For specific retention periods for information collected through cookies, analytics tools, and similar technologies, please consult the privacy settings screen on the Website.

9. Security of Personal Data 

JETRO implements necessary and appropriate organizational and technical security measures, proportionate to the nature of the personal data and the risks associated with its processing, to prevent unauthorized access, leakage, loss, damage, alteration, and similar incidents.

The Office implements necessary and appropriate organizational and technical security measures in operating the Website pursuant to its contract with JETRO and JETRO’s instructions.

JETRO also provides necessary and appropriate supervision of the Office and other providers entrusted with personal data processing.

10. Links to External Websites  

The Website may contain links to external websites outside the control of JETRO or the Office.

For information on how personal information or personal data is handled on linked websites, please refer to the privacy policies or other notices established by their respective operators.

11. Rights of Users Regarding Personal Data

Under the GDPR and other applicable data protection laws, users have the following rights in relation to their personal data, to the extent applicable:

 • The right to obtain information about the processing of personal data

 • The right to request access to personal data

 • The right to request rectification of inaccurate or incomplete personal data

 • The right to request erasure of personal data

 • The right to request restriction of processing of personal data

 • The right to object to processing of personal data

 • The right to data portability

 • The right to withdraw consent given for the processing of personal data

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Users may also lodge a complaint about the handling of personal data with a competent data protection supervisory authority under applicable data protection laws.

JETRO responds to requests to exercise these rights as the data controller, and the Office takes necessary steps in accordance with JETRO’s instructions.

12. Changes to This Privacy Policy  

JETRO may amend this Privacy Policy as necessary, including in response to changes in laws and regulations, Website functions, or services used.

If this Privacy Policy is amended, the revised version will be published on the Website and the revision date updated.

13. Contact Information   

For inquiries concerning this Privacy Policy, the handling of personal data, or the exercise of rights relating to personal data, please contact:

Japan External Trade Organization (JETRO)
ARK Mori Building, 1-12-32 Akasaka, Minato-ku, Tokyo 107-6006, Japan

Data Protection Officer (DPO) 
E-mail：DPO@jetro.go.jp 

For other inquiries concerning the Website, please contact:

Expo 2027 Belgrade Japan Pavilion Public Relations Office 
E-mail：jppavilion_pr@materialpr.jp