Recommendation & Privacy Policy

Basic Policy on the Protection of Personal Information

(Privacy Policy)

World Insurance Co., Ltd.

In recognition of the importance of protecting personal information, and to further enhance public trust in the insurance business, we declare that we will handle our customers’ personal information appropriately.

(1) Compliance with Laws and Regulations

We comply with the Act on the Protection of Personal Information and other relevant laws, as well as the guidelines of the relevant government authorities.

(2) Employee Training

We thoroughly train and guide our employees so that personal information is handled appropriately.

(3) Purposes of Use of Personal Information

We use personal information obtained in the course of insurance solicitation entrusted to us by insurers (for Individual Numbers (My Number) and Specific Personal Information, see (8) below) lawfully and fairly, within the scope necessary for carrying out the insurers’ business, such as providing non-life insurance, life insurance and related or ancillary services. As we deal with multiple insurers, we may also use the personal information obtained to propose products and services of other insurers with which we deal. We also make video and audio recordings and other records to confirm the facts of inquiries and consultations and to improve our services. We do not use personal information for any other purpose.

If we change the above purposes of use, we will do so only within a scope reasonably recognized as having a substantial relationship to the original purposes, and will in principle notify the individual in writing or by similar means (including electronic records; the same applies below) or publish the change on our website or by other means.

The purposes of use of the insurers that entrust insurance solicitation to us are stated on each company’s website (below).

<Insurers we deal with> ・Sompo Japan Insurance Inc. (https://www.sompo-japan.co.jp/) ・Sompo Himawari Life Insurance Inc. (https://www.himawari-life.co.jp/) ・Aioi Nissay Dowa Insurance (https://www.aioinissaydowa.co.jp/) ・Mitsui Sumitomo Aioi Life (https://www.msa-life.co.jp/ ・Nippon Life (https://www.nissay.co.jp/) ・Hanasaku Life (https://www.life8739.co.jp/)

(4) Acquisition and Retention of Personal Information

We acquire personal information (for My Number and Specific Personal Information, see (8) below) only to the extent necessary for our business and by lawful and fair means.
We retain the personal information we acquire for the period necessary to achieve the purposes of use, or for the period required or permitted by law.

(5) Security Control Measures for Personal Data

To prevent leakage, loss or damage of the personal data we handle (including My Number and Specific Personal Information in (8) below, and personal information we have acquired or intend to acquire that is expected to be handled as personal data) and to ensure its secure management, we take sufficient security measures, such as establishing handling rules and an implementation system, and take appropriate measures to ensure the accuracy and currency necessary to achieve the purposes of use.

We have separately established internal rules on security control measures for personal data, the main contents of which are as follows. Please direct any questions about our security control measures to the contact point below.

① Establishment of a basic policy

To ensure the proper handling of personal data, we have established this basic policy covering “compliance with relevant laws and guidelines,” “security control measures,” and “contact point for questions and complaints,” among other matters, and review it as necessary.

② Establishment of handling rules for the security of personal data

We have established rules on handling methods, responsible persons, staff in charge and their duties at each stage — acquisition, use, storage, provision, deletion and disposal — and review them as necessary.

③ Organizational security measures

・Appointment of persons responsible for managing personal data

・Inclusion of security measures in work rules, etc.

・Operation in accordance with the handling rules for the security of personal data

・Means to check the handling status of personal data

・Establishment and implementation of inspections and audits of the handling of personal data

・A system for responding to incidents such as leaks

④ Human security measures

・Non-disclosure agreements on personal data with employees

・Clarification of employees’ roles and responsibilities

・Thorough communication, education and training of employees on security measures

・Verification of employees’ compliance with personal data management procedures

⑤ Physical security measures

・Control of areas where personal data is handled

・Prevention of theft of equipment and electronic media

・Prevention of leaks when carrying electronic media

・Deletion of personal data and disposal of equipment and electronic media

⑥ Technical security measures

・Identification and authentication of users of personal data

・Classification of personal data and access control

・Management of access rights to personal data

・Measures to prevent leakage or damage of personal data

・Recording and analysis of access to personal data

・Recording and analysis of the operation of information systems handling personal data

・Monitoring and auditing of information systems handling personal data

⑦ Supervision of contractors

When outsourcing the handling of personal data, we select contractors that handle personal data appropriately and maintain outsourcing rules, reviewed regularly, to ensure that contractors implement security measures.

