Handling of Personal Information in Telecommunications Business Field

1. Intended Purpose of Use of Personal Information and Presence/Absence of Contract

For the following operations that we perform when providing the services set forth in Attached Sheet 1, we handle the personal information listed below for each operation and at the same time we contract all or part of the operation.The “Subscriber” represents each individual service subscriber and addressee of a bill, and “Users” refer to all those users registered with the User Registration System for au Telecommunications Services.

＊With respect to the handling of personal information and information associated with the confidentiality of communications, OCTC complies with the Telecommunications Business Law, the Act on the Protection of Personal Information, laws concerning the use of specific numbers for identifying individuals for government procedures, guidelines for each business field specified by a competent authority, including Guidelines Concerning Protection of Personal Information in Telecommunications Businesses, and other related laws and ordinances.

Operation that uses personal information	Service information	presence/absence of contract
1. Operation related to service charge	(1)-(5), (8)-(16)	Present
2. Operation related to examination of contract	(1)-(10), (16)	Present
3. Operation related to customer services	(1)-(4), (8)-(16)	Present
4. Operation related to user support	(1)-(4), (9), (14)-(16)	Present
5. Operation related to addition of or change to optional services	(1)-(4), (9), (14)-(16)	Present
6. Operation related to the suspension of services	(1)-(4), (9),(10)	Present
7. Operation for providing information on current services, new services and new menu	(1)-(4), (6)-(16)	Present
8. Operation related to questionnaires	(1)-(4), (6)-(16)	Present
9. Operation related to products, services, events, campaigns in an effort to promote the use of services	(1)-(4), (6)-(16)	Present
10. Operation related to development of new services as well as evaluation and improvement of service quality	(1)-(4), (6)-(16)	Present
11. Operation related to service provision facilities, equipment, software development, operation and management	(1)-(4), (6)-(16)	Present
12. Operation related to investigation and response in the event of a product defect, system failure, or accident associated with services	(1)-(4), (6)-(16)	Present
13. Information provision operations related to services (including services other than telecommunication services) provided by OCTC, our affiliated companies and other affiliations See Attached Sheet 5 for affiliated companies and other affiliations	(1)-(16)	Present
14. Other business purposes stipulated in the service rules	(1)-(16)	Present

Operation that uses personal information	Service information	presence/absence of contract
1. Operation related to service charge	(1)-(5), (8)-(16)	Present
2. Operation related to customer services	(1)-(4), (8)-(16)	Present
3. Operation related to the implementation of user support	(1)-(4), (9), (14), (16)	Present
4. Operation related to the suspension of service	(1)-(4), (9), (14)-(16)	Present
5. Operation of providing information on current services, new services and new menu	(1)-(4), (9), (10)	Present
6. Operation for providing information after conducting investigation, and analysis of status of use of services	(1)-(4), (6)-(16)	Present
7. Operation related to placement of advertisements as well as distribution and delivery	(1)-(4), (6)-(16)	Present
8. Operation related to questionnaires	(1)-(4), (6)-(16)	Present
9. Operation related to products, services, events, campaigns in an effort to promote the use of services	(1)-(4), (6)-(16)	Present
10. Operation related to investigation and response in the event of system failure and accident associated with service	(1)-(4), (6)-(16)	Present
11. Other business purposes stipulated in the service rules	(1)-(16)	Present

Personal information to be used	Source Personal information to be used
(1) Name and address of subscriber	Subscriber
(2) Date of birth and gender of subscriber	Subscriber
(3) Subscriber’s phone number, mail address and contact phone number, and place of work	Subscriber
(4) Information in the subscriber’s identification documents (driver’s license and certified copy of registry, etc.)	Subscriber
(5) Information from the subscriber’s residence certificate and certified copy of registry obtained by making an inquiry at a public institution	Public institution
(6) Information published in official government gazettes and telephone directories	Public institution
(7) Name, address, contact, etc. obtained from a third party with a subscriber’s consent by referral of a customer.	Third party
(8) Bank account number and account holder’s name as well as credit card number necessary for billing	Subscriber
(9) Description of service applied for by a subscriber	Subscriber
(10) Service charge paid by subscriber	Service information
(11) Information on communication history, including starting/ending time of communication of a subscriber and user, length of communication time, and destination number [1]	Service information
(12) Information on location of a subscriber and user [2]	Service information
(13) History of a subscriber’s and user’s browsing and use [2]	Service information
(14) Information on communication devices (serial number, model name, product number, device-unique ID, etc.)	Service information
(15) Name and date of birth of a user registered with “the “User Registration System” of au Telecommunications Services.	Subscriber
(16) Other information obtained through service provision including application and detail of inquiries.	Subscriber

[1] Of the information stated in (11), with respect to information associated with the confidentiality of communications, even in cases of use relating to operations stipulated in items (1) and (2) above, OCTC will limit use to legitimate business uses, legal defense, emergency evacuations, and other cases deemed to be justifiable cause for noncompliance with the law, or cases where consent is separately obtained from the customer.

[2] For communications histories, location information, application startup histories, address book information, pictures, movies, and other personal information, we will give consideration to customer privacy and may obtain consent from the customer.

２．Shared Use of Personal Information

We share personal information on customers as follows:

Particulars and intended purpose of use of personal information are as specified in Paragraph 1.
We will share personal information with the KDDI Corporation.
OKINAWA CELLULAR TELEPHONE COMPANY will be responsible for the management of personal information collected on customers.

３．Sharing Customers’ Personal Information with Third Parties

Apart from the aforementioned cases of use of personal information in the possession of OCTC, we may also share this information with third parties in the following instances:

We may, in accordance with the terms of contracts, give other telecommunications companies (see Attached Sheet 3) personal information on nonpaying customers, senders of commercial or other unsolicited e-mail (spam), or customers whose service has been suspended due to refusal to respond to requests for identification verification in accordance with Article 11 of the Act for Prevention of Improper Use of Mobile Voice Communications Services.
For the purposes of preventing illegal contracts, the occurrence of nonpayment of charges, and other incidents, we may provide other mobile telecommunications carriers (see Attached Sheet 3) with personal information (name, address, date of birth, identification documents, identification numbers, arrest information, methods of forgery, contract screening results, etc.) related to forged or falsified identification documents submitted by customers or persons applying for a contract.
We may provide the necessary personal information, in accordance with the terms of contracts or with prior consent from the customer, to other mobile carriers or PHS carriers involved in the implementation of Mobile and PHS Number Portability (MNP) or telecommunications carriers with whom we have entered into interconnection agreements.
We may provide customer information (such as the location from which a call was placed, name, address, phone number, etc. of the customer), in accordance with the terms of contracts, to organizations that deal with emergencies (such as the Police Agency, Coast Guard Headquarters or the Fire Department).
In the event that a customer files a complaint against OCTC regarding e-mail or SMS (C-mail) (hereinafter referred to as “e-mail, etc.”) received by the customer, we may, with prior consent from the customer, give other telecommunications companies (see Attached Sheet 4) personal information related to such filing. In addition, in the event that a line contractor with a telecommunications carrier other than OCTC who received e-mail, etc. sent by a customer files a complaint against such telecommunications carrier regarding the email, etc. sent by the customer, we may, in accordance with the terms of contracts, receive personal information on the customer from such telecommunications carrier (see Attached Sheet 4).
In addition to the above, we may provide personal information held by OCTC to third parties in a form where personal identification cannot be discerned.

４．Accredited Personal Information Protection Organization and Contact Point for Requesting Settlement of Complaints

The accredited personal information protection organization of which we are a member and contact point for requesting settlement of complaint are:

Telecommunications Personal Information Protection Promotion Center