Privacy Policy

Policy on the Protection of Personal Information

NTT Advanced Technology Corporation, as a Value Partner that constantly evolves with its customers, provides ICT (Information and Communication Technology) services and products, and solves various problems for society and customers through “Clearing the way for the future and moving it in a big way by multiplying the strength and technology.” In order to realize a fulfilling and healthy advanced information communication society, we have adopted this Policy on the Protection of Personal Information based on the philosophy of respect for individuality. Therefore we strive to protect personal information appropriately. Please take note that this policy does not cover “Individual Numbers” and “Specific Personal Information” under the “Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures” of Japan.

We will collect, use and provide Personal Information appropriately.
1. When we collect personal information, we will clearly define the purpose of use of Personal Information, and conduct collection by lawful and fair means to the extent necessary to achieve the defined purpose.
2. Use and provision of Personal Information will be conducted within the scope of the predetermined purpose of use, in compliance with regulations under the Act on the Protection of Personal Information.
We will manage Personal Information safely and appropriately, take necessary and appropriate measures to prevent unauthorized access to Personal Information, as well as loss, destruction, falsification or leakage of Personal Information, and make further improvements.
We will comply with the laws, regulations, guidelines established by the government and other standards concerning the handling and protection of Personal Information.
We will respond appropriately to complaints and inquiries about the protection of Personal Information.
In order to ensure the protection of Personal Information, we will develop and operate a Personal Information protection management system and improve the system on an ongoing basis.

Enacted　January 1, 2005
Revised July 13, 2021
NTT Advanced Technology Corporation
President
George Kimura

Privacy Statement

NTT Advanced Technology Corporation (hereinafter referred to as the “Company”) publish this Privacy Statement in accordance with the Act on the Protection of Personal Information of Japan. Please take note that this Privacy Statement does not cover “Individual Numbers” and “Specific Personal Information” under the “Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures” of Japan, unless otherwise specified.

1. Purpose of Use of Personal Information

Business activities of the Company are as follows.

Total Solution Business
Systems integration, network integration, and related software and service developments, etc.
Smart Community Business
Town development, disaster prevention, smart energy, and related software and service developments, etc.
Security Business
Security services, maintenance, and sales of related products, etc.
Cloud and IoT Business
Cloud and IoT services, maintenance, and sales of related products, etc.
AI x Robotics
RPA, etc.
Global Business
Network and media application products and their maintenance, optical product and development, cutting edge material development and analysis, environment management, etc.
Intellectual Property Business
IPR (patent and trademark) research, analysis, management, and training, etc.

(1) Purpose of use when acquiring Parsonal Information directly through documents, e-mail or website, etc.

Purpose of delivering products and services to customers, and the purpose of informing customers about after-sales services, product upgrades, the latest information, and new services in the above business.
Purpose of answering to customer inquiries, delivering services such as product introductions, information of exhibitions and seminars.
Purpose of distributing e-mail magazines
Purpose of use for recruitment activities

In the event if Parsonal Information is acquired directly through document or otherwise for a purpose other than the above, the purpose of use shall be clearly indicated on a case-by-case basis.

(2) Purpose of use when acquiring personal information by means other than such stated in (1) above

Purpose of delivering products and services to customers and the purpose of informing customers about after-sales services, product upgrades, the latest information, and new services in the above business.
Purpose of ensuring security of the Company and the purpose of managing visitors and purpose of visits by using images obtained with security cameras.
Purpose of accurately identifying customer inquiries by recording the contents of calls at the Product Inquiry Center.
Purpose of handling personal information in connection with the execution of entrusted business.
Purpose of responding to inquiries from customers, introducing products and services, and providing information on exhibitions and seminars, etc., in the event that applicant information, such as information of applicant of seminars sponsored by other companies , are provided.

2. Personal Information to be Shared

In the event of joint use of Personal Information held by the Company with a specific party, the following matters shall be notified to the customer in advance.

