Personal Information Protection Policy of KYOCERA Corporation

Basic policies
Purpose of use of personal information
Joint use of personal information
Production of Anonymously Processed Information and provision of it to third parties
Handling of Specific Personal Information, etc.
Handling of personal information on websites
Security control measures
Kyocera Privacy Policy and Cookie Policy for EEA Personal Data
Kyocera Privacy Notice for California Residents
Kyocera Privacy Notice for California Prospective Employees

KYOCERA Corporation (“Kyocera”, “we”, “our” or “us”) understands that personal information is important information constituting privacy and believes that ensuring thorough protection of such information is our social responsibility. When handling personal information, Kyocera will comply with laws and regulations regarding personal information and undertake the following:

1. Basic policies

Appointment of managers
Kyocera appoints a director in charge of personal information protection. Kyocera also appoints a manager who handles personal information for each department and has them perform appropriate management, thus striving to protect personal information.
Strengthening of employee education
Kyocera provides all persons who handle personal information with activities to raise their awareness thereof and in-house education on compliance with laws and regulations and other norms concerning the protection of personal information.
Acquisition of personal information
When obtaining personal information, Kyocera clarifies the purpose of use, obtains information within an appropriate scope, and does not use the information for any purpose other than the intended one.
Provision of personal information
Kyocera does not provide the personal information of our customers to third parties without their consent, except in the following cases:
- The provision of personal information is necessary to protect the life, body, or property of an individual and it is difficult to obtain his/her consent.
- Personal information is provided to an outsourcee to the extent it is necessary to achieve the purpose of use. In such a case, Kyocera makes arrangements with the outsourcee for protecting personal information and request they properly handle the personal information that we provided, thus making every effort to protect personal information.
- The provision of personal information is based on laws and regulations
- A business is passed on through a merger, spin-off, business transfer, or other corporate reorganization
Management and protection of personal information
To prevent the loss, tampering, corruption, and leaking of personal information, Kyocera improves our internal regulations and implements reasonable safety measures, thus striving to protect our customer’s personal information.
Inquiries about, corrections, deletions, etc. of personal information
When Kyocera receives inquiries about personal information or requests for corrections, deletions, etc. of the same by a customer, we respect the intention and take any necessary measures within reason to complete the request.
Establishment of a point of contact
Kyocera establishes a point of contact for responding to inquiries about the handling of personal information.
Conducting audits
Kyocera conducts regular audits of our internal efforts to protect personal information.
Review and improvement
Kyocera improves the operations of Basic policies and internal rules as appropriate in response to changes in laws and regulations, the social environment, etc.

2. Purpose of use of personal information

Kyocera uses the personal information that we obtain within the scope necessary to achieve the following purposes in our business activities, including the manufacturing, sales and service of communications equipment, energy-related equipment, machine tools, jewelry, kitchen products, medical products, display products, industrial machineries, other products, various parts and software products as well as operations outsourced from other companies such as business partners and affiliates.

[Customer’s personal information]

(1) Delivery and installation of products
(2) Repair, inspection, other after-sales service and quality improvement of products and services
(3) Operations related to payment of products and services
(4) Planning, development and providing products and services
(5) Responding to customer requests (requests for documents, product introductions, visits, consultations, etc.)
(6) Announcement of new products and event campaigns in our business and delivery of e-mail magazines
(7) Prize drawing in various campaigns and shipment of goods
(8) Responding to inquiries
(9) Management of reservations and history for our facility visits
(10) Exercise of rights and performance of obligations under contracts with customers, laws, etc.
(11) Purpose explicitly mentioned in obtaining a customer’s personal information
(12) Provision of information to our outsources to the extent necessary to respond to customers
(13) Operations incidental to the foregoing purposes

[Shareholder’s personal information]

(1) Exercise of rights and performance of obligations under the Companies Act
(2) Various benefits provided by us to shareholders, including responding to inquiries or requests from shareholders regarding products and services that Kyocera and our group companies provide (incl. responding to inquiries or requests regarding shareholder benefit programs)
(3) Various communications to shareholders
(4) Provision of personal information to stock transfer agencies to the extent necessary to handle shares
(5) Operations incidental to the foregoing purposes

[Personal information of prospective employees]

(1) Acceptance or selection of a prospective employee
(2) Various communications to the prospective employee
(3) Operations incidental to the foregoing purposes

In addition, Kyocera may statistically process and utilize customer information that we obtained. In this case, the information utilized does not contain any information that personally identifies the customer.

