DEFINITIONS

"Personal Information" refers to information about an individual that can be used to identify a specific individual by name, date of birth, telephone number, address, place of employment, credit card number, bank account number, etc., and information that can be easily cross-checked with other information to identify a specific individual.

"Personal Data" refers to Personal Information that is systematically organized so that it can be searched for specific Personal Information.

"Personal Information Requiring Special Consideration" is Personal Information that includes matters that require special consideration in order to prevent unfair discrimination, prejudice, or other disadvantage to an individual due to the individual's race, creed, social status, medical history, criminal history, the fact that the individual has suffered harm due to a crime, or other descriptions.

TOPICS COVERED IN OUR PRIVACY POLICY

• 1. Who Are We and What Do We Do?
• 2. How to Contact Us?
• 3. What Personal Information We Collect and How Your Data Is Used
• 4. Retaining and Destroying Your Personal Information
• 5. Our Use of Cookies and Similar Technologies
• 6. Protecting the Privacy Rights of Third Parties
• 7. Our Email Policy
• 8. Our Security Policy
• 9. Use of Your Credit Card
• 10. How to Access Your Information and Your Other Rights
• 11. Handling of Pseudonymously Processed Informationい
• 12. Handling of Anonymously Processed Information
• 13. Changes to Our Privacy Policy

1. WHO ARE WE AND WHAT DO WE DO?

The Sites and our Services are operated by Rigaku Group.

• Rigaku Holdings Corporation is the data controller responsible for your Personal Information.
• The registered office of Rigaku Holdings Corporation is at 3-9-12 Matsubara-cho, Akishima-shi, Tokyo 196-8666, Japan.

2. HOW TO CONTACT US?

If you have any questions or complaints about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, please contact to the followings;

Data Controller Contact Information

《Data Controller》
Rigaku Holdings Corporation
Compliance Committee Office
3-9-12 Matsubara-cho, Akishima-shi, Tokyo 196-8666, Japan
Tel: +81 3-3479-0618
Email: p-info@rigaku.co.jp

《Data Controller in the United States》
Rigaku Americas Holding Company, Inc.
Corporate Marketing Division
9009 New Trails Drive, The Woodlands, TX 77381 USA
Tel: +1 281-362-2300
Email: webmaster@rigaku.com

《Representative of Data Controller in the European Union》
Rigaku Europe SE
Hugenottenallee 167, Neu Isenburg 63263, Germany
Tel: +49 6102 77999 51
Email: rese@rigaku.com

When you or your agent request us the disclosure of your Personal Information, we reply without delay, except in the following cases;

• cases in which there is a possibility of harming a principal or third party's life, body, fortune or other rights and interests
• cases in which there is a possibility of interfering seriously with implementing our business properly
• cases of violating other laws or regulations

Further, if you want to request the correction, addition or deletion of your Personal Information with the reason that the content of your Personal Information is not factual, and the utilization cease or deletion or ceasing a third-party provision of your Personal Information with the reason of the violation of laws and regulations, please contact the above. We confirm your identity and investigate and correspond to such request. If we cannot correspond to your request, we explain the reason.

3. WHAT PERSONAL INFORMATION WE COLLECT AND HOW YOUR INFORMATION IS USED

We use the information we receive from you to:

• your identity;
• Provide our products and services you have requested or purchased from us;
• Personalize and customize our content;
• Make improvements to our website;
• Contact you with updates to our website;
• Resolve problems and disputes;
• Provide to third party service providers within the necessary range for receiving the services; and
• Contact you with marketing and advertising that we believe may be of interest to you.

We have set out below, in a table format, a more granular description of all the ways we plan to use your Personal Information. The Rigaku Group will not use Personal Information in a manner that may encourage or induce illegal or improper activities.

