Privacy Policy
The Fine Arts Department (“FAD”) recommends that users of electronic transaction services or any other electronic services of the FAD have a clear understanding of its privacy policy, which explains how the FAD treats personal information, i.e., collection, preservation, use and disclosure of personal information, and individual rights. The public will be informed of the FAD 's policy on personal information protection. The FAD hereby declares its privacy policy as follows:
Respect of Users’ Privacy Rights
- The FAD respects and gives significance to individual rights, personal information and personal information protection. The FAD realizes that users of its electronic transaction service or any other services would wish to be assured of security in using the services via the FAD’s website.
- Personal information received by the FAD, such as name, age, address, telephone number, I.D. number and financial information that can be used to trace an identity, that is complete, accurate, up-to-date, and of good quality will be used only for the purpose of the FAD’s operations. The FAD shall use stringent security measures so that personal information may not be used without permission.
Limited Collection of Personal Information
- In regard to collection and preservation of personal information, the FAD shall use lawful and fair means to limit collection and storing of personal information. It shall only be used for services stipulated in the objectives of the FAD.
- The FAD shall obtain users' consent prior to collecting personal information except in the case that:
- It is an exception prescribed by law.
- It is for users' benefit but consent cannot be obtained at that time.
- It is for the benefit of users' life, health, or safety or the life, health, or safety of other service users.
- It is for the purpose of legal investigation or inquiry by officials or court proceedings.
- It is for study, research, or statistical data collection.
- The FAD shall not collect personal information about genetic traits and sexual behavior, or information that may be detrimental to personal reputation, or information that may cause unfair discrimination to any person except in the case that:
- Users' written consent has been obtained.
- It is an exception prescribed by law.
- It is for users' benefit and consent cannot be obtained at that time.
- It is for the benefit of users' life, health or safety or the life, health, or safety of other service users.
- It is for the purpose of investigations by legal officials or court proceedings.
- It is for study, research, or statistical data collection.
- The FAD may integrate users' personal information with information received from other sources only as necessary and with users' consent, for the purpose of updating personal information and improving the quality and efficiency of the FAD's services.
Objectives in Collecting Personal Information
- The FAD collects personal information to be used for the FAD’s operations, studies, research, or statistical data collection in accordance with the FAD’s operational objectives, and for the improvement of the quality and efficiency of the FAD’s electronic services.
- In the event of subsequent changes in the collection of personal information, the FAD shall notify users and ask for their consent. Any amendment made to personal information shall be recorded.
- In the event that the FAD collects, stores, uses or discloses personal information for purposes other than the stated objectives, the User have the right to privacy and can choose whether they will allow the FAD to collect, store, use or disclose such personal information.
- For the purpose of analysis of the use of services via a website and for traceability in the event of problems in service usage, the FAD automatically uses log files for record keeping by which at least the following data is saved:
- IP Address
- Type of Browser Moreover, the FAD also uses the services of external organizations that keep log files in providing services via websites as prescribed by law.
- The FAD shall not perform any act not mentioned in the above objectives except:
- When users have been informed of the new objectives and given their consent.
- In the case that it is prescribed by law.
Limited Use of Personal Information
- The FAD may use and disclose personal information only with users' consent and when it is in accordance with the FAD’s objectives.
- The FAD shall ensure that it shall not disclose, show, or cause to appear the users' personal information in any other manner other than that specified in the FAD’s objectives or to a third party except in the event that:
- It is prescribed by law.
- It is with the users' consent.
- It is for the benefit of life, health or safety or the life, health, or safety of other service users.
- It is for the purpose of investigations by officials or court proceedings.
- It is for study, research, or statistical data collection.
- In certain cases, the FAD may allow other persons or organizations to have access to or use users' personal information as necessary, for the purposes of and under the authority of the FAD, and with prior consent of users.
Security Measures
The FAD recognizes the importance of personal information security and has set up security measures that are appropriate and consistent with keeping confidentiality of personal information. The measures aim at preventing loss, accessibility, destruction, use, modification, amendment or disclosure of personal information unlawfully or without authority. These measures shall comply with the FAD’s policy and guideline on IT security.
Users' Rights to Personal Information
- In the event that users' wish to obtain their own personal information, they may send a request according to the criteria and methods set forth by the FAD. Upon receipt of such request the FAD shall take prompt action to inform users of the existence or details of such personal information within a reasonable time.
- If any personal information is found to be incorrect, users may notify the FAD and request that such information be corrected, changed, or deleted. In that case the FAD shall prepare a memorandum of objections regarding storage and accuracy of personal information.
- Users have the right to check the existence and the nature of personal information, and the use of such information at the business premises of the FAD. In addition,users have the right to request:
- certified copies of documents relating to their personal information
- rectification or change of personal information so that it is accurate and complete
- discontinuation of the use or disclosure of their personal information
- deletion or destruction of their personal information
- information about the method of acquisition of their personal information in the case that information has been collected or stored without their consent.
Nevertheless, the FAD may deny the request if required by law or if identifiable personal information has already been deleted.
Linking Personal Information with Other Persons or Organizations
- The FAD may link personal information to other persons or organizations. Prior to such linkage, the FAD shall notify users and request their consent, with at least the following details given:
- The name(s) of the person(s) or FAD to which that personal information will be provided
- The objective in linking personal information
- Personal information linking methods
- Personal information to be linked to other parties
- The names of parties having the right to access personal information./li>
- In linking personal information to other persons or organizations, the FAD shall clearly inform the user of the name of the information collector and any party having the right to collect information. Moreover the FAD shall keep records of information linkages.
- If there is any change in information linkage, the FAD shall notify the user thereof and request prior consent.
Change in Privacy Policy
- The FAD may revise this privacy policy occasionally to be consistent with changes in service provision, the FAD’s operations, and public suggestions/comments. The FAD shall make a clear announcement before proceeding with any changes or may deliver the notification of change directly to the users.
- For additional information on the policy and practical guidelines on personal information protection, reference could be made to the full version of the Policy and Practical Guideline for Personal Information Protection. If you have further questions, please contact the FAD.