FAIR PROCESSING NOTICEPERSONAL DATA PROCESSINGBY SUMITOMO MITSUI TRUST HOLDINGSEFFECTIVE DATE: 25 MAY 2018
PURPOSE AND APPLICATION OF THIS NOTICE
Sumitomo Mitsui Trust Holdings ("SMTH", "we", or "us", or “our”) routinely collects anduses information relating to identifiable individuals (“personal data”), including data relatingto:
1. staff, managers, advisors, intermediaries and other representatives of our clients andprospective clients (“representatives”);
2. the beneficial owners, shareholders, partners, officers and directors of our legal entity,
partnership or fund clients and prospective clients;
3. the settlors, trustees, beneficiaries and protectors of the trusts (or similar legal
arrangements) to which we provide services or to which we may seek to provide
services; and4. other persons affiliated or associated with our clients and prospective clients and theirrepresentatives.
We provide this fair processing notice ("notice") in accordance with our obligations under theEuropean Union’s General Data Protection Regulations and/or the UK General Data Protection
Regulations and other applicable data protection laws, and as part of our commitment toprocessing personal data transparently.
This notice applies to you if the SMTH entity or entities which contracts or seeks to contract
with the entity, partnership, trust or fund that you own, represent, are employed by or areotherwise associated with is established in the EEA, the UK or Switzerland.
CONTENTSThis notice provides information on:- the SMTH entity or entities responsible for processing your personal data;- the personal data we collect from you and from third parties about you;- the purposes for which personal data is processed and our lawful basis for doing so;- how your personal data is shared by us; and- your rights in relation to our processing of your personal data, and how you can exercise
these rights.
CONTACT DETAILS
If you would like to contact us regarding the processing of your personal data, please contact
euprivacy@smtb.jp or at the following address: 155 Bishopsgate, London EC2M 3XU.
1. WHO IS RESPONSIBLE FOR YOUR PERSONAL DATA?
The SMTH entity which contracts, or seeks to contract, with the entity, partnership, trust or
fund that you own, represent, are employed by or are otherwise associated with will be a data1

controller of your personal data. In addition, where processing of personal data is undertaken
by an entity controlled by, or under common control with, Sumitomo Mitsui Trust Holdings (a“SMTH affiliate”) for their own purposes, these affiliates may also be data controllers of yourpersonal data.
This notice applies in conjunction with any other notices you receive from SMTH affiliates inconnection with the processing of your personal data.
2. WHAT PERSONAL DATA DO WE PROCESS?
2.1. YOUR PERSONAL DATASMTH and SMTH affiliates will, depending on the relationship we have with you and the
products and services we provide (or seek to provide), process certain personal data relating to
you and people connected to you, including the data listed below:
A. PROFESSIONAL AND PERSONAL DETAILS - primarily we process your name,details of the client you are employed by, represent, own or are otherwise associatedwith, your role at such client and your professional contact details. We may also
process additional information in order to be able to liaise with you in connection withthis role, such as information to identify you and evidence your authority to represent
our client. If you are a trust beneficiary or a fund unit holder this may also include
details enabling us to honour your rights, including eligibility to payments, under theterms of the relevant trust or fund.
B.

INFORMATION USED FOR BACKGROUND CHECKS, MONITORING
AND COMPLYING WITH LAWS AND REGULATIONS - if you are a principal
this may include date of birth, nationality, country of residence/domicile, documents
required for anti-money laundering checks and monitoring (including a copy of yourpassport or national identity card), records of any required disclosures, and ofrestrictions on your ability to invest (such as any insider status or political exposure),
and other details of your affiliations and/or of our relationship with you as necessary
to enable us to meet applicable laws and regulations, including regulatory reporting
requirements and identifying any conflicts of interest.
Where required or authorised by applicable laws, this may involve processing data
relating to any political affiliations you may have, as well as criminal convictions
or allegations of offences.

C.

RECORDS CONNECTED WITH PROVIDING PRODUCTS ANDSERVICES TO OUR CLIENTS OR PROSPECTIVE CLIENTS - such as notesfrom interactions, meetings and conversations that you have with us or our affiliates(including records of your instructions to us and, to the extent permitted or requiredby law, recordings of telephone calls), records of correspondence, and/or our
brokerage, financial or other services made available electronically by SMTH to you
and/or the SMTH client or prospective client you represent (including data transmitted
by your browser and automatically recorded by our server). This also includes accountdetails, records of agreements, payments, investments, trades and other transactions
that contain your name or other personal data, and any identifiers that we or ouraffiliates assign to records associated with you.

