Principles

Fair Consulting Co., Ltd. and its affiliated companies in Japan and overseas (https://www.faircongrp.com/company/?lang=en; hereinafter collectively referred to as “we” or “us”) will comply with the Act on the Protection of Personal Information (Act No.57 of 2003; hereinafter referred to as the “Act”) and other relevant laws and regulations with regard to the handling of personal information, and will endeavor to appropriately protect and use personal information by establishing a Privacy Policy as follows.

1. Collection of Personal Information

We will collect personal information through legal and fair means after disclosing or notifying the purpose of use of such information (including disclosure under this Privacy Policy).

2. Purpose of Use

We will use personal information within the scope necessary for the following purposes

Types of personal information we collect		Purpose of use
(1) Information from customers	・Personal information provided by customers when they inquire about or sign a contract for our services, etc.	・Providing services ・Introducing services, etc.
	・Personal information of those who apply for various seminars	・Holding various seminars ・Sending notice of various seminars and revisions to laws and regulations, etc.
(2) Information from business partners	・Personal information collected at the time of entering into a contract for entrusting/entrusted services	・Performing and managing of the contract, etc.
(3) Information from shareholders, etc.	・Personal information on shareholders, etc.	・Exercising of rights and performing obligations under the Companies Act ・Preparing and managing records in accordance with various laws and regulations
(4) Information from job applicants	・Personal information on job applicants	・Making contact during the recruitment and selection process
(5) Information from employees	・Personal information on employees, etc.	・Performing human resource management and making various contacts

3. Joint Use of Personal Information

We may share and jointly use personal information we hold as follows to the extent necessary for appropriate and smooth performance of services.
(1) Jointly-used personal information
Name, address, phone number, e-mail address, and other information necessary for providing services
(2) Scope of joint users
Fair Consulting Group（https://www.faircongrp.com/company/?lang=en）
In addition, personal information collected in relation to seminars, etc. co-organized with individuals such as attorneys, etc. and other organizations may be shared with such individuals or organizations who are co-organizers within the scope necessary for such co-hosting.
(3) Purpose of joint use
Personal information will be shared within the scope of the purpose of use described in (1) and (2) of '2. Purpose of Use' above.
(4) Person responsible for managing personal information
Person responsible:Hitoshi Ban, Director & CEO
　　　　　　　　　　Fair Consulting Co., Ltd.
　　　　　　　　　　5-25, Umeda 2 chome, Kita-ku, Osaka-shi, Osaka 5300001 Japan

4. Provision to Third Parties

We will not provide personal data including personal information to third parties without the consent of the individual, except in any of the following cases or other cases recognized as exceptions by the Act.

1. (1) When disclosure is required by laws and regulations.
2. (2) When it is necessary to do so to protect the life, body or property of people, and obtaining the consent of individual is difficult.
3. (3) When it is necessary to do so to improve public health or promote the sound growth of children, and obtaining the consent of individual is difficult.
4. (4) When it is necessary to cooperate with national agencies or local governments in the execution of legally-prescribed business, but where obtaining the consent of individual may hinder execution of the said business.
5. (5) When personal information is provided to a joint user as described in (2) of “3. Joint Use of Personal Information”.

In addition, in the case where we entrust a part of our business and provide personal data to a third party in a foreign country referred to in (1) below, we shall exercise necessary and appropriate supervision over such third party for the protection of personal information. Furthermore, when providing personal data to a third party in a foreign country, etc. (excluding a foreign country, etc. that has a system for the protection of personal information equivalent to that of Japan) listed in (1) below, the consent of the individual shall be obtained after indicating measures for the protection of personal information taken by the third party. However, if the third party has taken measures equivalent to the provisions of the Act, information on the measures will be provided at the request of the individual in lieu of the consent of the individual.
With regard to systems for the protection of personal information in foreign countries and measures for the protection of personal information taken by third parties to whom personal information is provided, as an example, eight principles of the OECD Privacy Guidelines stipulate the obligations of corresponding businesses and the rights of individuals.

