1.  Basic policy for protecting personal information 2.  Specific handling of personal information in telecommunications services etc. 3.  Revisions

1. Basic policy for protecting personal information Nippon Telegraph and Telephone West Corporation (hereinafter referred to as "NTT West") fully recognizes the societal demands concerning the protection of personal information, and believes it has an important responsibility to society as a telecommunications carrier of a public nature to promote the proper handling of personal information. In order to fulfill this responsibility, provide safe and secure services, and remain a company trusted by everyone, the entire company will strive to protect personal information based on the NTT Group Information Security Policy (in Japanese only) and the basic policy outlined below. (1)  NTT West will strive for thorough compliance by properly handling personal information according to the provisions stipulated by laws, regulations, etc.1 related to the protection of personal information. (2)  NTT West will clearly define the purpose for collecting personal information and properly handle the personal information to the extent necessary to achieve the original purpose of data collection. Also, the company will strive to keep personal information accurate and up to date. (3)  In order to properly manage personal information, NTT West will establish clear responsibility by setting up a committee to promote the protection of personal information and will place people responsible for protecting such information in each organization. (4)  NTT West will conduct education, training, etc. for employees who are engaged in work that involves the handling of personal information, as well as provide appropriate supervision. Also, if the handling of personal information is done by outside entities on behalf of NTT West, this will be managed and supervised by such measures as concluding a nondisclosure agreement etc. to ensure that personal information is properly handled. (5)  In order to keep personal information secure, NTT West will reference various standards, guidelines, etc. and put in place the necessary safety control measures. (6)  NTT West will appropriately respond if customers have opinions, questions, etc. related to the handling of personal information at NTT West. (7)  NTT West will strive to continuously improve the management system, security control measures, and other necessary measures to promote greater protection of personal information. NTT West recognizes the importance of strictly protecting not only personal information but also information related to companies and other organizations. NTT West will appropriately handle this kind of information in the same manner as personal information. 1  Examples of laws, regulations, etc. related to the protection of personal information. • Personal Information Protection Law (Law No. 57 of 2003) • Telecommunications Business Law (Law No. 86 of 1984) • Guidelines on the Protection of Personal Information in Telecommunications Business (Ministry of Internal Affairs and Communications Bulletin No. 695 of 2004) • Guidelines on the Appropriate Handling of Personal Information by Healthcare Providers (Ministry of Health, Labor and Welfare, December 24, 2004) • Policy on Measures that Companies Must Implement to Secure the Proper Handling of Personal Information in Employment Management (Ministry of Health, Labor and Welfare Bulletin No. 259 of 2004) See here for policies related to the specific handling of personal information at hospitals operated by NTT West. (In Japanese only) 2.  Specific handling of personal information in telecommunications services etc. (1)  Purpose for collecting personal information NTT West handles personal information (personal information as defined by Article 2 of the Personal Information Protection Law, including personal data and retained personal data. Hereinafter the same meaning shall apply.)2 when telecommunications services etc.3 are provided, sold, etc. The purposes are as follows. 2  Personal information If the customer is not an individual, this includes personal information related to a company or organization's representative, official, employee, etc. handled by NTT West when telecommunications services etc. are provided, sold, etc. Hereinafter the same meaning shall apply. 3  Telecommunications services etc. Includes telecommunications services provided by NTT West as well as NTT West information equipment, and system integration and system engineering done by NTT West. Hereinafter the same meaning shall apply. [1]  The personal information below, which NTT West handles when customers order, use, or make inquiries about telecommunications services etc., will be used to the extent necessary to verify the identity of the customer, control credit, provide telecommunications services etc.,4 calculate and bill charges for telecommunications services etc., contact customers in relation to these matters, and carry out other contents of the contract, based on the contract provisions etc.5 The information will also be used to the extent necessary to introduce, propose, and consult about telecommunications services etc., carry out measures (including questionnaires) to improve the quality, customer satisfaction, etc. of telecommunications services etc., plan and develop new telecommunications services etc., control and improve facilities related to the provision of telecommunications services etc., and conduct