⑧ Understanding the external environment

We implement security measures after understanding the personal information protection systems of the countries where personal data is handled.

(6) Handling of Information Abroad When outsourcing the handling of personal data to parties overseas, we take the security measures below and conclude an outsourcing contract that requires the contractor to take measures equivalent to the security measures required under the Act on the Protection of Personal Information (hereinafter “equivalent measures”). ① We check the following items regularly, once a year, in writing or by similar means: (i) The status of implementation of equivalent measures by the third-party recipient (ii) Whether there are any systems in the foreign country where the third-party recipient is located that may affect the implementation of equivalent measures ② If the implementation of equivalent measures is hindered, we request corrections, and if it becomes difficult to ensure their continued implementation, we stop providing the personal data. ③ The outsourcing contract stipulates, among other things, that personal data will be handled only within the scope of the contract, that necessary and appropriate security measures will be taken, that employees will be supervised as necessary and appropriate, that prior consent is required for any subcontracting, and that provision of personal data to third parties is prohibited. ④ Please direct any questions about outsourcing the handling of personal data overseas to the contact point below.

(6) Provision of Personal Data to Third Parties and Acquisition from Third Parties

We do not provide personal data to third parties without the individual’s consent (for My Number and Specific Personal Information, see (8) below), except in the following cases:

① When based on laws and regulations

② When necessary to protect a person’s life, body or property and it is difficult to obtain the individual’s consent

③ When especially necessary to improve public health or promote the healthy development of children and it is difficult to obtain the individual’s consent

④ When it is necessary to cooperate with a national or local government body, or a party entrusted by it, in carrying out duties prescribed by law, and obtaining the individual’s consent could impede those duties

⑤ When the third party is an academic research institution or similar and needs to handle the personal data for academic research purposes (including where part of the purpose is academic research, except where there is a risk of unjustly infringing the individual’s rights and interests)

In addition, when we provide personal data to or acquire it from a third party (including acquiring personally related information as personal data), we confirm, record and retain the matters required by law, such as the name of the recipient or provider.

(7) Provision of Personally Related Information to Third Parties ① Except as provided by law, when it is anticipated that a third party will acquire personally related information as personal data, we do not provide such information without confirming that the third party has obtained the individual’s consent to acquire it. ② Except as provided by law, when we provide personally related information to a third party based on the confirmation above, we confirm and record the details of the provision (when, to whom, what information was provided, how the third party obtained the individual’s consent, etc.).

(7) Handling of Pseudonymized Information ① Creation of pseudonymized information When creating pseudonymized information (information about individuals obtained by processing personal information, through measures prescribed by law, so that a specific individual cannot be identified), we take the following actions: ・Process the information appropriately in accordance with the standards prescribed by law ・Take security measures in accordance with the standards prescribed by law to prevent leakage of deleted information and information on the processing method ② Purposes of use of pseudonymized information If we change the purposes of use of pseudonymized information, we will specify the new purposes as far as possible and publish them, making clear that they relate to pseudonymized information.

(7) Handling of Anonymized Information ① Creation of anonymized information When creating anonymized information (information about individuals obtained by processing personal information, through measures prescribed by law, so that a specific individual cannot be identified and the personal information cannot be restored), we take the following actions: ・Process the information appropriately in accordance with the standards prescribed by law ・Take security measures in accordance with the standards prescribed by law to prevent leakage of deleted information and information on the processing method ・Publish the categories of information contained in the anonymized information created ・Not engage in any act to identify the individual from whose personal information it was created ② Provision of anonymized information When providing anonymized information to a third party, we publish the categories of information about individuals it contains and the method of provision, and clearly indicate to the third party that the information provided is anonymized information.

