Privacy Policy
1.

About this Policy

This Policy applies to the Processing of Personal Data by Daido Kogyo Co., Ltd. (“DKK”, or“we”/“us”/“our”) regarding its contact persons (“Business Partner Contact”/“you”/“your”) at
customers, dealers, distributors, contractors and subcontractors, suppliers and professional advisers(“Business Partners”). We recognize the importance of Personal Data and the need to observe
applicable laws and regulations governing the protection of Personal Data, in order to Process Personal
Data in a lawful and appropriate manner.
2.

Definitions
In this Policy:(a)“Personal Data” means any information relating to an identified or identifiable natural
person;(b) “Process/Processing” means any activity or operation that is carried out in respect of the
Personal Data, such as collecting, storing, using, transferring, or deleting it.
3.

How we collect your Personal Data and what Personal Data we collect

We may collect information that you provide to us, whether by means of a form on our website, byemail, in a letter, or otherwise, such as your name, company name, address, division, title, email
address and phone number. In some circumstances, we may be provided such information relating toyou by another organization.
4.

Purpose of Processing Personal Data

We use the Personal Data that we hold about you for the following purposes (and only to the extent
necessary to fulfil those purposes):(a)to communicate with Business Partners;(b) to respond to inquiries, requests, etc. from Business Partners;(c)to provide information on products, services, events, etc. and to conduct public relations
activities;(d) to perform duties related to the performance of contracts and transactions with Business
Partners and to perform related and incidental duties;(e)

to conduct research and development activities and related and incidental operations;(f)to submit various applications and reports to government and public agencies;(g) to carry out various internal and external group activities and related and incidentaloperations;

(h) to communicate with Affiliates, subcontractors, etc. and to exchange information necessary
for the performance of business; and(i)5.

to carry out other business activities of the DKK and other operations related or incidental
to the above purposes.

Disclosure of Personal Data to recipients and joint use of Personal Data

We may share your Personal Data, without your prior consent, with the following categories ofrecipients. We may also supply or disclose Personal Data to third parties when it is necessary for
another justifiable reason permitted by laws and regulations.
(a)Affiliates: We may share your Personal Data with our Affiliates;(Joint use of Personal Data)
Under Japanese law, we may share your Personal Data with our Affiliates in the frameworkof joint use under the Act on the Protection on Personal Information, the details of which
are as follows:Entity withwhich
personal
data isshared

Affiliates (please refer to the companies listed in the "DomesticGroup"
sectionofourwebsite(https://www.daido.co.jp/en/about/index.html) for the scope of“Affiliates”)
Purpose of
sharing
Personal
data to besharedParty
responsibleformanagementof personaldata

to provide information and contacts regarding various products,services, events, etc. offered by Affiliates;
to respond to inquiries and requests from Business Partners; and
to properly and smoothly carry out other Daido Group operations.
Name, age, gender, date of birth, name of company/organization,department, title/position, qualifications, personal history andcontact information.
Affiliates that acquire and share the relevant Personal Data.
Please refer to Section 9 below for our address and the name of ourrepresentative.

(b) Service providers: We may disclose your Personal Data to service providers, including IT
service providers.
6.

Storage period for Personal Data

We will retain the Personal Data for as long as we need it to fulfill the purpose for which we havecollected it including as long as required by statutory retention requirements.

7.

Your rights

You have a number of legal rights in relation to the Personal Data that we hold about you. These rights
may vary depending on where you are located and which data protection laws apply to the relationshipbetween you and us, but typically will include the following:(a)Right to obtain information regarding the Processing of the relevant Personal Data and toaccess the relevant Personal Data that we hold;(b) Right to request rectification of the relevant Personal Data if it is inaccurate or incomplete;(c)

Right to request erasure of the relevant Personal Data in certain circumstances;(d) Right to request that we restrict our Processing of the relevant Personal Data in certaincircumstances;(e)

Right to object to our Processing of the relevant Personal Data;(f)

Right to receive the relevant Personal Data in a structured, commonly used, and machinereadable format and/or to request that we directly transmit such Personal Data to a recipient
where this is technically feasible; and(g) Right to withdraw your consent to our Processing of the relevant Personal Data at any time.
You may exercise any of your rights by contacting us, using the information about us indicated inSection 9 below. You also may lodge a complaint with the data protection authority if you believe thatany of your rights have been infringed by us.
8.

Security control measures

We take all necessary and appropriate security control measures, including measures to prevent theleakage, loss, or damage of Personal Data to be Processed, such as establishing rules for the Processingof Personal Data, training of employees in the Processing of Personal Data, and prevention of theft orloss of equipment Processing Personal Data.
You may obtain further details about the security control measures we have in place in relation to theProcessing of your Personal Data by contacting us using the information about us indicated in Section
9 below.
9.

Contact details

If you have any questions about this Policy, your rights, or any other matter relating to the protectionof your Personal Data, please contact us at the following address:(a)Address of head office: 1-6-35 Konan, Minato-ku, Tokyo, 108-8487, Japan(b) Department: General Affairs Department(c)

Name of representative: Kazuto Tachibana(d)Email address: dkk_soumu@daidokogyo.co.jp(e)Telephone number: 81-3-5495-7180

For Business Partner Contacts in the EEA and the UK
This section applies to Business Partner Contacts in the EEA and the UK.
1.