other business related to the NTT West telecommunications services etc. Even after a customer's subscription to telecommunications services etc. is cancelled, personal information may still be used for the purposes listed above. • Name, content, and date of application, commencement, and suspension or cancellation, etc. of the telecommunications service etc. that customers apply for or use • Name, address, telephone number, e-mail address, etc. of customers • Location of the telecommunications line • Contact information for customers (name, address, telephone number, e-mail address, etc.) • Status of responses to problems, information on past problems, information on the facilities used, etc., which are necessary for responding to current problems • Name, address, telephone number, etc. for billing addresses, the financial institution account numbers and account names necessary for billing charges, credit card number and payment history, etc. • Date and time that communications are commenced and completed, length of communications, number of called party, and other data that is necessary for calculating charges • Name, title, etc. in the telephone directory listing or provided by Directory Assistance • Name, address, etc. of senders and receivers of telegrams • Items related to personal information among the information recorded on documents requested to verify the identity of customers • Other items related to personal information among the information that NTT West handles when customers apply for, use, or inquire about telecommunications services etc. 4  Provision of telecommunications services etc. Includes the commencement of telecommunications services etc. as well as maintenance (including actions for repairs), changes, relocation, suspension, cancellation, etc. Hereinafter the same meaning shall apply. 5  Contract provisions etc. Refers to contract provisions as well as usage regulations and other contracts between NTT West and the customer. Hereinafter the same meaning shall apply. [2]  The personal information below, which NTT West handles when questions, requests, etc. (including request for repairs or disclosure of personal information, etc. Hereinafter the same meaning shall apply.) are received at the NTT West Customer Consultation Center and other customer service points, will be used to the extent necessary to respond to the contents of questions and requests, as well as to the extent necessary to improve the quality of telecommunications services etc. or develop new telecommunications services etc. based on the contents of the opinions, questions, etc. of customers. • Name, address, telephone number, e-mail address, etc. of customers who submit questions or requests • Other items related to personal information in the contents of questions and requests [3]  The personal information below, which NTT West handles when customers participate in questionnaires and other surveys6 conducted by NTT West, submit entries for prizes, and join members-only programs (hereinafter referred to as "participate in questionnaires"), will be used to the extent necessary to send materials, gifts for completing questionnaires and other surveys, and prizes, improve service quality etc., develop new telecommunications services etc., and introduce, propose, and consult about NTT West telecommunications services etc. • Name, address, telephone number, e-mail address, age, date of birth, occupation, gender, etc. that customers provide when they participate in questionnaires and other surveys • Items related to personal information that customers provide when they participate in questionnaires 6  Questionnaires and other surveys Includes conducting questionnaires as well as monitoring surveys for telecommunications services etc. and surveys related to tests for developing new telecommunications services etc. [4]  Personal information that NTT West handles when carrying out work on behalf of other companies (sales, agency business, etc. for the products and services of other companies) will be used to the extent necessary to carry out the entrusted work. If work is entrusted to a party outside the company, personal information that NTT West receives will be used to the extent necessary to carry out that work. [5]  Personal information handled by NTT West may be provided to other companies to whom NTT West entrusts work based on the provisions under Article 23, Section 4 No. 1 of the Personal Information Protection Law. Also, personal information may be provided to third parties according to the provisions in NTT West contract provisions, the Personal Information Protection Law, Telecommunications Business Law, and other laws and regulations. (2)  Sharing NTT West shares personal information as indicated below to guarantee convenience for customers when they relocate outside the NTT West service area. [1]  Personal information that is shared and used Information listed above in [1] of (1) (excluding information protected by privacy of communications) [2]  Party that shares and uses the personal information Nippon Telegraph and Telephone East Corporation (hereinafter referred to as "NTT East") [3]  Purpose of sharing and use Used to the extent necessary for relocation procedures when a customer relocates to an area outside the NTT West telecommunications service area (area where telecommunications services are provided by NTT East), and for the provision of telecommunications services, billing of charges, etc. after the relocation