Privacy Policy
TOSHO Co., Ltd., the operator of ANRAN HOTEL & RESORTS (hereinafter referred to as "the Hotel"), is committed to appropriately handling customers’ personal information and specific personal information in accordance with the following policy.
Compliance with Laws and Regulations
We comply with the Act on the Protection of Personal Information, the My Number Act, other applicable laws and regulations, the Guidelines for the Proper Handling of Specific Personal Information (for Business Operators), as well as our internal policies, and ensure the proper handling of personal information and specific personal information.
Collection and Use of Personal Information
When we collect personal information directly from customers, business partners, employees, or other individuals through written documents or other means, we will clearly specify the purpose of use. In other cases, we will notify or publicly announce the purpose of use. We will not use personal information beyond the scope necessary to achieve the stated purposes, except with prior consent from the individual concerned or where permitted by applicable laws and regulations.
Management of Personal Information
We implement appropriate security measures to prevent the leakage, loss, or damage of personal information and properly manage all personal information entrusted to us by customers, business partners, employees, and other individuals. We also provide appropriate supervision of our employees regarding the handling of personal information. When outsourcing the handling of personal information, we ensure that entrusted parties manage such information appropriately under our supervision.
Provision of Personal Information to Third Parties
We will not provide customers’ personal information, business partners’ personal information, or employees’ personal information to any third party, except when we have obtained prior consent from the individual concerned (including cases where processing is outsourced within the necessary scope for achieving the purpose of use) or when disclosure is permitted by applicable laws and regulations.
Disclosure, Correction, and Suspension of Use of Personal Information
If customers, business partners, employees, or other individuals request notification of the purpose of use, disclosure, correction, suspension of use, or other actions regarding their personal information, we will respond in accordance with applicable laws and regulations after confirming the identity of the requester.
Provision of Specific Personal Information
We will not provide specific personal information of business partners or employees to any third party except where such provision is permitted by applicable laws and regulations.
Security Management Measures
We take necessary and appropriate security management measures to prevent the leakage, loss, or damage of personal information and specific personal information. We also provide necessary and appropriate supervision of employees and external contractors (including subcontractors) who handle such information. In addition, we have established separate internal regulations regarding the secure management of personal information and specific personal information.
Establishment of Internal Management Systems
We appoint responsible personnel for the management of customers’, business partners’, and employees’ personal information and specific personal information, and continuously strive to improve our internal systems and maintain an adequate security management structure.