Basic Policy on Personal Information Protection
As a learning institution in Japan, Crane English School aims to further increase its social value, and in handling personal information, it complies with the Act on the Protection of Personal Information and the personal information protection guidelines of the relevant ministries. Furthermore, it has established and will abide by the following basic measures for collecting, using, and providing personal information.
1. Personal information will be acquired from customers through lawful and fair means.
2. We will notify or publicize to customers the purpose of use of personal information we collect, and will use personal information only to the extent necessary to achieve that purpose.
3. We will not provide personal information to third parties without the prior consent of the customer. If we provide personal information to a third party, we will obtain consent from the customer at the time of acquisition or before providing the information.
4. We will store and manage the personal information we collect in a safe place in accordance with our company rules. We will implement necessary technical and organizational measures and preventative measures against the risk of unauthorized access to personal information or leakage. Personal information that is no longer needed will be disposed of or deleted in an appropriate manner.
5. We will establish a management system to ensure the appropriate management of personal information.
6. In the event of an accident involving personal information, we will immediately report it to the individual concerned and other relevant parties and take the necessary measures to minimize the damage.
7. If a customer requests the disclosure, correction, or deletion of their personal information, we will comply with such requests within a reasonable scope, except in cases where required by law.
8. We will continually review and improve our rules regarding personal information in light of changes in social conditions, the business environment, etc., such as amendments to laws regarding personal information.
9. We will provide training to executives and employees who handle personal information about their roles and responsibilities in complying with laws and rules regarding personal information, as well as the measures to be taken in the event of a violation.
End
Basic Policy on the Proper Handling of Specific Personal Information, etc.
Crane English School has established the following basic policy for the proper handling of personal identification numbers and specific personal information (hereinafter referred to as specific personal information, etc.).
1. Compliance with relevant laws and regulations We will comply with the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures, the guidelines established by the Specific Personal Information Protection Commission, and other relevant laws and regulations, and our officers and employees will understand the importance of protecting specific personal information, etc., and will implement appropriate handling methods.
2. Matters concerning safety control measures [Organizational safety control measures]
Crane English School will establish regulations to prevent the leakage, loss, or damage of specific personal information, etc., and will take necessary and appropriate organizational safety management measures.
[Human safety management measures]
When officers and employees are required to handle specific personal information, etc., we will provide necessary and appropriate supervision to such officers and employees to ensure that appropriate safety management measures for specific personal information, etc. are taken.
[Physical safety control measures]
We will establish a controlled area for handling specific personal information, etc., and take appropriate measures to prevent theft of equipment, electronic media, documents, etc. Furthermore, we will take necessary and appropriate safety measures, such as password protection, when acquiring, moving, or disposing of electronic media, documents, etc.
[Technical safety control measures]
We will limit the number of people who have access to PCs, servers, etc. that handle specific personal information, and take measures to block unauthorized access.
3. Contact point for inquiries We are always accepting questions and inquiries regarding the handling of specific personal information, etc., so please feel free to contact us.
End
Crane English School Representative Takayuki Harada April 1, 2019