Privacy Policy

1. Contacts for business purposes, execution of contracts (provision of services, goods, etc.)
2. Sending of information on the services and products we and our group companies provide
3. Sending information on exhibitions and seminars held by us and group companies
4. Carrying out customer satisfaction surveys, etc.
5. Response to inquiries or requests from the information provider
6. Otherwise, the purpose informed to the information provider in advance and obtained with the consent of the information provider.

1. Affairs related to withholding by employers under the Income Tax Act
2. Affairs related to the individual inhabitant tax carried out by the employer under the Local Tax Act
3. Affairs related to employment insurance carried out by employers under the Employment Insurance Act
4. Affairs related health insurance (applications and benefits) carried out by employers under the Health Insurance Act
5. Affairs related welfare pension insurance (applications) carried out by employers under the Welfare Pension Insurance Act
6. Affairs related to (1) to (5) above

1. The case where the consent of the information provider is obtained (excluding specific personal information)
2. The case when disclosing or providing statistical data or other information in a state where the person cannot be identified
3. The case when disclosure and provision are requested in accordance with laws and regulations
4. The cases where it is necessary for the protection of the life, body, or property of a person and where it is difficult to obtain the consent of the information provider
5. The case where it needs to cooperate with the national government or local governments, etc., in implementing public affairs, and there is a risk of hindering the execution of such affairs by obtaining the consent of the information provider

1. The case when providing to an Administrative Organ, etc. or a Health Insurance Association, etc. in accordance with laws and regulations, in order to process affairs related to individual numbers
2. The case when the business is succeeded due to the entrustment of all or part of administrative procedures or merger, etc.
3. The case when requested by the Specific Personal Information Protection Committee
4. The case when it is necessary for the public interest
5. The case when it is necessary for the protection of human life, body, or property
6. Any other case prescribed by laws and regulations

We have established internal regulations such as the 'Personal Information Protection Regulations' and the 'Guidelines in Handling the Disclosure of Retained Personal Data' to outline the appropriate handling methods of personal data, and the responsibilities of personnel in their duties.

As an individual with responsibility and authority over the protection of personal information, we appoint a Personal Information Protection Manager. The Personal Information Protection Manager oversees the establishment of internal regulations related to personal information protection, implementation of security measures, along with education and training.

Furthermore, the Personal Information Protection Manager ensures that individuals engaged in activities involving the acquisition, use, provision, or entrustment of personal information understand and comply with the Personal Information Protection Regulations and other relevant guidelines, which clarifies the responsibilities and authorities of the applicable employees.

We have also established an effective reporting / communication system with the Personal Information Protection Manager to address instances of factual violations of laws or regulations or signs of such violations.

Under the guidance of the Personal Information Protection Manager, the General Affairs Managers of each office function as managers for personal information protection, overseeing the implementation of personal information protection measures under their jurisdiction.

We conduct regular self-assessments of the handling of personal data and perform audits conducted by auditors as defined in the regulations.

In order to ensure the appropriate acquisition, usage, provision, entrustment, etc. of personal information, we provide continuous and regular training to our employees.

Furthermore, our employees are required to submit a pledge prescribed by the Company upon joining and leaving the company to ensure adherence to the information management practices.

We have defined the scope of management for handling personal data and are implementing proper employee access control and security measures.

Based on standards for media handling, we impose restrictions on devices that handle personal data. For portable information devices and storage media, security measures are implemented to guard against theft, loss, and other security risks.

We have placed a firewall at connection points with external networks to block unauthorized access.

In addition to the security software, our information systems and computers are equipped with systems that detect and remove unauthorized behavior, thereby preventing third-party intrusion.

Access to our information systems and data is controlled through device authentication and user authentication. Proper access controls are implemented to restrict usage.

For laptops and external storage media taken outside the company premises, we enforce user authentication and device encryption.