Sigron Corporation (hereinafter referred to as "the Company") has established rules for the appropriate collection and use of personal information in order to provide better services to users, and handles users' personal information appropriately.

We will comply with the Act on the Protection of Personal Information (hereinafter referred to as "Personal Information Protection Act") and other subordinate regulations, guidelines, and related notices, appoint a person in charge of personal information, check whether the information is handled appropriately, and improve any related problems found as needed.

 

1. Acquisition of personal information, etc.

For the remote diagnostic services provided by the Company, the Company shall obtain personal information, etc., from hospitals or clinics that are users of the Services, as well as their physicians and healthcare professionals (hereinafter referred to as "Users"). At the same time personal information will be provided from and to interpreting expert-physicians who are registered for the Service interpreting the records and who are working for the Company and perform the Services (hereinafter referred to as "Interpreting Physician(s)", as well as physicians and medical professionals affiliated with, and patients attended by User's hospital(s). The following personal and other collected information (hereinafter collectively referred to as the "User Information") of the User(s) will be acquired.

 

User’s Information

Name, location, address, date of birth, telephone number, e-mail address, financial institution or credit card information, and other personal information

Information regarding the user's access to and use of the Service (including individual device identification information and communication history) and other collected information.

 

Interpreting Physician’s

Name, location, address, date of birth, telephone number, e-mail address, financial institution information and other personal information

Historical information of diagnostic support conducted through this service and other collected information

 

Patients

We will obtain test results data and accompanying diagnostic information (not including name, address, or other information) obtained through hospitals, etc. that are users of the service in an anonymized (internal encoded Company identification) form.

When obtaining diagnostic information from a patient through a hospital, etc., the hospital, etc. shall obtain consent from the patient in a manner prescribed by the Company, based on the terms of use between the Company and the hospital, etc.

 

2. Purpose of use

　"The Company" shall specify the purpose of use of user information obtained from users and shall not use user information for any purpose other than the specified one. When the Company acquires user information from users, it will be used for the following purposes.

(i) To the extent necessary to operate the Service (including providing diagnostic information on patients necessary to support diagnosis, to support the work of interpreting physicians registered with the Service, as well as hospitals, etc., which are users of the Service, for outsourcing purposes)

(ii) To provide information to users as necessary, including maintenance and important other notices

(iii) To compile and analyze attributes of user information and to prepare statistical materials

(iv) To provide learning to AI systems and other systems that constitute the Service, and for other system improvements, research and development

(v) To bill or receive payment of user fees

(vi) To receive, investigate, and answer questions related to the Service.

Except for cases permitted under the Personal Information Protection Law, "the Company" shall obtain the prior consent of the user before using personal information beyond the purposes of use described in the preceding paragraphs.

 

3. Provision to third parties

　Except in the following cases, we will not provide personal information obtained from users to third parties without obtaining the prior consent of the user.

(i) When required by law

(ii) When it is necessary for the protection of human life, personal health or property, and it is difficult to obtain the user's consent.

(iii) Cases in which the provision of personal information is especially necessary for improving public health or promoting adequate healthcare and education of children, and in which it is difficult to obtain the consent of the user

(iv) When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining the user's consent is likely to impede the execution of such affairs.

(v) Cases in which the recipient is an academic research institution, etc., and it is necessary for said academic research institution to handle the personal information provided for academic research purposes, and the information will be treated to the same level of protection as with the Company.

(vi) When our business, including the provision of personal information, is succeeded due to a merger, company split, business transfer, or other reasons.

(vii) Cases in which personal information is provided as a result of the Company's entrustment of personal information within the scope necessary for the achievement of the Purposes of Use of the Company

(viii) When personal information is provided for joint use in accordance with the Personal Information Protection Law.

(ix) Other cases specifically permitted by the Personal Information Protection Law.

　

We will not provide personal information handled by us to any third party in a foreign country without the prior consent of the user, except in the following cases.

 

(a) Cases falling under any of (i) through (v) above.

(b) Cases in which the personal information is provided to a third party in a country designated by the Personal Information Protection Commission as having a system for the protection of personal information that is deemed to be of a level equivalent to that of Japan in terms of protecting the rights and interests of individuals.

(c) Cases in which the provision of personal information is made in an appropriate and reasonable manner to ensure that the person to whom it is entrusted will handle the personal information in a manner consistent with the purposes of the Personal Information Protection Law

(d) When the person to whom personal information is provided is accredited in accordance with an international framework for the handling of such personal information.

(e) Other cases permitted by the Personal Information Protection Law.

 

4. Outsourcing

　We may outsource operations, including handling of user information, to contractors to the extent necessary for the provision of specific services and products, including the cases described in the preceding paragraph. In such cases, we will contractually obligate the subcontractor not to leak or re-provide the information without our consent and to the level the Company does, so will manage the information appropriately. In addition, the subcontractor may contact the user directly when it is unavoidable to provide services or products.

 

5. Security control measures

　We will take all necessary and appropriate measures to prevent leakage, loss, or damage of personal information handled by us and to otherwise safely manage personal information.

 

Disclosure of Personal Information

　When a user requests disclosure of personal information in accordance with the provisions of the Personal Information Protection Law, we will disclose the information without delay after confirming that the request is made by the user himself/herself (if the relevant personal information does not exist, we will notify the user to that effect). However, this does not apply to cases in which we are not obligated to disclose the information under the Personal Information Protection Law or other laws and regulations.

 

 

Correction of Personal Information

If a user requests correction, addition, or deletion of his/her personal information (hereinafter referred to as "correction, etc.") based on the provisions of the Personal Information Protection Law because the information is not true, we will conduct the necessary investigation without delay within the scope necessary to achieve the purpose of use, but after confirming that the request is made by the user himself/herself. We will conduct the necessary investigation without delay to the extent necessary to achieve the purpose of use. Based on the results, we will correct the content of the personal information and notify the User to that effect. However, this shall not apply in cases where the Company is not obligated to make such corrections, etc. under the Personal Information Protection Law or other related laws and regulations.

 

Suspension of Use of Personal Information

　In accordance with the provisions of the Act on the Protection of Personal Information, the Company may request the suspension of use or deletion (hereinafter referred to as "suspension of use, etc.") of a user's personal information on the grounds that the information is being used for purposes other than those previously publicized, that it is being used inappropriately, or that it was obtained through deception or other wrongful means. In the event that a request for suspension of use or deletion of personal information (hereinafter referred to as "suspension of use, etc.") is made in accordance with the provisions of the Personal Information Protection Law on the grounds that the information is being used inappropriately or that the information was obtained through deception or other wrongful means, and it is found that there is a reason for such request, we will, without delay, suspend use of the information and notify the user thereof upon confirmation when the request is made by the user. However, this shall not apply in cases where we are not obligated to suspend the use of personal information under the Personal Information Protection Law or other laws and regulations.

 

 

9. Contact for inquiries and procedures for requesting disclosure of personal information

Please contact the following for inquiries regarding the Company's handling of user information.

 

Address: Japan, 101-0041, Tokyo, Chiyoda-ku, Kandasuda-cho, 2-23-1

E-mail: contact@sigron.co.jp