Basic Policy / Terms and Conditions, Rules and Regulations, etc. Privacy policy for personal data of applicants for employment

PayPay Securities (hereinafter referred to as 'the Company'). (the "Company") may handle personal data provided by applicants in connection with recruitment activities carried out by the Company, and such personal data will be handled as follows.

1. Compliance with relevant laws and regulations

The Company complies with the Act on the Protection of Personal Data, etc. (hereinafter referred to as the 'Personal Data Protection Act'), the relevant regulations, guidelines of the competent minister, guidelines of the Personal Data Protection Commission and guidelines of authorized personal data protection organizations (hereinafter collectively referred to as 'relevant laws, etc.').

2. Types of personal data and proper acquisition

The Company acquires applicants' personal data to the extent necessary for its business and by proper and lawful means. Specifically, the following types of personal information (including sensitive information) may be acquired from applicants based on their willingness to provide it through application forms, CVs, etc. In addition, we may ask you to provide information that is necessary for the selection process, and we may also obtain personal information about you from recruitment agents and contractors to whom we outsource background checks, etc.
Please note that if you do not provide your personal data, you may not be able to proceed with the selection procedure.

• Contact details such as name, address, telephone number and email address
• Date of birth
• gender
• Information on work experience, qualifications held, annual income, etc., as stated in CVs, resumes, etc.
• Information on the results of tests, references, medical examinations, etc. carried out at the time of recruitment.
• History of applications and selection results.
• Results of anti-social forces relationship checks (including criminal records)

3. Purpose of use

The Company will handle the personal data of applicants to the extent necessary to achieve the purposes of use described below, except where the applicant has given his/her consent or where the data is treated as an exception under the relevant laws and regulations.
If the purpose of use of specific personal data is separately limited in accordance with the law, it will not be handled for any other purpose.

• Identification of applicants
• Selection of applicants
• Contacting and responding to enquiries from applicants about their applications and informing them of interview dates and times.
• Management of re-applications, e.g. whether or not the applicant has re-applied
• If employed by the company, personnel and labor management thereafter
• Contacting applicants who have declined or been unsuccessful in their application with future selection offers from the Company.
• Consideration of reviewing recruitment and hiring methods, etc.
• Checking relationships with anti-social forces
• Contacting applicants to contractors when the storage and management of applicants' personal data is outsourced, or when tests conducted at the time of recruitment are outsourced to an external company.

4. Prohibition of improper use

The Company will not use personal data in a manner that may encourage or induce illegal or unjustified activities.

5. Security control measures

The Company will endeavor to keep applicants' personal data accurate and up-to-date, and will implement necessary and appropriate security control measures to prevent leaks, etc. In addition, the Company will exercise appropriate supervision over officers, employees and contractors who handle applicants' personal information.
The security control measures taken by the company can be found in the "Security control measures for PayPay securities" on the company's website.

Additionally, the Company will store and manage the personal information of applicants as employee information in the event that they are employed as a result of the selection process, in accordance with the retention period specified in internal regulations. Furthermore, the personal information of applicants who were not accepted for employment will be retained for a period necessary for reviewing and considering recruitment methods, as well as for the purpose of potential communication or notice from the Company in a future selection process.

6. Continuous improvement

The Company will review this Privacy Policy from time to time in order to ensure the proper handling of personal information and other information of recruits, and will strive for continuous improvement.

7. Procedures for requesting disclosure, etc.

Applicants can exercise their rights in relation to their own personal information, based on applicable laws.

The Company will endeavor to respond appropriately and promptly to requests for notification of the purpose of use, disclosure of content, correction, addition, deletion, suspension of use, elimination or suspension of provision to third parties of retained personal data relating to applicants in cases where the content of the retained personal data is contrary to fact, etc., after confirming the identity of the person making such requests. The Company will endeavor to respond appropriately and promptly to such requests. For disclosure, the customer can specify either an electromagnetic or written method.
For further information on procedures, please refer to the contact points listed in section 13.

8.Restrictions on provision to third parties

The Company will not disclose or provide personal data to third parties without the prior consent of the individual, unless the provision or disclosure is permitted by law.
In addition, the Company may outsource recruitment-related tasks to external contractors that the Company considers trustworthy, and may outsource the handling of personal data accordingly, in which case the Company shall provide the necessary and appropriate management and supervision of such contractors to ensure that their personal data is properly managed.

9. Provision of information to operators located abroad

The Company may outsource part of its operations related to recruitment to an entity located in a foreign country and may provide the applicant's personal data to the extent necessary to achieve the purpose of use.
In such a case, the Company shall enter into an appropriate agreement with said third party located in a foreign country to protect the information of the applicant.

Applicants can request information from us on matters stipulated in the data protection laws and guidelines, such as the name of the foreign country in which the business we have outsourced is located.

10. Handling of cookies etc.

The Company's website and services use cookies, etc., to improve user convenience and the website itself. The Company may also allow third parties to set cookies, etc., for the purpose of analyzing service usage or delivering more relevant advertisements to customers. For details, please refer to here.

11. Name of the business operator handling personal data, etc.

For the name, address and name of the representative of the Company, please see "About PayPay Securities" on the Company's website (https://www.paypay-sec.co.jp/corporate/company/)

12. Person responsible for the protection of personal information

PayPay Securities Corporation
Hibiya Park Front, 2-1-6 Uchisaiwaicho, Chiyoda-ku, Tokyo
Personal Information Manager

13. Offer of opinions and requests

For any comments or requests relating to the handling of applicants' personal data, please contact as below.

• PayPay Securities Limited, Human Resources Department
• Email address d_human_resources@paypay-sec.co.jp
• Reception hours 10:00-17:00 (working days except Saturdays, Sundays, public holidays and year-end and New Year holidays).

14. Authorized personal data protection organizations

The Company is a member of the Japan Securities Dealers Association, an authorized personal data protection organization accredited by the Personal Data Protection Commission. The Association's Personal Information Consultation Office handles complaints and consultations regarding the handling of personal information by Association members.

• [Complaints and consultations].
  Japan Securities Dealers Association, Personal Information Office.
• Telephone number: 03-6665-6784
• URL：https://www.jsda.or.jp

15. Competent departments, amendment and abolition

(1) The Human Resources Department has jurisdiction over this policy.
(2) Amendments and repeals of this policy shall be in accordance with the Regulations Governing the Regulations.