Tokai Carbon is aware that it has a social duty to handle personal information, personal numbers, and specific personal information in an appropriate manner (hereinafter, personal numbers and specific personal information shall be referred to collectively as "specific personal information"). To this end, we have established the following privacy policy.

1. Tokai Carbon complies with all laws, regulations and other standards relating to the appropriate handling of personal information and specific personal information.
2. Tokai Carbon handles all personal information and specific personal information in an appropriate manner. In addition, unless required to do otherwise under the laws and regulations, we notify or publish the purpose for which personal information and specific personal information shall be used, and only use the information for that purpose.
   We only use specific personal information within the limits set forth in the laws and regulations.
3. Tokai Carbon trains all its officers and employees in the importance of protecting personal information and specific personal information, and in how to handle this information in an appropriate manner.
4. Tokai Carbon enforces security control measures to prevent personal information and specific personal information from being leaked, lost or damaged.
5. Unless required to do so under the laws and regulations, Tokai Carbon never provides personal information to third parties without advance consent from the individual concerned. In addition, unless required to do so under the laws and regulations, we never provide specific personal information to third parties.
6. When outsourcing the handling of personal information and specific personal information, we oversee the outsourced work to ensure that personal information and specific personal information is controlled securely.
7. Tokai Carbon has established procedures for the disclosure and revision of personal information and specific personal information, and responds to requests for disclosure and revision in an appropriate manner as determined by the laws and regulations. In addition, we welcome comments and inquiries about personal information and specific personal information at the contact given below.
8. Tokai Carbon shall continuously revise and improve its control system for protecting personal information and specific personal information.

Matters to Be Published Based on the Act on the Protection of Personal Information

Tokai Carbon announces the following in accordance with the Act on the Protection of Personal Information.

1. Business Handling Personal Information

Name TOKAI CARBON CO., LTD.
For the address of Tokai Carbon and the name of the representative, please refer to the company information from the following URL.
https://www.tokaicarbon.co.jp/en/company/profile.html

2. Purpose of Use of Personal Data

Unless required to do otherwise under laws and regulations, Tokai Carbon appropriately acquires and uses personal information as personal data only for the following purposes. In addition, we only use specific personal information within the scope set forth in laws and regulations.

[Customers and Business Partners]

1. (i) To perform sales and purchase of products and services, perform other contracts, conduct business activities, and perform administrative procedures incidental thereto;
2. (ii) To respond to various inquiries and requests;
3. (iii) To improve products, develop new products, conduct questionnaire surveys, conduct market surveys, analyze customer trends, and improve organizational structures;
4. (iv) To send various types of information about Tokai Carbon Group companies’ products, services and initiatives; and
5. (v) To protect the rights and interests of Tokai Carbon or third parties by preventing, investigating and identifying fraud, cyberattacks and other illegal or potentially fraudulent activities.

[Personal Information on Shareholders]

1. (i) To exercise rights or perform obligations based on laws and regulations, and perform administrative procedures incidental thereto;
2. (ii) To respond to various inquiries and requests; and
3. (iii) To provide financial results briefing materials and shareholder communications, conduct questionnaire surveys, and conduct other IR activities.

[Personal Information on Job Applicants]

1. (i) To carry out selection procedures in recruitment activities, and perform administrative procedures incidental thereto.

[Personal Information on Officers and Employees and Their Families]

1. (i) For procedures and management related to personnel and labor management (attendance management, personnel transfers, performance evaluation, etc.);
2. (ii) For procedures and management related to determination and payment of wages, etc. (salaries, bonuses, retirement benefits, pensions, etc.);
3. (iii) For provision of welfare programs;
4. (iv) For procedures and management related to management of security, hygiene and health (health checkups, health guidance, stress checks, etc.);
5. (v) For implementation of education and training;
6. (vi) For business communications (including safety confirmation and other emergency communications), use of facilities and equipment, and other procedures;
7. (vii) For legal procedures and post-retirement procedures and management; and
8. (viii) For investigation and response related to legal compliance, violations of internal regulations, and cybersecurity.

3. Provision of Personal Data to Businesses in Foreign Countries

Unless required to do so under laws and regulations, Tokai Carbon never provides personal information to third parties in foreign countries without advance consent from the individual concerned. In addition, unless required to do so under laws and regulations, Tokai Carbon never provides specific personal information to third parties in foreign countries.

4. Shared Use of Personal Data

Tokai Carbon may share the following personal data with Tokai Carbon Group companies within the scope of the purpose of use defined in 2. In the case of shared use with Tokai Carbon Group companies located in foreign countries, it shall be conducted under appropriate procedures in accordance with the provisions of Paragraph 3 or laws and regulations. The juridical person responsible for the management of such personal data is Tokai Carbon. The address of Tokai Carbon and the name of the representative are as described in “1. Business Handling Personal Information” above.

“Scope of shared personal data related to customers, business partners, shareholders, and job applicants”
Name, title, company name, company address, telephone number, fax number, and email address.

“Scope of shared personal data related to employees, etc.”
■Basic Information: Address, name, employee number, date of birth, gender, department to which the employee belongs, title, type of employment, educational background, date of joining the company, and date of retirement.
■Job/Transfer History: Work history, internal transfer history, and secondment/transfer history.
■Contact Information: Telephone number, email address, and emergency contacts.
■Information on Compensation and Benefits: Information on the amount of payment of salary, bonus and benefits, etc., and salary transfer account information.
■Information on Social Insurance and Pension: Information related to social and labor insurance (including insurance number, etc.), retirement benefits, and corporate pensions.
■Information on Family and Support: Information on dependents (name, date of birth, relationship, category of dependents, etc.) and other information on family members obtained by the company in the course of business.
■Information Related to Welfare: Information on welfare programs such as property accumulation savings and shareholding associations.

5. Security Control Measures

Tokai Carbon has enforced the following security control measures to prevent personal information and specific personal information from being leaked, lost or damaged.

1. (i) Establishment of basic policy

   Aiming to ensure the appropriate handling of personal information and specific personal information, Tokai Carbon has established a Privacy Policy that stipulates compliance with related laws and regulations.
   https://www.tokaicarbon.co.jp/en/privacy/

2. (ii) Development of regulations on personal data

   Tokai Carbon has established Regulations on the Handling of Personal Information, and the responsible person and his/her duties are determined according to the stages of the acquisition, storage and disposal of personal information.

3. (iii) Systematic security control measures

   Tokai Carbon has appointed a person in charge of the handling of personal data, and has developed a method of responding when it discovers a violation of the Regulations or a leakage.

4. (iv) Human security control measures

   Tokai Carbon conducts periodic training on precautions regarding the handling of personal data.

5. (v) Physical security control measures

   Tokai Carbon takes measures to prevent the theft or loss of devices and documents handling personal data.

6. (vi) Technical security control measures

   Tokai Carbon controls access to personal data, has introduced mechanisms to prevent unauthorized access from outside, and has implemented measures against vulnerabilities in information systems.

6. Procedures for Requesting Disclosure, Correction, Deletion, Etc. of Retained Personal Information

Tokai Carbon responds to comments, inquiries, disclosures, corrections, additions, deletions, discontinuations of use, and discontinuations of provision to third parties of personal information and specific personal information at the following contact point, and deals with it appropriately in accordance with the provisions of laws and regulations and Tokai Carbon’s Regulations.