Attachment 2 (Information on directors and employees of business partners)
Information on directors and employees of business partners:

1.

(Details of content, retention period, and source of acquisition for each category)

The Company processes the following personal information and other personal information acquired by theCustomers in connection with the Company’s business activities (if required by applicable laws and regulations, theCompany will acquire such information after separately notifying the individual concerned).
The Company also process the personal information listed below for the purposes listed below and for other purposespermitted by applicable laws and regulations. The Company may also de-identify or create statistics of personal
information.
No.
1

Data type
Informationon

Category
directors,

Name, address, name and location ofemployees,

etc.

of

businesscompany,department,associates(including

potential

telephone number, and e-mail address

Retention

Source ofperiodacquisition＊

position,Directors

andemployees

ofbusinessbusiness associates and visitors topartners

the Company’s website) who do[the Individual]

not fall under No. 2. Information
on directors, employees, etc. of theCompany
2

Subcontractors, etc. within theName, name of company, type ofCompany's business sites

business, telephone number, e-mailcompanies

address, company address

and/or＊Cooperating
theIndividual
Work accident information (name,＊

Cooperating

date of birth, date of hire, employment

company or thestatus, physical condition, accident

Individual

occurrence (name of injury or illness,course of events leading up tooccurrence))
Types of Sensitive Information
No.
3

Subject/Type
Subcontractors,etc.

Company's business sites

withinCategory
thePhysicalcondition,

disaster

Retention

Source ofperiodacquisition＊The Individual

occurrence (name of injury orillness, course of events leading up
to occurrence)*To determine the appropriate retention period for personal information, the Company consider the volume, nature,

Oct. 01, 2023 (first edition)

Attachment 2 (Information on directors and employees of business partners)
and sensitivity of the personal information, the risk of potential damage from unauthorized use or disclosure of thepersonal information, the purposes for which the Company processes the personal information and whether theCompany can achieve those purposes by other means, and applicable legal requirements. If the Company no longer
needs the personal information the Company has collected about the Individual, the Company will delete oranonymize it, or if this is not possible (for example, if the personal information is stored in a backup archive), theCompany will securely store the personal information of the Customers until the Company are able to delete it,after which the Company will ensure that no new processing of the personal information of the Customers takes
place.

2.

(Details of the purpose and legal basis of the process)

The Company processes personal information in accordance with applicable personal information protection
regulations. Where the GDPR is applicable, the Company processes personal information for the purposes described
below and on the legal basis set forth below. In some cases, the Company may obtain the Individual’s consent toprocess the personal information, but even in these cases, the legal basis for processing is "where processing isnecessary for the performance of a contract" or "where processing is necessary for the pursuit of legitimate interests"
or “where processing is necessary to comply with a legal obligations”, except in the cases described below in "Whereobtaining the Individual’s prior consent (Article 6-1 (a), , GDPR)". In addition, the Company will obtain the consent
of the individual to direct marketing to the individual in cases where such consent of the individual to direct marketingis required by law.
Purpose of processing (use)Data type No.

Legal basis① Sales Promotion Activities

1Consent of the Individual② Emergency call2

For the performance of a contract with theIndividual③ Response to industrial accidents

2, 3and disasters
In case of consent

To comply with legal obligations imposed on theCompanyThe information is obtained directly through exchange of business cards with the Individual.

of the IndividualFor

theperformance of theIn accordance with the terms and conditions with the cooperative association and/orindividual outsourcing agreements.

contract3.

(Details of sharing and disclosure of personal information, countries of cross-border transfer)

In order to fulfil the purposes of the processing described in the previous article, the Company shares and discloses
the personal information of the Customers to third parties in the following cases. In addition, please refer to theSection 2 of this Privacy Policy for the cases in which the information is provided on the basis of sharing under theJapanese Personal Information Protection Law.
No.

Data type

Details of sharing and disclosure

Countries of cross-border transfer

Oct. 01, 2023 (first edition)

Attachment 2 (Information on directors and employees of business partners)
Not applicable

Oct. 01, 2023 (first edition)