Personal Data Protection Policy

Sumitomo Metal Logistics Service Co., Ltd. takes it as the basis of its business activities and a social obligation to protect personal data of its customers and employees ("customers, etc."). We set forth and put in place the following personal data protection policy in connection with handling of personal data of the customers, etc.

• 1. Sumitomo Metal Logistics Service Co., Ltd. will comply with all laws and regulations as applicable to personal data protection.
• 2. Sumitomo Metal Logistics Service Co., Ltd. will obtain personal data by lawful and fair means only and will use no illegal means to obtain it.
• 3. Sumitomo Metal Logistics Service Co., Ltd., when receiving personal data from the customers, etc., will always establish the purpose of using it and limit the use to the extent as defined by the purpose.
• 4. Sumitomo Metal Logistics Service Co., Ltd. will basically disclose to no third parties any personal data as received from the customer, etc., except in the following cases:
  • (1) Where the customer consents to the disclosure.
  • (2) Where such disclosure of personal data is legally required.
  • (3) Where there are other reasons to justify the disclosure.
• 5. Sumitomo Metal Logistics Service Co., Ltd. manages the personal data of the customer, etc. in a careful and appropriate manner. Also, the company puts strict and appropriate security measures in place to prevent loss, destruction, tampering, leakage, etc. of personal data.
• 6. Sumitomo Metal Logistics Service Co., Ltd., when requested by the customer, etc. to disclose, correct, delete, or suspend the use of his or her personal data, will sincerely respond to such request to the extent reasonably practical.
• 7. Sumitomo Metal Logistics Service Co., Ltd. lays down its internal rules to implement its personal data protection policy and deploys a person in charge of it at each organization for handling and appropriate control of personal data. Also, the company ensures that such rules are in compliance with laws and regulations in place and other codes of conduct as established for personal data protection.