East Nippon Expressway Company Limited (“the company”) appreciates the importance of personal data (information relating to a specific individual, including their name, date of birth and any other items that could be used to identify them) and makes every effort to ensure that it is protected. In addition to complying with all applicable personal data legislation, the company is committed to protecting personal data in accordance with the requirements set out in the following basic policy, in order to earn users’ trust.
1. Managing data
The company will take the utmost care when managing user data, by establishing and operating an effective internal framework (providing personnel with extensive training in adequate data handling procedures, enforcing internal regulations, compiling manuals, etc.), and implementing information system security measures.
2. Acquiring personal data
The company will always state the purpose for which it is acquiring personal data and will only do so by fair and legal means.
3. Using personal data
The company will always state the purpose for which it intends to use personal data and will not use data for any other purpose.
4. Providing personal data
Unless required to do so by laws and ordinances, the company will not disclose or provide users’ personal data to any third party without the relevant user’s permission.
5. Adequate personal data management
The company will make every effort to ensure that personal data is accurate and up-to-date, in order to provide users with the best possible service. The company will take any necessary measures to ensure the adequate management of personal data, to prevent data from being leaked, lost, damaged or accessed without authorization.
6. Outsourcing personal data processing
In the event that the company provides personal data to an outside contractor in order to carry out essential procedures in relation to personal data processing, the company will select a contractor that is deemed to handle personal data adequately, sign an outsourcing agreement or other legal document to ensure that users’ personal data is not leaked (by provisions of personal data management, confidentiality, prohibition of disclosure, etc.), and continue to adequately monitor the contractor.
7. Notification of purpose, disclosure, alteration or removal of personal data
The company will respond to any request from a user (or representative acting on their behalf) who requires notification of the purpose for which their personal data is being used or wishes their personal data to be disclosed, altered or removed from usage, within reason and within a reasonable period of time in accordance with the laws and ordinances. The company will similarly respond quickly and appropriately to any other inquiries relating to personal data.
8. Other matters
The company will continue to review and improve this policy as and when necessary. In the event that this policy is revised, the company will provide notification of the revised contents.