(7) Handling of Sensitive Information

We do not acquire, use or provide to third parties special care-required personal information (race, creed, social status, medical history, criminal record, information on having been a victim of crime, etc.), or information on trade union membership, family origin and registered domicile, health care and sex life (hereinafter “sensitive information”), except in the following cases:

① When based on laws and regulations

② When necessary to protect a person’s life, body or property

③ When especially necessary to improve public health or promote the healthy development of children

④ When it is necessary to cooperate with a national or local government body, or a party entrusted by it, in carrying out duties prescribed by law

⑤ When acquiring, using or providing to third parties sensitive information of employees, etc. concerning affiliation with political or religious organizations or trade unions, to the extent necessary for premium collection and similar duties

⑥ When acquiring, using or providing to third parties sensitive information to the extent necessary for claims payment involving inheritance procedures, etc.

⑦ When, to ensure the proper operation of the insurance business, acquiring, using or providing to third parties sensitive information based on the individual’s consent, to the extent necessary for business operations

(8) Handling of Individual Numbers (My Number) and Specific Personal Information

We do not acquire, use or provide to third parties Individual Numbers (My Number) or Specific Personal Information.

(9) Review and Improvement

We review and improve, as appropriate, our measures for the handling and security of personal information.

(10) Disclosure, Correction and Suspension of Use of Retained Personal Data under the Act on the Protection of Personal Information

For requests for disclosure (including disclosure of records of confirmation), correction or suspension of use of retained personal data under the Act on the Protection of Personal Information, we will proceed after confirming that the requester is the individual concerned. Requests concerning personal data retained by insurers will be forwarded to the relevant insurer. If, after conducting the necessary investigation of personal data we retain, we find that information about the individual is inaccurate, we will correct it based on the results.

A prescribed fee is charged for the disclosure procedures above. If you wish to make a request, please contact us at the contact point below.

(11) Acquisition, Use and Provision of Information Linked to Identifiers such as Cookies Cookies are text-format information sent from a website and stored in your web browser when you visit the website. Web beacons are a mechanism that sends information when you view a web page or email, by embedding small images in the page or email. This website uses cookies, web beacons or similar technologies (hereinafter “Cookies, etc.”) to store and use information about you. We use Google Analytics, a service provided by Google Inc., which allows identifiers stored in Cookies, etc. to be collected and analyzed statistically. For information on how Google Analytics collects and handles information through cookies, and on the privacy policy of services provided by Google, please see the sites below. You can also opt out of Google Analytics by using the opt-out browser add-on. ■Google Analytics Collection and handling of information by cookies in services provided by Google https://policies.google.com/technologies/partner-sites?hl=ja Privacy policy for services provided by Google https://policies.google.com/privacy?hl=ja Opting out of Google Analytics https://tools.google.com/dlpage/gaoptout

(11) Handling of Inquiries, Consultations and Complaints

We respond appropriately and promptly to complaints and consultations regarding the handling of personal information.

Please use the contact point below. For inquiries about insurance claims, in addition to the contact point below, you may also contact the claims consultation desk of the insurer stated on your insurance policy.

Please note that we will respond after confirming that the person making the inquiry is the individual concerned.

Contact (Agency)　〔World Insurance Co., Ltd.〕 (Address)　〔24 Sairinji, Yahagi-cho, Okazaki-shi, Aichi（愛知県岡崎市矢作町西林寺24番地）〕 (Representative)　〔Shin Kanaya（金谷 進）〕 (Phone)　〔0564-64-7196〕 (Hours)　〔9:00–18:00〕 Closed Saturdays, Sundays and public holidays (Email)　〔info@worldinsurance.jp〕