Privacy Policy

Basic Policy on the Proper Handling of Personal Information

Open Source Utilized Silicon Initiatives (hereinafter referred to as “the Organization”) hereby establishes this basic policy to ensure the proper handling of personal data based on the Act on the Protection of Personal Information (“APPI”).

1. Name, Address, and Representative of the Organization

Name: non-profit organization OpenSUSI

Address: 1-1-1 Nishishimbashi, Minato-ku, Tokyo 105-0003, Japan

Representative Director: Junichi Okamura

2. Compliance with Applicable Laws and Guidelines

The Organization shall comply with the APPI and other relevant laws and regulations, as well as with government-issued guidelines, including the Guidelines on the Act on the Protection of Personal Information (General Rules Edition), to ensure the proper handling of personal data.

3. Acquisition and Use of Personal Information

The Organization acquires and uses personal information lawfully and appropriately.

4. Purpose of Use of Personal Information

The Organization uses acquired personal information for the purposes outlined below. Except where consent has been obtained from the individual or permitted by law, such information shall not be used for purposes beyond those specified. In some cases, additional purposes may be separately announced or notified.

(1) Personal information of customers:

To provide customers with necessary information when the Organization invests in private companies utilizing R&D outcomes.
To conduct communications related to business execution, negotiations, and other related matters.
To exercise rights or fulfill obligations based on contracts or laws, and to communicate as needed.
To respond to inquiries, consultations, or requests, and for confirmation or recordkeeping.
To manage customer information and ensure the smooth execution of transactions or contracts.

(2) Personal information of job applicants (including interns):

To provide information, make contact, and issue notifications.
To conduct hiring procedures and legal verifications.
To retain applicant information for HR purposes if the applicant is hired.

5. Provision of Personal Information to Third Parties

The Organization will not provide personal data to third parties without the individual's consent, except where permitted by law.

6. Joint Use of Personal Data

The Organization may jointly use personal data as follows:

(1) Items of personal data subject to joint use:

Name, address, telephone number, fax number, email address, place of employment, department, position, inquiry and transaction details

(2) Scope of joint users:

AIST Solutions Co.

(3) Purpose of use:

As described in section 4.(1)

(4) Entity responsible for managing jointly used data:

The party initially collecting the data shall be responsible for managing it.

Name: non-profit organization OpenSUSI

Address: 1-1-1 Nishishimbashi, Minato-ku, Tokyo 105-0003, Japan

Representative Director: Junichi Okamura

7. Measures for the Security Management of Personal Data

The Organization takes necessary and appropriate security measures to prevent personal data leakage, loss, or damage. It also exercises appropriate supervision over employees and contractors who handle personal data. Details are specified in internal regulations such as the Personal Information Handling Rules, and include:

(1) Establishment of basic policy:

This policy sets out compliance with relevant laws, safety measures, and procedures for responding to inquiries and complaints to ensure proper handling.

(2) Establishment of rules for handling personal data:

The Organization has established internal regulations that outline procedures and responsibilities for data collection, use, storage, provision, deletion, and disposal.

(3) Organizational security measures:

A responsible officer is appointed to manage personal data. Data handling roles and scope are clearly defined. A reporting structure is in place for policy violations or concerns. Regular internal inspections and third-party audits are conducted.

(4) Human security measures:

Employees receive regular training on personal data handling; confidentiality obligations are included in the employee code of conduct.

(5) Physical security measures:

Entry to areas where personal data is handled is restricted. Devices and documents are managed to prevent theft or loss. Appropriate measures are taken when data is transported.

(6) Technical security measures:

Access to information systems handling personal data is restricted to authorized personnel. Systems are protected against unauthorized access and malware.

(7) Understanding of external environments:

The Organization will review relevant data protection laws and implement appropriate security measures when handling personal data in foreign jurisdictions.

8. Requests for Disclosure, Correction, Suspension of Use, etc.

For personal data retained by the Organization (over which it has authority to disclose or amend), the Organization will respond to requests for disclosure, correction, suspension of use, or deletion after confirming the individual's identity through the prescribed procedures. Please get in touch with the inquiry desk listed in section 9. In principle, requests are handled by phone, and a processing fee may apply.

9. Contact for Inquiries and Complaints

If you have inquiries or complaints about the organization's handling of retained personal data, please get in touch with the inquiry contact.