PRIVACY NOTICEFor reports of vulnerability

First published: January 25th, 2024
Last updated: [January 25th, 2024]

We, AIPHONE CO., LTD., take your privacy seriously. When we process your personal data, we undertake to comply withall protections provided to you by data protection laws, including the European Union's General Data Protection Regulation("GDPR") and the US California Consumer Privacy Act ("CCPA"). Below is our notice on how we process and protect yourpersonal data that we receive when you contact us.

◼

PERSON IN CHARGE (controller)

This privacy notice is issued by us, AIPHONE CO., LTD. When we collect and use your personal data, we are responsible
for protecting your rights in relation to your personal data.

◼

PURPOSES, LAWFUL BASIS (why and on what lawful grounds we use your personal data), SOURCES (Source ofinformation) and RETENTION (how long we retain your personal data)

As shown in the table below, we obtain your personal information, the types of information we obtain, the legal basis, thesource of collection and the retention period.

PurposePersonal Data

Lawful Basis
Consent by youSources

Retention

From Vulnerability

Until completion ofTo respond to reports

Name, E-mailof vulnerability

address, Phone

Contact Form

countermeasures for

Number, User Type,（http://www.aiphone.nethe vulnerabilities

Companyt/about/product-

reported by yousecurity/psirt/contact/）◼

SENSITIVE PERSONAL DATA

We usually do not collect or use sensitive personal data. If we collect and use sensitive categories of personal data, we willobtain your prior express consent, unless this is necessary to fulfil a statutory obligation or to protect your or anotherperson's vital interests in an emergency.

◼

SALE AND SHARING

We do not sale and sharing personal information and sensitive personal information.

◼

DISCLOSURE

We will not disclose the reporter's personal information received during the vulnerability reporting process to any third party

1other than our company. When disclosing information to a third party, we will obtain prior explicit consent.

◼

TRANSFER TO NON-EU COUNTRIESWe usually do not transfer your personal data to any entities located in any other countries outside of the European
Economic Area., where data protection law with a level of privacy and data protection equivalent to that of GDPR is not inforce. In cases such a data transfer happens, we either ask for your prior consent thereto or we protect your rights withpersonal data by virtue of data transfer agreements with relevant data recipients pursuant to Article 46 of the GDPR, which
impose on such recipients contractual obligations to ensure adequate level of data protection equivalent to those laid down
by GDPR.

◼

YOUR LEGAL RIGHTS

Provided that certain conditions are met, you have legal rights to request from us the following:Access to your personal data and to certain supplementary information covered by this notice;Correction of your personal data if inaccurate or incomplete;

Erasure of your personal data in certain circumstances;

Suspension of using your personal data in certain circumstances;

Stopping processing your personal data in certain circumstances;

Obtaining your personal data in a structured, commonly used, and computer-readable format;

Right not to be discriminated against on the grounds of the exercise of rights.

If you wish to exercise your right, please contact us.

◼

COMPLAINTYou can lodge complaints about our way of processing your personal data with data protection supervisory authorities.

◼

PRIVACY POLICYOur PRIVACY POLICY: https://www.aiphone.net/privacy/◼

INQUIRY

For further information and inquiry, contact:
AIPHONE CO., LTD.
psirt@aiphone.co.jp

2