SECURITY

Basic principle

Plus Co., Ltd. undertakes system development contracts and maintenance operations, and the information assets such as valuable customer information handled in our business are extremely important as our management base. It is a thing. We recognize the importance of protecting these information assets from risks such as leakage, damage, and loss, and all employees, including officers and employees, comply with this basic policy and keep information assets confidential. We carry out activities to maintain information security such as gender, integrity, and availability.

Basic policy

1. In order to protect information assets, we will formulate an information security policy, operate in accordance with it, and comply with laws, regulations and other norms related to information security, as well as contracts with customers.

2. We will clarify the criteria for analyzing and evaluating the risks of leakage, damage, loss, etc. that exist in information assets, establish a systematic risk assessment method, and carry out risk assessment on a regular basis. In addition, we will implement necessary and appropriate security measures based on the results.

3. We will establish an information security system centered on the officer in charge and clarify the authority and responsibilities related to information security. In addition, all employees are regularly educated, trained and ensured the proper handling of information assets, recognizing the importance of information security.We will raise awareness.

4. We will regularly inspect and audit the status of compliance with the information security policy and the handling of information assets, and promptly take corrective action for any deficiencies or improvement items found.

5. We will take appropriate measures against the occurrence of information security events and incidents, and in the unlikely event that they occur, we will establish a response procedure to minimize damage in advance, and in the event of an emergency, we will establish a response procedure. We will respond promptly and take appropriate corrective actions. In particular, for incidents related to business interruption, we will establish a management framework and regularly respond, restore tests and review to ensure the continuity of our business.

6. We will establish an information security management system that sets goals to realize the basic philosophy, implement it, and continuously review and improve it.

Established on September 1, 2015
Chiharu Hanashima
President & CEO
Plus Co., Ltd.

Plus Co., Ltd. is in a position to set a norm for the proper handling of personal information as a company that contributes to society as a business entity that develops and maintains and operates personal information. Recognizing the importance of properly handling personal information, we have established a personal information protection policy, and officers and employees will work together to comply with it, and we will do our utmost to protect personal information and personal rights and interests. I will.

1. When acquiring personal information, we will specify the purpose of use as much as possible and acquire personal information to the extent necessary to achieve that purpose.
2. When personal information is obtainned directly from the person in writing, we will obtain the personal information to the extent necessary after notifying us of our company name, personal information protection manager name and contact information, purpose of use, etc. ..
3. Personal information will be used within the scope of the purpose of use for which the person has given consent. In addition, we will establish and implement procedures to take necessary measures to prevent unintended use.
4. We will manage the personal information we hold in an appropriate manner and will not disclose or provide it to a third party without the consent of the person.
5. We will manage the personal information we hold in an accurate and up-to-date manner within the necessary range according to the purpose of use, and take reasonable safety measures against the risk of leakage, loss or damage of personal information. We will take measures, prevent and correct.
6. When outsourcing the processing of personal information, it is obligatory by contract not to leak or provide it to a third party, and appropriate management of the outsourcee is performed.I will carry it out.
7. We will respond to complaints and consultations regarding the personal information we hold by contacting our inquiry desk.
8. We will comply with laws and regulations regarding the handling of personal information, guidelines set by the government, and other norms.
9. We will establish a personal information protection management system, review it regularly, and continuously improve it.

Established on August 1, 2018

Chiharu Hanashima
President & CEO
Plus Co., Ltd.

Inquiries about the privacy policy
Plus Co., Ltd. Personal information consultation reception desk
6F Nippo Hatchobori Bldg. 2-19-8 Hatchobori, Chuo-ku, Tokyo 104-0032, Japan
TEL : +81-3-5542-7817

Purpose of use

Personal information subject to disclosure directly acquired by the Company will be used within the scope of the following purposes. If there is a purpose of use that is not included in the scope of the following purposes, in the case of direct acquisition, after obtaining the consent of the person in question about the purpose of use, if the purpose of use is acquired by other means, the purpose of use will be changed. We will use it after making it public.

Personal information obtained directly in writing
Target information Purpose of use

Personal information other than direct written acquisition (non-disclosure)

Request for disclosure of personal information

(1) The Company will notify the purpose of use, disclosure, correction, addition or deletion of content, suspension of use, erasure and suspension of provision to third parties (hereinafter referred to as "disclosure, etc."). If requested, we will conduct an in-house investigation of personal information and respond without delay.
* However, we may not be able to respond to disclosure, etc. depending on the content of your request. In that case, we will also answer the reason.
(2) When making a request for disclosure, etc., please make a request by mail according to the following procedure. We may not be able to accept your request if there are any deficiencies or deficiencies in your request. For each request for disclosure of personal information or notification of purpose of use, a postage stamp of 1,500 JPY will be charged as an administrative fee.
(3) Personal information received from the "Invoice for Disclosure of Personal Information" will be used for responding to inquiries and will not be used for any other purpose.

* For details on disclosure, etc., please contact the disclosure request window.

Request window for inquiries and disclosure of personal information

Name of authorized personal information protection organization and address for complaint resolution

* This is not a contact for inquiries regarding our products and services.

Enactment date: August 1, 2018
Revised date: March 10, 2021