Follow Us

Information Security Policy

Information Security PolicyExternal Transmission of User Information

Information Security Policy

With its corporate mission of “enriching the world through visual communication,” the amana group is actively promoting the digitalization of its information assets to further grow its business. In today's digital society, where the internet is indispensable, the amana group recognizes that it is our social responsibility to appropriately handle “information assets” in the face of threats such as information leakage, destruction, and tampering. To fulfill this responsibility, the amana group has established this Information Security Policy and declares that all officers and staff of the amana group (including employees, contract employees, part-time employees, temporary staff, and on-site personnel of external contractors; hereinafter the same) understand and will act in accordance with this policy.

Information Security Objectives

The amana group aims to be a company that is always trusted by all stakeholders, including our customers, by implementing appropriate information security management and preventing information security incidents.
In the unlikely event of an information security incident, we will strive to minimize the damage and prevent recurrence by implementing a swift recovery.

Scope of Application

This policy applies to all officers and staff, as well as all important information assets managed by the amana group.

amana Group Initiatives

  1. (1) Protection of information assets
    The amana group takes necessary management measures from the perspectives of confidentiality, integrity, and availability to protect all of its important information assets (including specific personal information and personal information) from all threats.
  2. (2) Compliance with laws and regulations
    The amana group complies with all applicable laws, regulations, and other relevant rules and contracts concerning information security.
  3. (3) Promotion of information security activities
    The amana group will establish and operate an information security management system to promote information security activities. We will also establish an Information Security Committee and appoint a Chief Information Security Officer. The Information Security Managers and Steering Committee members in each department will promote information security activities, review them regularly, and implement continuous improvements.
  4. (4) Implementation of education and training
    The amana group will provide education and training to all its officers and staff in order to carry out systematic and continuous activities related to information security.
  5. (5) Response to information security events and incidents
    The amana group always anticipates the possibility of information security incidents occurring and, at the same time, takes into account prompt response and corrective action in the event of an information security events and incident, implements appropriate management measures and policies.
    *An information security incident refers to an information security event or incident that disrupts business operations.

Enacted on December 1, 2007

Revised on December 22, 2016

amana inc.

President and Representative Director

Yoshiaki Kaneko

External Transmission of User Information

Handling of User Information and Access Data

The websites and various online services operated by the amana group (hereinafter referred to as the “Official Websites and Other Services”) handle user information (hereinafter referred to as “user information”) and access data on the Official Websites and Other Services with the utmost care as described below. Furthermore, the personal information we collect will be handled in accordance with the above privacy policy.

(1) Definition of user information/access data

User information/access data includes customer behavior history information (search history on our official website, page viewing history, purchase history, ad click history, ad display history), and information about the customer's device (IP address, operating system, browser type, location information, etc.).

(2) Purpose of use of user information/access data

The amana group may automatically collect users' access data from the Official Websites and Other Services for the purposes described below.

  1. (i) To provide services to registered members
  2. (ii) To provide feedback to those who participated in surveys, events, etc.
  3. (iii) To provide information by direct mail, email, and other means
  4. (iv) To deliver advertisements that meet the needs of our users (targeted advertising), to monitor delivery status, and to measure effectiveness
  5. (v) To improve and enhance services such as the Official Websites and Other Services, and to develop new services
  6. (vi) For the purpose of carrying out tasks related to the objectives of ① to ⑤ above

(3) Use of cookies

A cookie is a piece of information that is exchanged between a web server and your browser when you browse a web page.
If your computer or mobile device is configured to accept cookies, the information will be stored in the designated location in your browser. However, the recorded information does not include any information that can identify a specific individual, such as usernames or email addresses. On the Official Websites and Other Services, we can use information stored in cookies to customize the display to provide users with a more satisfactory experience.
Users can change their browser settings to refuse to accept cookies or to display a warning when they receive a cookie. However, in that case, some services and features may not be available on certain websites.

(4) Cookie opt-out (Disabling cookies)

Users can configure their browser settings to receive notifications when cookies are sent or to refuse to accept cookies. If you refuse to accept cookies, you may experience issues such as articles and advertisements tailored to your needs not being displayed or delivered, or some pages not being able to be displayed.

(5) Web beacons

Some Official Websites and Other Services and HTML email newsletters may use a technology called web beacons in combination with cookies to collect information such as Official Websites and Other Services access status.

(6) Ad delivery by third-party advertising providers

For some Official Websites and Other Services, we outsource the delivery of advertisements displayed on those sites and services, as well as amana group advertisements displayed on various external websites and online services, to third-party advertising providers. For the purpose of delivering the above-mentioned advertisements, our contracted advertising providers may also collect and use your cookies. In that case, the cookies obtained are stored and managed on the advertising provider's server, not on our web server.

(7) Targeted advertising by advertising providers

The Official Websites and Other Services operated by amana use targeted advertising provided by advertising providers.
For details on the tools and targeted advertising used by each service provider on the official website operated by amana, as well as how to disable ad delivery, please visit the respective service provider's website.

Advertisement
Web Analytics
Data Collection
Function Support
Security
Social Plugins

(8) Commitment to advertising quality

amana is committed to improving quality by ensuring the quality of advertising traffic and brand safety, and by taking measures related to these, in accordance with the following guidelines from JIAA.
We will work in cooperation with all relevant companies to meet the expectations of our business partners and society.

<JIAA Guidelines>

We also use lists obtained from CODA (http://www.coda-cj.jp/) and IHC (http://www.internethotline.jp/) to help eliminate invalid traffic (IVT) and promote brand safety.

<JICDAQ (Japan Joint Industry Committee for Digital Advertising Quality & Qualify) Certification>

Our company has received certification in two areas based on JICDAQ's certification standards: “Brand Safety” and “Invalid Traffic (IVT) Prevention.”

BRAND SAFETY CERTIFIED JICDAQ

Brand Safety Certification Certification No.
J1196-1B3-251130

CERTIFIED AGAINST AD FRAUD JICDAQ

Invalid Traffic (IVT) Prevention Certification Certification No.
J1196-1T3-251130

amana inc. has obtained certification under JIS Q 27001:2023, the international standard for information security management systems, for three departments (shelf Sec., XBOARD Sec., and INFOTO Sec.).

Certification Standard
JIS Q 27001:2023(ISO/IEC 27001:2022)
Certification Body
Perry Johnson Holding, Inc. / Perry Johnson Registrars
Registration Certificate No.
C2024-05415
Initial Registration Date
October 15, 2024
Effective Date
October 15, 2024
Expiration Date
October 14, 2027
Scope of Registration
Development, operation, and provision of image database construction services and corporate information content management services; on-location photography; writing services.