3. Joint use of personal information

Kyocera may jointly use the personal information provided by our customers with our group companies etc.
※Kyocera’s address and the name of its representative are as follows:
　Address: 6 Takeda Tobadono-cho, Fushimi-ku, Kyoto, Japan
　Representative: President and Representative Director Hideo Tanimoto

・Joint utilization of personal information with group companies

Personal information jointly used	Purpose of joint use	Scope of joint use	Party with responsibility for the management of the personal information
Personal information concerning credit checks of a customer: Address, full name, telephone number, company name, etc.	Credit management	Group companies (Japanese Only)	Kyocera Corporation※
Customer information obtained through the website inquiry form or the member-only website or customer information on customers making inquiries at trade shows: Company name, department name, address, full name, telephone number, e-mail address, etc.	Responding to inquiries, including those to the point of contact, conducting sales activities in response to inquiries at trade shows, selling products and providing related services, providing customer support, using as reference for product development and service improvement, public relations, advertising, and sales promotion activities	Group companies	Kyocera Corporation※
Personal information of a potential Kyocera recruit who is to be assigned to our group companies: Address, full name, telephone number, e-mail address, etc.	Preparation for accepting persons to be assigned to our group companies	Group companies (Japanese Only)	Kyocera Corporation※

・Joint utilization of personal information in the Retail Electricity Business
　Please refer to the following page.
　Joint utilization of personal information in the Retail Electricity Business (Japanese Only)
　https://www.kyocera.co.jp/solar/mtotside/kyodoriyo-personalinfo.pdf (pdf/229KB)

4. Production of Anonymously Processed Information and provision of it to third parties

With respect to the following information held by Kyocera, Kyocera produces Anonymously Processed Information so that it is not possible to identify specific individuals or restore the personal information used to create the Anonymously Processed Information. Anonymously Processed Information will be provided to third parties in the following manner. Furthermore, in the future, we plan to continue producing and providing similar Anonymously Processed Information in the same manner.

Service	Categories of personal information contained in Anonymously Processed Information, and categories of information provided to third parties	How to provide Anonymously Processed Information	Publication date
HOUSMILE-Network	The following data sent to our server via HOUSMILE-Network or HOUSMILE-Net products Measurement data Power consumption data by circuit Gas and water usage data Data of power generated by solar systems or SOFCs Data of electricity sales by solar systems Battery charge/discharge data Various historical data Operation setting and operation history data of home appliances with HOUSMILE-Network or HOUSMILE-Net Error information (error code, error date, and time) of home appliances with HOUSMILE-Network or HOUSMILE-Net	Recoding media Email Printed materials	September 17, 2021
Research on in-company health management	The following data is obtained internally for in-company health management research Age Height Body weight Blood pressure Risk category Presence or absence of smoking habit Number of walking steps per day Date and time a message was sent Information on the party with whom information was shared Target walking step count Target weight Food photographs Photographs of health test results Usage history information Health check item check history Basic memo information for users at the health management office	Kyocera does not be providing any third party with the data	March 31, 2022

5. Handling of Specific Personal Information, etc.

Kyocera ensures appropriate handling of the individual numbers (so-called “My Numbers”) and personal information which includes the individual numbers (hereinafter collectively referred to as “Specific Personal Information, etc.”) in accordance with 1. “Basic policies.”

Purpose of use of Specific Personal Information, etc.
Kyocera uses the individual numbers and Specific Personal Information, etc. that we are to obtain within the scope necessary to achieve the following purposes:

Specific Personal Information, etc. of business partners	Clerical work related to payment records for fees and charges, etc. Clerical work related to payment records for real estate transactions
Specific Personal Information, etc. provided by outsourcers	Performance of operations outsourced by companies (including our group companies)
Specific Personal Information, etc. of shareholders	Clerical work related to payment records for dividend of surplus

Provision of Specific Personal Information, etc. to third parties
Kyocera neither provides third parties with nor jointly uses any Specific Personal Information, etc. unless permitted by law.
Various procedures for handling Specific Personal Information, etc.
When Kyocera receives inquiries about any Specific Personal Information, etc. that we hold or requests for corrections, deletions, etc. of the same, we act in accordance with “Inquiries about or Corrections, Deletions, etc. of Customer' Personal Information (Japanese Only).”

6. Handling of personal information on websites

Collection of access information by cookies and web beacons
Some of our websites use cookies (*1) and/or web beacons (clear GIF) (*2) to make them more convenient for our customers.
*1 Cookie
A cookie is a small information file exchanged between a customer’s device and a website that enables identification of the user who visited the website.

*2 Web beacon
A technique used together with cookies to reveal how many times a customer has visited a particular page.

Note that any third party to whom we or our group company outsources the distribution of advertisements may refer to cookies stored in customers’ devices to distribute advertisements or promotions of our products.
You may refuse to receive cookies or receive a warning message when you accept cookies, depending on your browser settings. You may also reject web beacons by refusing to accept cookies.
However, if you refuse to accept cookies, you may not be able to use all or some of our website’s functions.