Legal basis

The legal basis for Processing your Personal Data is as follows:(a)Contract. This is where we need to Process your Personal Data to perform the contract weenter into with you.

(b) Legitimate Interests. This is where the Processing of your Personal Data is necessary for
legitimate interests pursued by us or a third party (e.g. to respond to your inquiries) andyour interests and fundamental rights do not override those interests. You may obtainfurther details about legitimate interests by contacting us using the information about us
indicated in Section 9 above.
(c)Consent. This is where you have given consent for us to Process your Personal Data. The
withdrawal of your consent shall not affect the lawfulness of Processing performed basedon the consent before your withdrawal.

(d) Legal obligation. This is where the Processing of your Personal Data is required by thelaw to which we are subject.
2.

Transfers of Personal Data outside the EEA or the UKYour Personal Data may be transferred to, and stored by, a third party outside the EEA or the UK.
Where we transfer your Personal Data to a third party outside the EEA or the UK, we will ensure that:(a)the recipient destination has been subject to a finding from the European Commission or
has been designated by the government of the UK as ensuring an adequate level ofprotection for the rights and freedoms that you possess in respect of your Personal Data; or(b)the recipient enters into standard data protection clauses that have been approved by theEuropean Commission, or other contracts for the transfer of personal data as required bydata protection laws, with us.

In the absence of the aforementioned appropriate safeguards, we may – to the extent permitted underand in accordance with the GDPR - rely on a derogation applicable to the specific situation at hand(e.g. the data subjects’ explicit consent, the necessity for the performance of a contract, the necessity
for the establishment, exercise or defense of legal claims). You can obtain more details of theprotection given to your personal data when it is transferred outside the EEA or the UK by contacting
us using the information about us indicated in Section 9 above.

For Business Partner Contacts in Thailand
This section applies to Business Partner Contacts in Thailand.
1.

Legal basis

The legal basis for Processing your Personal Data is as follows:(a) Contract. This is where we need to Process your Personal Data to perform the contract
we enter into with you.
(b) Legitimate Interests. This is where the Processing of your Personal Data is necessary
for legitimate interests pursued by us or a third party (e.g. to respond to your inquiries)
and your interests and fundamental rights do not override those interests. You may
obtain further details about legitimate interests by contacting us using the information
about us indicated in Section 9 above.
(c) Consent. This is where you have given consent for us to Process your Personal Data.
The withdrawal of your consent shall not affect the lawfulness of Processing performed
based on the consent before your withdrawal.
(d) Legal Obligation. This is where the Processing of your Personal Data is required bythe law to which we are subject such as tax law.
2. Transfers of Personal Data outside ThailandYour Personal Data may be transferred to, and stored by, a third party outside Thailand. Where
we transfer your Personal Data to a third party outside Thailand, we will ensure that:(a) the recipient destination has adequate data protection standard in accordance with therules for the protection of Personal Data as prescribed by the Personal Data Protection
Committee under Section 16(5) of the Personal Data Protection Act;(b) it is necessary for compliance with laws;(c) with your consent where you are aware of the inadequate personal protection standardsof the recipient destination;(d) it is necessary for the performance of a contract which you are a party, or for taking steps
as your request prior to entering into a contract;(e) it is necessary for the performance of a contract with other persons or juristic persons foryour interests;(f) to prevent or suppress a danger to your life, body, or health or other persons, when you
are incapable of giving the consent at such time;(g) it is necessary for carrying out the activities in relation to substantial public interest;

(h) the recipients are ones of our Affiliates where there is standard data protection clausesthat have been approved by the Office of Personal Data Protection Committee and thetransfer is carried out in accordance with such approved clauses; or(i) the recipients are ones where there is suitable protection measures which is enable theenforcement of your rights, including effective legal remedial measures according to therules and methods as prescribed and announced by the Personal Data ProtectionCommittee.

For Business Partner Contacts in China
This section applies to Business Partner Contacts in China.
1.

Handling methods

We handle the collection, storage, use, processing, transmission, provision, disclosure, anddeletion of Personal Data.
2. Processing of Sensitive Personal Information
When handling sensitive personal information, we shall take the measures required by thePersonal Information Protection Law of the People's Republic of China (hereinafter referred to as
the "Law" in this item), such as informing Business Partner Contacts of the necessity of handlingsensitive personal information and its impact on personal rights and interests. We will take themeasures required by the Personal Information Protection Law of the People's Republic of China(hereinafter referred to as the "Law" in this item), including informing Business Partner Contactsof the necessity of handling sensitive personal information and its impact on personal rights andinterests.
3.

Provision of Personal Data

In the event that we provide your Personal Data to a third party other than a contractor to whom
we entrust the Processing of Personal Data, we will take the measures required by law, such as
notifying you of the name or names of the third party, contact method, purpose of Processing,Processing method, and type of Personal Data.
In addition, if we provide your Personal Data to a third party outside of China, we will take themeasures required by law, such as notifying you of the name of the third party, contact method,
purpose of Processing, Processing method, type of Personal Data, and methods and proceduresfor exercising the rights stipulated by law against the third party.