Statement on Personal Information Protection (Privacy Policy)

Statement on Personal Information Protection (Privacy Policy)

Recognising the importance of its responsibilities towards its customers, Bank of America, National Association. Tokyo Branch (the “Branch”) will manage its customers' personal information etc. in a manner strictly in accordance with the Personal Information Protection Law (the Law), other applicable laws and regulations relating to protection of customer information and individual number (“personal information etc.”) and this Statement on Personal Information Protection (Privacy Policy). This Privacy Policy is in addition to other privacy notices related to other services we provide to clients and individuals including the Digital Privacy Notice. The privacy notices can be accessed here: Global Privacy Notices (bofa.com)

1. Compliance with applicable laws and regulations

The Branch, when handling its customers' personal information etc., will comply with the Law, other applicable laws and regulations relating to protection of personal information etc., Guidelines on Personal Data Protection in the Financial Industry, Guidelines of Personal Information Protection Authority, any other standards and this Privacy Policy.

2. Purposes of use of personal information etc.

The personal information of customers collected by the Branch will be used to the extent necessary in connection with the Purposes of Use (attached), except in the cases where the Branch has obtained customer’s prior consent or it is exempted by statute and will not be used for any other purposes. As for the individual number, the Branch will use it within the scope permitted by the applicable laws.

The Branch will publish its Purposes of Use of customers' personal information etc. via the Branch's official website.

3. Provision of Information

We may provide a customer’s personal information to a third party who has developed a system that conforms to the standards set forth in the Rules of the Personal Information Protection Commission as necessary for taking measures equivalent to the measures that a business operator handling personal information is required to take pursuant to the provisions of the Personal Information Protection Act (hereinafter referred to as "equivalent measures") in a foreign country on an ongoing basis. In such event, we will take measures necessary to ensure the continuous implementation of the equivalent measures by such third parties, and a customer may seek information on such necessary measures from us.

4. Security measures for the handling of customers' personal information etc.

The Branch will endeavour to keep its customers' personal information etc. accurate and up to date. To protect customers' personal information etc. against unauthorized disclosure, loss or destruction, the Branch will incorporate appropriate branch standards and strict security measures for the protection of personal information by means of establishing, and reviewing and revising from time to time, internal regulations regarding the protection of personal information. The Branch will also properly supervise its officers, employees and agents, conduct investigations to confirm their compliance with the internal regulations, and properly handle any complaints which may arise.

5. Disclosure of Personal Data to Third Party Service Provider

To the extent necessary for the implementation of the purposes of use stated in this Policy, the Branch may delegate, wholly or partially, the handling of personal data. In such event, the Branch shall conduct necessary and appropriate supervision over the service provider to ensure the security of the personal data.

6. Requests for disclosure, amendment or suspension of use of customers' personal data

In accordance with the Law, the Branch will accept requests for the disclosure, amendment or suspension of use of customers' personal data held by the Branch. Customers may, at any time, request the disclosure, amendment or suspension of use of their personal data in accordance with the procedures prescribed by the Branch. As for a customer’s request to disclose whether or not the Branch holds his or her individual number, the Branch will respond whether or not it holds his or her individual number. For more information, please contact the following person:

Contact: Compliance Department

Tel: 03-6225-8093

Monday – Friday (except national holiday) 9:00 a.m. – 5:00 p.m.

Please inform that the request is for disclosure, amendment or suspension of use of personal data.

7. Inquiries relating to the handling of customers' personal information etc.

Complaints or other inquiries from customers concerning the handling of the customers' personal information, etc. by the Branch should be directed to the following person:

Contact: Compliance Department

Tel: 03-6225-8093

Monday – Friday (except national holiday) 9:00 a.m. – 5:00 p.m.

Please inform that the request is for disclosure, amendment or suspension of use of personal information.

Accredited Personal Information Protection Organization

The Branch is a member of the All Banks Personal Data Protection Council (ABPDPC), which is an Accredited Personal Information Protection Organization of the financial sector certified by the Personal Information Protection Commission. ABPDPC (JBA Customer Relations Center and JBA Banking Consultation Office) will respond to complaints and provide help desk services relating to handling of personal information by its members.

[Complaint/Help Desk Center]

All Banks Personal Data Protection Council - JBA Customer Relations Center

Tel: 03-5222-1700 (http://www.abpdpc.gr.jp) or to the nearest JBA Banking Consultation Office (“Ginko Torihiki Sodansho”)

8. Continuous improvement.

To maintain appropriate standards for the handling of its customers' personal information etc. and the secure management of its customers' personal information, the Branch will periodically review, and endeavor to continuously improve this Statement on Personal Information Protection. In the event of any material changes to this statement, the Branch will publish such changes via the Branch's official website.

Branch's official website: bofa.com/japan

9. Online Information

We collect information about you through your computer, smartphone, tablet or other mobile device by the use of cookies and similar tracking technologies.

The type of information we collect from and about you online will depend on how you interact with us and may include:     (not all of these may apply to your environment)

• Unique device identifiers (for example, Media Access Control (MAC) and Internet Protocol (IP) addresses);
• Browser type, version, language, and display/screen settings;
• Information about how you use and interact with our sites and mobile apps (for example, page visited or links clicked);
• Survey responses and similar information which reveals views and preferences, but which does not reveal a person’s specific identity;
• Responses to advertisements on the sites and mobile apps where we advertise;
• Log information such as your search and voice to text queries in the mobile app;
• Search engine referrals; and
• Geolocation information

We collect this information through cookies and other tracking technologies for the following reasons:

• Because it is necessary to ensure the site works as intended, such as performing authentication within a secured site.  Without this information, some services you have asked for cannot be provided. For example, without cookies or similar tracking technology, you will not be able to access a secured area within this site that requires authentication to assist in detecting and preventing fraud, identity theft and other risks to you or Bank of America.
• To remember choices you make (such as your user name, language or region) and provide enhanced, more personal features. These cookies can be used to remember changes you have made to text size, fonts and other parts of web pages that you may have customized. They may also be used to provide services you have asked for such as watching a video or commenting on a blog.
• To improve how a website works and includes collecting information about how visitors use a website, for instance which pages visitors go to most often, or if they get error messages from web pages. This information can also be used to make collective inferences based on choices and browsing behavior for marketing and advertising research.
• To deliver advertisements that may be relevant to you and your interests. These are also used to limit the number of times you see an advertisement as well as help measure the effectiveness of the advertising campaign. These are usually placed by advertising networks with the website operator’s permission. These remember that you have visited a website and this information may be shared with other organizations such as advertisers.
• To provide you with information you request such as the location of an office nearest to your location.

See our Cookie Policy for additional details about cookies and tracking technologies including how you can manage cookies

10. Others

In order to accurately grasp the content of transactions and inquiries made by customers and others, electronic communications including telephone conversations, email, text message and instant messages with the customers and others shall be recorded, monitored and retained by designated telecommunications carriers, the Branch and others the Branch designates to the extent permitted by laws and regulations. The customer’s prior understanding would be appreciated.

Branch's official website: bofa.com/japan