Since we respect the privacy of our customers, we have implemented the "OneTrust" cookie consent management banner on some of our websites. You can choose whether to allow these websites or third parties (e.g. AdTech partners, etc.) to set cookies which are not strictly necessary for the functioning of each websites via the cookie banner or “cookie settings” link or “Do Not Sell or Share My Personal Information” link on the footer of each website. If you want to see a list of cookies used by each website, click on the Cookie Settings link (or Do Not Sell or Share My Personal Information link) on the cookie banner that appears on each website, then click on each category heading and the Cookie Details link to see a list of cookies and their individual descriptions.
Use of analytics tools
Kyocera's websites use Google Analytics and Microsoft Clarity to collect access log data for the convenience of our customers or to improve our websites. However, the collected access log data does not contain information that can directly identify individuals.

For more information about how data is collected and used by Google Analytics, refer to the following pages.
Understanding how data is collected and processed by Google Analytics

MICROSOFT CLARITY - TERMS OF USE

Microsoft Privacy Statement

Use of behaviorally targeted advertising
Kyocera may use behaviorally targeted advertisements (*3) presented by third parties, and such third parties may collect and use cookie information of users who visited one of Kyocera's websites. In this case, the cookie information that was acquired will be handled according to the privacy policy of the third parties. Please see the above “1. Collection of access information by cookies and web beacons“ for how to accept or refuse (opt-out of) our use of cookies.　If you want to invalidate (opt-out of) behaviorally targeted advertising itself by the third parties, visit the website of each third party service provider.

*3 Behaviorally targeted advertising
Behaviorally targeted advertising is an advertising method for distributing advertisements in accordance with the interest of site users which is determined from their browsing history of sites.

･ Google opt-out page:
https://www.google.com/settings/ads/onweb#display_optout
Personal information provided on the website
Kyocera uses personal information provided on the website within the scope necessary to achieve the purpose of use explicitly mentioned at the time of request for provision and take appropriate safety measures to ensure appropriate handling in accordance with 1. “Basic policies”.
As stated at the end of the 2. “Purpose of use of personal information,” Kyocera may use statistical information based on the personal information provided; however, the statistical materials to be used will not contain information that identifies individuals.

Access to personal information
Customers may inquire about or request that we disclose, correct or delete, etc. the personal information provided to KYOCERA Corporation by clicking on this link to the inquiry form or sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan.

7. Security control measures

Kyocera takes the following measures to ensure the security of personal information.

(Basic Policies)
To ensure the proper handling of personal information, Kyocera has formulated and implemented basic policies as stated in "1. Basic policies".
(Development of Rules Concerning the Handling of Personal Information)
Kyocera has established rules for the handling of personal information with regard to handling methods, responsible parties and persons in charge, as well as their duties, etc. for each stage of acquisition, use, storage, provision, deletion, disposal, etc. ("Personal Information Protection Rules") and has put these rules into practice.
(Organizational Security Control Measures)
In addition to establishing a manager responsible for the handling of personal information, Kyocera has clarified which employees handle personal information as well as the scope of personal information handled by said employees. We have also established a system for reporting and communicating with the party responsible and related departments in the event that a violation of laws and regulations on the handling of personal information, or any signs of such a violation, is identified.
(Personal Security Control Measures and Training)
Regular training is provided to employees on matters concerning the handling of personal information.
(Physical Information Security Control Measures)
In areas where personal information is handled, Kyocera has implemented measures to prevent unauthorized persons from viewing personal information, control the entry and exit of employees, and restrict the devices and other items brought into those areas.
(Technical Security Control Measures)
Kyocera implements access control to limit the persons in charge as well as the scope of personal information being handled.
(Understanding of External Environments)
In cases where personal information is stored in a foreign country, Kyocera implements security control measures after understanding systems, etc., related to the protection of personal information in the relevant country.

Effective as of January 1, 2005
Revised on June 30, 2023

8. Kyocera Privacy Policy and Cookie Policy for EEA Personal Data

With this Privacy Policy, we, KYOCERA Corporation (hereinafter: Kyocera), will describe how we process your personal data in compliance with applicable data protection provisions. Hereinafter we wish to provide you with an overview on how we ensure protection of your personal data and inform you about the types of personal data we process as well the respective purpose and scope. We also explain your rights as a data subject and how you may contact us.

I. Who is responsible and how to contact us?

Below is our contact for your inquiry:

KYOCERA Corporation

6 Takeda Tobadono-cho, Fushimi-ku, Kyoto, Japan 612-8501
Inquiry Form
Corporate Communications Division

If you have any questions about the processing of your personal data by us or about data protection in general, please contact us by clicking on this link to the inquiry form or sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan.