In some cases we may obtain your personal data from SMTH affiliates or from third parties.
Depending on the products and services we provide to you, this may include trade or transaction2

counterparts, credit reference agencies, public registers (such as beneficial ownership registers),
financial crime screening databases, fraud prevention agencies, and persons or entities
instructed by you to provide us with your personal data.
2.2. DATA RELATING TO THIRD PARTIES – RELEVANT TO PRINCIPALS
If you are a principal, in addition to processing data on your representatives, if any (as discussed
in this notice), we may process personal data of persons connected to you but with whom
SMTH does not directly communicate, such as dependants and family members.
Before you provide data relating to third parties, you should ensure you are permitted to do so
and provide them with the relevant information contained in this notice, and draw theirattention in particular to the following:
A. SMTH and SMTH affiliates may process data such as family information, academic
information, former employment history and references when provided to us. In someinstances we may therefore receive personal data about and from third parties. This
may include recruitment agencies, financial crime screening databases, fraud
prevention agencies, and persons or entities instructed by you to provide us with yourpersonal data.
B. Where we process data revealing political opinions, religious beliefs or concerning
sexual orientation, we process this data on the basis that it: (i) has manifestly been
made public (to the extent this applies); or otherwise (ii) is on the basis that thisprocessing is necessary for the purposes of carrying out our obligations and exercising
our specific rights in the field of employment; or otherwise (iii) is on the basis thatprocessing is necessary for reasons of substantial public interest on the basis of EU,
EEA Member State or UK law or on the basis of other applicable laws.
3. FOR WHAT PURPOSES AND ON WHICH LEGAL BASES DO WE PROCESSPERSONAL DATA?
3.1. PURPOSES FOR PROCESSING
SMTH and SMTH affiliates process your personal data for specific purposes and process only
the personal data relevant for achieving that purpose. Depending on our relationship with you
and the products and services that we are providing, we may process your personal data for thefollowing purposes and for compatible purposes:
A. ACCOUNT OPENING - processing data about you that we require in connection with
opening our client’s account, such as identity verification information. This may
include review and processing application and account opening documents and, if you
are a principal, conducting background prudential and regulatory compliance checks.
B. PROVIDING PRODUCTS AND SERVICES TO OUR CLIENTS ORPROSPECTIVE CLIENTS - processing personal data to ensure the proper provisionof our products and services to our clients. This includes identity verification,transaction processing and keeping appropriate records and registers (such as
documenting agreements and recording instructions).
C.

MANAGING OUR RELATIONSHIP WITH OUR CLIENTS AND
CONNECTED PARTIES - including compiling and utilising internal reports andnotes, managing the client file, conducting risk reviews, allowing you to access our
websites and secure online platforms and other technological services, and, whereapplicable, managing any agreement or arrangement between us and our clients andconnected parties.
3

D. COMMUNICATING WITH YOU - processing data required to communicate withyou in person, by telephone, mail and email (including issuing statements and reports),
keep records of our communications with you, and manage any complaints.
E. CARRYING OUT OPERATIONAL AND ADMINISTRATIVE FUNCTIONS including carrying out billing-related and payment administration, staff and accessmanagement, preparing business reports and accounts, operating information
technology systems, archiving and backing up data, and transferring personal data.
F. HELPINGUS TO IMPROVE OUR PRODUCTS, SERVICES AND
OPERATIONS - including conducing market research, analysis of client andprospective client preferences, transactions and market trends, evaluating potential new
products and services, evaluating the effectiveness of our marketing, as well as testing
new systems and upgrading existing systems. To the extent permitted by law, this may
include monitoring emails and your use of our brokerage, financial or other services
made available to you electronically by SMTH to assess, maintain and improve thequality of our services.

G. PRUDENTLY MANAGING OUR BUSINESS AND PROTECTING AND
ENFORCING OUR RIGHTS - including assessing, monitoring and managing
financial, reputational and other risk, conducting audits of our business, liaising with
our regulator, protecting data used by our business and establishing, enforcing anddefending against legal claims.
H. MARKETING - such as direct marketing of products and services that we think may
be of interest to our clients or prospective clients, including on behalf of SMTH
affiliates and strategic partners.
I. MEETING

OUR LEGAL, REGULATORY AND COMPLIANCEOBLIGATIONS AND PREVENTING FINANCIAL CRIME - this includes
performing prudential and regulatory compliance checks on an ongoing basis, accountand transaction monitoring, transaction reporting, tax reporting, monitoring ourmanagement of client accounts and client interactions, making disclosures to, andcomplying with requests from public authorities, regulators, tax authorities,
governmental bodies or law enforcement agencies, and investigating and preventing
fraud and other crime. To the extent permitted or required by law, this may include
recording telephone conversations and monitoring emails and your use of ourbrokerage, financial or other services made available to you electronically by SMTH.

