Policy

As a company that provides products used in medical care and medication dispensing, TOSHO Inc. recognizes the importance of proper handling of personal information in compliance with laws related to the protection of personal information (Act No. 57, Act on the Protection of Personal Information, 2003) in business operations. TOSHO seeks to protect personal information based on the following policy.

1. Compliance with relevant laws, regulations, and other rules, etc.TOSHO shall comply with relevant laws, regulations, and other rules, utilizing the ISMS (Information Security Management System) framework, and establishes mechanisms for the protection and proper handling of personal information. TOSHO shall also take the necessary and appropriate measures, such as establishing an implementation system for safety control.

2. Acquisition and Use of Personal InformationPersonal information shall be acquired by the proper means, including informing in advance the objective behind the use of such personal information, and use of such personal information within the scope required to achieve said objective.

3. Proper Management of Personal InformationTOSHO shall properly manage personal information, and take the necessary and proper measures for safety control to prevent and correct risks, such as unauthorized access, loss, destruction, alteration, leaks, etc. of personal information. In addition, the necessary and appropriate supervision of employees and contractors who handle personal information shall be carried out.

4. Complaints and Consultation CounterIn the event an individual requests disclosure, correction, use suspension, or deletion, etc. of his/her personal information, TOSHO shall promptly comply with the request after confirming the identity of the person according to the specified procedures. Furthermore, any complaints or consultations from the concerned individual regarding the handling of personal information shall be promptly and properly handled.

Disclosures related to the Protection of Personal Information

Purpose of Use of Personal Information
Personal information acquired by TOSHO shall be used within the scope of the following purposes. In cases where the purpose of use of the personal information is individually notified and indicated at the time of acquisition, then such purpose of use shall apply. In cases where such personal information is used beyond the scope of the following purposes, consent from the concerned individual shall be obtained in advance in an appropriate manner.

1. Acquisition and Use/Purpose of Use of Personal Information

1) Personal information obtained from customers
① Personal information provided by our customers from questionnaires during exhibitions or obtained at our showrooms shall be used to provide a wide range of information regarding our products and services to our customers.
② Personal information provided from customers while implementing work entrusted by the customer shall be used within the scope of the purpose of the work implemented.
③ The personal information you enter into the inquiry form on our website will be used for the purpose of responding to your inquiry and addressing your requests. Additionally, we may use the collected personal information (such as your email address) to send you information regarding our services and email newsletters. If you do not wish to receive these communications, you can unsubscribe at any time by following the instructions provided in each email.
2) Personal information of applicants for employment acquired during recruitment activitiesPersonal information acquired during recruitment activities shall be used to contact applicants (as well as to provide information regarding interview times, interview results, etc.) and as reference material.
3) Personal information provided by our customersAs a general rule, personal information provided by our customers shall not be recorded on equipment, systems, etc. Only in cases where instructions and approval from the customer have been obtained, shall personal information be used within the said scope after clearly identifying the purpose of use based on Company rules.
Also, safety control is carried out to prevent leak, destruction or damage of information. Once the purpose has been achieved, the information shall be immediately destroyed or returned.
4) Published personal informationPersonal information published on our website, etc. shall be used for business purposes such as providing guidance on our products and services.

2. Sharing Personal InformationAcquired personal information may be shared with our group companies. In such cases, TOSHO shall be responsible for the management of the personal information.

1) Personal information items that are sharedFull name, affiliation information (company name, department etc.), address, telephone number, email address.
2) Purpose of sharing personal informationPersonal information of our employees, personal information of employment applicants, etc. collected during recruitment activities shall be used to achieve the purpose as notified or announced at the time of information collection.
3) Scope of joint usersTOSHO Holdings Inc.
3-8-8 Higashi-Kojiya, Ohta-ku, Tokyo
4) Acquisition methodDocuments, electronic data, etc.

3. Management of Personal Information and Safety Control Measures

1) Personal information shall not be disclosed or provided to a third party without the consent of the concerned individual, except in the following cases.
① In cases where handling of personal information is based on laws and regulations
② In cases where personal information is needed for the protection of life, physical body or wealth of the individual and obtaining consent from the concerned individual is difficult
③ In cases where cooperation with a national or local government organization and/or organizations/individuals entrusted by such in order to carry out work stipulated by laws and regulations and consent from the concerned individual may hinder execution of said work
2) Regarding safety control of personal information, TOSHO shall comply with the relevant laws and regulations and other norms related to the protection of personal information, properly manage and prevent unauthorized access, loss, destruction, alteration, leak etc. of such personal information, and take any other necessary and appropriate safety control measures.

4. Entrusting the Handling of Personal InformationTOSHO may entrust, either in full or in part, the handling of personal information within the scope needed to achieve the purpose of use of such personal information. In such cases, TOSHO shall thoroughly review the eligibility of the contractor, stipulate confidentiality obligations in the contract, and supervise the contractor as necessary and appropriate.