II. Processing of personal data by Kyocera

Below, we would like to give you an overview of how we ensure the protection of your personal data when accessing our website and which types of personal data we process for which purposes and to what extent.
Personal data is any information relating to an identified or identifiable natural person. When using our website, personal data, i.e. information about your use of our website (such as connection data or sources you have accessed), may be processed.

1. Processing of data when accessing our website - log files

When you access our website, automatic information of a general nature is collected. The information (server logfiles) includes, but not limited to, the type of web browser, the operating system used, the domain name of your internet service provider and similar. In addition, the IP address is transmitted and used to enable you to use the service you have requested. The purpose of processing this information is to provide our services and correctly deliver the content of web pages requested by you and is mandatory when using the Internet. Legal basis for data processing is Article 6 para. 1 sentence 1 letter f GDPR.

If you make use of services offered on our website, we may collect further personal data from you. We process these as far as it is necessary for the performance of the services requested by you. In addition, you can provide further personal data on a voluntary basis. We describe the legal basis within each of the functions and offers outlined below.

2. Processing of data when using the website - your requests

If you send us an enquiry by contact form, we collect the data you provide for the purpose of processing and responding to your request. Legal basis for data processing is Article 6 para. 1 sentence 1 letter f GDPR.

3. Information to ensure data security

We take technical and organizational security precautions on our pages in order to protect the personal data stored with us from access by third parties, loss or misuse and to enable secure data transfer.

We would like to point out that, due to the structure of the Internet and the sending of e-mails, unauthorized access by third parties can occur during the transmission of information. It is therefore also within your responsibility to protect your data against misuse by encryption or in any other way.

According to our IT security concept, in order to detect and analyze any attacks against our website, the resulting logfile data is generally stored for a period of four weeks and then anonymized or deleted. The legal basis for the data processing is Article 6 para. 1 sentence 1 letter f GDPR.

4. Transfer to recipients in third countries

In order to provide our services, we need to transfer your personal data to countries outside of the EU and Japan, including, but not limited to, the United States, which are not recognized by the European Commission as providing an adequate level of data protection. Please be advised that we only transfer personal data to these countries when we have been able to implement suitable safeguards that assure the protection of your personal data, such as standard data protection clauses under Article 46.2 of GDPR.
For further information, including obtaining a copy of the documents used to protect your personal data, please contact us by clicking on this link or by sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan.

5. Storage period

We store your personal data for as long as needed in light of the purposes described in this policy. The criteria used to determine our storage periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is any legal obligation to which we are subject; and (iii) whether there is a need in order to perform a contract to which you are party.

6. Use of external links

Our websites contain links to other websites of other providers. We are not responsible for the content and data processing of these other websites.

III. Your Rights

Every data subject has the following rights in accordance with the GDPR:

Right of access (Article 15 GDPR)
Right to rectification of inaccurate data (Article 16 GDPR)
Right to erasure aka. right to be "forgotten" (Article 17 GDPR)
Right to restrict the processing of personal data (Article 18 GDPR)
Right to data portability (Article 20 GDPR)
Data subjects may object to the processing of personal data for advertising purposes, including an analysis of customer data for advertising purposes, at any time without giving reasons.

In addition, data subjects also have a general right to object (cf. Article 21 para. 1 GDPR). In this case, the objection to data processing must be substantiated. If the data processing is based on consent, your consent can be revoked at any time with effect for the future.

The easiest way to exercise your data subject rights is to click on this link to the inquiry form or sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan. In addition, you have the right to lodge a complaint with the data protection supervisory authority responsible for you.

IV Cookie Policy

1. Collection of access information by cookies and web beacons

Some of our websites use cookies (*1) and/or web beacons (clear GIF) (*2) to make them more convenient for our customers.
*1 Cookie
A cookie is a small information file exchanged between a customer’s device and a website that enables identification of the user who visited the website.

*2 Web beacon
A technique used together with cookies to reveal how many times a customer has visited a particular page.

Any third parties to whom we or our group company outsources the distribution of advertisements may refer to cookies stored in customers’ devices to distribute advertisements or promotions of our products.
You may refuse to receive cookies or receive a warning message when you accept cookies, depending on your browser settings. You may also reject web beacons by refusing to accept cookies.
However, if you refuse to accept cookies, you may not be able to use all or some of our website’s functions.

Since we respect the privacy of our customers, we have implemented the "OneTrust" cookie consent management banner on some of our websites. You can choose whether to allow these websites or third parties (e.g. AdTech partners, etc.) to set cookies which are not strictly necessary for the functioning of each websites via the cookie banner or “cookie settings” link or “Do Not Sell or Share My Personal Information” link on the footer of each website. If you want to see a list of cookies used by each website, click on the Cookie Settings link (or Do Not Sell or Share My Personal Information link) on the cookie banner that appears on each website, then click on each category heading and the Cookie Details link to see a list of cookies and their individual descriptions.