We may also process data for other purposes we notify to you from time to time.
3.2. LEGAL BASIS FOR PROCESSING
The personal data processing described in this notice may be:
A. necessary in order to comply with our legal obligations under certain laws;
This applies to regulatory compliance checks referred to in part A and I of section
3.1, record keeping described in part D of section 3.1, reporting and creation of
accounts referred to in part E of section 3.1, business management and regulatory
liaison activities referred to in part G of section 3.1, and the processing describedin part I of section 3.1, in each case where carried out in respect of the relevant laws.
B. necessary for entry into, or performance of, a contract with you; orWhere you act as an intermediary, this relates to processing to manage ouragreement with you, referred to in part C of section 3.1.
4

C. necessary for the legitimate interest of SMTH or others, where these are not overridden
by your interests or fundamental rights and freedoms (as described below); or
D. in limited circumstances and to the extent the legal bases for processing set out above
do not apply, processed with your consent (which we obtain from you from time totime).
The ‘legitimate interests’ referred to in section 3.2.C above are:--the processing purposes described in sections 3.1.A to 3.1.I (inclusive) of this notice,to the extent the processing is not necessary in order to (i) comply with our legal
obligations under certain laws or (ii) to enter into any contract with you and fulfil our
obligations thereunder (for example, where you provide intermediary services);
meeting and complying with our accountability requirements and regulatory
obligations globally; andexercising our fundamental rights and freedoms, including our freedom to conduct abusiness and our right to property.

DATA RELATING TO POLITICAL OPINIONS AND CRIMINAL CONVICTIONSAND OFFENCES
In addition, if you are a principal, we may:
A. process data revealing your political opinions as part of our anti-money laundering
checks. We process this on the basis that you have manifestly made such data public(to the extent this applies) or on the basis that this processing is necessary for reasonsof the substantial public interest in preventing financial crime; andB. process personal data relating to criminal convictions and offences as authorised byapplicable law.
In limited circumstances we may process any of the personal data we hold to the extent
necessary to defend, establish and exercise legal claims.
4.

YOUR CONSENT

To the extent SMTH is relying on your consent to process your personal data, you have theright to withdraw your consent to such processing at any time. You can do this by contacting
euprivacy@smtb.jp.
5. SHARING PERSONAL DATA, INCLUDING INTERNATIONAL TRANSFER
Due to the size and complexity of SMTH’s operations it is not possible to name each of ourdata recipients in this notice. However, SMTH only shares your personal data with thecategories of data recipients listed below. Depending on our relationship with you, we may
share your personal data with:
A. The SMTH client you represent;
B. SMTH affiliates,
C. external custodians and strategic partners to SMTH and SMTH affiliates;
D. payment recipients and providers, beneficiaries, account nominees, intermediaries, andcorrespondent and agent banks;5

E. market counterparties, and parties interested in or assuming risk in connection with atransaction (such as issuers of investments), shareholders selling securities in any
offering, co-managers, lead managers, underwriters, bookrunners, financial advisers or
any other relevant agent or advisor, including any agent or advisor to any of the above;
F. swap or trade repositories, swap data repositories or global trade repositories (or similar
facilities or institutions), and stock exchanges;
G. clearing houses, and clearing or settlement systems and specialised payment networks,companies or institutions such as SWIFT;
H. service providers who provide a service to or operate a system on behalf of SMTH or
the institutions or entities referred to in this section 5 (including non-affiliatedcompanies);
I. SMTH's lawyers, auditors and accountants and others providing professional advice;
J. relevant governmental, regulatory, supervisory, law enforcement, prosecuting, tax orsimilar authority or industry body under applicable laws or regulations of any relevant
jurisdiction;
K. your agents, representatives and other persons acting on your behalf or to whom you
instruct or authorise us to disclose your data;
L. with prospective purchasers and assignees in the event our business, or any part thereof,is sold or re-organised, or in the event that any product entered into with a client is sold,transferred or assigned in whole or in part;M. any other person or entity SMTH reasonably thinks customary, necessary or advisablefor the processing purposes described in this notice or to whom SMTH is obliged byapplicable law or regulation to make the disclosure; andN. to any other party where we have first obtained your prior consent.
Such data sharing may involve the transfer of personal data to any country in which SMTH ora SMTH affiliate conducts business or has a service provider or to other countries for law
enforcement purposes (including, without limitation, the United States of America and othercountries whose data privacy laws are not as stringent as those in effect in the EU, the UK or
Switzerland).
SMTH will ensure that appropriate safeguards are in place to protect your personal data andthat transfer of your personal data is in compliance with applicable data protection laws.
Where required by applicable data protection laws, SMTH has ensured that service providers(including other SMTH affiliates) sign standard contractual clauses as approved by theEuropean Commission or other supervisory authority with jurisdiction over the relevant data
exporter. You can obtain a copy of any standard contractual clauses in place which relate totransfers of your personal data by contacting euprivacy@smtb.jp.
6. DIRECT MARKETING
You are entitled by law to object to the use of your personal data for direct marketing purposes,
including profiling to the extent that it is related to such direct marketing. You can opt-out ofreceiving further any marketing emails by clicking the "unsubscribe" link in any such emails,
or by contacting us at euprivacy@smtb.jp or by writing to us at the address listed in section 8
below.
6

