In order to implement this policy, the Company has established "Personal Information Protection Regulations" and systematically conducts education and training to ensure that all officers and employees of the Company are thoroughly aware of it, and regularly checks the status of compliance with this policy. We will review and evaluate the personal information protection measures as appropriate, and strive to maintain and improve them.

In order to prevent leakage, falsification, loss, unauthorized use, etc. of personal information of customers, business partners and employees, we take technical security control measures and implement appropriate information management measures such as unauthorized access countermeasures and computer virus countermeasures. Build a system.

We will promptly destroy your personal information when the retention period stipulated by law has passed, or when we no longer need to handle your personal information.

Regarding the use of personal information, we will handle it within the scope of the purpose of use and to the extent necessary for the execution of business.

Our executives and all employees will not provide personal information obtained in the course of business to a third party or use it for unfair purposes without obtaining the consent of the person in question. In addition, when receiving personal information from a third party, we will confirm that the information has been obtained properly.

The Company will establish an "Information Security Committee" within the Compliance Promotion Committee and an information management secretariat within the General Affairs Department to build a system for centralized management of information management.