COSMOPIA HIGHTECH CORP. has a corporate philosophy that we, as a member of the community, are committed to creating better relations with all of our stakeholders and to meeting our corporate social responsibility. In this light, we consider it our important duty to protect personal information. This privacy policy below has been designed to ensure that personal information is managed rigorously and handled appropriately.Please note that the processing of personal data relating to the data subject in the European Economic Area (the EU member states, Iceland, Liechtenstein and Norway, the scope of which is subject to change: "EEA") shall be pursuant to Section 10 in addition to Sections 1 through 9 (excluding Section 5).

Our company complies with the Japanese Act on the Protection of Personal Information and other applicable laws, regulations, and standards, while endeavoring to review and improve personal information handling procedures on an ongoing basis.

Our company handles personal information only for the purposes respectively set forth below in addition to the purposes which we have specifically informed you at the time of acquisition thereof and the purpose of responding to inquiries or other communications. Our company will never use personal information for any other purpose without the consent of the subject there of.

1. Personal information of customers: (including users of products and services, distributors and other business partners):

• Fulfilling obligations and exercising rights under contracts with the customers (including the potential customers);
• Providing information about products and services;
• Providing useful information about products, services, exhibitions, forums, seminars, periodicals and the like;
• Providing after-sales or follow-up support and other ancillary business for products and services;
• Conducting questionnaire surveys, product/service testing and other activities for product/service development or improvement.

2. Personal information of (potential) job applicants:Selection, communication, and other procedures of the recruitment process; and
Communication and other procedures of the hiring process.

• Selection, communication, and other procedures of the recruitment process; and
• Communication and other procedures of the hiring process.

Our company reserves the right to request the removal of links such as those mentioned above, or any other links that we deem inappropriate, even if we have previously approved them. In such cases, the link provider must immediately remove the link.

Our company will not provide personal information to a third party without just causes as defined in the Act on the Protection of Personal Information. When outsourcing the handling of personal information, our company will properly supervise the outsourced contractor, including by signing a nondisclosure agreement with the contractor in advance.

1. Shared personal data items

Customer organization names (company or other organization names), official titles/job titles, names, and other contact information (including phone numbers and email addresses) of the contact persons, customer feedback/questions and the like

2. Organizations sharing personal data with the initial acquirer within the parent company group

The other companies within the parent company's Group (includes sharing within the parent company's Group) or distributors/dealers responsible for each customer.

3. Utilization purposes for shared personal data

• Fulfilling obligations and exercising rights under contracts with the customers.
• Providing information about products and services.
• Providing useful information about products, services, exhibitions, forums, seminars, periodicals and the like.
• Providing after-sales or follow-up support and other ancillary business for products and services.
• Conducting questionnaire surveys, product/service testing and other activities for product/service development or improvement.

4. Organization responsible for managing the said personal data

5-1 Kasaechou , Aoiku, Shizuokashi, Japan
COSMOPIA HIGHTECH CORP.

With regard to the retained personal data in the possession of our company, please contact the contact us link to inquire about request procedures for notification of utilization purposes, for disclosure, correction, addition, deletion, or for cease of utilization or a third-party provision of such data. We will let you know the procedures once we are notified of the type of your request.
Contact us

Inquiries about personal information handling in our company should be directed to the contact for inquiries in Section 6 above. The contact for inquiries can also be used for your request to cease sending news or other information from our company by email, direct mail, or phone.

If you are aged 15 or younger, we request that you do not provide our company with your personal information without the consent of a parent or legal guardian.

Our company assumes no responsibility for the handling of personal information by outside websites (of companies or individuals) linked from our company's website pages. Please check the terms of the personal information handling policies of the linked websites (including the linked websites used to download software modules) at your own responsibility.

• Customers receive information regarding products and services.
• The following information is provided to our customers: useful products, services, exhibitions, forums, seminars, and regular publications.
• Surveys and user testing are conducted to support the development and improvement of our products and services.

Customers will be given the option to agree or disagree to the use of cookies (excluding those essential for the proper functioning of our site) when using our website.Customers can cancel or change their consent to the use of cookies at any time by changing the cookie settings on our website or in their browser.However, disabling cookies may affect some of the functions and services offered on our website, such as videos not being displayed properly.

Our company processes personal data (as defined in the EU General Data Protection Regulation: "GDPR") relating to data subjects in the EEA ("EEA Personal Data") in accordance with this Section 10, in addition to the provisions above (excluding Section 5) and other rules of the GDPR. Our company in Japan may act as the data controller under the GDPR.

1. EEA Personal Data that the company processes
Our company processes the following categories of the EEA Personal Data which is obtained directly from you or indirectly through affiliate companies or distributors of the Parent Company Group:

• Data relating to contact and affiliation such as name, address, telephone number, e-mail address, and department;
• Data relating to business transactions with our company such as purchase history and participation in exhibitions; and
• ・Data relating to the use of our company website, such as cookies, IP addresses, and other data as further specified in the 'Using our Website.'

2. Legal basis for processing
Our company only processes the EEA Personal Data in one or more of the following circumstances:

• with your explicit consent (subject to the right to withdraw your consent at any time without affecting the lawfulness of processing based on your consent before its withdrawal);
• where the processing is necessary for the performance of a contract with you or in order to take steps at your request prior to entering into such a contract;
• where the processing is necessary for compliance with legal obligations;
• where the processing is necessary in order to protect the vital interests of any natural person including you; or
• where the processing is necessary in order to protect the vital interests of any natural person including you; or

３.Disclosure of the EEA Personal Data
Our company may disclose EEA personal data to the companies in our parent company group in Japan.

4. Transfer outside the EEA
To achieve the purposes of use stipulated in Article 2, our company may transfer EEA personal data to affiliated companies or distributors of our parent company group located outside the EEA. If such transfer is made to the countries which have not been deemed by the European Commission to provide an adequate level of data protection, such transfer will be subject to your explicit consent or other appropriate safeguards, including contractual clauses approved by the European Commission, which ensure adequate protection on the EEA Personal Data. You can request further details of the safeguards for your EEA Personal Data by contacting the email address in Section 6 above.

5.  Retention period
Our company will retain the EEA Personal Data only for as long as necessary to fulfill the purposes for which our company processes the EEA Personal Data, unless a longer retention period is required by applicable law and regulations. When determining the retention period of the EEA Personal Data, our company will take into account the status of ongoing business transactions, potential business relationships, and the like.

6. Your rights
You have the following rights with regard to your EEA Personal Data:

• the right to obtain from the company confirmation as to whether or not your EEA Personal Data are being processed, and, if that is the case, 　　　
  access to your EEA Personal Data on its processing ;
• the right to correct inaccuracy of your EEA Personal Data;
• the right to erase your EEA Personal Data;
• the right to restrict of processing of your EEA Personal Data under certain conditions;
• the right to receive your EEA Personal Data in a machine-readable format and transmit those data under certain conditions; and
• the right to object, on grounds relating to your particular situation, to processing of your EEA Personal Data which is based on your consent or our company's legitimate interests.

If you would like to exercise any of the above rights, please contact the email address in Section 6 above.
In addition to the above rights, you have the right to lodge a complaint with a supervisory authority.