Privacy Policy

BiOS, Inc. (Sumitomo Fudosan Nishi-Shinjuku Building, 7-20-1 Nishi-Shinjuku, Shinjuku-ku, Tokyo; Representative: Satoshi Kinoshita) (hereinafter referred to as “the Company”) regards the protection of personal information as a serious responsibility, and is committed to protecting personal information in order to earn the trust of information owners and society at large. In order to gain the trust of the information owners and society at large, we have established the following Privacy Policy and are committed to protecting personal information.

We will handle personal information appropriately in accordance with relevant laws, regulations and other rules and policies established by the Company, and will ensure that all personnel involved in the Company's business activities are fully aware of and familiar with these rules and policies.

(i) Appropriate Collection, Use, Disclosure and Transfer of Personal Information

    1. When collecting personal information, we will clearly state the purpose of use, collect the information to the extent necessary, notify or publicly announce the purpose of use,

        and use the information within the scope of that purpose.

    2. The purposes of use of various types of personal information used and held by the Company are as follows

(Personal information of shareholders)

　- Administration of shareholders and shares

　- Exercising the rights and fulfilling the obligations of shareholders and the Company

　- Preparation of documents, records and data in accordance with laws and regulations

　- Operations related to any of the above

(Personal information relating to applicants for employment)

　- To conduct recruitment activities, post-employment personnel and safety management, and related operations

(Information about employees, directors and other members of the Company)

　- Calculation and payment of wages and salaries

　- Safety management for members of the Company

　- Personnel management of members of the Company

　- Operations related to any of the above

(Personal Information of Business Partners)

  - Conducting business meetings, etc.

　- Providing information and communicating with business partners

　- Carrying out the business entrusted to us by our business partners

　- Business operations related to the above

(Personal Information provided)

  - The Company will use the personal information provided by the recipient in connection with the business transaction only to the extent necessary to achieve the purpose of the 

    contract with the recipient.

3. Personal Information collected will not be transferred or disclosed to third parties, except in the following cases

     (1) If we have obtained the prior consent of the individual concerned; or

     (2) Where it falls within the exceptions set out in Article 27, Paragraph 1, items 1 to 7 of the Personal Information Protection Act.

     (3) In the case of Article 27, Paragraph 2 (opt-out [except for information requiring special consideration]) or Article 27, Paragraph 5, Items 1 to 3

           (outsourcing, business succession, or joint use) of the Personal Information Protection Act.

4. In the event that personal information is entrusted to a third party for use, the Company will consider the appropriateness of such entrustment in light of the security control

    measures taken by such third party, and will enter into a business consignment agreement with such third party, specifying the matters necessary for proper supervision,

    including the maintenance of confidentiality, prior to providing such information to such third party, or will otherwise provide such information to such third party.

    Appropriate supervision of contractors will be carried out through these measures.

(ii) Security Control Measures for Personal Information

　   In order to prevent and correct unauthorized access to personal information and the leakage, loss, or damage of personal information, the Company will establish internal rules and

       regulations and take security measures. In order to achieve the above objectives, we have taken the following measures.

       (1) Establishing basic policies for the proper handling of personal information and personal data in accordance with laws, regulations, and policies.

       (2) Established various regulations that specify the responsibilities and roles of the person in charge of each of the following actions: acquisition, use, storage, disclosure, deletion,

             disposal, etc.

(3) Organizational security control measures, such as designating a person in charge, clarifying the employees who handle personal information and the scope of personal information

       handled, developing a reporting and communication system to the person in charge in the event that a fact or indication of a violation of laws and regulations is discovered,

       and periodically inspecting the status of the handling.

(4) Personal security control measures, such as specifying matters relating to the confidentiality of personal information in employment regulations and conducting regular training on

       matters to be considered in the handling of personal information.

(5) Physical security control measures, such as access control for employees and management to prevent theft or loss of equipment, electronic media, and documents handling

       personal information.

(6) Technical security control measures, such as the implementation of systems to protect information systems handling personal data from unauthorized external access or

       unauthorized software.

(iii) Improvement measures

　　We will strive to respond accurately to changes in the social environment regarding the handling of personal information. In addition, the Company will endeavor to improve this       

        Privacy Policy and other rules and regulations by making changes, modifications, or additions as necessary.

(iv) Responding to Requests for Information, etc.

　　If you believe that we are not abiding by this Privacy Policy, or if you wish to request disclosure, correction, amendment or deletion of your personal information,

        suspension of use (including suspension of provision to third parties), or disclosure of records of provision to third parties, please contact us here (Address: Sumitomo Fudosan

        Nishi-Shinjuku Bldg. 20F, 7-20-1 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Japan; Tel: 03-4588-2220). In accordance with our bylaws, we will respond to your inquiry within a

        reasonable time (generally two weeks, but 30 days is provided for cases that require more time to respond, such as a large number of cases or complicated requests) and to a

        reasonable extent.

(v) Handling of complaints

　   The Company will handle complaints regarding the handling of personal information (including receiving complaints from claimants against the Company's disclosure measures,

        etc., and complaints regarding the creation and other handling of anonymized processed information and pseudonymized processed information) by contacting the following

        address (Address: Sumitomo Fudosan Nishi-Shinjuku Building, 7-20-1 Nishi-Shinjuku, Shinjuku-ku, Tokyo 160-0023, Tel: 03-4588-2220). We will make every effort to respond to your

        inquiry in a timely manner.

August 1, 2022