Provision to Third Parties in Foreign Countries

The Company gives the following reference information in relation to its provision of customers’ personal data to third parties in foreign countries as stated below.

The following countries that are “foreign countries, etc. establishing a personal information protection system recognized to have equivalent standards to that in Japan in regard to the protection of an individual’s rights and interests” are excluded from the above-mentioned “foreign countries.”

Iceland, Ireland, Italy, United Kingdom, Estonia, Austria, Netherlands, Cyprus, Greece, Croatia, Sweden, Spain, Slovakia, Slovenia, Czech Republic, Denmark, Germany, Norway, Hungary, Finland, France, Bulgaria, Belgium, Poland, Portugal, Malta, Latvia, Lithuania, Liechtenstein, Romania, and Luxembourg

Provision of personal data to third parties who takes equivalent action

The Company may provide (or consign or jointly use) personal data to (or with) third parties establishing a system conforming to standards necessary for continuously taking action equivalent to the one that is required to be taken for handling personal data pursuant to the Privacy Act (“Equivalent Action”).

If a customer desires to be notified of the details of information on the measures necessary to ensure the continuous implementation of the Equivalent Action by any of such third parties, the customer must make an inquiry to the contact point stated in Clause 4 “Contact Information” of the Procedures to Request for Disclosure, etc.

The major foreign countries in which receiving third parties are located are as follows.

United States of America, United Mexican States, Federative Republic of Brazil, Australia, Russian Federation, Republic of Singapore, Malaysia, Kingdom of Thailand, Republic of Indonesia, Socialist Republic of Viet Nam, People's Republic of China, United Arab Emirates, and Arab Republic of Egypt