2. Use of analytics tools

Kyocera's websites use Google Analytics and Microsoft Clarity to collect access log data for the convenience of our customers or to improve our websites.

For more information about how data is collected and used by Google Analytics, refer to the following pages.
Understanding how data is collected and processed by Google Analytics
For more information about how data is collected and used by Microsoft Clarity, refer to the following pages.
MICROSOFT CLARITY - TERMS OF USE
Microsoft Privacy Statement

3. Use of behaviorally targeted advertising

Kyocera may use behaviorally targeted advertisements (*3) presented by third parties, and such third parties may collect and use cookie information of users who visited one of Kyocera's websites. In this case, the cookie information that was acquired will be handled according to the privacy policy of the third parties. Please see the above “1. Collection of access information by cookies and web beacons“ for how to accept or refuse (opt-out of) our use of cookies. If you want to invalidate (opt-out of) behaviorally targeted advertising itself by the third parties, visit the website of each third party service provider.

*3 Behaviorally targeted advertising
Behaviorally targeted advertising is an advertising method for distributing advertisements in accordance with the interest of site users which is determined from their browsing history of sites.

･ Google opt-out page:
https://www.google.com/settings/ads/onweb#display_optout

Effective as of June 30, 2023

9. Kyocera Privacy Notice for California Residents

This Privacy Notice for California Residents ("Notice") applies solely to visitors, users, and others who reside in the State of California ("consumers" or "you"). We adopt this Notice to comply with the California Privacy Rights Act ("CPRA") and other California privacy laws. Any terms defined in the CPRA have the same meaning when used in this Notice.

Personal Information We Collect

We collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household or device ("personal information"). In particular, we have collected the following categories of personal information from California consumers within the last twelve (12) months some of which would be considered under the CPRA:

Category	Examples
Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
Commercial information.	Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity.	Browsing history, search history, information on a consumer's interaction with a website, application, or advertisement.
Geolocation data.	Physical location or movements either using security cameras at our facilities or in connection with our mobile device products and their applications.
Sensory (Biometric) data.	Audio, electronic, visual, thermal, olfactory, or similar information that may be collected using security cameras at our facilities.
Mail, email or text message contents.	Communications that you direct to us in written form, including electronic formats.
Complete account access credentials (user names, account numbers or card numbers combined with required access/security code or password)	Information you may provide when you set up an account via a web site, make an on line purchase or in connection with a service inquiry.
Sensitive Personal Information.	We may collect the following types of Sensitive Personal Information

Personal information does not include:

Publicly available information from government records or lawfully obtained, truthful information that is a matter of public concern and information made available to the general public by the consumer or by widely distributed media.
De-identified or aggregated consumer information.
Information excluded from the CPRA's scope, like:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We obtain the categories of personal information listed above from the following categories of sources:

Directly from our customers or our Business to Business (B2B) partners. For example, a customer provides a personal address to ship one of our products.
Indirectly from our customers or our Business to Business (B2B) partners as part of our services. For example, the payment method associated with a customer's purchase of one of our products.
Directly and indirectly from activity on our websites. For example, from submissions through our website portal or website usage details collected automatically.

Use of Personal Information

We collect and use your personal information for purposes reasonably necessary and proportionate to achieve the purposes for which the personal information was collected or processed or for another disclosed purpose compatible with the context of the personal information collected and we do not process the information in a manner incompatible with those purposes. We may use the personal information we collect for one or more of the following business purposes:

To fulfill or meet the reason for which the information is provided.
To provide you with information, products or services you request from us.
To provide you with email alerts, sales and other notices concerning our products or services, or events or news, that may be of interest to you.
To carry out our obligations and enforce our rights arising from any purchases or transactions.
To improve our web site and present its contents to you.
For testing, research, analysis and product development.
As necessary or appropriate to protect the rights, property or safety of us, our clients or others.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information or as otherwise set forth in the CPRA.
To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by us is among the assets transferred.

We will not collect additional categories of personal information or use, retain, process or disclose the personal information we collected for materially different, unrelated, or incompatible purposes without providing you notice.

Use of Sensitive Personal Information

We may use Sensitive Personal Information we collect for the same reasons we use other Personal Information as described above. We do not use Sensitive Personal Information for the purpose of inferring characteristics about you.

Sharing Personal Information

We may disclose your personal information to a third party service provider or contractor for a business purpose. When we disclose personal information for a business purpose, we will require that the purpose is disclosed, the recipient is required to, not use it for any purpose except performing the contract and in compliance with applicable privacy and data protection laws. We may also require or the law may impose an additional level of confidentiality and limited usage of your personal information in some contexts.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

Identifiers.
California Customer Records personal information categories.
Commercial information.
Internet or other similar network activity.
Geolocation data.
Sensory data.

