1. Duties of officers and employees

1. Executives and employees (including temporary staff, part-time staff, and casual staff) shall comply with relevant laws and regulations and basic policies, follow the instructions of the personal information protection manager, and handle personal information appropriately.
2. Officers and employees shall not disclose personal information obtained in the course of their duties to others without proper authorization, nor shall they use such information for improper purposes. The same shall apply after retirement.

2. Privacy Policy

1. Principles for holding personal information
   1. Personal information shall be retained only when necessary for the performance of business, and its use shall be specified as much as possible.
   2. We will not retain personal information beyond the scope necessary to achieve the purpose of use.
   3. Changes to the purpose of use shall be limited to cases where there is a significant connection with the purpose of use prior to the change.
2. Principles for Acquiring Personal Information
   1. When obtaining personal information directly from the individual in writing, etc., the purpose of use shall be clearly indicated to the individual in advance as a general rule.
   2. Do not obtain personal information by false pretenses or other improper means.
   3. As a general rule, we do not collect sensitive information about individual business partners, such as their race, beliefs, family origin, permanent domicile, health, or criminal history.

3. Policy on Handling Personal Information Held by the Company

1. Principles for the use of retained personal information
   1. Personal information held by the Company shall not be used for purposes other than those specified, nor shall it be provided to third parties, except in cases where required by law or where the consent of the individual has been obtained.
   2. Personal information held shall be used within the scope necessary to achieve the purpose of use, and efforts shall be made to ensure that it corresponds to past or present facts.
2. Measures to ensure the security of retained personal information
   1. Take necessary measures to prevent the leakage, loss, or damage of retained personal information, and to otherwise manage retained personal information appropriately.