Privacy policy

Basic policy regarding the protection of personal information

JR East Japan Planning Co., Ltd. (1-5-5 Ebisu Minami, Shibuya-ku, Tokyo, CEO Akaishi Ryoji, hereinafter referred to as the "Company") is a company that creates communications, including advertisers, media companies, partner companies, etc. Information about surviving individuals, such as individual names, addresses, telephone numbers, email addresses, images, audio, personal numbers, etc. through business activities such as business partners, investigations of our company, and regional revitalization, is a specific information about a surviving individual. We take care of important information assets (hereinafter referred to as "personal information") that allow you to easily match information that identifies an individual or other information to identify a specific individual.
We recognize the importance of personal information and consider it to be our social responsibility to protect personal information, and we are concerned about the law regarding the protection of personal information (hereinafter referred to as the "Personal Information Protection Act") and identification in administrative procedures.のですねかないます。 , and manage properly.
Furthermore, the Company respects the rights of individuals regarding personal information, and when requested to disclose, correct, or suspend the use of such information, we will respond within a reasonable period and within the scope specified by law, etc. .
In addition, our company will regularly review its efforts to protect personal information and strive to continue to improve it.
(※Personal information in this basic policy includes specific personal information)

Name of the personal information handling company and the name of the representative

Business name: JR East Japan Planning Co., Ltd.
President Akaishi Ryoji
Location: 1-5-5 Ebisu Minami, Shibuya-ku, Tokyo

1 Measures for the protection and safety of personal information

1. Formulating basic policy

   In order to ensure the proper handling of personal data, we have comply with related laws and regulations, guidelines, and formulated a "Basic Policy on the Protection of Personal Information."

2. Developing discipline regarding the handling of personal data

   With the aim of proper acquisition, use, storage, management, etc., we will formulate internal regulations regarding the handling of personal information, and we will also handle the processing methods and responsibilities at each stage of acquisition, use, storage, provision, deletion, disposal, etc. The person, person in charge, and their duties are clarified.

3. Organizational safety management measures

   1. In addition to establishing a person responsible for handling personal data, we will clarify the scope of the personal data and the personal data handled by the employee, and we will understand facts or signs that violate laws and regulations and handling regulations. We have established a system to contact individuals.
   2. We regularly self-check the status of personal data handling, and audits are conducted by other departments and external parties.

4. Human safety management measures

   1. We provide training to employees regarding the handling of personal data.
   2. The employment rules state information regarding confidentiality of personal data.

5. Physical Safety Management Measures

   1. We have taken measures to prevent the viewing of personal data by unauthorized persons in areas that handle personal data.
   2. We take measures to prevent theft or loss of equipment, electronic media, documents, etc. that handle personal data.

6. Technical safety management measures

   1. Access control is implemented to limit the scope of personnel in charge and the personal information databases handled.
   2. We have introduced a system that protects information systems that handle personal data from unauthorized access or unauthorized software from outside.

7. Understanding the external environment

   When handling personal data in a foreign country, we will understand the systems related to the protection of personal information in the foreign country and take necessary and appropriate measures to manage the data safely.

8. Employee supervision

   To understand the status of employee handling of personal data, we conduct audits or other audits at least once a year to ensure that the operation is in line with laws and regulations and company regulations, etc., and if there is a problem, It will be improved promptly.

9. Consignment supervision

   To understand the handling of personal data by the contractor, we conduct audits or other services at least once a year to ensure that the data is being operated in accordance with the contract, laws, etc., and if there is a problem, We will take necessary measures.

2. Handling of personal information

1. Purpose of using personal information

   The purposes for which we collect personal information are used are as follows: In addition, when the Company entrusts all or part of the handling of acquired personal information, it shall appropriately select a contractor and provide the contractor with the personal information acquired by the Company within the scope of its purpose of use. However, we will enter into a confidentiality agreement with the contractor regarding the handling of personal information, prohibiting use for the purposes of the business, and take measures such as by incurring necessary measures for safety management.

