In order to strictly protect conference attendees' information (hereinafter referred to as "personal data"), ICCPR 2020 organizing committee (hereinafter referred to as "the committee") is implementing the following measures.

1. Measures for protecting conference attendees' personal data
   1. The committee shall obtain explicit consent from the conference attendee before receiving the personal data.
   2. The committee will manage conference attendees’ personal data appropriately.
   3. The committee appoints a security manager to manage the conference attendees’ personal data.
   4. The data the committee acquires from conference attendee is the conference attendees’ personal data which is necessary for registering for the conference such as attendee's name, e-mail address, telephone number, address, affiliation, and title.
   5. The committee as a data controller assigns Galileo Corporation as its data processor and have them strictly follow this policy.
   6. In order to strictly store conference attendees' personal data, the committee has established internal rules and appropriate audit process as it becomes necessary.
   7. In the case where conference attendees wish to inquire or modify their own personal data, the committee will respond within a reasonable time after confirming the conference attendees' identification.
   8. On the ICCPR 2020 website, the committee may use "cookie" to provide better user experience, but the committee does not acquire any data to identify individuals. "Cookie" is a function to store on the computer of the person who viewed the website. By denying to accept cookies, some of the web site may not work properly.
   9. The committee will comply with the laws and regulations applicable to conference attendees’ personal data, and the committee will review and improve these efforts as necessary. In case of incidents, the committee may provide the personal data at the time of police investigation and requests from relevant authorities.
2. The purpose of processing personal data acquired from conference attendees
   For personal data provided at the time of conference registration, the committee will use it within the range necessary for the various conference operation, which include contacting the participant.
3. Disclosure of the personal data
   The committee discloses the obtained personal data only to the designated data processor except to the appropriate authorities to investigate and/or prevent a crime or other illegal activities.
4. International transfer of Personal data
   Personal data provided by conference attendees is stored in Japan and shall not be transferred to any other country except in case the data is send back to its owner attendee who resides outside Japan.
5. Deletion of data
   Conference attendees’ personal data will be kept for maximum of 1 year and then properly erased and discarded.
6. Conference attendees’ rights
   Conference attendees have the following rights regarding their own personal data.
   1. Right to know attendee's own personal data and relevant information
   2. Right to correct the incorrect personal data of his/her own without undue delay
   3. Right to eliminate attendee’s own personal data without undue delay
   4. Right to receive personal data provided by attendees in appropriate data format.
7. Liability
   The committee assumes no responsibility for any damages caused by the use of ICCPR 2020 web site and through the course of conference registration.
8. Governing law
   This policy shall be governed by and construed in accordance with the lows of Japan without reference to principles of conflict of laws.
9. Data Protection Officer
   The committee appointed a data protection officer (DPO). The contact information of DPO is as follows;