Joint use of personal information
Items of Personal Information to be jointly used
Scope of joint users
Purpose of use by joint users
The name of the person or party who is responsible for the management of the Personal Information to be used jointly.

3. Provision of Personal Information to a Third Party

The Company will properly manage the Personal Information in our possession and will not provide it to any third party without obtaining the prior consent of the customer. Provided, however, that the following cases shall be excluded:

Cases based on laws and regulations.
Cases in which there is a need to protect a human life, body or fortune, and when it is difficult to obtain the consent of the person.
Cases in which there is a special need to enhance public hygiene or promote fostering healthy children, and when it is difficult to obtain the consent of the person.
Cases in which there is a need to cooperate in regard to a central government organization or a local government, or a person entrusted by them performing affairs prescribed by laws and regulations, and when there is a possibility that obtaining the consent of the person would interfere with the performance of the said affairs.

4. Procedures for Disclosure of Personal Information

Personal Information and Specific Personal Information held by the Company that is subject to disclose, that is subject to correction (correction, addition, or deletion), or that is subject to suspension of use (suspension of use, deletion, or discontinuation of provision to a third party) under the Act on the Protection of Personal Information, shall be disclosed, corrected, or suspended of use (hereinafter referred to as “Disclosure, etc.”) upon the request of the person or his or her agent.

(1) Documents required for requests for Disclosure, etc.

When requesting Disclosure, etc., please download the following requesting document, complete all the required information, enclose the required documents, and send them by mail to the mailing address stated in (2) below.

Request for Disclosure of Personal Information
Request for Correction of Personal Information
Request for Suspension of Use of Personal Information, etc.

(2) Mailing address

NTT Advanced Technology Corporation
Information Security Department Executive ManagerTokyo Opera City Tower, 3-20-2,Nishi-shinjuku, Shinjuku-ku, Tokyo, 163-1436, Japan

(3) Fees

A charge of 1,000 JPY (tax excluded) will be received for each request for disclosure of personal information.
Requests for correction of personal information and requests for suspension of use of personal information shall be made free of charge.

(4) Method of Answering Requests for Disclosure, etc.

A written reply will be mailed to the address of the person indicated on the requesting document. When requested by an agent, it will be mailed to the address of the agent.

(5) Handling of Personal Information Acquired in Relation to a Request for Disclosure, etc.

Personal information acquired in relation to a request for Disclosure, etc. shall be handled only to the extent necessary for the purpose of meeting a request for Disclosure, etc. Documents submitted shall be retained and disposed of for two years from the end of the fiscal year (April to March following) in which the response is completed.

(6) Events of Failure to Meet Requests for Disclosure, etc.

In the following cases, the Company may not comply with requests for disclosure, etc.

Cases where the identity cannot be appropriately verified, due to the inconsistency of the address stated in the requesting document, the address stated in the identification document, or the registered address to the Company.
Cases where the power of attorney cannot be confirmed, in cases of request by an agent.
Cases where prescribed necessary documents are defective.
Cases where the request for Disclosure, etc. does not satisfy the requirements of the Act on the Protection of Personal Information.
Cases where Disclosure, etc. is deemed unnecessary pursuant to the provisions of the Act on the Protection of Personal Information.

5. Contact Point for Inquiries about the Handling of Personal Information and the Party to whom Complaints are Filed

(1) If you have an inquiry about the handling of Personal Information and Specific Personal Information of the Company, please contact the following by telephone or by mail. We would appreciate your understanding as we are unable to accept your offer to visit the Company directly.

Contact point:

Executive Manager
Information Security Department
NTT Advanced Technology Corporation

Tokyo Opera City Tower, 3-20-2,
Nishi-shinjuku, Shinjuku-ku, Tokyo, 163-1436, Japan

Inquiry form regarding Privacy Policy

* Please refer to “4. Procedures for Disclosure of Personal Information” for disclosure procedures.

(2) The “Accredited Personal Information Protection Organization” Dealing with Complaints against the Company is as Followed.

