Our company has been committed to being a company that serves society. We are committed to further improving the technology and reliability of our products, aiming to contribute to society, as well as to establish a policy for the protection of personal information, recognizing that it is our social responsibility to handle personal information properly and to make every effort to strengthen the relationship of trust with society.

All persons engaged in business activities at our company (directors, employees, temporary employees, or any other persons who work for our company) shall comply with the "Act on the Protection of Personal Information" and related laws and regulations, as well as the personal information protection policy and related rules, and shall handle personal information accurately and protect customer information. We may provide personal information to third parties only when it is necessary for business operations and permitted by law, such as when we provide personal data to subcontractors in order to outsource business operations, or when we share personal data with our group companies. In such cases, we will conclude necessary confidentiality agreements with the subcontractors and take other measures required by law.
The definition of terms such as personal information in this Personal Information Protection Policy shall be in accordance with the provisions of the Personal Information Protection Law and other related laws and regulations.

When acquiring personal information, the Company shall [except for those permitted as exceptions by law] publicly announce or notify the purpose of use in advance (including public announcements in accordance with these guidelines) and obtain personal information in a lawful and fair manner. In addition, when acquiring personal information directly from the person concerned in a contract or other document (including electromagnetic records), we will clearly state the purpose of use in advance and acquire the information in a lawful and fair manner.
We will use personal information appropriately within the scope necessary to achieve the purpose of use.

We use personal information for the following purposes:

1. Personal information about customers

   [Purpose of Use]

   • Identification and personal authentication of customers
   • Sending of products, invoices, and prizes to winners of campaigns in which the customer has participated
   • Response to customer inquiries, consultations, complaints, repairs and support, confirmation and recording
   • Development of products and improvement and enhancement of other services
   • Improvement and enhancement of the customer experience in digital services (websites, mobile apps, etc.) provided by the Company
   • Advertising and provision of information on products, services, campaigns, etc. by way of invitations, e-mails, etc.
2. Personal information concerning business partners (in the case of corporate customers, their officers and employees)

   [Purpose of Use]

   • Contact necessary for business, execution of contracts, business negotiations, etc.
   • Management of business partner information
3. Personal information concerning shareholders (or their officers and employees if the shareholder is a corporation)

   [Purpose of Use]

   • Exercise of rights and performance of obligations under the Companies Act
   • Management of shareholders, including preparation of records in accordance with various laws and regulations
4. Personal information of applicants for employment and recruiting activities

   [Purpose of Use]

   • Contacting and providing information to applicants for recruitment and recruiting activities, and other uses necessary for recruitment and recruiting activities
5. Personal information concerning employees

   [Purpose of Use]

   • Communication of business to employees
   • Payment of compensation (wages, bonuses, benefits, etc.) to employees, performance of personnel and labor management, and provision of benefits
   • Health management for employees

• When we have obtained the prior consent of the person in question
• When the provision of personal information is required by law
• When it is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the person in question
• When disclosure is particularly necessary for improving public health or promoting the sound growth of children and it is difficult to obtain the consent of the person in question
• When it is necessary to cooperate with the national government or local governments in the execution of their legally prescribed duties, and it is difficult to obtain the consent of the person in question

We will take necessary and appropriate security control measures to prevent leakage, loss, or damage of personal data. In addition, we will exercise necessary and appropriate supervision over our employees and contractors (including subcontractors, etc.) who handle personal data. The security control measures for personal data are separately stipulated in the "Regulations for Handling Specified Personal Information, etc.". The main contents are as follows:

Establishment of rules for handling personal data

• For each stage of acquisition, use, storage, provision, deletion/disposal, etc., "Basic Rules for the Protection of Personal Information" have been established, which include handling methods, responsible persons/persons in charge, and their duties.

Organizational Safety Control Measures

• In addition to appointing a person responsible for handling personal data, the Company clarifies the employees who handle personal data and the scope of personal data handled by such employees, and establishes a system for reporting to the person responsible for handling personal data in the event that a violation of the Personal Information Protection Law or personal information handling regulations is detected or any sign of such violation is detected.
• Regular self-inspections are conducted on the status of personal data handling, and audits are conducted by other departments.

Personnel Safety Control Measures

• Regular training is provided to employees on matters to be considered in handling personal data.
• Items concerning confidentiality of personal data are stipulated in the employment regulations.

Physical Safety Control Measures

• In areas where personal data is handled, the Company controls employee access to rooms and restricts the equipment and other items that employees may bring into such areas, and has implemented measures to prevent unauthorized persons from viewing personal data.
• Measures are taken to prevent theft or loss of equipment, electronic media, and documents that handle personal data, as well as to ensure that personal data is not easily revealed when such equipment, electronic media, etc. are carried, including during transportation within the business site.

Technical Safety Control Measures

• Access control is implemented to limit the scope of persons in charge and the personal information databases handled.
• A system is in place to protect the information system handling personal data from unauthorized external access or unauthorized software.

When we receive a request for reference, correction, suspension of use, deletion, etc. of personal information, we will promptly respond to the request after confirming the identity of the individual in accordance with the prescribed procedures. If you have any questions or wish to exercise your rights regarding this Personal Information Protection Policy, please contact the Contact Desk in 7 below.

7-1 Kiyohara Industrial Park, Utsunomiya-shi, Tochigi, 321-3231
General Affairs and Personnel Department, Muro Corporation
Tel:+81-28-667-7121
Fax: +81-28-667-9960
Mail:ir@muro.co.jp