   1. Personal information of customers using our services
      ・To manage the operations and management of our services when providing our services
      ・To carry out surveys and statistical analysis of our business, sales activities, services, etc.
      ・To carry out marketing activities such as sending information about our services and events
   2. Personal information for contracted business
      ・To carry out events, seminars, etc., services relating to campaigns, prizes, etc., services such as providing services for members, research work, personalization work based on individual attributes and behavior history.
      ・In addition, for carrying out the work that the Company has entrusted with by its business partners, etc.
   3. Personal information obtained when accepting inquiries, comments, etc.
      ・For accepting and responding to various inquiries, opinions, and
      ・To ensure accurate understanding of the details of the inquiry etc.
   4. Personal information for business partners
      For the performance of business partner selection, business information provision, contract entry procedures, transaction management and related tasks
   5. Personal information obtained from employees (including retired people), applicants for employment, and their families, etc.
      ・For the provision of recruitment-related information and for recruitment-related work
      ・For work related to employment management (including secondment and transfer)
      ・For work relating to paying wages etc.
      ・To ensure a proper working environment, including welfare, health management, and
      ・For various procedures after retirement
      ・For laws and regulations, various procedures necessary for business purposes, and for communications etc.
      ・For the execution of business in the JR East Group, the Company and the Company Group
   6. Specific Personal Information
      ・For business related to health insurance and employment insurance, etc.
      ・For affairs related to Employees' Pension and National Pension, etc.
      ・For business related to salary, bonuses, year-end adjustments, etc., income tax withholding, etc.
      ・For administrative work related to the preparation and submission of withholding tax forms, salary payment reports, etc.
      ・For business related to employee stockholding associations, financial savings, corporate pensions, etc.
      ・For affairs related to the preparation and submission of statutory payment statements, etc.
      ・For other matters set out in the Number Act, etc.

In addition to the purposes of use specified in sections I-VI above, the Company will use personal information to the extent necessary for the purposes of use that the Company notifies the individual when acquiring personal information.

2. Providing personal information by third parties

   1. Except in cases where the Company falls under the purpose of using the personal information described in the preceding paragraph, or when it has taken measures when provided by a third party in accordance with the Personal Information Protection Act in the following paragraph, or where any of the following applies: We will not provide personal information to third parties without obtaining the consent of the individual in advance.
      ・In cases based on laws
      - When it is necessary to protect a person's life, body or property, and it is difficult to obtain the consent of the person
      ・When it is particularly necessary to improve public health or promote healthy development of children, and it is difficult to obtain the consent of the individual
      - In cases where a national institution, local government, or a person entrusted with it, is necessary to cooperate in carrying out the affairs stipulated by laws and regulations, and obtaining the consent of the individual will hinder the performance of the affairs. When there is a risk of causing the
   2. Regardless of the previous item, the Company will not provide specific personal information to third parties except in cases where it falls under the purpose of use of specific personal information or where it is stipulated in the Number Act.

3. Measures when providing personal information by a third party

   The Company shall suspend the provision of personal data provided to a third party (excluding personal information that is required to be considered) to a third party, at the request of the individual, of the personal data that the individual has identified. In the case of such cases, the following matters are notified in advance to the individual or to be easily known to the individual regarding the matters listed below, as provided for by the rules of the Personal Information Protection Commission, or the individual has placed them in a state that they can easily know, and has notified them to the Personal Information Protection Commission. In some cases, the personal data may be provided to third parties, regardless of the provisions of laws and regulations.

   1. The purpose of use is to provide to third parties
   2. Items of personal data provided to third parties (e.g. address, name, telephone number, etc.)
   3. How to provide to third parties
   4. Subsidizing the personal data to a third party at the request of the individual
   5. How to accept your request

4. Joint use of personal information

   The Company may notify the individual in advance of the following information and may use personal information (excluding personal information required) in collaboration with certain companies such as the JR East Group.

   1. To be shared use
   2. Items of personal data to be shared (name, address, telephone number, email address, etc.)
   3. Scope of shared use
   4. Purpose of joint use
   5. Address and representative name of the person responsible for managing personal data to be shared

   (※Personal data including specific personal information will not be shared.)

5. Procedures for disclosure of personal information etc.

   Information provided regarding the disclosure, correction, addition, deletion, suspension of use, etc. of the Company's handling of personal information, in accordance with the provisions of the Personal Information Protection Act (hereinafter referred to as "Disclosure, etc.) 」) Please contact the following counter. We will provide specific methods for disclosure, etc. individually. After completing the necessary identity verification procedures, we will respond within a reasonable period and within the scope specified by law, etc.
   Please note that you may be responsible for the actual cost of postage, etc. that we will notify you to the individual.

6. Personal Information and Complaint Consultation Center

   General Affairs Department, JR East Japan Planning Co., Ltd.
   1-5-5 Ebisu Minami, Shibuya-ku, Tokyo 150-8508
   03-5447-7765 (Weekdays 10am-5pm)

Established on February 23, 2005

Partially revised November 10th, 2015

March 13, 2018 Partially revised

Partially revised March 31, 2022

Partially revised April 1, 2023