2. Business UBS uses Personal Information etc.
UBS will use Personal Information etc. the following businesses.
- Deposits, exchange, loans, foreign exchange and all related businesses (including financial derivative transactions)
- Investment trust sales, securities intermediation, corporate bonds business etc., and any business that may be engaged in by a bank under law and all related businesses
- All other businesses that a bank may conduct as well as ancillary businesses (including all businesses that may be approved for handling in the future)
3. Purpose of Use of Personal Information excluding My Number
UBS will use Personal Information for the following purposes. Except for the cases recognized by the PIPL, UBS will not make use of such information beyond the necessary scope, without the prior consent of the principal individual. Moreover, in case the objective in using specific Personal Information is restricted by law etc., such information will not be used in excess of the original limitations of usage. Therefore, UBS will not use or offer to any third party information concerning race, creed, social status, lineage, locality where family registers are kept, health treatment (including medical history), crime history, fact of having suffered damage by crime or any other special non-public information for purposes other than to properly manage its business or for any other purposes deemed necessary.
- For application for financial products and/or services, such as account opening for various financial products
- For identification of an individual under the Law for Prevention of Transfer of Criminal Proceeds, the representative or agent of an entity or anyone responsible for a transaction in his capacity etc., and for identification of qualifications etc. to use financial products and/or services
- For transaction of business, such as preparing the status reports of deposit and loan transactions, and deposit balance reports, managing due dates and answering inquiries
- For decisions regarding loan applications and subsequent maintenance thereof etc.
- For determining appropriateness of products and services offered, based on judgment etc. of principle of suitability etc.
- For provision of information to a third party such as a Personal Credit Information Organization, within limits, to carry out appropriate tasks required for credit operations
- For managing any outsourced operations appropriately, in the case where Personal Information processing in full or in part has been outsourced to other enterprises
- For exercising rights or carrying out obligations based on contracts with customers or law
- For research and development of financial products and services based on carrying out market surveys, data analysis and/or questionnaires
- For monitoring the validity of transactional contents and risk (including checking to prevent insider transactions)
- For external and internal inspections
- For tax payment
- For use in complaint processing, mediation and lawsuits
- For statistical purposes
- For promotional use of various product and services, such as sending direct mail etc.
- For promotion of various products and services of allied companies, or the introduction of UBS related companies (including the responsible employee in-charge)
- For various transaction cancellation and their aftercare; and
- For other matters necessary to carry out transactions smoothly and adequately with customer
In case of modifying any of the above-mentioned purposes, UBS will not change beyond the scope recognized reasonably relevant to the original purpose.
4. Purpose of Use of My Number
UBS will use My Number of Customers, etc. only for the following purposes which are set out by the law (My Number related administration) unless recognized by the Act on the Use of Numbers to Identify a Specific Individual in the Administration Procedure" (My Number Act).
- Account opening and reporting for financial product transactions
- Creation and submission of legal documents related to financial product transactions
- Providing information related to financial product transactions to Securities Depository Centers, etc.
- Creation of legal documents related to overseas remittance etc.
- Creation of payment record related to the fees/charges for an outsourced party as individual
- Creation of payment record for real estate rent fees
- Linking between My Numbers and deposit/saving accounts
UBS will obtain My Number only for the above purposes which are necessary to perform My Number related administrations.
5. Provision of Retained Personal Data to a Third Party
Except for the cases recognized by the PIPL1, UBS will not provide any Retained Personal Data (excluding My Number) to a third party without the prior consent of the individual. For My Number, UBS will provide such information to a third party only when it is required to process My Number related administration for the Customers, etc. (when submitting the payment record including My Number to the Tax Office Head, etc.)
6. Joint use of Personal Data excluding My Number
UBS will jointly use Retained Personal Data with the following offices of UBS and affiliates, to the extent allowed by Firewall regulations, for the purposes given below. Management of this data will be the responsibility of UBS AG, Tokyo Branch, which will serve as the contact point for complaint processing etc.
Companies that will use Retained Personal Data jointly:
- UBS Securities Japan Co., Ltd
- UBS Asset Management (Japan) Ltd.
- UBS Japan Advisors Inc.
- UBS Limited (UK Corporation)
- Other subsidiaries and affiliates mentioned in the Annual Report of UBS Group AG and UBS AG (The Annual Report is available in UBS AG and on the website of UBS Group.)
Purpose of Joint Use of Retained Personal Data:
- To offer full-service as UBS Group (including cases of acting as intermediary for transactions between UBS Group companies and our customers, and vice versa Group companies acting as intermediary for transactions between UBS and customers)
- For risk management, operations and business management as a Group
Items of Retained Personal Data to Be Jointly Used:
- Customer’s name and address
- Phone number and fax number
- E-mail address
- Customer’s account number
- Customer’s financial information
- Information about customer’s occupation (employer and job title, etc.)
- Any data items as necessary to achieve the above-mentioned purposes.
My Number will not be jointly used with the group companies to be in line with my Number Act.
As for the joint usage of “dishonored” information, a notice will be posted in UBS’ offices containing items of Personal Data that will be jointly used, the scope of the joint users, purpose of use and the name of the person responsible for managing Personal Data.
