Basic Policy on Proper Handling of Individual Numbers and Specific Personal Information

Congrès Inc. (hereinafter, “Congrès,” “we,” or “our”) establishes this basic policy to handle Individual Numbers and personal information that has an Individual Number included in its content (hereinafter collectively, “Specific Personal Information, Etc.”) appropriately based on the “Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures” (hereinafter, “the Act on the Use of Numbers”).

1. Compliance with Laws and Regulations

Congrès recognizes that the proper handling of Specific Personal Information, Etc. is part of compliance, and will comply with the Act on the Use of Numbers, related laws and regulations, and related guidelines and other norms (hereinafter, “laws and regulations, etc.”).

2. Purpose of Use

Congrès will handle Specific Personal Information, Etc. within the scope of the following purposes of use:

1. Specific Personal Information, Etc. of business partners:
   
   1. Preparation of payment records for real estate usage fees, etc.
   2. Preparation of payment records for payments made to acquire real estate, etc.
   3. Preparation of payment records for compensation, fees, etc.
2. Specific Personal Information, Etc. of employees and their dependents:
   
   1. Tax-related tasks based on the Income Tax Act, Local Tax Act, etc.
   2. Non-taxable related tasks for participants in property accumulation housing savings and property accumulation pension savings
   3. Tasks related to participants in defined contribution pensions
   4. Tasks related to the Health Insurance Act and Employees’ Pension Insurance Act
   5. Tasks related to the Employment Insurance Act
   6. Tasks related to the Industrial Accident Compensation Insurance Act
   7. Tasks related to the third insured person of the National Pension
3. Specific Personal Information, Etc. of shareholders:
   
   1. Preparation of payment records for dividends and surplus distribution

3. Security Control Measures

Congrès will establish and comply with internal regulations to prevent leakage, loss, or damage of Specific Personal Information, Etc., and to manage Specific Personal Information, Etc. appropriately.

4. Outsourcing of Handling

Congrès may outsource the handling of Specific Personal Information, Etc. to a third party. In such cases, we will comply with laws, regulations, and internal regulations, and supervise the consignee as necessary and appropriate.

5. Continuous Improvement

Congrès will endeavor to continuously improve our handling of Specific Personal Information, Etc., and will revise this basic policy and internal regulations from time to time.

6. Questions and Complaints

If you have any questions or complaints about our handling of Specific Personal Information, Etc., please contact us.

TAKEUCHI Noriko
President
Congrès Inc.
Date of enactment: January 1, 2016