We disclose your personal information for a business purpose to the following categories of third parties:

Affiliated Kyocera companies.
Service providers.
Contractors
Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

Sales of Personal Information

In general, we do not sell your personal information or share personal information for cross-context behavioral advertising purposes and in the preceding twelve (12) months, we have not sold personal information or shared personal information for cross-context behavioral advertising purposes. The one exception involves our use of Google Analytics.

Google Analytics. Google Analytics is used to perform some of the tasks listed above involving the use of your Personal Information. We do not merge information collected through any Google advertising product with individual-level information collected elsewhere by our Services. Google Analytics acquires user data from each website a user visits through the use of page tags on a web site. It then provides information to us that we use to assist in our online marketing efforts.

Opting Out of Google Analytics. Google provides website visitors with a tool (Google Analytics Opt-out Browser Add-on) that purports to broadly give consumers the ability to prevent their data from being collected or used by Google Analytics. A link to this Google tool can be found here .

[Do Not Sell or Share My Personal Information] In addition, when you visit our websites that use Google Analytics, we provide you with the ability to opt out of the data sharing functionality of Google Analytics. You may also opt out of our collection of your Personal Information using Google Analytics by clicking on the “Do Not Sell or Share My Personal Information” link on the footer of each website.

Retention Periods for Personal Information We Collect

We retain information about product sales long enough to be able to competently respond to customer inquiries or concerns about a product, to honor our warranty obligations and as may be required by law. The period we retain such information is dependent on a variety of factors including the type of product sold, the length of the warranty period and any legal obligations we may have to retain information about a particular type of product. The type of information that is referenced in this section may include information that is included in the following Categories referenced in the Table above: Identifiers; California Consumer Information; Internet or similar network activity; Complete access account credentials.
We retain information we collect concerning marketing opportunities or consumer expressions of interest only for a period of time that is long enough to be able to address those opportunities or expressions of interest or until (where the consumer has received a direct communication from us) the consumer opts out of further communications. The type of information that is referenced in this section may include information that is included in the following Categories referenced in the Table above: Identifiers; California Consumer Information; Internet or similar network activity; Complete access account credentials.
We may collect location data including the location data of your Kyocera branded mobile device. Please note that for most mobile devices, you can manage or disable the use of location services for all applications in the settings menu of your mobile device. Other than this information, we rarely collect Geolocation Data or Sensory Data as described in the Table above, but it is possible you may provide it to us yourself in connection with a social media promotion or it may be collected by us at a public event (such as in a photograph taken at the event). In such cases, the information is retained consistent with the period for other marketing type purposes as described above. Other Geolocation Data or Sensory Data we may collect in the form of security video footage at one of our facilities will be maintained for no more than three years from the date it is collected.

Cookies

We also collect information using "Cookies" in connection with our web site and the type of information collected using such Cookies and your rights relating to Cookie collection are provided for in connection with our use of such Cookies on our web site. Details of our Cookie Policy or Policies can be found in the link and in some cases additional details concerning Cookies (including "opt out" options) may be available in connection with your use of a particular web site.

Your Rights and Choices

The CPRA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CPRA rights as a California resident and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties to whom we disclosed that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

You have the right to request that we delete any of your personal information we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.

We may deny your deletion request if retaining the personal information is necessary for us or our service providers to:

Complete the transaction for which we collected the personal information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of the personal information that are compatible with the context in which you provided it.

Correction of Inaccurate Personal Information Request Rights

You have the right to request that we correct inaccurate personal information about you in our records that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will correct inaccurate personal information concerning you in our records and direct our service providers and contractors to correct such inaccurate personal information in their records, unless an exception applies.

We may deny your correction request if we determine the information is in fact accurate, if we are precluded by law from making the change you request or for any other reason authorized by the CPRA or other applicable law.

Opt-Out Rights

You have the right to opt-out of the sale of your personal information or the use or disclosure of your Sensitive Personal Information for cross-context behavioral advertising purposes. However, in general we do not sell or disclose or use your personal information for those purposes, so there is no need for you to opt out of such practices.

The one exception is our use of Google Analytics on some of our web sites. Please see the discussion above involving our use of Google Analytics and how you may opt out of our use of Google Analytics as it relates to your personal data.

Please contact us as provided below if you have concerns about your Opt-Out Rights.

Exercising Access, Data Portability, Deletion and Correction Rights

To exercise the access, data portability, deletion and correction rights described above, please submit a verifiable consumer request to us by either:

Contacting us via our website at Inquiry Form
Sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan.

Only you or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you. Making a verifiable consumer request does not require you to create an account with us. We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.