7. Outsourcing Retained Personal Data Handling
In case of outsourcing Retained Personal Data handling to a third party, UBS will select appropriate agents and supervise them with necessary and appropriate attention in order to assure that customers’ Retained Personal Data are handled safely. In case of outsourcing (including sub-contracting) of My Number handling to a third party, UBS will ensure that the same level of security measures as UBS are implemented by such an outsourced party.
8. Matters concerning Retained Personal Data
Notification of objectives of using Retained Personal Data
UBS will be notifying individuals about its objectives of using Retained Personal Data upon inquiry. However, in the following cases, notification may not be made. In this case, the individual will be given the reason for the decision not to notify. In some cases, UBS may charge the cost of notification. In such cases, the amount will be informed in advance.
9. Disclosing Retained Personal Data
UBS will disclose Retained Personal Data in an agreed-upon method, when inquired by the individual (including confirmation that the retained personal data does not exist). However, in the following cases, disclosure may be refused. In such case, the individual will be given the reason for such decision. In some cases, UBS may charge the individual for costs incurred in disclosing such information. In such cases, the amount will be informed in advance.
In case of inquiry for disclosing the retention of My Number, UBS will provide the response on whether or not we retain the My Number.
10. Revisions etc. of Retained Personal Data
In case UBS receives a request from an individual to correct, add or delete (“Revision etc.”) the contents of Retained Personal Data for the reason that they are not correct based on the fact, then for within the range necessary for achieving the usage objective, UBS shall carry out an investigation without delay to determine the facts; and, if it is determined that the request is justified, all necessary Revisions etc. shall be carried out. The individual shall be notified of whether a Revision etc. has been carried out or not and the reason behind the decision.
11. Suspension of use of Retained Personal Data
Appropriate investigation shall be made when an individual requests suspension or deletion (“Suspension etc”.) of the Personal Data retained by UBS which he/she suspects is being used in a manner different from the usage purpose that has been publicly announced or notified or which was obtained by unfair means. If the request turns out to be well justified, then either Suspension etc. of data shall be carried out to correct the violation (reported) or alternative measures will be taken to protect the individual’s rights. The individual shall be notified of whether suspension etc. was carried out or not and the reason for it.
12. Suspension of Provision of Retained Personal Data to Third Party
Appropriate investigation shall be made when an individual requests suspension of provision to a third party of the Personal Data retained by UBS which he/she suspects is being provided to a third party without either being within the confines recognized by the PIPL or without obtaining the individual’s prior consent. If the request turns out to be well justified, then either the provision of such data to a third party will be suspended or other alternative measures shall be taken to protect the individual’s rights. The individual shall be notified of whether suspension etc. was carried out or not, and the reason for it.
13. Procedures for Request
The Personal Data Manager in the relevant Sales division or Compliance Department will receive all requests stipulated in 8 through 12 given above. An individual may be asked to fill out UBS forms when making a request.
In general, our Compliance Department shall reply to all requests in writing; however, explanations about the replies may be made orally in some cases.
Identify of the individual is generally confirmed by his/her registered seal (impression) or signature already provided to UBS, if a request shall be made directly by the individual. If the requester is a corporation or the executive of another organization or an attorney for the customer, UBS shall confirm the relationship between the requester and the customer by asking for personal identification documents of the requester (as stated in the Law for Prevention of transfer of Criminal Proceeds) and documents to prove the relationship between the requester and the customer (power of attorney etc.).
14. Inquiries/Complaints Processing
UBS will make an effort to handle rapidly and sincerely when we receive any inquiries and/or comments regarding personal information from customers etc. Inquiries and/or complaints regarding security measures for handling of Personal Information may be made through the Personal Data Manager in the respective Sales divisions or also through the Compliance Department.
15. UBS participation in Recognized Personal Information Protection Organization
UBS is a member of the All Banks Personal Data Protection Council, which is recognized as a Personal Information Protection Organization by Personal Information Protection Commission. The Customer Inquiries window for complaints or consultation at the All Banks Personal Data Protection Council shall receive complaints and provide consultation in relation to the handling of Personal Information by its members.
All Banks Personal Data Protection Council: http://www.abpdpc.gr.jp/menu5.html
Customer Inquiries for complaints/consultation: 03-5222-1700
Also, in regard to the registered financial institutions business, UBS is a member of the Japan Securities Dealers Association, which is recognized as a Personal Information Protection Organization by Personal Information Protection Commission. The Customer Inquiries window for Personal Information at the Japan Securities Dealers Association will receive complaints and consultation in relation to handling of Personal Information of its members.
[Complaints, Inquiries window]
Japan Securities Dealers Association: http://www.jsda.or.jp
Customer Inquiries window for Personal Information: 03-6665-6784
Major outsourcing processes and the major method in which UBS obtains Personal Information are as follows:
[Major method of obtaining Personal Information (excluding specific personal information etc.)]
- Information provided by customers directly such as an application document for account opening, KYC documents, customer’s responses to a questionnaire prepared by UBS, RSVPs for a seminar organized by UBS etc
- Information obtained in the course of provisions of our products or services.
- Publicly available information through company quarterly journals, commercial books, news papers or internet etc.
[Major outsourcing processes]
UBS outsources part of processes handling of Personal Information which are as follows:
- Printing or dispatching documents which need to be sent to our customers
- Legal or accounting advisory
- Maintenance and management of IT systems
- Safekeeping of documents