procedure and the relocation. [4]  Party responsible for sharing and use NTT West (3)  Basic concept on security control measures NTT West will strive to appropriately carry out the measures below to securely manage personal information when such information is handled. [1]  Technical protection measures • Will strive to protect personal information from unauthorized access or disclosure, loss, or destruction by taking the appropriate measures to control access to personal information, restrict means of transfer, and protect against unauthorized access from outside the company, etc. [2]  Organizational protection measures • A person responsible for protecting personal information will be placed in each organization that handles such information, and responsibility and authority are clearly defined. • To securely manage personal information, company regulations, manuals, etc. will be established, employees who engage in work that involves handling such information will be made to comply with them, and compliance will be appropriately managed and supervised. • By properly educating and training employees engaged in work that involves the handling of personal information, the company will strive to enhance the awareness of each and every employee so that they recognize the importance of personal information and know how to properly handle such information. • If the handling of personal information is done by other outside entities on behalf of NTT West, this will be supervised by such measures as concluding a nondisclosure contract to ensure that personal information is appropriately handled. (4)  Procedure for disclosure etc. NTT West has laid out the following procedures in cases where the company receives requests (hereinafter referred to as "requests for disclosure and amendments") from customers for notification of the purpose for collecting personal information, the disclosure (hereinafter referred to as "disclosure") of personal information, or the amendment, addition, or deletion of personal information and stoppage of usage or stoppage of provision to third parties (hereinafter referred to as "amendments"). [1]  Requesting disclosure and amendments Call 116 (toll free in Japan) Hours: 9 a.m. to 5 p.m. closed December 29 - January 3 However, please call the individual contact numbers for the information indicated below. • Charges Call the number for inquiries listed on the bill or receipt. Hours: 9 a.m. to 5 p.m. (closed Weekends & Holidays) • Telephone Directory and collect calls Call 104 Hours: 24 hours a day (open all year round) • Telegrams Call 115 Hours: 8 a.m. to 10 p.m. (open all year round) [2]  Procedure for requesting disclosure and amendments (a) Procedure for disclosure • When there is a request for disclosure from a customer, NTT West will respond in writing. In this case, the customer's request for disclosure must be submitted on a form designated in advance by NTT West. • Even if there is a request for disclosure, NTT West may not disclose part or all of the information based on provisions in the Personal Information Protection Law. In this case, NTT West will inform the customer that disclosure will not be made and the reason for the decision. NTT West may not disclose the requested personal information to a representative in full or in part if the disclosure of personal information will violate the privacy of communications, or if there is concern that harm may be caused to a person's life, body, assets, or other rights and interests, etc. • Customers who want to request disclosure should contact the number shown in [1]. (See here for details on the procedure.) (b) Procedure for amendments • When there is a request for amendments from a customer, NTT West will investigate the contents of the request. In this case, the customer's request for amendments must be submitted on a form designated in advance by NTT West. • If, following the investigation, NTT West agrees that the existing personal information is not correct, or that the handling of relevant personal information is not proper, NTT will make the amendments. • Even if there is a request for amendments, NTT West may not amend part or all of the information based on the provisions in the Personal Information Protection Law. In this case, NTT West will inform the customer that the amendments will not be made and the reason for the decision. • Customers who want to request amendments should contact the number shown in [1]. (See here for details on the procedure.) [3]  Verifying identity of customer etc. • When a request for disclosure and amendment is made, documents verifying the identity of the customer, or that someone represents the customer, will be required. (See here for details on the required documents.) [4]  Handling charges etc. for the requests for disclosure • Handling charge: ¥400 (¥420 incl. tax) basic charge for each request per subscription (per telephone number etc.) and a ¥200 (¥210 incl. tax) charge for each item requested for disclosure. Please note that information regarding Multi-Line Hunt and DID (details other than simple usage status) will cost ¥2,600 (¥2,730 incl. tax). • Mailing cost: Actual cost for sending by simplified registered mail • Billing method: Added to the monthly NTT West telephone charges. (A bill will be sent each time for customers who are not an NTT West subscriber.) • Handling charges do not apply in the case of notices of the purpose for collecting personal information. See here for details on the handling