1. (1) Name of foreign country, etc.
   Hong Kong, China, Vietnam, Singapore, India, Taiwan, Indonesia, Thailand, Malaysia, Philippines, Mexico, Australia, Germany, United States, Israel, New Zealand, Belgium, Netherlands, France, Romania, United Kingdom, Spain, Czech Republic, Poland, United Arab Emirates.
2. (2) System for protection of personal information in the relevant foreign country, etc.
   Please confirm the system for protection of personal information in the relevant foreign country, etc., as described in the findings(https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/#gaikoku) of the Personal Information Protection Commission.

5. Security Control Measures

We will take necessary and appropriate security control measures to prevent leakage, loss or damage of personal data. In addition, we will exercise necessary and appropriate supervision over employees and contractors (including subcontractors) who handle personal data. The main contents of security control measures for personal data are as follows.

1. (1) Formulation of personal information protection guidelines
   In order to ensure the proper handling of personal data, we have established these guidelines for compliance with relevant laws, regulations, guidelines, etc.
2. (2) Establishment of regulations for handling of personal data
   We have established Personal Information Handling Regulations regarding handling methods and responsible persons according to the stage of collection, use, storage, provision, deletion and disposal of personal information.
3. (3) Organizational security control measures
   In addition to appointing a person responsible for handling personal data, we have established a system for reporting to the person responsible for handling personal data in the event that a violation or possible violation of the Act or the Personal Information Handling Regulations is detected by clarifying the employees who handle personal data and the scope of personal data they handle.
   In addition, each department regularly conducts self-inspections of the operational status of the handling of personal data.
4. (4) Human security control measures
   Periodic training is held for employees on points of concern regarding the handling of personal data.
   Matters related to the confidentiality of personal data are stated in employment regulations and written pledges.
5. (5) Physical security control measures
   Measures are taken to prevent the theft or loss of PC devices and electronic media that handle personal data and measures are also taken to prevent personal data from being easily identified when the PC devices and electronic media are carried.
6. (6) Technical security control measures
   ・The scope of personal information databases, etc. that can be handled is limited by departments and employees through access control, etc.
   ・We have introduced a system to protect information systems that handle personal data from unauthorized access from outside or unauthorized software.
7. (7) Understanding of the external environment
   As described in “(1) Name of foreign country, etc.” and “(2) System for protection of personal information in the relevant foreign country, etc.” of “4. Provision to Third Parties,” which are descriptions of cases in which personal data is provided to third parties located in a foreign country, etc., we will take necessary and appropriate measures for the security control of personal data after understanding the systems for protection of personal information in the foreign country, etc.
   In addition, we will confirm the status of the security control measures taken by the recipient and implement corrective instructions as necessary.

6. Request for Disclosure of Personal Information

Requests for reference, disclosure, correction, suspension of use, deletion, etc. of personal information and personal data held by us will be handled promptly after confirming the identity of the individual in accordance with the prescribed procedures. For any other comments, questions, or complaints, please contact us in accordance with the information in “7. Contact Us” below

7. Contact Us

If you have any comments or questions regarding the handling of personal information, or requests for disclosure of personal information, please contact us via the contact information mentioned below.
Please note that we do not accept any requests via personal visits to our company.

Contact Information:Personal Information Disclosure Request Desk, Administration Department
　　　　　　　　　　Fair Consulting Co., Ltd.
　　　　　　　　　　5-25, Umeda 2 chome, Kita-ku, Osaka-shi, Osaka 5300001
　　　　　　　　　　Email: info@faircongrp.com

• ※Personal information provided to us in response to a request will be used only for the purpose of responding to the request and managing the records of receipt and response.
• ※Fees required for disclosure, etc. and other actual costs will be borne by the requesting party.

8. Revision of the Privacy Policy

We will review and make efforts to improve the operational status of the handling of personal information as appropriate. In addition, this Policy may be revised as necessary.


Supplementary Provisions

1.　Established and enforced on August 1, 2019
2.　Revised and enforced on April 1, 2022