The Personal Data that we collect from Customers is listed below. We respect the privacy rights of individuals and comply with the GDPR and other laws and regulations relating to data protection and privacy.

• (1) Name
• (2) Email address
• (3) Telephone number
• (4) Country and city of residence
• (5) Account information on LINE, WhatsApp and ZOOM (applicable to our EU agencies’ personnel only)

We process the Personal Data that we collect in a manner that ensures their appropriate security, based on the following purposes and the legal basis on which we perform such processing. We may obtain your consent in relation to Personal Data; provided that the legal basis for processing shall be set out in the following paragraphs, except where the legal basis is your consent.

1. To respond to enquiries from Customers
   Categories of Personal Data: Section 1 (1), (2), (3), (4) and (5)
   Legal Basis: Processing is necessary for legitimate interest pursued by us (responding appropriately to enquiries to provide more suitable products, services, etc.).
2. To provide information on our products and services in response to Customer’s requests
   Categories of Personal Data: Section 1 (1), (2), (3), (4) and (5)
   Legal Basis: Processing is necessary for legitimate interest pursued by us (responding appropriately to enquiries to provide more suitable products, services, etc.).
3. To provide our products and services
   Categories of Personal Data: Section 1 (1), (2), (3), (4) and (5) (limited to Personal Data of our EU agencies’ personnel)
   Legal Basis: Processing is necessary in order to perform the contract entered into with you.

When transferring Personal Data outside the European Economic Area (EEA), unless otherwise notified to the Customer separately, we will ensure adequate level of data protection by relying on an adequacy decision in the countries where it is recognized, or that the recipient enters into standard data protection clauses with us that have been approved by the European Commission. If you want to obtain a copy of the documents relating to these protection measures, please contact us in accordance with the information indicated in Section 8.

We collect Customers’ Personal Data directly from the Customers or indirectly through third parties, including:

1. Our EU agencies (details set out in Exhibit).
2. Companies providing data processing and hosting services

We may share your Personal Data with the following categories of recipients for purposes set out in this Privacy Policy, in accordance with the GDPR. In addition, such sharing includes the transfer of your Personal Data to Japan which is outside the EU and EEA.

1. Cloud services for managing your information

We will retain your Personal Data that we collect as long as it is necessary for the purposes set out above. The specific period of retention will be determined by taking into account the purpose for which the Personal Data is used, the nature of the Personal Data and the legal or business need to retain the Personal Data.

You have the following rights in relation to the Personal Data that we collect and process. If you wish to exercise any of the following rights, please contact us in accordance with the information indicated in Section 8.

1. Acquisition of Information on Processing
   You have the right to obtain from us all necessary information regarding our data processing activities relevant to you.
2. Access to Personal Data
   You have the right to receive confirmation from us as to whether or not Personal Data relating to you has been processed, and if so, you have the right to access such Personal Data and certain related information.
3. Correction or Deletion of Personal Data
   You have the right to have inaccurate Personal Data relating to you corrected without undue delay or to have incomplete Personal Data made complete. You also have the right to have Personal Data relating to you erased without undue delay if certain requirements are met.
4. Restrictions on Processing of Personal Data
   You have the right to have the processing of your Personal Data restricted if certain requirements are met.
5. Objections to Processing of Personal Data
   You have the right to object to the processing of Personal Data relating to you if certain requirements are met.
6. Data Portability of Personal Data
   You have the right to receive Personal Data relating to you in a structured, commonly used and machine-readable format if certain requirements are met, and also to transfer such data to another controller without hindrance from us.
7. Not to be Subject to Automated Decision-Making
   You have the right not to be the subject to decisions based solely on automated data processing (including profiling) that have legal effects or similarly significant effects on you if certain requirements are met.

If you have any questions about this Privacy Policy or wish to enquire about or make a request in relation to your rights as set out in Section 7 of this Privacy Policy, please make contact at:

1. ARS Corporation
   476-3, Handaiji-cho, Naka-ku, Sakai City, Osaka 599-8267, Japan
   Email address: info-world@ars-edge.co.jp
   
2. Agency
   LCA Studio Legale
   Via della Moscova 18, 20121 Milano, Italy
   Tel: +39 027788751
   Email address: milano@lcalex.it
   

This Privacy Policy will be updated from time to time. Any substantive or material changes will be communicated to you via our website and, where appropriate, via an email notification to you.

Established on 1.1.2023