Privacy Policy

1. Management of personal information

1. The Kuraray Group has appointed personal information managers in each organization that treats personal information. These managers are responsible for the security of personal information collected by their organizations.
2. The Kuraray Group strives to prevent unauthorized access, leaks, or loss of personal information to ensure the security of personal information.

2. Use of personal information.

When the Kuraray Group collects personal information, the Kuraray Group will clearly specify the purpose of use, and the personal information will be used only for such purpose as specified. A data subject may refuse to provide its personal information at its discretion. The purpose of use of personal information is as follows;

1. Customers, suppliers or vendors: business communications, providing information on services and products offered by the Kuraray Group,
2. Shareholders: to allow execution of shareholders’ rights under the corporation law, to provide information and/or services to shareholders, administration of the shareholder registry,
3. Job applicants: communication necessary for recruitment,
4. Response to inquiries from the data subject, or
5. Other purposes specifically informed to the data subject.

The Kuraray Group may, to the extent necessary for the purpose (1) or (4) mentioned above, share personal data (address, name, company name, telephone number, e-mail address, etc.) within the Kuraray Group.

3. Disclosure to third parties.

Except as stipulated below, the Kuraray Group will not release personal information to third parties. Providing information to contractors or affiliate companies by legitimate means is not considered as disclosure to third parties;

1. With the explicit permission from the data subject,
2. As required by law,
3. When the provision of personal information is necessary for the protection of the life, body, or property of an individual and it is difficult to obtain the consent of the person,
4. When the personal information is necessary for a state or local government in executing the affairs prescribed by laws and regulations and obtaining the consent of the person are likely to impede the execution of the affairs,
5. When personal information is appropriately edited as statistical data by which the data subject cannot be identified, or
6. When personal information is transferred in consequence of a merger, amalgamation or other corporate reorganization,

4. Changes in personal information.

A data subject has right to request to disclose, correct, add, delete, discontinue using, or erase its personal information the Kuraray Group has. The Kuraray Group will comply with these requests only after verification of the identity of the requestor. Inquiries with regard to personal information will be directed to the department to which the data subject provided its personal information. In the case that a data subject is not sure where to contact, inquiries may be accepted at:

E-mail: PersonalDataProtection.JP@kuraray.com
Tel: +81-3-6701-1000
Fax: +81-3-6701-1005

5. Changes in our privacy policy.

This privacy policy may be changed in conformity with amendments to statutes or regulations, or for other purposes.

In addition to the main body of the Privacy Policy, this Section 2 shall apply to the handling of personal information of residents of the EEA where the General Data Protection Regulations (GDPR) is applicable, In the event of conflict or inconsistency between them, this Section 2 shall prevail.

1. Purpose of use and Legal basis under GDPR for processing the personal data which the Kuraray Group processes;

1. Customers, suppliers or vendors: business communications, providing information on services and products offered by the Kuraray Group. Legal basis: Consent of the data subject (GDPR Art.6(1) a) or Legitimate interest (GDPR Art.6(1) f)
2. Response to inquiries and requests from the data subject. Legal basis: Consent of the data subject (GDPR Art.6(1) a) or Legitimate interest (GDPR Art.6(1) f)

2. When the Kuraray Group transfers personal data to its group companies or contractors listed in Exhibit 1 attached hereto, the personal data may be transferred to the counties outside the EEA. The Kuraray Group will transfer personal data only to the extent;

1. the transfer to a country may take place where the EU Commission has decided that the country ensures an adequate level of protection of personal information (GDPR Art. 45),
2. the transfer to a third party with whom the Kuraray Group executed the standard data protection clauses approved by the EU Commission (GDPR Art. 46.2）, or
3. the transfer takes place on one of the conditions listed in GDPR49.1.

3. The Kuraray Group will store personal data for the appropriate period determined based on the criteria of the respective statutory retention period. After expiration of the period, the corresponding data no longer necessary will be deleted in accordance with the respective retention policy.

4. A resident of the EEA has the following rights in connection with his/her own personal data handled by the Kuraray Group;

1. access (disclosure),
2. rectification,
3. erasure,
4. restriction of processing,
5. data portability,
6. object to processing, and
7. withdrawal of data processing consent.

The Request Form is attached hereto as Exhibit 2.

5. Lodging a complaint with a competent authority

1. A resident of the EEA has right to lodge a complaint on the processing of their personal data with a competent supervisory authority. The following URL provides information of the authority:
2. http://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm

6. Contact information of the Data Protection Officer of the Kuraray Group in EEA:

1. Kuraray Europe GmbH
2. Philipp-Reis-Strasse 4
3. 65795 Hattersheim / Germany
4. Attn: Data Protection Officer
5. Email: dataprotection.eu@kuraray.com
6. Tel: +49-69-305-85358

• Exhibit 1
• Exhibit 2