charges etc. [5]  Others • Notwithstanding the content of this Privacy Policy, NTT West will send itemized reports and authenticate matters related to telephone subscription rights etc. as laid out in the contract provisions. • Notwithstanding the content of this Privacy Policy, NTT West will handle inquiries made orally by customers to 116 or other customer service contact points just as in the past. (5)  Contact point for opinions etc. regarding the handling of personal information Questions, requests, etc. regarding the handling of personal information in the provision, sales, etc. of NTT West telecommunications services etc. can be submitted to the following office: Customer Consultation Center: 0120-064337 (toll free) Hours: 9 a.m. to 5 p.m. (closed Weekends & Holidays) (6)  Qualified Personal Information Protection Organization NTT West is a member of the Zaidan Hojin Nihon Data Tsushin Kyokai (Nippon Information Communications Association), a qualified personal information protection organization. Customers who wish to express their views etc. on the way NTT West handles personal information should contact the Denki Tsushin Kojin Joho Hogo Center (Tele-communications Personal Information Protection Promotion Center) at the Nippon Information Communications Association. (in Japanese only) 3. Revisions NTT West may revise the contents of this privacy policy in full or in part as it deems appropriate. If the policy is revised, the changes will be made public by reflecting the update in the contents of this website etc. March 2005 Shinichi Otake President NTT West (Updated as of Octorber 2008) The NTT West official website is provided as a service to our customers. When customers use parts of this site (such as to shop online, fill out surveys, submit inquires, register e-mail addresses, and use other services on a voluntary basis), they may be asked to provide some personal information. The information requested from customers will be the personal information required (name, e-mail address, telephone number, and postal address) to provide information about NTT West services. Customers may be asked for other information for the purpose of improving customer service. But in such cases, customers will be able to choose what information they want to provide, apart from the minimum required data. NTT West will not alter the requested information without the prior consent of the customer. Please understand that requested information may be provided to third parties depending on the type of service on the website. (For instance, NTT West may provide a customer's name and address to a delivery company). NTT West takes the necessary measures, within reason, to ensure the privacy of customers who visit the company website. Depending on the website service, customers may be asked to provide highly confidential information (such as Web money or credit card numbers). In cases such as those, NTT West uses encryption and other methods to protect the information. NTT West may revise the aforementioned policies and in such cases will announce all changes on this website. Cookies and web beacons This website uses cookies and web beacons. Those increase convenience for you when you visit the NTT West official website again. They also allow NTT West to identify access trends that NTT West may provide a more easy-to-use website. They do not invade the customer's privacy, nor do they have an adverse effect on the customer's computer. The customer can set Internet viewing software (browser) to reject cookies. However, that may result in the customer being unable to properly view or use some features on the site such as service applications, online shopping, questionnaires, inquiries, and registering to receive notices by e-mail. Please inquire with the browser producer for instructions on how to make settings. Using SSL (Secure Sockets Layer) This website uses encrypted communications with SSL (Secure Sockets Layer) for the secure exchange of personal information and other data that requires protection. Information passed between the NTT West website and the customer's browser is protected by the use of SSL technology. Customers are not required to make special settings on their side to use SSL. As long as customers use a browser that supports SSL, such as Microsoft Internet Explorer and Netscape Navigator, at normal settings, SSL will be used automatically whenever necessary. Please note that if the SSL setting for a customer's browser is not enabled, or the browser does not support SSL, the relevant website will not be displayed and data input is not possible. Guarantees and limits of liability Customers who use the NTT West official website do so at their own responsibility. NTT West assumes no responsibility whatsoever for any and all damages arising from the use of information taken from this website or that of any site linked to this website. Applicable laws The NTT West official website is managed by NTT West. Although the website can be accessed from countries around the world, all with differing laws, both customers who have accessed the website and NTT West agree that the use of this website is bounded by the laws of Japan regardless in the differences in applicable legal principles. NTT West provides no indication on the website of the suitability of the content for the particular environment of customers. Access to this website is by the free will of the customer, and responsibility regarding the use of the website lies with them.