Basic Policy for Appropriate Handling of Specific Personal Information, etc.

thinkrun Co., Ltd.
Hiroyuki Tsuruga, President

In order to ensure appropriate handling of My Number and specific personal information (hereinafter "specific personal information, etc.") as an organization, thinkrun Co., Ltd. (hereinafter "the Company") positions the protection of specific personal information, etc. from business partners, employees, and other entities as a priority item and has established the Basic Policy for Appropriate Handling of Specific Personal Information, etc. as follows.

1. Appropriate handling of specific personal information, etc.

Acquisition, retention, use, provision, and disposal of specific personal information, etc. from the Company's business partners, employees and other entities will be handled appropriately in compliance with handling rules defined by the Company.

2. Compliance with related laws, regulations, guidelines, etc.

The Company will handle specific personal information, etc. appropriately in compliance with the "Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures," the "Act on the Protection of Personal Information," the "Guidelines on Appropriate Handling of Specific Personal Information (Business Operator Version)," and the laws defined in "Laws and Standards on the Protection of Personal Information."

3. Purpose of use

The Company will use specific personal information, etc. for the purpose listed below.

(1) Administrative tasks related to creation of withholding slips for earned wages and retirement benefits

(2) Administrative tasks for reporting employment insurance

(3) Administrative tasks for reporting health insurance and employee pension insurance

(4) Administrative tasks related to billing based on Industrial Accident Compensation Insurance Act

(5) Administrative tasks related to reporting on Category III insured persons in national pension plan

(6) Administrative tasks related to creation of payment records such as salary, fees, etc.

(7) Administrative tasks performed in conjunction with (1) to (6) above

4. Items related to security procedures

(1) The Company defines handling regulations to prevent the leakage, loss, and damage of specific personal information, etc. and for management of specific personal information, etc. and will construct the required and appropriate security procedures. Furthermore, when having employees handle specific personal information, etc., the Company will conduct the required and appropriate supervision of those employees to ensure appropriate construction of security procedures for specific personal information, etc.

(2) When outsourcing the handling of specific personal information, etc. to a third party based on approval from business partners, employees, and other entities, in addition to selecting a contractor that possesses standards for sufficient protection of specific personal information, the Company will consummate a contract that requires the contractor to construct security procedures, and will perform required and appropriate supervision of the contractor.

(3) In addition to the above, the Company will construct security management measures based on the separately defined "Rules for Handling Specific Personal Information, etc."

5. Continuous improvement

In order to appropriately protect specific personal information, etc., the Company will continue to improve this Basic Policy and other company rules.

6. Contact point for inquiries

The Company will respond appropriately to inquiries related to handling of specific personal information, etc. Please address inquiries and complaints to the Company on handling of specific personal information, etc. to the contact point listed below.

thinkrun Co., Ltd.
Personnel Department
1-1 Sakurada-machi, Kanazawa City, Ishikawa Prefecture 920-0057
TEL: 076-232-2023