Toyota Mobility Foundation (hereinafter referred to as the “Foundation”) has established its own basic policy concerning the protection of personal information (hereinafter referred to as the “Basic Policy”) as explained below. The Basic Policy is based on the Foundation's understanding that proper compliance with Japan's Personal Information Protection Law (hereinafter referred to as the “PIP Law”) and other related laws and regulations is an important social responsibility of an enterprise.
1. Establishing a System for the Protection of Personal Information
The Foundation will ensure that its officers and employees understand the importance of the protection of personal information and establish a management system for the protection of personal information. The Foundation will establish explicit management rules governing the acquisition, use and provision of personal information and will properly manage personal information.
2. Obtaining Personal Information
When obtaining any personal information, the Foundation will identify its purpose of use and obtain such personal information through a lawful and fair manner and only to the extent necessary for the purpose of use which was identified by the Foundation in advance.
3. Handling Personal Information
The Foundation will never use any personal information obtained pursuant to Clause 2. above for any purpose other than the purpose of use without obtaining your prior consent. The Foundation will respect your rights to your personal information. When the Foundation receives your requests for disclosure of, corrections to, discontinuation of the use of and/or deletion of your personal information in accordance with the laws and regulations, the Foundation will faithfully deal with such requests in accordance with the laws and regulations.
The personal information obtained by the Foundation shall be used for the following purposes:
- When introducing the Foundation’s activities, etc. or conducting a survey through a questionnaire;
- When engaging in duties which are necessary to handle enquiries or provide services promptly;
- For any other purposes identified when obtaining the relevant personal information; and
- When required to comply with any provisions of any applicable laws and regulations or to follow any governmental notifications and/or guidelines, etc.
2) Personal Information Safety Management Measures
The Foundation shall implement organizational, physical, and technical safety measures in a suitable manner in accordance with the laws and regulations addressing the secure management of personal information. The objective of such measures include s preventing personal information from being accessed in an unauthorized manner and from being lost, damaged, altered, leaked, etc. In addition, the Foundation will take human safety management measures in a suitable manner in accordance with the laws and regulations by endeavoring to promote activities, including training and education, to its officers and employees who handle any personal information or who are otherwise appropriate.
3) Provision of Personal Information to Third Parties
The Company shall never provide any personal information obtained pursuant to Clause 2. above to any other third party without obtaining your prior consent, except for cases in which it is permitted under the laws and regulations.
4) Supervision of Outsourcees Who Handle Personal Information
The Foundation may, in accordance with the laws and regulations, provide any personal information obtained pursuant to Clause 2. above to its outsourcees to the extent necessary for the purpose of use which was identified by the Foundation in advance. Even in such a case, the Foundation shall request the relevant outsourcee to handle the relevant personal information in a proper manner, and the Foundation will supervise the outsourcee in a suitable fashion.
4. Accident Response
In the case of a personal information leak or some other incident, the Foundation will conduct an investigation of the facts and the cause of the incident and implement measures to prevent secondary damages and the recurrence of the incident, or otherwise respond to the incident appropriately.
5. Continuous Improvements
The Foundation will attempt to continue improving the handling of personal information so that all personal information may be handled in a proper manner. Modifications will be reflected in this Basic Policy from time to time.
6. Enquiries, etc.
You may request the Foundation to disclose any and all personal information which has been maintained by the Foundation and belongs to you. When you request the Foundation to disclose your personal information that it maintains, you are kindly requested to address your request to the email address set forth below. The following email address may also be used for any enquiries and/or consultations pertaining to any personal information, including if you want to request corrections to, discontinuation of the use of and/or deletion of any of your personal information. In any event, any and all enquiries, consultations and requests from you shall be handled in compliance with the objectives of the PIP Law in an adequate manner.
The Foundation’s point of contact regarding the handling of Personal Information is as follows: