PRIVACY POLICY

Acquisition of Personal Information

When acquiring personal information, the Company will publicly disclose (including disclosure under this Privacy Policy) or notify the purpose of use and acquire personal information by lawful and fair means.

Compliance with Relevant Laws and Guidelines

The Company will comply with the Act on the Protection of Personal Information, other applicable laws and regulations, and the guidelines of the Personal Information Protection Commission, and will handle personal information appropriately.

Purpose of Use of Personal Information

The Company will use the acquired personal information within the scope of the following purposes. If the purpose of use is changed, the Company will notify the individual concerned or publicly disclose such change.

• To propose and provide products and services offered by the Company (including its group companies; the same applies hereinafter in “Purpose of Use of Personal Information”) as part of its business operations (please see here for details of the Company’s business activities).
• To provide information regarding products and services offered by the Company (such as email newsletters, seminar and event announcements).
• To respond to inquiries and communications.
• Recruitment and selection of employees and staff, as well as personnel management after job offers and upon joining the Company.
• Purposes presented to the individual at the time of personal information acquisition.
• Execution of business operations related to the Company (such as contract management, business communications, legal compliance, quality control, and risk management) that are necessary to achieve, or incidental to, the above purposes.

Provision to Third Parties

The Company will not disclose or provide personal information to any third party, except in the following cases:

• When required by laws and regulations.
• When necessary to protect a person’s life, body, or property, and it is difficult to obtain the individual’s consent.
• When particularly necessary for improving public health or promoting the sound upbringing of children, and it is difficult to obtain the individual’s consent.
• When cooperation is required with national or local government agencies, or their entrusted parties, to perform duties prescribed by law, and obtaining the individual’s consent may hinder the performance of such duties.
• When prior consent has been obtained from the individual.

Joint Use

The Company may jointly use personal data as described below.

Scope of Joint Users

The Company’s group companies (please refer here for a list of the Company’s group companies).

Purpose of Joint Use

Within the scope of the purposes of use described in the “Purpose of Use of Personal Information.”

Items of Personal Data to be Jointly Used

• Name (including affiliated company, department, and title that identify the individual)
• Address
• Telephone number, fax number, and email address
• Inquiry details, opinions, requests, and their response history

Manager Responsible for Joint Use

Envipro Holdings, Inc.

Please refer here for the address and name of the representative.

Response to Requests for Disclosure, etc. of Personal Information

When the Company receives a request from an individual regarding personal data held by the Company, in accordance with the Act on the Protection of Personal Information, such as a request for disclosure, correction, addition, deletion, suspension of use or erasure, cessation of provision to third parties, or notification of the purpose of use, the Company will respond appropriately. This will be done in accordance with the Act on the Protection of Personal Information, after confirming the identity of the individual or their authorized representative through the prescribed procedures.

Security Measures and Risk Management

The Company appropriately manages personal information and implements proper measures to prevent unauthorized access to the Company’s network, loss, leakage, or alteration of personal information. In addition, the Company strives to maintain and improve its personal information protection system.

Outsourcing of Handling of Personal Data

When the Company outsources the handling of all or part of personal data to a third party, the Company will take appropriate measures with the outsourcing party to ensure the security management of the outsourced personal data.

Date of Establishment: May 8, 2017
Date of Enforcement: May 30, 2017
Date of Last Revision: October 10, 2025