1. Data controller
The data controller is Nova VPM Travel Logistic Services Srl, VAT and tax number 10727671009, registered office at Viale del Policlinico 129/A, 00161 Rome (RM), Italy.
Contacts: info@japanbusnetwork.com - Certified email (PEC): novavpm@pec.it - Tel. +39 06 4404072.
2. Data we process
Through the request form we may collect your full name, email address, telephone number, company, departure and destination, travel date, passenger count and any information you enter in the notes.
The server may also record technical data required for operation and security, such as IP address, request date and time, user agent, requested URL and application errors.
3. Purposes and legal bases
We use the data to respond, check availability, prepare a proposal and take the pre-contractual steps requested by you. The legal basis is Article 6(1)(b) GDPR.
Technical data is processed to secure the service and prevent abuse on the basis of our legitimate interests under Article 6(1)(f) GDPR. Data may also be processed to comply with legal obligations under Article 6(1)(c) GDPR.
Submitting the form does not subscribe you to newsletters or promotional messages.
4. Required information
Fields marked as required are necessary to handle the request. Without them the form cannot be submitted. Optional fields help us provide a more accurate response but are not mandatory.
5. Recipients and suppliers
Data may be processed by authorised staff and by hosting, IT support and email suppliers acting, where required, as processors. Information strictly necessary to prepare a quotation or operate the service may be shared with selected transport operators and local partners.
Data is not sold, published or used for advertising profiling. It may be disclosed to public authorities only where required by law.
6. International transfers
Because the requested services take place in Japan, strictly necessary information may be shared with partners outside the European Economic Area. Transfers to Japanese recipients covered by the APPI and its Supplementary Rules may rely on the European Commission adequacy decision (EU Implementing Decision 2019/419, Article 45 GDPR).
Where the adequacy decision does not apply, the Controller uses an appropriate safeguard or condition permitted by Articles 46-49 GDPR according to the recipient and requested service, while limiting data to what is necessary. Information about the safeguard actually used and, where applicable, a copy may be requested through the Controller’s contact details.
7. Retention
Requests that do not result in a contract are kept only as long as needed and normally for no more than 24 months. If a contract is entered into, administrative and accounting data may be retained for up to 10 years or for another period required by law. Security logs are retained for periods proportionate to their purpose.
8. Your rights
You may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing.
- Send requests to info@japanbusnetwork.com or the certified email novavpm@pec.it.
- You may also lodge a complaint with the Italian Data Protection Authority or your competent supervisory authority.
9. Automated decisions
The website does not use automated decision-making or profiling.
10. Security and updates
We apply appropriate technical and organisational safeguards. This notice may be updated following legal or technical changes; the version published here is the applicable version.