With regard to personal information used in relation to its business operation (including social security and tax numbers and specific personal information), TOWA Corporation (hereafter, the "Company") will promote the following initiatives by fully recognizing the importance of the protection of personal information.

The Company will comply with the Act on the Protection of Personal Information and the Act on the Use of Numbers to Identify a Specific Individual in Administrative Procedures.

To establish and operate the internal system for managing personal information, the Company has established the Rules on Protection of Personal Information and the Rules on Handling of Specific Personal Information. The Company will ensure that its employees and other relevant people are thoroughly informed of these rules.

The Company will obtain personal information by lawful and fair means and collect such information within an appropriate range by clearly stating the purpose of the collection in advance.

The Company will adhere to the following when using or handling personal information specifically.

• Personal information will be used only by people who are authorized to use such information for specific operations, within the scope of the purposes of its collection and only where necessary for executing operations.
• Personal information will not be used for purposes other than the original intent, removed from the place of its use, transmitted outward, or otherwise leaked.

The Company prohibits the provision of collected personal information to third parties, in principle. Where the Company uses personal information jointly with a third party due to business necessity or entrusts such information to a third party for outsourcing operations to the third party, the Company will strive to prevent its leakage or provision to any other third party by concluding the necessary agreements, such as a non-disclosure agreement.

Where a person requests the disclosure, correction, discontinuation of use, or deletion of their personal information or makes a similar request about their personal information, the Company will respond promptly to such a request in accordance with laws, regulations, and its internal rules.

The Company will continuously review and strive to improve its activities described above.