Handling of Personal Information
National Supermarket Association of Japan (hereinafter referred to as “NSAJ”) will promote the protection of personal information by establishing the following personal information protection policy, building a system for protecting personal information, ensuring that all employees recognize the importance of protecting personal information, and thoroughly implementing these measures.
Article 1 (Personal Information)
The term “personal information” shall mean “personal information” as defined in the Act on the Protection of Personal Information (Act No. 57 of 2003, hereinafter referred to as the “Personal Information Protection Act”). “Personal information” means information about a living individual that can identify the specific individual by name, date of birth, or other description, etc., or that contains a personal identification code, and includes information that can be cross-checked with other information to identify the individual.
Article 2 (Acquisition and Use of Personal Information)
NSAJ will acquire and use your personal information to the extent necessary for the following purposes. If we use your personal information beyond the scope of the following purposes, we will obtain your prior consent in an appropriate manner.
(1) To provide the following services of NSAJ (hereinafter collectively referred to as “the Service”)
(a) Public relations and publication services
(b) Member support services
(c) Certification and education services
(d) Exhibition business
(e) Business matching-related business
(2) To improve and enhance the Services or develop new services
(3) To provide information on new features, updates, campaigns, etc. of the Service and other services provided by NSAJ (including sending e-mails, flyers, and other direct mailings)
(4) To contact users as necessary for maintenance, important notices, etc.
(5) To respond to inquiries from users regarding the Service (including to confirm the identity of the user)
(6) To report to users on the use of the Service
(7) To request cooperation for questionnaires, interviews, etc. related to the Service, to request participation in various events, or to report the results of such events, etc.
(8) To investigate and analyze the usage history of the Service, and to use the results for the improvement and development of the Service and the distribution of advertisements
Article 3 (Management and Protection of Personal Information)
Personal information shall be strictly managed and shall not be disclosed or provided to any third party without the consent of the individual, except in the following cases. In addition, in consideration of safety, we will take measures to prevent and correct risks such as unauthorized access to personal information, loss, destruction, falsification, and leakage of personal information.
(1) Cases in which it is necessary for the protection of a person’s life, body, or property, and it is difficult to obtain the consent of the person
(2) Cases in which the handling of personal information is particularly necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the person
(3) Cases in which the handling of personal information is necessary for cooperating with a state organ, a local government, or an individual or entity entrusted by either a state organ or local government to execute affairs prescribed by law, and in which obtaining the consent of the person is likely to impede the execution of the affairs concerned
(4) Cases in which the handling of personal information is outsourced in whole or in part within the scope necessary to achieve the purpose of use, in order to facilitate the smooth execution of business
(5) Cases in which personal information is provided as a result of the succession of business due to merger or other reasons
(6) Cases in which personal information is used jointly with a specific person, and in which this fact, the items of personal information jointly used, the scope of the joint users, the purpose of use by the user, and the name of the person responsible for the management of the personal information is notified to the person in advance, or in which the person in question is made readily accessible
(7) Other cases permitted by law
Article 4 (Entrustment of Handling of Personal Information)
NSAJ may entrust the handling of personal information, in whole or in part, within the scope necessary to achieve the purpose of use. In such cases, NSAJ will thoroughly examine the eligibility of the consignee, stipulate confidentiality obligations in the contract, and exercise necessary and appropriate supervision over the consignee. In addition, NSAJ may share all or part of the acquired personal information in accordance with the provisions of the Personal Information Protection Act.
Article 5 (Disclosure of Personal Information)
If the individual requests disclosure of personal information (including records of personal data provided to third parties or received from third parties (hereinafter referred to as “records of provision to third parties”)), NSAJ will disclose such information to the individual without delay. However, if the disclosure falls under any of the following cases, NSAJ may decide not to disclose all or part of the personal data, and if NSAJ decides not to disclose the personal data, it will notify the individual to that effect without delay.
(1) If there is a risk of harm to the life, body, property, or other rights or interests of the person concerned or a third party
(2) If there is a risk of a significant hindrance to the proper conduct of NSAJ’s business
(3) In any other case that would violate laws and regulations
Article 6 (Correction and Deletion of Personal Information)
1. If personal information held by NSAJ is incorrect, NSAJ will correct or delete the personal information at the request of the person in question in accordance with the procedures established by NSAJ.
2. If NSAJ receives a request from the person in question as described in the preceding paragraph and deems it necessary to respond to the request, NSAJ will correct or delete the relevant personal information without delay and notify the person in question of such correction or deletion.
Article 7 (Suspension of Use of Personal Information, etc.)
In the event that NSAJ receives a request to cease use of or delete personal information (hereinafter referred to as “cease of use, etc.”) on the grounds that the information is being handled beyond the scope of the purposes for which it was used or that the information was obtained by wrongful means, NSAJ will conduct the necessary investigation without delay, and based on the results, will cease use of the information and notify the person to that effect. However, in cases where it is difficult to suspend the use of personal information due to the large amount of costs involved or other reasons, and alternative measures necessary to protect the rights and interests of the person concerned can be taken, NSAJ will take such alternative measures.
Article 8 (Disclosure, Correction and Deletion of Personal Information)
The person in question shall make the request to NSAJ. Please submit a copy of photo identification (driver’s license, passport, personal number card, residence card, special permanent resident certificate, etc.) to confirm your identity.
If the principal is a minor or an adult ward and his/her legal representative applies for disclosure, etc., he/she should directly present the representative’s certificate with a photograph of his/her face (Driver’s license, passport, personal number card, residence card, special permanent resident certificate, etc.) and documents that prove his/her status as a legal representative, such as a copy of his/her family register, an extract of his/her family register, and a family court certificate (Only those made within 30 days. A photocopy is not acceptable.).
When the voluntary agent of the principal applies for disclosure, etc., please present a certificate with a photograph of the principal’s face (Driver’s license, passport, personal number card, residence card, special permanent resident certificate, etc.), a power of attorney certifying the qualifications of the voluntary agent (Only those made within 30 days. A photocopy is not acceptable), and a copy of the seal registration certificate of the principal (Only those made within 30 days. A photocopy is not acceptable) or the certificate with a photograph of the principal’s face (Driver’s license, passport, personal number card, residence card, special permanent resident certificate, etc.).
Article 10 (Compliance with Laws and Regulations)
NSAJ shall comply with Japanese laws, regulations, and other norms applicable to personal information in its possession.
Article 11 (Response to Complaints and Consultations)
NSAJ will receive complaints and consultations from individuals regarding the handling of their personal information, and will respond to such complaints and consultations appropriately and promptly. NSAJ will also respond promptly and appropriately to requests from the person in question to disclose, correct, add to, delete, or deny the use or provision of the relevant personal information.
Article 12 (Contact for Inquiries)
Inquiries regarding the handling of personal information by NSAJ should be directed to the following address. For the name, address, and name of the representative of the business handling personal information, please click here.
National Supermarket Association of Japan
Sakurai Building, 3-19-8 Uchikanda, Chiyoda-ku, Tokyo 101-0047
Enacted and enforced on October 1, 2022