We are committed to handling customers’ personal information and Specific Personal Information appropriately in accordance with the following policy.
1. Compliance with Laws and Regulations
We handle personal information and Specific Personal Information appropriately in compliance with the My Number Act, the Act on the Protection of Personal Information, other applicable laws and regulations, the Guidelines for the Proper Handling of Specific Personal Information (for Business Operators), and our internal rules.
2. Acquisition and Use of Personal Information
When acquiring personal information directly in writing or by other means from customers, business partners, employees, or other individuals, we clearly state the purpose of use. In all other cases, we notify or publicly announce the purpose of use. We do not use the personal information of customers, business partners, employees, or other individuals beyond the scope necessary to achieve the stated purpose of use, except with their prior consent or where permitted by law.
3. Management of Personal Information
We take necessary measures to prevent the leakage, loss, or damage of personal information and manage the personal information of customers, business partners, employees, and other individuals appropriately. We appropriately supervise employees and other personnel who handle personal information. When outsourcing the handling of such information, we also supervise the service provider to ensure that the personal information is appropriately managed.
4. Provision of Personal Information to Third Parties
We do not provide the personal information of customers, business partners, employees, or other individuals to third parties without their prior consent, except when outsourcing the handling of personal information to the extent necessary to achieve the stated purpose of use or where otherwise permitted by law.
5. Disclosure, Correction, Suspension of Use, etc.
When a customer, business partner, employee, or other individual requests notification of the purpose of use, disclosure, correction, suspension of use, or other action regarding their personal information, we respond in accordance with applicable laws and regulations after verifying that the request has been made by the individual concerned.
6. Provision of Specific Personal Information
We do not provide the Specific Personal Information of business partners, employees, or other individuals to third parties, except where permitted by law.
7. Security Control Measures
We implement necessary and appropriate security control measures to prevent the leakage, loss, or damage of personal information and Specific Personal Information and to ensure their proper management. We also provide necessary and appropriate supervision of employees and service providers, including subcontractors, who handle personal information and Specific Personal Information. In addition, we have separately established the “Personal Information and Specific Personal Information Security Management Rules.”
8. Establishment of an Internal Management System
We appoint a person responsible for handling the personal information and Specific Personal Information of customers, business partners, employees, and other individuals and endeavor to maintain an adequate security management system through continuous improvement.