Accredited Personal Information Protection OrganizationPersonal Information Protection Consultation Service Office (JIPDEC)
Contact point
JIPDEC
Personal Information Protection Consultation Service Office
Roppongi First Building, 1-9-9 Roppongi, Minato-ku, Tokyo, 106-0032, Japan
Tel: +81 3-5860-7565
Toll free number: 0120-700-779 (calls from within Japan only)

6. About using Our Website

(1) Collection of Personally Identifiable Information

When using NTT Advanced Technology website (hereinafter referred to as “Our Website”), you may be requested to provide personally identifiable information (hereinafter referred to as “PII”) to Our Website. PII here includes your name, home address, email address, telephone number, and so on. It is up to you to decide whether to provide PII to Our Website or not. However, if you deny providing some kind of PII, you may not be able to view certain promotional or merchandise information.

(2) Collection of Non-Personally Identifiable Information

When using Our Website, you may be requested to provide information that is not personally identifiable (Non-Personally Identifiable Information). For example, your age, occupation, zip code, taste/habit information, behavioral tendency, and so on. This information includes the type of browser and operating system you are using, the domain name of the original site when you link into Our Website, and the order in which you browse Our Website.

(3) Cookie, etc.

We collect access logs using Cookie as well as Personal Information in order to grasp customer usage trends and measure the effectiveness of advertising. In addition to the accessed URLs, items such as IP addresses, web browser types, domain names, etc. are collected as the access logs. In addition, the user’s action history may be obtained when the user clicks on a URL or the like written in the email, or when the user clicks on image data.

(4) Obtaining Information from Google Analytics

Our Website uses Google Analytics, a service provided by Google, to monitor accesses to Our Website. Google Analytics uses Cookie to gather access-information. This access-information is gathered anonymously and does not identify an individual. Please refer to the terms of service and privacy policy of Google Analytics for more information.

If you want to disable Google Analytics gathering, you can opt-out by using Google Analytics Opt-out Browser Add-on provided by Google.

Google Analytics Opt-out Browser Add-on

7. Processing of Resident Data in EEAs (GDPR Privacy Policy)

The Company process personal data of customers to whom those regulations apply in accordance with the General Data Protection Regulation 2016/679 (hereinafter referred to as “GDPR”) and the applicable EU and EU/EEA Member states’ regulations on data protection (hereinafter referred to as “Users”). This policy explains how the Company, as the data controller, process personal data of Users.

(1) Protection and Management of Personal Data

The Company collects personal data such as the IP address of Users to the extent necessary for the smooth operation of the services provided at Our Website (providing information on Our Website, accepting User’s inquiries on products and services of the Company, etc.). We process personal data in a lawful and fair manner.

(2) Personal Data to be Collected

The Company collects the following personal data concerning Users.

Access log to Our Website (IP address, browsing behavior, etc.)
Information entered to Our Website (name, email address, and other registration information) on the product inquiry reception form, etc.
Information related to opinions and inquiries (name, email address, and other registration information) when Users entered opinions or inquiries to Our Website.

(3) Legal Bases for Processing / Purposes of Processing Personal Data

The Company processes personal data of Users in accordance with the GDPR and data protection laws of EEA member states. In principle, the Company will process personal data based on the following legal bases for each purposes of processing:

the Company obtain and process the following categories of Users’ personal data for the following purposes because it is necessary to do so in order to pursue our legitimate interests.

Purposes of processing	Categories of personal data
For access analysis in Our Website and for security measures of the server on which Our Website is operated	Access logs to Our Website (IP address, browsing behavior, etc.)
To respond to the comments (product inquiry, etc.) entered to Our Website	Information entered to Our Website (name, email address, and other registration information) on the product inquiry reception form, etc.
To respond to opinions and inquiries entered to Our Website	Information related to opinions and inquiries (name, email address, and other registration information) when Users entered opinions or inquiries to Our Website.

the Company obtains and processes the following categories of Users’ personal data for the following purposes because it is necessary to do so in order to perform contractual obligations to provide products/services to Users.