7. DATA SUBJECT RIGHTS
You are entitled by law to the following rights in respect of your personal data:
A. INFORMATION AND ACCESS: You have the right to be provided with certain
information about SMTH's processing of your personal data and access to that data
(subject to exceptions).
B. RECTIFICATION: If your personal data changes, we encourage you to inform us of
the change. You have the right to require inaccurate or incomplete personal data to be
updated or corrected.
C. ERASURE: You have the right to require that your data be erased in certain
circumstances, including where it is no longer necessary for us to process this data in
relation to the purposes for which we collected or processed the data, or if we processed
this data on the basis of your consent and you have since withdrawn this consent.
D. DATA PORTABILITY: Where we process your personal data on the basis of yourconsent, or where such processing is necessary for entering into or performing ourobligations under a contract with you, you may have the right to have the datatransferred to you or another controller in a structured, commonly used and machinereadable format, where this is technically feasible.
E. RIGHT TO OBJECT TO CERTAIN DATA PROCESSING: To the extent that
SMTH is relying upon the lawful basis of legitimate interest to process your personaldata, then you have the right to object to such processing, and SMTH must stop suchprocessing unless we can either demonstrate compelling legitimate grounds for theprocessing that override your interests, rights and freedoms or where SMTH needs toprocess the data for the establishment, exercise or defence of legal claims. Normally,
where SMTH relies upon legitimate interest as a basis for processing we believe that
we can demonstrate such compelling legitimate grounds, but we will consider each caseon an individual basis.
F. RIGHT TO RESTRICTION OF PROCESSING: You have the right to restrict
SMTH's processing of your personal data while your request for data rectification or
objection to personal data processing is being considered, if we no longer need toprocess your data but you need that data in connection with a legal claim, or if ourprocessing is unlawful but you do not want us to erase the data. If this right applies,
we will continue to store your data but will only further process it with your consent,
for the establishment, exercise or defence of legal claims, to protect the rights of anotherperson, or for reasons of important public interest.
G. RIGHT TO WITHDRAW CONSENT: To the extent that SMTH is relying upon yourconsent to process personal data, you have the right to withdraw such consent at any
time. Please see section 4 of this notice.
H. COMPLAINT: You also have the right to lodge a complaint with a supervisory
authority, in particular in your EEA Member State of residence or in the UK, whereapplicable.
If you wish to exercise any of these rights you may do so by sending an email toeuprivacy@smtb.jp. Alternatively you can send a written request to the SMTH entity withwhich you have a relationship, clearly marked "Individual Rights", using the details for that
entity in section 1 of this notice. The letter should be accompanied, in the case of a request for
further information and/or access, by a copy of your passport or other valid means of7

identification. We may provide additional ways for you to exercise your rights from time totime.
8. RETENTION OF PERSONAL DATASMTH and SMTH affiliates retain personal data for varying time periods in order to assist us
in complying with legal and regulatory obligations, to enable compliance with any requests
made by regulators or other relevant authorities and agencies, to enable us to establish, exercise
and defend legal rights and claims, and for other legitimate business reasons.
SMTH and SMTH affiliates retain your personal data for the period of time required for the
purposes for which it was collected or to comply with legal, regulatory and SMTH policy
requirements. This will usually be the period of your relationship or contract with SMTH plus
a period reflecting the length of time for which legal claims may be made following thetermination of such relationship or contract. Data will be kept for a shorter or longer periodof time if so required by law or a SMTH policy or if the data becomes subject to a legal hold(for example, following a communication from our regulator).
9. SECURITY
SMTH is committed to data security and we use appropriate technical and organisational
measures to protect personal data. Our information security policies and procedures are closelyaligned with widely accepted international standards and are reviewed regularly and updated
as necessary to meet our business needs, changes in technology, and regulatory requirements.
10. UPDATES TO THIS NOTICE
The information in this notice may change from time to time – for example, the categories of
personal data that SMTH collects, the purposes for which it is used and the ways in which it isshared may change. This notice may be updated from time to time.

8