Ando Co., Ltd. recognizes that the proper handling of personal information of users is the basis of its business activities and a social responsibility. and pledges to comply with the following policies.

Compliance with related laws and regulations

In order to handle personal information properly, we will faithfullycomply with the “Act on the Protection of Personal Information” (hereinafter referred to as the “Protection Act”), other related laws and regulations concerning the protection of personal information, and the guidelines of the Personal Information Protection Commission.

Personal information is defined as information about a living individual that can identify a specific individual, as stipulated in Article 2, Paragraphs 1 and 2 of the Act on the Protection of Personal Information, and the same shall apply hereinafter.

In addition, in order to handle specified personal information properly, we will faithfully　comply with the “Act on the Use of Personal Identification Number to Identify Specific Individuals in Administrative Procedures” (hereinafter referred to as the “Number Use Act”), the “Act on the Protection of Personal Information” (hereinafter referred to as the “Act”), and other related laws, regulations, guidelines, etc.

Specified personal information means personal information that includes a personal number as defined in Article 2, Paragraph 8 of the Numbering Act, and the same shall apply hereinafter.

 

Purposes of Use

In handling personal information, we will specify the purpose of use as much as possible and use personal information only within the scope necessary to achieve the purpose of use, except in cases where we have obtained the prior consent of the person concerned or where such use should be treated as an exception under the law.

However, in the case of specific personal information, the Company shall specify the purpose of use and shall not use the information beyond the scope of the purpose of use, regardless of whether or not the person concerned has given consent.

 

Proper Acquisition

When acquiring personal information, we will do so in an appropriate and lawful manner.

In addition, we have adopted a number display system in case we need to contact you by return. Please understand this in advance.

 

Security Management

We will endeavor to keep the personal data and specified personal information we handle accurate and up-to-date within the scope of the purpose of use, and will take necessary and appropriate measures for safety management and properly supervise our employees and contractors.

Personal data means personal information that constitutes personal information databases, etc. (Article 16, Paragraph 1 of the Protection Act) as defined in Article 16, Paragraph 3 of the Protection Act, and the same shall apply hereinafter.

Handling of Anonymous Processed Information

With respect to the handling of anonymized processed information (Article 2, Paragraph 6 of the Protection Law), we will take necessary and appropriate measures for safety management in accordance with the Protection Law, guidelines, etc.

 

Restrictions on Provision to Third Parties

We will not provide personal data to third parties without obtaining the prior consent of the individual, except in cases where such provision should be treated as an exception by law.

We will not provide the specified personal information to any third party with or without the consent of the person concerned, except in cases where the information should be treated as an exception in accordance with the items of Article 19 of the Act on the Use of Personal Identification Numbers.

Handling of Sensitive Information

We will not acquire, use, or provide to a third party sensitive information (personal information requiring special consideration, information related to labor union affiliation, family origin, legal domicile, health care, etc.), except as required by law or to the extent necessary for the performance of our business, or with the consent of the individual concerned.

 

Disclosure, Correction, Suspension of Use, etc.

We will comply with the disclosure, correction, suspension of use, etc. of retained personal data, etc. from the person in question in accordance with the laws and regulations.

Retained personal data refers to data as defined in Article 16, Paragraph 4 of the Act on the Protection of Personal Information.

Complaints Contact

We will promptly and appropriately address any questions or complaints from the person regarding his/her personal information, and strive to maintain an internal system for this purpose.

 

Continuous Improvement

We will strive to continuously improve this protection policy by, for example, conducting appropriate internal audits of personal information.

以上