Basic Policy for Personal Information Protection.

Based on the POLICY FOR PERSONAL INFORMATION PROTECTION of Mitsubishi Estate Group, FINOLAB Inc. recognizes the importance of the balance between protection and usage or personal information and handle them with proper protective measures.

Usage of Personal Information

We would use personal information (excluding specific personal information) for the following purposes. However, specific personal information is limited to cases specified in the "Act on the Use of Numbers for Identifying Specific Individuals in Administrative Procedures".

Personal Information of Community Members

Purposes: Evaluation for participation in the community (initial entry, regular, as needed) / Information and contact for community management / Facility entrance / exit management / Various events / seminars / demonstration experiments / questionnaire implementation / service provision, etc.

Acquisition methods: Directly from the person or Employer (business card, e-mail, website, etc.)

Personal Information of Guests

Purposes: Responding to business inquiries and requests / Information regarding various events, seminars, experiments, questionnaires, service provision, etc.

Acquisition methods: Directly from the person (business card, e-mail, website, etc.)

Personal Information of Business Partners

Purposes: Responding to business inquiries and requests / Information regarding various events, seminars, experiments, questionnaires, service provision, etc.

Acquisition methods: Directly from the person (business card, e-mail, website, etc.)

Personal Information of Visitors

Purposes: For contacting the person in charge and entrance / exit management

Acquisition methods: Directly from the person

Personal Information of those who made inquiries

Purposes: Responding to inquiries, requests, complaints, etc.

Acquisition methods: Directly from the person (business card, e-mail, website, etc.)

Personal Information of company employees

Purposes: Personnel and labor management and business confirmation of accounting, general affairs, etc.

Acquisition methods: Directly from the person (business card, e-mail, website, etc.)

If it becomes necessary to change the above purpose of use, the consent of the customer shall be obtained, unless permitted by law. However, use of specific personal information is limited to the purpose specified in the "Act on the Use of Numbers for Identifying Specific Individuals in Administrative Procedures" regardless of the consent of the customer.

In addition, we may outsource a part of our business and entrust personal information to the outsourced company to the extent necessary. When depositing personal information, we would select a contractor who maintains a certain level of personal information protection, and take necessary measures such as concluding a contract for the handling of personal information, and supervise the contractor to the extent necessary and appropriate.

Provision to 3rd Party

We will not provide or disclose personal information to any third party except when depositing personal information with the above mentioned outsourced company and when any of the following applies.

• With the consent of the person. However, regarding specific personal information, regardless of the consent of the person, it is limited to the case specified in the "Act on the Use of Numbers for Identifying Specific Individuals in Administrative Procedures".

• When it is necessary to protect the life, body or property of a person and it is difficult to obtain the consent of the person

• When disclosure / provision is required based on other laws and regulations

• In order to ensure the safe management of entrusted personal information, we are conducting necessary and appropriate supervision, including periodic inspections of the entrusted company for its personal information handling.

Leakage or loss of personal information

We are taking necessary and appropriate measures to prevent leakage, loss, or damage of personal information handled and other measures to safely manage personal information, as described below.

• In areas where personal data is handled, we are controlling the access of employees and restricting the equipment they may bring into the office, and taking measures to prevent unauthorized persons from accessing personal data.

• We are taking measures to prevent theft or loss of equipment, electronic media, and documents with personal data, and taking measures to ensure that personal data is not easily revealed when such equipment, electronic media, etc. are transferred, even within the business site.

• We are implementing access control to limit the scope of persons in charge of handling the personal information databases, etc.

• We are implementing mechanisms to protect information systems that handle personal data from unauthorized external access or unauthorized software.

Security Control of Personal Information

For our employees to handle personal information, we are maintaining rules and internal records related to the handling of personal information, regularly inspecting the handling status, and conducting necessary and appropriate supervision, such as periodic training of such employees, to ensure the safe management of such personal information. In addition, an internal reporting and communication system is in place in the event of personal information leakage or prior warnings of a leakage are detected.

Handling of Personal Information in Foreign Countries

When handling personal information in foreign countries, we would regularly collect and comprehend information on the personal information protection regulations of those countries and take safety control measures accordingly.

Disclosure / correction / suspension / deletion of personal information

For requests for disclosure, correction, suspension of use, deletion, etc. of personal information, and other inquiries, please contact the following with your name and contact information (email address or telephone). After confirming that you are the person or the agent, we will respond within a reasonable period of time.

FINOLAB Inc.
〒100-0004 1-6-1 Otemachi, Chiyoda, Tokyo
Representative Executive : Hiroshi Yamamoto