Personal Information Protection
Notice of Daiichi Sankyo Healthcare Direct Co., Ltd.

I. About this Notice
Daiichi Sankyo Healthcare Direct Co., Ltd (hereinafter referred to as the "Company") processes personal data in accordance with applicable laws and regulations and any laws and regulations that may replace them in the future.
The Company provides information in accordance with laws and regulations relating to the processing of personal data.
This notice sets out the grounds on which the Company will process personal data provided to the Company or obtained from another information source. The Company asks that you read and fully understand this notice.
Ⅱ. Collection of personal information
The Company may collect personal information such as name, address, telephone number, gender, date of birth, e-mail address, and any other information necessary to accomplish the purposes of use set forth in Section 3 below, whether by means of the forms on our website, e-mail, letter, or otherwise.
In addition, in some cases, the Company may receive names, addresses, telephone numbers, gender, date of birth, e-mail address, and other types of information from contractors, etc.
When you visit the Company's website, in some cases the Company may automatically collect cookies on the terminal device you are using.
Please refer to the Company's cookie policy for detailed information regarding the use of cookies and how to disable the collection of cookies.
Ⅲ. Purpose of personal information
The Company uses the personal information in its possession for the following purposes.
In addition, in order to achieve these purposes, the Company may in some cases entrust the handling of such information to third parties. However, in such cases, the necessary and appropriate supervision of such third parties will be carried out.
For the personal information marked with an asterisk (※), you may request the Company to notify the purpose of use, disclosure, correction, addition, deletion, suspension of use, deletion, suspension and provision to the third parties (hereinafter referred to as "disclosure, etc.").

Purpose of use of personal information handled by the Company

Type of personal data Purposes
Personal information obtained directly from the individual in writing (including via a website, email, etc.)
Individual customer information※ ・Delivering the Company's products, sending catalogs and direct mail, providing related after-sales services, and providing information on new products and services
・Conducting business activities related to the Company's mail order and over-the-counter sales
・Providing information about the Company's other business activities
・Sending catalogs, direct mail, and other communications from companies and organizations that the Company deems appropriate
・Conducting accounts receivable management related to transactions with the Company
・Improving products & services and displaying advertisements
Information on the persons in charge at the business partners ※ Confirming the content of orders (communication records, etc.)
Information for Company Employees ※ Implementing personnel labor management, business management, health management, and security management regarding employees
Information about applicants for jobs with the Company ※ Contacting candidates and managing the Company’s recruiting operations
Specific personal information ※ Uses specified in the My Number act
Personal information obtained from individuals in a manner other than in writing
Individual customer information obtained by phone, etc.* ※ In the mail order business, to deliver products, provide related customer service, and provide information about new products and services
Personal information obtained indirectly from business partners, etc.
Information obtained over the phone from business partners contacts, etc. Confirming the content of orders (communication records, etc.)
Personal information collected from customers in connection with outsourced business operations Proper performance of the relevant outsourced work
Ⅳ．Retention period of personal information
The Company shall store the collected personal data for the period of time necessary for the processing of such personal data, but for no longer than seven years from the termination of the business relationship.
However, this shall not apply in cases where laws and regulations require the personal data to be kept for a longer period, in which case the personal data shall be kept for the period required by the said laws and regulations.
Ⅴ．Data subject rights
The individual whose personal information is held by the Company has several legal rights.
These rights may vary depending on the location of individual and the data protection laws and regulations applicable to the individual’s relationship with the Company, but typically include the following.
（1） The right to obtain information about the processing of personal data and to have access to personal data held by the Company
（2）The right to require the Company to correct personal data if it is inaccurate or incomplete
（3）The right to request the Company to delete relevant personal data in certain situations
（4）The right to request the Company to restrict the processing of personal data by the Company in certain situations
（5）The right to object to the Company regarding the processing of relevant personal data
 （6）The right to receive personal data in a structured, commonly used, machine-readable format and/or the right to have the Company transmit such personal data to a recipient where technically feasible (the right to data portability)
（7）The right to withdraw consent to the processing of the relevant personal data at any time

You may exercise your rights by contacting the Company's contact indicated in “Ⅵ. Disclosure of matters relating to personal data held by the Company” below. If you believe that the Company has violated your rights, you can lodge a complaint with the appropriate data protection authority.

