Handling of personal information

• 1. Personal information handling business
• 2. Purpose of use of personal information
• 3. Provision of personal information to third parties
• 4. Shared use of personal information
• 5. Personal information safety management measures
• 6. Inquiries regarding the handling of personal information

1. Personal information handling business

Personal information handling business	Address	Representative
Olympus Terumo Biomaterials Corp.	1-50-1 Sasazuka, Shibuya-ku, Tokyo 151-0073, Daiwa Sasazuka Tower	Manabu Ishikawa

2. Purpose of use of personal information

The purpose of use of personal information acquired by Olympus Terumo Biomaterials Corp. is as follows.
If we have separately indicated the purpose of use, etc., by notifying the person in question or by approval of the terms of use, etc., the content of the individual purpose of use, etc. shall take precedence over the following description.
In addition to the purposes of use listed below, we may use the information if permitted by other laws and regulations.

Subject of acquisition	Purpose of use
(1) Personal information of customers and medical professionals.	Shipping, arrangements, and provision of information regarding products and services. Sales, repairs, and inspections of products, provision of after-sales service, and management of inquiries. Notification and operation of seminars, academic conferences, exhibitions, events, contests, campaigns, training, etc. hosted, co-hosted, sponsored, or exhibited by Olympus Terumo Biomaterials Corp. Product planning, research, development, and marketing, and access management and history management for facilities managed by Olympus Terumo Biomaterials Corp. Conducting business negotiations and meetings with customers, and contacting them, etc. Responding to various inquiries, requests for materials, etc., and recording them. Procedures for various payments Investigations, records, and notifications and reports to government agencies based on laws and regulations, etc.
(2) Personal information of individuals belonging to business partners and business partners of corporations.	Business negotiations, holding meetings, providing information, and contacting business partners. Performing business entrusted to us by business partners. Invoicing and business management between Olympus Terumo Biomaterials Corp. and business partners. Entry and exit management and history management for facilities managed by Olympus Terumo Biomaterials Corp. History management of education provided by Olympus Terumo Biomaterials Corp. Investigations, records, and notifications and reports to government agencies based on laws and regulations.
(3) Personal information of shareholders.	To exercise rights and fulfill obligations based on the Companies Act. To provide various conveniences from the issuing company to shareholders. To implement various measures to smooth the relationship between shareholders and the company from the perspective of members and associations of corporations. To manage shareholders, such as creating shareholder data based on specified standards based on various laws and regulations.
(4) Personal information of job applicants (including internships).	Selection of job applicants, information on employment/success or failure, and other communications. Performing business related to recruitment activities. Recruitment business management.
(5) Personal information of officers and employees (including their families, relatives, and retirees).	Business-related contacts and procedures. Contact with health insurance associations and corporate pension funds Investigations, records, and notifications and reports to government agencies based on laws and regulations. Performance of personnel and labor management tasks Performance of other tasks based on company regulations.
(6) Personal information of patients.	Investigations, records, and notifications and reports to government agencies based on laws and regulations.

3. Provision of personal information to third parties

Olympus Terumo Biomaterials Corp. will not provide personal information provided to third parties except in the following cases.

• When consent is obtained from the individual, etc.
• When the handling of personal information is entrusted to the extent necessary to achieve the purpose of use.
• When business succession is carried out due to a merger or other reason.
• When used jointly with a person specified in "4. Shared use of personal information".
• When based on exceptions to third-party provision in laws and regulations regarding the protection of personal information, such as when it is urgently necessary to protect important interests such as human life, body, or property.
• When based on other laws and regulations.

Supervision of business contractors

When entrusting business related to personal information, we will enter into a contract that obligates the contractor to properly manage personal information and will supervise and guide them.

Provision of personal information to a foreign country

Personal information acquired by our company may be handled by a contractor located in a foreign country. In such cases, the personal information protection system of that foreign country, which may differ from that of the individual's country of residence, will apply. For information on personal information protection systems in foreign countries, please refer to the external website of the Personal Information Protection Commission (Japanese).
If we transfer personal information to a contractor located in a foreign country, we will take appropriate measures to protect the personal information in accordance with the Personal Information Protection Act and the personal information protection system of the foreign country.

4. Shared use of personal information

(1) Health insurance association, corporate pension fund.

(a) Items of personal information to be shared

Personal information of employees, retirees, and their families held by each of the above-mentioned parties to the joint use (employee number, name, sex, date of birth, date of joining, affiliation, employment status, personnel treatment data necessary for labor-management consultations, etc.), and other data necessary to achieve the purpose of the joint use.

(b) Scope of shared use

Health insurance association, corporate pension fund.

(c) Purpose of shared use

• To properly manage employees, retirees, and their families among the joint users.
• For the joint users to contact the individual, notify them, and inform them of events, etc.
• To use the information as basic data for the labor-management agreement (negotiations) between the user and the user regarding the individual's wages and working conditions.
• To cooperate with the joint users to respond smoothly and appropriately in the event of a disaster or an emergency involving Olympus Terumo Biomaterials Corporation or the individual himself/herself.
• To carry out the practical work of the welfare business run by the joint user.

(d) Person in charge of joint use

Olympus Terumo Biomaterials Corp. (For the representative and address, please refer to "1. Personal information handling business")

(2) Nihon Ultmark INC.

Olympus Terumo Biomaterials Corp. jointly uses the "Medical Database (MDB)" database containing basic information on medical professionals and medical facilities throughout Japan from Nihon Ultmark INC., with certain medical-related companies. For details on the purpose of use, please check the Nihon Ultmark INC. website (Japanese).

5. Personal information safety management measures

Establishment of basic policy

• To ensure the appropriate handling of personal information, we have established basic policies regarding "establishment of internal systems," "appropriate handling of information," "restrictions on disclosure and provision to third parties," "ensuring accuracy and safety," and "compliance with laws and regulations and continuous improvement."

Establishment of rules for handling personal information

• We have formulated internal regulations that stipulate how to handle personal information at the stages of acquisition, use, storage, provision, deletion, disposal, etc., as well as the person in charge/manager and their duties.

Organizational safety control measures

• We have appointed a person in charge/manager for handling personal information and clarified their roles and responsibilities.
• We have established a system to respond appropriately and promptly when a leak or other incident occurs or when signs of a leak are identified.
• We have established a ledger to check the status of handling personal information.
• We regularly inspect the status of handling personal information.

Personal safety control measures

• We regularly educate executives and employees about safety control measures for protecting personal information.
• We regularly inform employees about the handling of personal information and hold internal events and campaigns to raise awareness.
• Matters related to confidentiality of personal information are stipulated in internal regulations, etc.

Physical safety control measures

• We properly manage the entry and exit of employees to areas where personal information is handled.
• When carrying personal information, we encrypt and password protect it to prevent leaks, etc.
• When documents or electronic media containing personal information are disposed of, they are disposed of in a manner that makes them unrecoverable.

Technical security control measures

• By implementing access restrictions, we limit the number of people in charge and the scope of personal information handled.
• We have introduced a mechanism to protect information systems that handle personal information from unauthorized access from outside or malicious software.

Safety management efforts for contractors

• We have established internal regulations regarding the selection of contractors who handle personal information managed by Olympus Terumo Biomaterials Corp.
• We have concluded contracts or memoranda with contractors that include provisions regarding the handling of personal information in accordance with our standards.

6. Inquiries regarding the handling of personal information

For inquiries regarding the handling of personal information by Olympus Terumo Biomaterials Corp., please contact us via the inquiry page on our website.

* Personal information provided in connection with inquiries will only be used to the extent necessary to respond to your inquiry.