Response Timing and Format

We will work to respond to a verifiable consumer request within 45 days of its receipt. If we require more time (up to a total of 90 days), we will inform you of the reason and extension period by email or by written mail depending on your preference. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the personal information from one entity to another entity without hindrance.

We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.

Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Changes to Our Privacy Notice

We reserve the right to amend this Notice at our discretion and at any time. When we make changes to this Notice, we will indicate that the Notice has been updated on our website. Your continued use of the Kyocera Website following the posting of changes constitutes your consent to and acceptance of such changes.

Contact Information

If you have any questions or comments about this Notice, the ways in which we collect and use your personal information, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:

Website:　Inquiry Form
Postal Address: KYOCERA Corporation
Attn: Corporate Communications Department
6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan

Cookie Policy

Collection of access information by cookies and web beacons

*2 Web beacon
A technique used together with cookies to reveal how many times a customer has visited a particular page.

Any third parties to whom we or our group company outsources the distribution of advertisements may refer to cookies stored in customers’ devices to distribute advertisements or promotions of our products.
You may refuse to receive cookies or receive a warning message when you accept cookies, depending on your browser settings. You may also reject web beacons by refusing to accept cookies.
However, if you refuse to accept cookies, you may not be able to use all or some of our website’s functions.

Since we respect the privacy of our customers, we have implemented the "OneTrust" cookie consent management banner on some of our websites. You can choose whether to allow these websites or third parties (e.g. AdTech partners, etc.) to set cookies which are not strictly necessary for the functioning of each websites via the cookie banner or “cookie settings” link or “Do Not Sell or Share My Personal Information” link on the footer of each website. If you want to see a list of cookies used by each website, click on the Cookie Settings link (or Do Not Sell or Share My Personal Information link) on the cookie banner that appears on each website, then click on each category heading and the Cookie Details link to see a list of cookies and their individual descriptions.

Use of analytics tools

Kyocera's websites use Google Analytics and Microsoft Clarity to collect access log data for the convenience of our customers or to improve our websites.

For more information about how data is collected and used by Google Analytics, refer to the following pages.
Understanding how data is collected and processed by Google Analytics
For more information about how data is collected and used by Microsoft Clarity, refer to the following pages.
MICROSOFT CLARITY - TERMS OF USE
Microsoft Privacy Statement

Use of behaviorally targeted advertising

*3 Behaviorally targeted advertising Behaviorally targeted advertising is an advertising method for distributing advertisements in accordance with the interest of site users which is determined from their browsing history of sites.

･ Google opt-out page:
https://www.google.com/settings/ads/onweb#display_optout

Effective as of June 30, 2023

10. Kyocera Privacy Notice for California Prospective Employees

This Privacy Notice for California Residents - Kyocera Prospective Employees ("Notice") applies solely to applicants for employment at Kyocera who reside in the State of California ("consumers" or "you"). We adopt this Notice to comply with the California Privacy Rights Act ("CPRA") and other California privacy laws. Any terms defined in the CPRA have the same meaning when used in this Notice.

Personal Information We Collect

In connection with the job inquiry and application process, we collect information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer, household or device ("personal information"). In particular, we have collected the following categories of personal information from Kyocera prospective employees within the last twelve (12) months some of which would be considered Sensitive Personal Information under the CPRA:

Category	Examples
Identifiers.	A real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, Social Security number, driver's license number, passport number, or other similar identifiers.
Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)).	A name, signature, Social Security number, physical characteristics or description, address, telephone number, passport number, driver's license or state identification card number, insurance policy number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information, medical information, or health insurance information. Some personal information included in this category may overlap with other categories.
Protected classification characteristics under California or federal law.	Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth and related medical conditions), sexual orientation, veteran or military status, genetic information (including familial genetic information).
Biometric information.	Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Sensory data.	Audio, electronic, visual, thermal, olfactory, or similar information.
Professional or employment-related information.	Current or past job history or performance evaluations.
Non-public education information (per the Family Educational Rights and Privacy Act (20 U.S.C. Section 1232g, 34 C.F.R. Part 99)).	Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Inferences drawn from other personal information.	In connection with evaluating job candidates, we may develop inferences (including based on educational level and past employment history) concerning a candidate's attitudes, intelligence, abilities, and aptitudes.
Sensitive Personal Information.	We may collect the following types of Sensitive Personal Information.
A. Government issued identification information.	In connection with a job application or offer, we may require and collect information such as a social security number, driver's license, or state identification card.
B. Complete account access credentials (user names, account numbers or card numbers combined with required access/security code or password)	Information you may provide when you set up an account via a web site, make an in connection with an inquiry or submit an application.
C. Data concerning Government Programs	We collect certain types of information about prospective employees in order to report or comply with requirements imposed upon us by government programs such as programs relating to fair treatment of legally protected minorities by category and benefiting veterans.
D. Protected classification characteristics under California or federal law.	We may collect certain types of information about prospective employees such as age, race, sex and veteran status in order to report or comply with requirements imposed upon us by government programs or policies such as programs relating to fair treatment of legally protected minorities by category and benefiting veterans.
E. Mail, email or text message contents.	Communications that you direct to us in written form, including electronic formats.
F. Geolocation data.	Physical location or movements either using security cameras at our facilities.