For more information on the methods of exercising rights that are recognized under the laws of Japan, please see here.
In addition, for information on the methods of exercising rights recognized under the laws and regulations of countries other than Japan, please contact the Company's contact indicated in “Ⅵ. Disclosure of matters relating to personal data held by the Company” below.
Ⅵ．Disclosure of matters relating to personal data held by the Company
The Company shall respond as follows to requests to information about the purpose of use, disclosure, correction of details, additions or deletions, suspension of use, erasure or suspension of provision to third parties of personal data held by the Company (hereinafter “request for information, etc.”) received from the owner of the personal data or his or her representatives.
１．Name, address, and representative of the operator
Daiichi Sankyo Healthcare Direct Co., Ltd.
Yokoi, Konan-cho, Takamatsu-shi, Kagawa
Representative Director and President Hiroshi Yaegashi
２．Purpose of use of all retained personal data
This is as set forth in “Purpose of use of personal information handled by the Company” above.
３．Where to complain about the handling of retained personal data
DAIICHI SANKYO HEALTHCARE DIRECT Personal Information Inquiry Desk
460-1, Yokoi, Konan-cho, Takamatsu-shi, Kagawa 761-8589, Japan
Telephone: 087-805-0049(※You can also use this service from your mobile phone)
Operating hours: Mon-Sat 9:00am to 8:00pm / Public holidays 9:00am to 6:00pm(Excluding Sundays and New Year's holidays)
４．Accredited Personal Information Protection Organization
At present, there is no authorized personal information protection organization of which the Company is a member.
（1）Where to request for disclosure, etc.
For disclosure requests, etc., please contact the Personal Information Inquiry Desk above.
※If you wish to conduct the process of requesting disclosure, etc. by electromagnetic means, please let us know.
As a general rule, we will accommodate your requests in this regard.
Procedures for requesting disclosure, etc.
➀Upon acceptance of your request, we shall send you by mail the request form designated by the Company to be used, "Request for Disclosure of Personal Data".
➁Send the completed request form, documents confirming that you are a representative, if the request is made by a representative, and a postal money order for the fee (only in the case of notification of purpose of use and request for disclosure) to the Personal Information Inquiry Desk above.
➂Upon receipt of the above request, the Company shall ask you to provide two or more items of information (such as your telephone number and date of birth) to verify your identity.
➃As a general rule, responses shall be sent to the individual in writing (sealed envelope).
（3）Documents confirming the identity of a representative (for requests made by a representative)
If the person requesting the information is a representative, please attach documents showing that he or she is the representative in question and documents establishing his or her identity.
The permanent address information included in each document should show the prefecture, and any other address information should be blacked out or otherwise redacted. Please send documents that either do not contain any personal numbers or have all digits of personal numbers blacked out or otherwise redacted.
➀Documents proving the identity of the representative
＜For the representative designated by the person requesting the disclosure, etc.＞
・Letter of authorization from the person requesting disclosure (original)
If the representative is the legal representative of a minor: A copy of one of the following
・Certificate of Family register
・Residence card (describing the relationship)
・Other official documents that can be used to confirm legal authority
If the representative is a legal representative of an adult guardian: A copy of one of the following
・Certificate of registration of guardianship, etc.
・Other official documents that can be used to confirm legal authority
➁Documents proving the identity of the representative
・Driver’s license
・Passport
・Health insurance card (Please submit this after blacking out or otherwise redacting all insurance identification codes and numbers, etc.)
・Residence card
（4）Fee for notification of purpose or request for disclosure
800 yen per request
(If you request on paper, please enclose a postal money order with the invoice you send. If you request by other methods, we will discuss this with you at the time of request.)
６．Details of the personal information handling system and security management measures taken
The Company endeavors to keep personal information and specified personal information, etc. accurate and up to date, and to take organizational, human, physical, and technical security control measures to prevent the leakage, loss, and damage of personal information. These measures include formulating rules for handling personal information, regularly self-inspecting the status of handling personal information, regularly training employees in handling personal information, preventing the theft and loss of personal information handling devices, restricting the means by which personal information can be removed from the Company's premises, properly disposing of devices on which personal information has been recorded, implementing access controls, preventing unauthorized access from outside the Company, and protecting against rogue software.
The Company uses a cloud service to manage personal information, which may involve managing personal information in the United States, and therefore the Company implements security control measures based on knowledge of the U.S. personal information protection system. For an overview of the personal information protection systems of relevant countries, please refer to the following websites.

Results of the survey conducted by the Personal Information Protection Commission JAPAN on the legal systems of foreign countries:
https://www.ppc.go.jp/personalinfo/legal/kaiseihogohou/?fbclid=IwAR3un2kuCi9gSFQXeJrOCYFuaZkPKmcSez4MyslJM1hZlTtc-Z1ApfqpRPA
United States (federal government) personal information protection systems, etc:
https://www.ppc.go.jp/files/pdf/USA_report.pdf
State of California (United States) Personal Information Protection Systems, etc:
https://www.ppc.go.jp/files/pdf/california_report.pdf
Ⅶ．Revisions to this Notice
If this Notice is amended, it will be promptly posted on the Company's website.

＞For residents of the European Economic Area or the United Kingdom