Purpose/Activity	Type of data
(1) Verify your identity (a) Identity (b) Contact (c) Profile (d) Provision of our products/services (e) Usage of our products/services (f) Marketing and Communications	(a) Identity (b) Contact (c) Profile (d) Provision of our products/services (e) Usage of our products/services (f) Marketing and Communications
(2) Provide our products and services you have requested or purchased from us (a) To deliver our products/carry out our services (b) To process and deliver your order and ask for payment: 　1. Manage payments, fees and charges 　2. Collect and recover money owed to us	(a) Identity (b) Contact (c) Financial (d) Transaction or deliver our products/services (e) Marketing and Communications
(3) Personalize and customize our content, such as (a) Asking you to leave a review or take a survey for your usage of our products/services (b) Customizing our contents under such review or survey	(a) Identity (b) Contact (c) Profile (d) Usage of our products/services (e) Marketing and Communications
(4) Make improvements to our website, such as (a) Asking you to leave a review or take a survey for your usage of our products/services (b) To check the record of the access to our site	(a) Identity (b) Contact (c) Profile (d) Usage of our website and products/services (e) Marketing and Communications
(5) Contact you with updates to our website, such as (a) Notifying you about changes to our terms or privacy policy (b) To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity (b) Contact (c) Technical (d) Usage of our website and products/services
(6) Resolve problems and disputes, such as (a) Resolution of the problem between you and us (b) Resolution of the problem of our website	(a) Identity (b) Contact (c) Technical (d) Usage of our website and products/services
(7) Provide to third party service providers within the necessary range for receiving the services, such as (a) To entrust the manufacturing of our products or the provision of our services to third-party service providers, as necessary (b) To entrust the maintenance of this website to third-party service providers, as necessary	(a) Identity (b) Contact (c) Profile (d) Usage of our website and products/services (e) Technical
(8) Contact you with marketing and advertising that we believe may be of interest to you, such as (a) To make suggestions and recommendations to you about goods or services that may be of interest to you (b) To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	(a) Identity (b) Contact (c) Profile (d) Usage of our website and products/services (e) Marketing and Communications (f) Technical

(I) Promotional Offers From Us

We may use your Identity, Contact, Technical, Usage and Profile Data to form a view on what we think you may want or need, or what may be of interest to you. This is how we decide which products, services and offers may be relevant for you (we call this marketing). You will receive marketing communications from us if you have requested information from us or purchased goods or services from us or if you provided us with your details when you entered a competition or registered for a promotion and, in each case, you have not opted out of receiving that marketing.

(II) Third-Party Marketing

We will get your express opt-in consent before we share your Personal Information with any company outside the Rigaku Corporation group for marketing purposes.
You can change your contact preferences at any time through your account or by sending us an email with your request to: p-info@rigaku.co.jp.

(III) Your Receipt Of Marketing Message

You can ask us or third parties to stop sending you marketing messages at any time by contacting us at any time.
Where you opt out of receiving these marketing messages, this will not apply to Personal Information provided to us as a result of a product/service purchase, warranty registration, product/service experience or other transactions.

(IV) Joint Use of Personal Information within the Rigaku Group and Provision of Personal Data to Third-Parties

The Rigaku Group may share your Personal Information with other companies within the Rigaku Group for the purposes described at the beginning of this article.
The Rigaku Group requires all companies within the Group to ensure the security of your Personal Information and to handle it in accordance with the law. In the event that the Rigaku Group outsources the processing of Personal Information provided by you to a third party, the Rigaku Group will select a third party that is capable of sufficient security management, and will manage and supervise that third party.
The Rigaku Group may, for the purposes stated at the beginning of this article, use your name, e-mail address, telephone number, address, cookies, IP address, and any other Personal Information that does not fall under the category of "Personal Information Requiring Special Consideration" to send e-mails, send text messages, or send other messages to third-party service providers to which the Rigaku Group has outsourced the handling of Personal Information, without your prior consent. Such service providers may include, but are not limited to, payment processing companies, call centers, information management service companies, help desk service providers, accountants, law firms, auditors, shopping cart and email service providers, and shipping companies.
The Rigaku Group will take appropriate and adequate technical and physical security measures when providing your Personal Information to such service providers. If you request the Rigaku Group to stop providing your Personal Information to such service providers, the Rigaku Group will promptly respond to your request in accordance with laws and regulations. If you would like to obtain a copy of the above security measures document, or to request that we stop providing your Personal Information to a service provider, please send an e-mail to p-info@rigaku.co.jp.
The Rigaku Group will make a record of any Personal Data that we provide to a third party or that we receive from a third party. In addition, when we receive Personal Data from a third party, we shall check the circumstances of obtaining such Personal Data.

