Murayama Inc. (“the Company”) is committed to protecting personal information and all information entrusted to us in the course of our business operations with the utmost care.
Because the information we handle includes not only “personal information” but also a wide range of information such as “corporate information including new products,” we have established a dedicated information management structure for certain aspects.
Our approach to protecting information entrusted to us by our customers is as follows.
Chapter 1: Basic Principles Regarding Information
- The Company maintains a unified information protection structure led by the President and Representative Director, under whom an officer is appointed to oversee the protection of confidential information.
- Regarding “personal information” obtained through business operations, the Company strictly complies with laws and regulations concerning the handling of personal information, guidelines established by the government, and other relevant standards, as well as the requirements of JIS Q 15001 Personal Information Protection Management Systems. We ensure that all such information is handled and managed with the utmost rigor.
- “Personal information” at the Company refers to cases in which, in addition to an individual’s name, any other piece of information exists that, in combination, could identify a specific individual. Therefore, any information that extends beyond a person’s name and enables identification is treated as “personal information”.
- For all other information subject to confidentiality obligations, we manage such information in accordance with our internal management regulations to uphold the trust and confidence placed in us by customers who outsource work to the Company.
- In addition to the cases above, the Company will apply our established management procedures whenever requested by a customer, or when the responsible employee recognizes the necessity for such information management.
Chapter 2: Types of Information Handled by the Company
- Proprietary information belonging to customers and third parties obtained through sales and business operations.
- “Personal information” obtained from customers or collected in connection with the performance of event management services and other related duties.
- Information provided through media such as electronic data, drawings, and specifications.
- Information that employees may learn which could potentially harm the status or reputation of third parties.
- Information related to the Company’s own employees.
Chapter 3: Information Management Education
- The Company conducts training at least once a year to ensure that employees are fully aware of the information management system and to maintain its standards.
- When contracts or memoranda concerning information management are executed for specific projects, the Company holds training sessions as needed to ensure thorough awareness among all relevant personnel.
- Partner companies involved in production work are required to sign a general business agreement (master services agreement) that includes provisions on information protection and receive training at the annual “Safety and Health Cooperation Meeting.” For partner companies engaged in planning (creative) work, training is provided on a project-by-project basis. While basic training is conducted at the time of the master services agreement, supplemental project-specific contracts and training sessions will be implemented as required.
Chapter 4: Handling of Information
- The Company will use personal information solely for operations related to the contracted project and will not transfer or disclose it to third parties not involved in the project, or use it for any purposes outside the scope of the business engagement.
- The Company exercises the utmost care in handling “personal information” and “information subject to confidentiality obligations”.
- Information handling requirements are confirmed with customers through memoranda or contracts.
- A designated information manager is appointed from among Company employees for each case requiring information management. An organizational chart will be created if a specific organizational structure is required for management purposes.
- If prior discussions indicate the need for the return of information, we will destroy any duplicates or copies before returning the original materials.
- If complete destruction of information is required, please consult with us in advance.
- When customers maintain their own information management rules, the Company will work to align its processes with those rules to enable more effective management.
Chapter 5: Incident Response
- If an incident occurs that significantly affects personal privacy or corporate interests in connection with our operations, the Company pledges to fully cooperate with the customer in identifying the cause and will establish an investigation committee to conduct the inquiry.
- Investigation findings will be reported to the customer in coordination with the investigation committee.
- Upon customer request, the investigation committee will disclose necessary materials and information.
Chapter 6: Public Disclosure of Management Systems
- The Company will make its policies regarding customers’ rights continuously available on its website.
- In the event of organizational changes or amendments to the policy, the Company will promptly upload the updated version to its website and clearly indicate the changes made by providing a comparison with the previous version.