Personal Information Protection Policy

Basic Policy on the Handling of Personal Information

• Personal information held by TOTANI will be used by us.
• The purpose of use of personal information will be specified and notified to the individual at the time of acquisition.
• The scope of users of personal information will be notified to the individual, and consent will be obtained as necessary.
• An appropriate management system will be established to prevent leakage of personal information.
• Personal information will not be used beyond the scope of the stated purpose of use.
• Personal information will not be obtained by improper means.

Purpose of Use of Personal Information

TOTANI uses personal information obtained through the PSIRT contact point for the purpose of receiving vulnerability information concerning products, confirming and investigating the content, providing responses, and informing reporters of the status of our response.

Specific Purposes of Use

• Receiving and confirming the content of reported vulnerability information
• Making inquiries regarding reported content and confirming additional information
• Providing information on investigation results, response status, and countermeasures related to vulnerabilities
• Internal use to the extent necessary for vulnerability response
• Analysis for improving the security of future products and services

Security Management Measures on the Website

• TOTANI manages and stores personal information under a strict management system and strives to strengthen security in order to prevent loss, destruction, alteration, or leakage of personal information to third parties.
• When personal information is provided, TOTANI strives to ensure security within a reasonable scope, including encryption of communications using SSL (Secure Sockets Layer), in preparation for unauthorized access by third parties.
• TOTANI implements reasonable security measures, but in the event that damage is caused to the individual or a third party by unauthorized access or other means that exceed such measures, TOTANI may not be held liable.