Purposes of processing	Categories of personal data
To respond to the comments (product inquiry, etc.) entered to Our Website	Information entered to Our Website (name, email address, and other registration information) on the product inquiry reception form, etc.
To respond to opinions and inquiries entered to Our Website	Information related to opinions and inquiries (name, email address, and other registration information) when Users entered opinions or inquiries to Our Website.

The Company obtain and process the following categories of Users’ personal data for the following purposes because it is necessary to do so in order to comply with legal obligations we are subject to.

Purposes of processing	Categories of personal data
To respond to the comments (product inquiry, etc.) entered to Our Website	Information entered to Our Website (name, email address, and other registration information) on the product inquiry reception form, etc.
To respond to opinions and inquiries entered to Our Website	Information related to opinions and inquiries (name, email address, and other registration information) when Users entered opinions or inquiries to Our Website.

(4) Refusal to Provide Your Personal Data

When viewing Our Website, it is necessary to provide Users’ personal data to a certain extent. If personal data cannot be provided, Users may not be able to receive all or part of our services.

(5) Transfer of Personal Data

In order to achieve the objects described in this Privacy Statement, the Company may share and disclose Users’ personal data to the Company’s affiliates and third parties in accordance with the GDPR.
In compliance with EU and EU/EEA member states’ laws and regulations, personal data may be shared and disclosed to the parties to whom ordered by such laws and regulations and to the parties to whom we reasonably deem it necessary.
In the event of a merger, reorganization, acquisition, joint venture, transfer, division, assignment or sale or disposition of all or any part of our business (including in connection with bankruptcy or other similar proceedings), the Company may transfer all relevant personal data to third parties.
The Company may disclose personal data if we determine that disclosure is reasonably necessary for the protection of rights of Our Company, the pursuit of possible remedies, the investigation of misconduct, or the protection of Users or of business of the Company.

(6) Transfer of Personal Data to Third Countries outside the EU

All personal data processed by the Company to achieve the objects set forth in this Privacy Statement are transferred to and stored in Japan.

(7) Retention Period for Personal Data

We retain Users’ personal data for up to five years.

(8) Rights of Users

With respect to personal data processed by the Company, Users have the following rights.
Right of access by Users (Article 15 of the GDPR)
Users shall have the right to obtain from the Company confirmation as to whether or not personal data concerning Users are being processed, and, where that is the case, access to the personal data and certain related information.
Right to rectification and erasure (Articles 16 and 17 of the GDPR)
Users shall have the right to obtain from the Company without undue delay the rectification of inaccurate personal data concerning Users, and Users shall have the right to have incomplete personal data completed. Users also have the right to obtain from the Company the erasure of personal data concerning Users without undue delay, if certain requirements are met.
Right to restriction of processing (Article 18 of the GDPR)
Users shall have the right to obtain from the Company restriction of processing of personal data, if certain requirements are met.
Right to object (Article 21 of the GDPR)
Users shall have the right to object to processing of personal data concerning Users, if certain requirements are met.
Rights to data portability (Article 20 of the GDPR)
Users shall have the right to receive the personal data concerning Users, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Company , if certain requirements are met.
Rights not to be subject to automated individual decision-making (Article 22 of the GDPR)
Users shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning Users or similarly significantly affect Users, if certain requirements are met.
Where processing is based on consent, Users shall have the right to withdraw consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. (Article 7(3) of the GDPR)
If the user is a child below the age of 16, the consent must be given by the holder of parental responsibility over the child. (Article 8 of GDPR)
Users shall have the right to lodge a complaint with a supervisory authority on the processing of personal data relating to Users by the Company. (Article 77 of the GDPR)

(9) Changes to this Privacy Statement

The Company may change this Privacy Statement from time to time. In the event of a substantial or material change, The Company will inform Users through Our Website, or by email notification to Users if necessary.

(10) Contact Point

For questions or inquiries regarding this policy, please contact: