Various policies

KDK Corporation takes necessary and appropriate security measures so that personal information provided are not leaked or lost.

(Laying down the basic policy)

We have provided Basic Policy regarding Information Security and herein lay down this protection policy to ensure the fair handling of personal information and to operate the Personal Information Contact Center that handles inquiries and complaints.

(Improvement in the personal information handling rules)

We have laid down different types of rules, such as the Personal Information Handling Rules, on the handling method, responsible officer and employee in charge, and their duties to personal information, in the stages of the acquisition, use, storage, receipt, deletion, elimination, etc.

(Institutional safety management measures)

• We have formed an institutional system on the handling of personal information (the Information Security Committee) and has appointed the officer responsible for information security and the employee in charge of information security in each department.
• Personal information handling circumstances are periodically checked by inspection in each department and by internal audit performed by the Information Security Committee.
• We have improved the contact and report system that deals with, if any, facts or signs that indicate a leak of personal information or a violation of law.

(Personnel safety management measures)

We carry out periodical trainings of employees on the points to keep in mind with personal information handling.

(Material safety management measures)

• In the areas where personal information is handled, we control employees' comings and goings out of the rooms, restrict their carrying devices, etc. and take measures that prevent unauthorized persons from browsing personal information.
• We take measures to prevent personal information handling devices, electronic media, and books, etc. from being stolen or lost or the like.
• We take measures where it is difficult to identify the individuals of personal information in case that a personal information handling device or electronic media, etc, is carried about.

(Technical safety management measures)

• We take access control by limiting the employees who are authorized to access personal information and the range of personal information to be handled.
• We have formed an information system mechanism that protects against unauthorized accesses and unauthorized software programs.

Recognizing the external circumstances

We take safety Management measures provided in this policy after recognizing the government systems of protecting personal information in the following countries and regions where our personal information is stored.

• The United States of America
• The Federal Republic of Germany
• The Republic of Korea
• The People's Republic of China
• Hong Kong
• Taiwan
• The Republic of Singapore
• The Kingdom of Thailand
• Malaysia
• The Republic of Indonesia

KDK Corporation will not disclose any obtained personal information to a third party without prior consent of the person to whom the information pertains, except for the following cases:

1. Where the disclosure is required by law:
2. Where the disclosure is required to protect the life, person, or property of an individual but it is difficult to obtain the consent of the person in question;
3. Where the disclosure is particularly necessary to improve public sanitation or to promote the sound upbringing of children but it is difficult to obtain the consent of the person in question;
4. Where it is necessary to cooperate with national or municipal agencies or parties commissioned by them in performing certain office work as stipulated by laws and regulations but when obtaining the consent of the person in question is likely to adversely affect the performance of said office work;
5. Where all or part of personal data handling is transferred to a commissioned entity within the range necessary for KDK Corporation to achieve the purpose of use (in this case, KDK Corporation will provide appropriate supervision over the commissioned entity that has been deemed highly reliable);
6. Where personal data is submitted due to business succession by merger or other causes;
7. Where personal data is shared with certain subsidiaries and affiliates of KDK Corporation within the range necessary for achieving the purpose of use (in this case, KDK Corporation is responsible for controlling the personal data.);
8. Items of personal data for shared use:
   Name of person, contact information (address, phone number, email address, etc.), membership data, name of employer, inquiry record, information on contract content, etc.

KDK Corporation acquires and uses personal information for the following purposes:

1. Production and sales activities of products and their related operations;
2. Collecting and provisioning information related our products and services (including deliveries of our email newsletters);
3. Building and maintaining trouble-free relationships with customers, suppliers, and local societies;
4. Fulfillment and supervision of each contract concluded;
5. Planning and making examination materials to improve our products and services (including analyses of materials downloads and of design assisting tools records from this website);
6. Responding to requests for brochures including a product catalog, and for responding to inquiries;
7. Handling procedures related to shareholders and their management, such as sending notices of shareholders' meeting and payment of dividends;
8. Submitting notifications and reports to government offices and other public offices.