1. Contents of personal information and method of acquisition

When the Company conduct our business activities or when you contact us through this website, the Company will collect personal information*, including the following items.

• -Name, address, company name, department, title, telephone and fax numbers, e-mail address, bank account information, credit card numbers, shareholder numbers or product and service subscriber information, etc.
• *In the case of an individual such as a sole proprietor, the Company may obtain his/her personal number (My Number information) if it is necessary to use the information for the preparation of payment records and withholding tax certificates.

2． Purpose of use

The Company will use the personal information the Company have acquired within the scope necessary to achieve the purposes listed below and will not use it for any purpose other than those listed below. If it is necessary to handle personal information for purposes other than those listed below, the Company will obtain the consent of the individual to whom the information pertains separately.

（1）Common use

1. – To comply with laws and regulations
2. – To exercise or protect our legal rights
3. – To execute mergers, acquisitions, divestitures, and other transactions involving our business or assets, when occur

（2）Use of personal information of users and those interested in our products and services

1. – To provide various types of information on products and services (new products and services, new functions, functional improvements, etc.)
2. – To provide information on seminars and events
3. – To manage transaction information
4. – To provide information on maintenance and servicing of products and services
5. – To provide customer support and respond to inquiries
6. – To ask users’ opinions about our products and services
7. – To measure the effectiveness of marketing and customer support measures

（3）Use of personal information of our business partners

1. – To manage business partner information
2. – To handle necessary for contract conclusion affairs and implementation of transactions
3. – To conduct billing and payment operations

（4）Use of IR-related personal information

1. – To exercise rights and perform obligations under the Companies Act
2. – To implement various investor relations (IR) measures
3. – To conduct notification and application, etc. based on various laws and regulations
4. – To manage shareholder affairs, such as compiling shareholder data

3．Provision to third parties

The Company will not provide personal data to third parties without obtaining the prior consent of the individual, except in the following cases

• – In the case of sharing personal information of participants to the extent necessary with co-sponsors when holding a seminar, event and exhibition, etc., jointly with them
• – In case of being required by law
• – In case it be difficult to obtain the consent of the individual when it is necessary for the protection of the life, body, or property of an individual
• – In case it be difficult to obtain the consent of the individual when the disclosure is particularly necessary to improve public health and sound development of children
• – In case it be necessary to corporate but the hindrance to perform duties prescribed by laws and regulations for an individual or entity entrusted by either a national agency or a local government be expected if the consent of the individual is obtained

6．Security control measures

In addition to complying with all applicable laws and regulations regarding personal information held by this site, the Company take the utmost care in handling and managing personal data in an appropriate manner to prevent leakage, loss, or damage and to ensure the safe management.

（1）Establishment of basic policy / development and operation of internal rules and regulations

• – The Company shall establish and implement regulations for each stage of acquisition, use, provision, etc. of personal data, specifying the business process, responsible persons and persons in charge, and their duties, etc.

（２）Organizational security control measures

• – The Company shall establish the reporting and communication system to report to person in charge and the secretariat of the Risk Management Committee in the event of an incident
• – The Company shall administer regular monitoring of the status of personal data handling by the Internal Audit Department

（３）Personal security control measures

• – The Company shall administer training on information management, including handling of personal data
• – The Company shall obtain confidentiality agreements from executives and employees when they enter and leave the company.
• – The Company shall place confidentiality rules for personal data in the employment regulations.

（４）Physical security control measures

• – The Company shall classify information according to the level of importance and store and manage it with appropriate security measures such as locking card keys, security gates, and cabinets
• – The Company shall establish rules for the handling of equipment and electronic media used to handle personal data, and shall not lose or destroy them and prevent leakage and damage
• – All equipment that handles personal data is password protected and encrypted.

（５）Technical security control measures

• – The Company shall protect personal data on electronic media with access authorization and passwords.
• – The Company shall provide security against unauthorized access from outside or unauthorized software
• – The Company shall administer constant monitoring of personal data handling devices of executives and employees.

（６）Understanding the external environment

• – In the event that the Company use cloud services for the handling of personal data services, and if the service provider is located or the country in which the server where the personal data is stored is not in Japan, the Company shall understand the system for the protection of personal information in the country to which the laws and regulations apply, and implement necessary and appropriate security control measures