1. Data controller
The controller of the data collected through yadori-japan.com is its owner personally. Electronic contact address: available on the contact page.
2. What data we collect and why
Yadori collects only anonymous or pseudonymous usage data necessary for the operation of the service:
- Planner data: the budget, dates, number of people, cities and interests you enter are processed on the server to generate the itinerary and, if you save it, stored in our database linked to an anonymous numeric identifier (UUID). They are not linked to any personally identifiable data.
- Browsing data: IP address (anonymised), browser type and pages visited, collected automatically by the server and by the third-party tools described below. They are used for usage analysis and service improvement.
- Cookie consent: your choice about optional cookies is collected via Google's certified consent message (CMP), which stores your decision so as not to ask you again. It contains no personally identifiable data.
We do not collect your name, surname, postal address, phone number or any payment data.
3. Cookies: what they are and which we use
Cookies are small files that a website can store in your browser. Yadori uses two types: technical (necessary for operation) and optional (analytics and advertising).
Technical cookies (always active)
| Cookie / key | Purpose | Duration |
|---|---|---|
rj_itinerary_history |
Remembers the itineraries you have saved to show you your history (first-party cookie, only itinerary identifiers, no personal data) | Until you clear your browser data |
rj_csrf |
Security protection (CSRF token) that validates the planner's save actions; first-party cookie, no personal data | Browser session |
rj_lang |
Remembers the language you choose in the footer selector, so you are not redirected to your browser's language; first-party cookie, no personal data | 1 year |
Optional cookies (only with your consent)
| Provider | Purpose | Duration |
|---|---|---|
| Google AdSense | Display personalised ads based on your browsing history and interests. Google may combine this information with other data it holds about you. | Up to 13 months |
| Google (advertising) | Ad performance measurement, fraud prevention and frequency capping | Up to 13 months |
4. Legal basis for processing
The processing of technical data is based on the legitimate interest of the owner to ensure the operation of the service (art. 6.1.f GDPR). The use of optional cookies takes place only with your prior consent (art. 6.1.a GDPR), which you can revoke at any time from the cookie preferences in the footer.
5. International data transfers
Google LLC, the AdSense provider, may transfer data to servers located outside the European Economic Area. These transfers are covered by the Standard Contractual Clauses approved by the European Commission and by the EU–US Data Privacy Framework. More information in Google's privacy policy.
6. Data retention
Saved itineraries are kept in our database indefinitely while the service is active, since they are not linked to any personal identity. Anonymised browsing data is kept for a maximum of 14 months. The planner's security cookie (rj_csrf) is deleted when you close the browser.
7. Your rights
In accordance with the GDPR, you have the right to:
- Access: request what data we hold about you.
- Rectification: correct inaccurate data.
- Erasure: request the deletion of your data ("right to be forgotten").
- Restriction: request that the processing of your data be restricted.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to processing based on legitimate interest.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, get in touch through the contact page. You also have the right to lodge a complaint with your national data protection authority.
8. Modifications
The owner reserves the right to update this policy at any time. Changes will be published on this same page with the update date indicated at the top. Continued use of the Site after the publication of changes implies acceptance of the updated policy.