Toyotsu Insurance Management Co., Ltd. (hereinafter referred to as "the Company") considers the appropriate handling and secure management of information provided by our customers to be our social responsibility and a fundamental basis for building a strong relationship of trust with our customers. In order to protect personal information provided by our customers, the Company will comply with the obligations stipulated in the Personal Information Protection Act and other relevant laws and regulations concerning personal information protection, as well as the guidelines of the competent minister, and will strive to appropriately handle and protect personal information based on the following basic policy.
I. Proper acquisition of personal information and notification/publication of the purpose of use, etc.
Our company will acquire personal information (information relating to a living individual that can identify a specific individual) through appropriate means, after specifying the purpose of use as clearly as possible. When acquiring personal information, we will either publicly announce the purpose of use in advance or notify or publicly announce it to the customer as soon as possible after acquisition. However, when acquiring personal information directly from the customer in writing or other means, we will clearly state the purpose in advance (hereinafter, these measures are collectively referred to as notification/publication, etc.).
II. Use of Personal Information
Our company will only use personal information within the scope of the purposes of use that we have notified or publicly announced to our customers. However, this does not apply if we have obtained prior consent from the customer or if it is treated as an exception by law.
III. Provision of personal information to third parties
Our company will not disclose or provide personal data (meaning personal information that constitutes a personal information database, etc., which is defined by government ordinance as a collection of information containing personal information that is systematically organized so that specific personal information can be easily retrieved) to third parties without obtaining the customer's prior consent. However, this does not apply in the following cases.
Where required by law
When it is necessary to protect the life, body, or property of an individual and it is difficult to obtain the customer's consent
When it is particularly necessary for the improvement of public health or the promotion of the sound growth of children, and it is difficult to obtain the consent of the customer
Cases in which it is necessary to cooperate with a national government organ, a local government, or an entity entrusted by either of the foregoing in executing affairs prescribed by laws and regulations, and in which obtaining the customer's consent is likely to impede the execution of such affairs
In cases where we provide information to our service providers to the extent necessary for the performance of our business operations.
IV. Joint use with our affiliated companies
Within the scope of the purposes of use that we have notified and published to our customers (including all business partners, such as suppliers and those with whom we plan to do business in the future), we may share your personal data with our affiliated companies, our parent company (Toyota Tsusho Corporation), and the parent company's group companies (consolidated subsidiaries listed in our securities report) under the following conditions:
Items of personal data to be shared Company name, department, name, job title, address, phone number, email address, company website address, fax number, and other contact information listed on business cards, etc.
Our company strives to keep the personal data we handle accurate and up-to-date to the extent necessary to achieve the purpose of use. Furthermore, we will take necessary and appropriate measures to prevent leakage, loss, damage, or unauthorized access, and we will supervise our employees and contractors to ensure proper management.
VI. Inquiries regarding personal data held by the company
If we receive a request from a customer (including their representative) for disclosure, notification of purpose of use, correction, or suspension of use of their personal data held by our company (personal data for which we have the authority to disclose, correct, etc., excluding data whose existence or non-existence would harm the public interest or other interests as stipulated by government ordinance, or data that will be deleted within six months), we will, in accordance with the law, verify that the request is made by the customer themselves (including their representative) and respond to the request within a reasonable scope.
VII. Handling Complaints
Our company will promptly and appropriately address any complaints from customers regarding the personal information we handle, and we will strive to establish an internal system to facilitate this.