(V) Legally Required Releases Of Information

We may be legally required to disclose your Personal Information if such disclosure is (a) based on laws and regulations; (b) necessary for the protection of the life, body, or property of an individual and in which it is difficult to obtain the consent of the person; (c) specially necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the person.

(VI) Disclosures To Successors

If the Rigaku Group's business is transferred, or if all or part of the Rigaku Group is merged with another business that becomes responsible for providing you with a website, the Rigaku Group may transfer your personal information to the new business. The new business may treat your information in accordance with the terms and conditions set forth in this Privacy Policy for Personal Information Protection or any amended policy of that business. The Rigaku Group may also transfer your personal information in the event of the bankruptcy of a company within the Rigaku Group or the transfer of all or part of the assets of the Rigaku Group to another party.

(VII) Community Discussion Boards

Our website offers the ability for users to communicate with each other through online community discussion boards, blogs, or other mechanisms. We do not filter or monitor what is posted on such discussion boards. If you choose to post on these discussion boards, you should use care when exposing any Personal Information, as such information is not protected by our privacy policy nor are we liable if you choose to disclose your Personal Information through such postings. Also, Personal Information you post on our website for publication may be available worldwide by means of the Internet. We cannot prevent the use or misuse of such information by others.

4. RETAINING AND DESTROYING YOUR PERSONAL INFORMATION

In some circumstances you can ask us to delete your data: see "Your right to erasure" in Article 10 below for further information. In some circumstances we may pseudonymize or anonymize your Personal Information (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you. When your information is no longer necessary for the processing purposes for which the information was collected, we will destroy, delete, or erase it, unless there is no legal obligation to retain the information.

5. OUR USE OF COOKIES AND SIMILAR TECHNOLOGIES

Our Sites use certain cookies, pixels, beacons, log files and other technologies of which you should be aware. Please see our Cookie Policy to find out more about the cookies we use and how to manage and delete cookies. You can also limit the collection of information by third-party partners by visiting the Cookie Consent page.

6. PROTECTING THE PRIVACY RIGHTS OF THIRD PARTIES

If any postings you make on our website contain information about third parties, you must make sure you have permission to include that information in your posting. While we are not legally liable for the actions of our users, we will remove any postings about which we are notified, if such postings violate the privacy rights of others.

7. OUR EMAIL POLICY

You can always opt out of receiving further email correspondence from us or our affiliates. We will not sell, rent, or trade your email address to any unaffiliated third party without your permission except in the sale or transfer of our business, or if our company files for bankruptcy.

8. OUR SECURITY POLICY

We are committed to keeping the Personal Information you provide to us secure and we will take reasonable precautions to protect your Personal Information from loss, misuse or alteration. We have implemented information security policies, rules and technical measures to protect the Personal Information that we have under our control from:

• unauthorised access;
• improper use or disclosure;
• unauthorised modification; and
• unlawful destruction or accidental loss.

All of our employees and data processors (i.e. those who process your Personal Information on our behalf, for the purposes listed above), who have access to, and are associated with the processing of Personal Information, are obliged to respect the confidentiality of the Personal Information of all users of our Services. In case that the incident to Personal Information (leakage, loss, damage and infringement) occurs (including the case of the possibility of such incident), we immediately investigate the fact and the reason of such incident, and take measures to prevent recurrence, and report to the supervisory authority and you in accordance with the relevant laws and regulations.

9. USE OF YOUR CREDIT CARD

You may have to use a credit card to buy products and services from our website. When we collect your credit card information through our website, we will encrypt it before it travels over the Internet using industry-standard technology for conducting secure online transactions. Unfortunately, we cannot guarantee against the loss or misuse of your Personal Information or secure data transmission over the Internet because of its nature. We strongly urge you to protect any password you may have for our website and to not share it with anyone. You should always log out of our website when you finish using it, especially if you are sharing or using a computer in a public place. We use third-party billing services and have no control over these services. We use our commercially reasonable efforts to make sure your credit card number is kept strictly confidential by using only third-party billing services that use industry-standard encryption technology to protect your credit card number from unauthorized use. However, you understand and agree that we are in no way responsible for any unauthorized use or misuse of your credit card number by third-party billing services.

