1. Basic Policy

　The Fukushima Innovation Coast Promotion Organization (hereinafter “the Organization”) believes that the proper handling and protection of personal and corporate information is an important part of our social responsibility and handles personal and corporate information acquired in the course of the its business in accordance with the following policy in an effort to fulfill this responsibility.
　Personal information refers to “Personal Information” as stipulated in the Act on the Protection of Personal Information (hereinafter the “Personal Information Protection Act”), while corporate information refers to information about an actual corporation that contains descriptions or other data that can be used to identify a specific corporation (including information that can be easily corroborated with other information to identify specific corporation).

• (1) Compliance with laws and regulations

  　The Organization complies with regulations governing the handling of personal and corporate information stipulated by the Organization as well as with relevant laws, regulations, and prefectural ordinances.

• (2) Acquisition and use of personal information and corporate information

  　The Organization acquires and uses personal and corporate information, including names, addresses, and telephone numbers to conduct its business in an appropriate and efficient manner.
  　Personal and corporate information is acquired through legal and just means and is used within the scope of purpose necessary for the Organization to conduct business in an appropriate and efficient manner (hereinafter “Purposes of Use”) (refer to “2. Purpose of Use of Personal Information and Corporate Information”).

• (3) Ensuring the security and accuracy of personal information and corporate information

  　　The Organization manages personal and corporate information in an appropriate manner and takes necessary measures to prevent its leakage, loss, damage, or unauthorized access.
  　The Organization also endeavors to maintain accurate and up-to-date personal and corporate information it retains within the scope necessary to achieve the Purposes of Use.

• (4) Disclosure and provision to third parties

  　The Organization neither uses personal or corporate information internally for purposes other than clerical work nor discloses or provides such information to a third party except in the following cases.

  • (i) When required under the provisions of laws and regulations.
  • (ii) When the data subject has given consent.
  • (iii) When deemed urgent and unavoidable to protect the life, physical safety, or property of an individual.
  • (iv) When the information is made public through publication, news reports, etc., and disclosure is deemed not to risk unjustified infringement on the rights and interests of the data subject.
  • (v) When there are reasonable grounds for using the information within the Organization or providing it to the national or local government and disclosure is deemed not to risk unjustified infringement on the rights and interests of the data subject.
  • (vi) When there is a public interest need or other special reason for providing personal information or corporate information and disclosure is deemed not to risk unjustified infringement on the rights and interests of the data subject.

• (5) Disclosure, revision, etc. of personal information and corporate information

  　When a data subject requests disclosure of personal or corporate information, the Organization will, after verifying that the request has in fact been made by the data subject, endeavor to disclose such information promptly according to laws and regulations, except in the following cases.

  • (i) When disclosure to the data subject is not possible under the provisions of laws and regulations.
  • (ii) When such personal information includes the personal information of an individual other than the data subject requesting disclosure (excluding information on a business of an individual that operates the business in question) and disclosure of such information is deemed detrimental to the legitimate interests of that individual.
  • (iii) When such information includes information on a corporate body or other organization (excluding national or local public organizations, hereinafter “Corporate Body”) or personal information on a business of an individual that operates the business in question, and disclosure of such information is deemed detrimental to the rights, competitive status, or other legitimate interests of that Corporate Body or individual.
  • (iv) When such personal information is related to work or business involving guidance, screening, diagnosis, or other assessments or judgment of individuals and disclosure risks interfering with the proper implementation of the work or business.
  • (v) When such personal information or corporate information is related to deliberations, examinations, or negotiations within the Organization or with a national or local government organization, and disclosure of such information is likely to unjustly impair the open exchange of opinions or neutrality of decision-making, to unjustly cause disorder among prefectural residents, or to unjustly benefit or disadvantage a specific party.
  • (vi) When personal information or corporate information is related to the work or business of the Organization or a national or local government organization, and, due to the nature of the work or business, disclosure of such information is likely to impede proper implementation.
  • (vii) When an application for disclosure is made by a legal representative of a minor and disclosure is deemed detrimental to the legitimate interests of the minor in question.
  • (viii) When the request for disclosure is not received in accordance with the procedures established by the Organization (refer to: “3. Procedures for Disclosure, Revision, Suspension of Use, and Notification of Purposes of Use of Personal Information and Corporate Information”). In the event that the content of personal information or corporate information retained by the Organization is inconsistent with fact, the Organization will, upon request from the data subject, correct or delete the information to the extent necessary for the Organization’s business operations.

• (6) Management of the system

  　The Organization provides employees with the training necessary to ensure compliance with laws and regulations as well as internal Organization rules governing the handling of personal information and corporate information.
  　The Organization endeavors to manage personal and corporate information appropriately by appointing an officer in charge of managing personal and corporate information as well as through regular audits.

• (7) Revisions to the Privacy Policy

  　The Organization endeavors to review and improve the above measures as necessary in accordance with revisions to laws and regulations. In the event that the Organization revises the present Privacy Policy, the revised content will be posted on the Organization’s webpage.

3. Procedures for Disclosure, Revision, Suspension of Use, and Notification of Purposes of Use of Personal Information and Corporate Information

• (1) Disclosure and revision of personal information and corporate information

  　The data subject may request that the Organization disclose personal information or corporate information belonging to the data subject. The Organization will, in principle, decide within fifteen (15) days of receiving the request whether to disclose the personal information or corporate information and will notify the data subject to that effect. However, this period may be extended when the request is difficult in terms of administrative processing or for other legitimate reasons.
  　The scope of disclosure by the Organization is limited to “retained personal data” as defined in Article 16 (4) of the Personal Information Protection Act and equivalent corporate information.

• (2) Revision, addition, and deletion of personal information and corporate information

  　If a data subject believes that the content of their personal information or corporate information disclosed by the Organization is incorrect, the data subject may request that the Organization make revisions, additions, or deletions (hereinafter “Revisions”). When such a request is received, the Organization will make Revisions to the information to the extent necessary for business operations.
  　When Revisions are made, the data subject will be notified of the content of the Revisions made, and when Revisions are not made, the data subject will be notified of the reason.

• (3) Suspension of use and deletion of personal information and corporate information

  　If a data subject believes that the Organization has acquired or used personal information or corporate information belonging to the data subject in violation of laws and regulations, the data subject may request that the Organization delete or suspend the use of their personal information or corporate information (hereinafter “Suspension of Use”). When such a request is received, the Organization will conduct the necessary investigations, and, when a violation is confirmed, the Organization will suspend the use of personal information and corporate information within the scope of laws and regulations.
  　When Suspension of Use is performed, the data subject will be notified to that effect, and when Suspension of Use is not performed, the data subject will be notified of the reason.

• (4) Notification of the Purposes of Use of personal information and corporate information

  　If a data subject wishes to confirm the Purposes of Use of personal information or corporate information belonging to the data subject, the data subject may request that the Organization provide a notification of the Purposes of Use. When such a request is received, the Organization will endeavor to promptly notify the Purposes of Use in accordance with laws and regulations.
  　The scope of the notification of the Purposes of Use provided by the Organization is limited to “retained personal data” as defined in Article 16 (4) of the Personal Information Protection Act and equivalent corporate information.