Handling of Personal Information

Effective April 1, 2026

1. Specifying and Disclosing the Purpose of Use

In the course of our business operations, we collect personal information (such as names, dates of birth, contact information, and other information that can identify a specific individual) from customers, business partners, and others through various means, including the acceptance of applications, surveys, business negotiations, and the conclusion of contracts, as well as from publicly available sources. We will use the personal information we collect for the following purposes.

2. Provision of Personal Information to Third Parties

We will not provide the personal information we have received to third parties. However, this does not apply in the following cases:

1. When prior consent has been obtained

2. When outsourcing to a third party within the scope necessary to achieve the purpose of use, as described in the section below titled “Outsourcing of Personal Information”

3. When required by law

4. When necessary to protect human life, physical safety, or property, and it is difficult to obtain the individual’s consent

5. When it is particularly necessary for the improvement of public health or the promotion of the sound development of children, and it is difficult to obtain the individual’s consent

6. When it is necessary to cooperate with a national agency, a local public entity, or a person entrusted by such an entity in the performance of duties prescribed by laws and regulations, and obtaining the individual’s consent may hinder the performance of such duties

3. Outsourcing of Personal Information

To ensure the smooth execution of our business operations, we may outsource the handling of the personal information we have received to external parties. We will select contractors that meet the standards established by our company and will manage and supervise the handling of the outsourced personal information.

4. Inquiries Regarding Personal Information

We accept consultations and complaints regarding personal information, as well as requests for “notification of purpose of use,” “disclosure,” “correction,” “deletion,” “suspension of use,” “erasure,” and “suspension of provision to third parties” at the contact information below.

Please note that the personal information we collect through the contact point below will be used to respond to inquiries regarding personal information and to improve our future personal information protection activities. 。

5. Measures Taken for the Security Management of Retained Personal Data, etc.

When actually handling personal information, we implement security management measures from the following four perspectives: organizational, human, physical, and technical.

(1) Organizational Security Management Measures

① Establishment of Organizational Structure

To implement security management measures, we have established the following organizational structure:

・Appointment of a person in charge of personal data handling and clarification of responsibilities

・Clarification of the scope of personal data handled by employees

② Establishment of a system to respond to incidents such as data leaks

In preparation for the occurrence of incidents such as data leaks, we have established a system to implement the following responses:

・Posting an emergency contact list within the company

・Implementing emergency response measures to prevent the spread of damage

・Investigating the facts and determining the cause

・Notifying individuals who may be affected

・Reviewing and determining measures to prevent recurrence

③ Monitoring of Handling Practices

・Conducting regular self-inspections regarding the handling of personal data

・Conducting an annual audit by an independent internal audit department

(2)Personnel-Related Security Measures

① Employee Education

・Formulate an annual education and training plan regarding the handling of personal information

・Conduct education and training for employees based on the above plan

② Supervision of Employees

・Establish employment rules stipulating disciplinary actions for violations of regulations or procedures

・Require employees to submit a written pledge regarding the handling of confidential information, including personal data

(3) Physical Security Measures

① Management of Areas Where Personal Data Is Handled

・Access control

・Measures to prevent unauthorized persons from viewing personal data

② Prevention of Theft, etc., of Equipment and Electronic Media

・Store equipment used to handle personal data, electronic media containing personal data, documents, etc., in lockable cabinets

③ Prevention of Leaks, etc., When Transporting Electronic Media

・Implement password protection for equipment used to handle personal data that is being transported

④ Deletion of Personal Data and Disposal of Equipment and Electronic Media

・When disposing of documents containing personal data, use methods that render the data irrecoverable, such as shredding or dissolution

・When disposing of equipment or electronic media containing personal data, use methods such as physical destruction or entrusting disposal to a specialized contractor

(4) Technical Security Measures

① Access Control

・Limit the information systems authorized to handle personal information databases

・Limit employees who can use information systems handling personal information databases, etc., based on the access rights assigned to user IDs

② Identification and Authentication of Accessors

・Identify system users using user IDs, passwords, etc.

・Periodically review the registration and usage of identification information, and promptly delete unnecessary identification information

③ Prevention of Unauthorized Access from External Sources

・Install security software (such as antivirus software) on information systems and devices, and check for the presence of malicious software

④ Prevention of leaks and other incidents associated with the use of information systems

・Ensure security during the design of information systems and conduct ongoing reviews

・For personal data being transferred, utilize cloud storage and implement protection measures such as passwords

6.Revisions to this page

We may revise the content of this page to further enhance the protection of personal information or in response to the enactment or amendment of various laws, regulations, or guidelines.