10. HOW TO ACCESS YOUR INFORMATION AND YOUR OTHER RIGHTS

You have the following rights in relation to the Personal Information we hold about you:

• Your Right Of Access.
  If you ask us, we'll confirm whether we're processing your Personal Information and, if so, provide you with a copy of that Personal Information (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
• Your Right To Rectification.
  If the Personal Information we hold about you is inaccurate or incomplete, you're entitled to have it rectified. If we've shared your Personal Information with others, we'll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we'll also tell you who we've shared your Personal Information with so that you can contact them directly.
• Your Right To Erasure.
  You can ask us to delete or remove your Personal Information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If we've shared your Personal Information with others, we'll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we'll also tell you who we've shared your Personal Information with so that you can contact them directly.
• Your Right To Restrict Processing.
  You can ask us to 'block' or suppress the processing of your Personal Information in certain circumstances such as where you contest the accuracy of that Personal Information or you object to us processing it. It won't stop us from storing your Personal Information though. We'll tell you before we lift any restriction. If we've shared your Personal Information with others, we'll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we'll also tell you who we've shared your Personal Information with so that you can contact them directly.
• Your Rights In Relation To Automated Decision-Making And Profiling.
  You have the right not to be subject to a decision when it's based on automatic processing, including profiling, if it produces a legal effect or similarly significantly affects you, unless such profiling is necessary for entering into, or the performance of, a contract between you and us.

11. HANDLING OF PSEUDONYMOUSLY PROCESSED INFORMATION

(I) Creation Of Pseudonymously Processed Information

• Information shall be processed appropriately in accordance with standards stipulated in laws and regulations.
• Security control action shall be taken in accordance with standards stipulated in laws and regulations so as to prevent leakage of deleted information from the Personal Information which is used for creating pseudonymously processed information and information relating to processing methods.
• No comparison with the other information shall be taken to identify the individual relating to Personal Information used to create the pseudonymously processed information concerned.
• Not to use the pseudonymously processed information for the purpose of contacting you or visiting your residence
• Not to provide pseudonymously processed information to third-parties.

12. HANDLING OF ANONYMOUSLY PROCESSED INFORMATION

(I) Creation Of Anonymously Processed Information

When creating anonymously processed information (information relating to an individual that can be created from processing Personal Information, by taking action stipulated in laws and regulations so as to make it impossible either to identify a specific individual or to restore the original Personal Information), we will observe the following requirements:

• Information shall be processed appropriately in accordance with standards stipulated in laws and regulations.
• Security control action shall be taken in accordance with standards stipulated in laws and regulations so as to prevent leakage of deleted information from the Personal Information which is used for creating anonymously processed information and information relating to processing methods.
• Items of information relating to an individual contained in anonymously processed information shall be disclosed to the public in accordance with standards stipulated in laws and regulations.
• No comparison with the other information shall be taken to identify the individual relating to Personal Information used to create the anonymously processed information concerned.

(II) Provision Of Anonymously Processed Information

When providing anonymously processed information to a third party, we will, in accordance with standards stipulated in laws and regulations, disclose to the public the items of information relating to an individual contained in such anonymously processed information as well as the method of provision, and we will state to the third party explicitly to the effect that the information being provided is anonymously processed information.

13. CHANGES TO OUR PRIVACY POLICY

We reserve the right to change this privacy policy at any time. If our company decides to change this privacy policy, we will post those changes on our website so that our users and customers are always aware of what information we collect, use, and disclose. If at any time we decide to disclose or use your Personal Information in a method different from that specified at the time it was collected, we will provide advance notice by email (sent to the email address on file in your account). Otherwise, we will use and disclose our users' and customers' Personal Information in agreement with the privacy policy in effect when the information was collected. In all cases, your continued use of our website, services, and products after any change to this privacy policy will constitute your acceptance of such change.