5. Disclosure of Personal InformationWhen an individual requests disclosure of his/her personal information, in accordance with the Act on the Protection of Personal Information, confirmation that such request has been made by either the concerned individual or his/her representative shall be carried out, after which prompt disclosure of requested information shall be provided to the concerned individual (in cases where such personal information does not exist, notification to that effect shall be provided). Notwithstanding, this shall not apply in cases where disclosure is not mandated under the Act on the Protection of Personal Information and other laws and regulations. In addition, please note that a handling fee (1,000 yen per item) shall be charged for the disclosure of personal information.

6. Correction, Use Suspension, etc. of Personal Information

1) When an individual requests correction of personal information details in accordance with the Act on the Protection of Personal Information, and excluding cases where special procedures have been set in accordance with the stipulations of other laws and regulations, and after confirmation that such request has been made by the concerned individual, the necessary review shall be promptly carried out. Based on the results of the review, either correction or suspension of the use of the personal information shall be determined and the concerned individual shall be duly notified.
2) When an individual requests use suspension or deletion (hereinafter referred to as “use suspension, etc.”) of personal information, with the reason that such personal information has been handled beyond the scope of the purpose use announced in advance or that such personal information has been obtained through fraudulent means, the necessary review shall be promptly carried out. Based on the results of the review, TOSHO shall implement use suspension, etc. of personal information and notify the said individual of such effect. Notwithstanding, in cases where use suspension, etc. of the personal information will incur a large expense or use suspension, etc. of the personal information is difficult to implement, and alternative measures which can protect the rights and interests of such individual are available, then such alternative measures may be implemented.

7. CookiesIn some cases, cookies are used to improve our website. Cookies are not used to collect personal information from customers or to track and identify individuals.

8. Additional InformationThe contents of this policy shall be reviewed as needed to respond to changes in the laws, regulations and other rules. In an effort to implement such improvements, this policy is subject to change without notice.

9. Inquiry DeskRegarding any comments, questions, complaints, and inquires related to handling of personal information, please contact us at the following address or by telephone.

【[Inquiry desk]
TOSHO Inc. Personal Information Desk
Address: 3-8-8 Higashi-Kojiya, Ohta-ku, Tokyo
Telephone: +81-3-3745-0790
Reception Hours: Working days 09:00 to 17:00

TOSHO is engaged in the business of selling equipment and facilities to hospitals and pharmacies in Japan and overseas.Ensuring the security of information handled through each business is an indispensable requirement for customers to use our products and various services with peace of mind. Based on the recognition that this is one of the most important requirements in management and business, we have established the following policy and information security management system, and we steadily implement information security management accordingly.

1. Commitment to information security

TOSHO recognizes that ensuring information security is one of the most important management requirements and a corporate social responsibility, and each and every person involved in our company’s operations is committed to it.

2. Protection of information assets

To ensure the protection of information assets from threats to their confidentiality, integrity and availability, we implement appropriate control measures in accordance with the actual conditions of each business.

3. Compliance with laws and regulations

We comply with relevant laws and regulations, other rules, and contract requirements in order to ensure information security.

4. Education and training

We provide education and training to improve the awareness of information security among those involved in our businesses and to ensure that all are familiar with our information security policy.

5. Prevention and response to security incidents

Through the operation of an information security management system, each and every one of us at TOSHO strives to prevent the occurrence of information security incidents.In the unlikely event of an incident, we will promptly take appropriate action, including measures to prevent recurrence.

6. Audits

We periodically audit the operational status of our information security management system and take measures to improve it as necessary to ensure information security.

7. Continuous improvement of our information security management system

We strive to constantly improve our information security management system in order to ensure ongoing enhancement of information security. To this end, we set information security goals every year, define and plan activities to achieve these goals, and review the implementation results.In addition, we periodically evaluate and review our Basic Information Security Policy and related internal rules and management systems.

Our company is in the business of selling equipment and facilities for hospitals and pharmacies in Japan and overseas.
In this business activity, we will continuously maintain and improve our environmental management system to protect the global environment.
To promote this, we have established the following policies.

• 1. We will comply with environmental laws, regulations, ordinances, agreements, and other requirements, and work to reduce our environmental impact and prevent environmental pollution.
• 2. We will promote the development of individual qualities and capabilities. As a result, we will create a strong organization and enable the continuous hiring and retention of human resources.
• 3. We will familiarize all of our employees with this policy through environmental education and awareness activities, and we will raise employees’ environmental conservation awareness, and actively contribute to local environmental protection activities.
• 4. We will promote waste reduction, proper disposal, and recycling.
• 5. We will work to continuously improve our environmental preservation activities by setting and regularly reviewing environmental targets.