The Ritsumeikan Trust Privacy Policy
The Ritsumeikan Trust (hereinafter, "the Trust) has established voluntary rules and systems to ensure the appropriate handling of personal information (information on living individuals that falls under any of the items of Article 2, Paragraph 1 of the Act on the Protection of Personal Information (hereinafter, "Personal Information Protection Act")) in accordance with the Personal Information Protection Act, and it has formulated the following privacy policy which it continues to maintain.
1. Name of enterprise, address, and name of representative
The Ritsumeikan Trust
8 Nishinokyo-Higashi-Toganoocho, Nakagyo-ku, Kyoto
Tomomi Morishima, Chairperson of the Board of Trustees
2. Compliance with relevant laws, regulations, guidelines, etc.
The Trust shall handle personal data appropriately in compliance with the Personal Information Protection Act, other related laws and regulations, the "Guidelines Pertaining to the Act on the Protection of Personal Information (General Rules Guidelines)," and other guidelines stipulated by the government that must be complied with.
3. Collection and usage of personal information
The Trust may collect and use personal information within the extent necessary to accomplish the purposes of use stipulated in the next paragraph. The Trust shall obtain personal information using only appropriate and legal methods, and it will use it appropriately.
4. Purposes of use of personal information
The Trust will use the personal information it acquires for the purposes of use stipulated in “Public Notice 2,” and it will not use it for any other purposes, except with the consent of the individual concerned or as permitted by law. Other purposes of use may be disclosed or announced individually.
5. Matters concerning the secure management of personal data
With respect to the personal data (personal information constituting personal information database, etc. (a collection of information that contains personal information and which described in the items of Article 16, Paragraph 1 of the Personal Information Protection Act (excluding information stipulated in government ordinances as having little risk of harming the rights and interests of individuals with regard to the method of use)) handled by the Trust, the person responsible for management will take necessary and appropriate security management measures, and the Trust will strive to protect personal data by taking necessary and appropriate security measures to prevent leakage of personal data to outside parties and to protect personal data against the risk of loss, destruction, and manipulation as well as unauthorized access by outside parties. In addition, the Trust will provide employees and contractors who handle personal data with the necessary and appropriate supervision.
The security management measures for personal data are specifically stipulated in the separate Personal Information Protection Regulations and other internal regulations, the primary contents of which are as described in “Public Notice 3.”
6. Provision of personal information to third parties
The Trust will not provide personal data to any third parties, except with the consent of the individual concerned or as permitted by law.
7. Shared usage of personal information
The Trust may engage in the shared usage of personal data where the Ritsumeikan Trust is the person responsible for the management of shared usage. The matters disclosed concerning shared usage are as described in “Public Notice 4.”
8. Handling of education and learning data
When creating education and learning data (data including personal information stored in information systems, etc. in the course of education and learning activities), the Trust will follow the standards stipulated in laws and regulations, and it will handle said data appropriately.
9. Handling of pseudonymized personal information
When creating pseudonymized information (information about an individual obtained by processing personal information so that the individual cannot be identified unless the information is cross-checked with other information according to measures stipulated in the items of Article 2, Paragraph 5 of the Personal Information Protection Act according to the category of personal information listed in the relevant item), the Trust will take appropriate measures in accordance with the standards stipulated by law.
10. Handling of anonymized personal information
When creating anonymized information (information on individuals obtained by processing personal information so that specific individuals cannot be identified according to measures stipulated in the items of Article 2, Paragraph 6 of the Personal Information Protection Act according to the category of personal information listed in the relevant item, and where said personal information cannot be restored), the Trust will take appropriate measures in accordance with the standards stipulated by law.
11. Notification, disclosure, correction, etc. or suspension of use of retained personal data
The Trust will respond to requests from individuals or their representatives for disclosure, correction, addition, or deletion of content, suspension of use, erasure, and suspension of provision to third parties of retained personal data (personal data for which a business operator handling personal information (an individual who uses a personal information database, etc. for business purposes) has the authority to disclose, correct, add, or delete content, suspend use, erase, and suspend provision to third parties, other than personal data stipulated in government ordinances as data whose existence or nonexistence is found to be harmful to the public or other interests). Individuals who wish to make such a request should do so in accordance with the provisions outlined in “Public Notice 6.”
12. Contact information for inquiries and complaints
Inquiries regarding the handling of retained personal data by the Trust should be directed to the contact points listed in “Public Notice 7.”
13. Improvement in the handling of personal information
Ritsumeikan will seek to improve the manner of handling personal information from time to time.