Personal information does not include:

Publicly available information from government records or lawfully obtained, truthful information that is a matter of public concern and information made available to the general public by the consumer or by widely distributed media.
De-identified or aggregated consumer information.
Information excluded from the CPRA's scope, like:
- Health or medical information covered by the Health Insurance Portability and Accountability Act of 1996 (HIPAA) and the California Confidentiality of Medical Information Act (CMIA) or clinical trial data; and
- Personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA), and the Driver's Privacy Protection Act of 1994.

We obtain the categories of personal information listed above from the following categories of sources:

Directly from Kyocera prospective employees. For example, a prospective employee fills out a job application.
Directly and indirectly from activity on websites. For example, from submissions through our website portal or website usage details collected automatically.

Use of Personal Information

We may use or disclose the personal information we collect for one or more of the following business purposes:

To fulfil or meet the reason for which the information is provided.
To provide you with support and to respond to your inquiries related to your job application at Kyocera.
To investigate and address your concerns related to your job application.
To respond to law enforcement requests and as required by applicable law, court order, or governmental regulations.
As described to you when collecting your personal information or as otherwise set forth in the CPRA.

We will not collect additional categories of personal information or use the personal information we collected for materially different, unrelated, or incompatible purposes without providing you Notice.

Use of Sensitive Personal Information

We may use Sensitive Personal Information we collect for the same reasons we use other Personal Information as described above. We may use Sensitive Personal Information for the purpose of inferring characteristics about you, however, we only use such information as necessary and as a reasonable consumer or applicant would expect to evaluate a job applicant's qualifications and appropriateness for a position in light of the needs of Kyocera. Kyocera does not sell or share your Sensitive Personal Information for cross-context advertising purposes.

Sharing Personal Information

We may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we will require that the purpose is disclosed, the recipient is required to not use it for any purpose except performing the contract and in compliance with applicable privacy and data protection laws. We may also require or the law may impose an additional level of confidentiality and limitations on the use of your personal information in some contexts.

In the preceding twelve (12) months, we have disclosed the following categories of personal information for a business purpose:

Identifiers
Personal information categories listed in the California Customer Records statute.
Protected classification characteristics under California or federal law.
Biometric information.
Sensory data.
Professional or employment-related information.
Non-public education information.
Inferences drawn from other personal information.

We disclose your personal information for a business purpose to the following categories of third parties:

Affiliated Kyocera companies.
Service providers.
Third parties to whom you or your agents authorize us to disclose your personal information in connection with products or services we provide to you.

Retention Periods for Personal Information We Collect

We retain the personal information we collect for a period that is generally consistent with the time-frame required in order to accommodate the purposes for which the information was collected or as required to comply with applicable laws. In general, we retain information we collect in connection with Prospective Employees only for a period of time that is long enough to be able to address the purposes for which the information was collected and to comply with legal requirements related to job applicants. In general, we retain this sort of information for no more than 7 years from the date it is collected. In addition, Kyocera Human Resources Department evaluates the information it has collected from applicants on an annual basis to determine what information is appropriate for deletion or destruction and deletes or destroys such aged information. The type of information that is referenced in this section may include information that is included in all of the Categories referenced in the Table above.

Cookies

We also collect information using "Cookies" in connection with our web site and the type of information collected using such Cookies and your rights relating to Cookie collection are provided for in connection with our use of such Cookies on our web site. Details of our Cookie Policy or Policies can be found in this link and in some cases additional details concerning Cookies may be available in connection with your use of a particular web site.

Your Rights and Choices

The CPRA provides California residents with specific rights regarding their personal information. This section describes your CPRA rights as a California resident and explains how to exercise those rights.

Access to Specific Information and Data Portability Rights

The categories of personal information we collected about you.
The categories of sources for the personal information we collected about you.
Our business or commercial purpose for collecting or selling that personal information.
The categories of third parties to whom we disclosed that personal information.
The specific pieces of personal information we collected about you (also called a data portability request).
If we sold or disclosed your personal information for a business purpose, two separate lists disclosing:
- sales, identifying the personal information categories that each category of recipient purchased; and
- disclosures for a business purpose, identifying the personal information categories that each category of recipient obtained.

Deletion Request Rights

We may deny your deletion request if retaining the personal information is necessary for us or our service providers to:

Complete the transaction for which we collected the personal information, provide a good or service you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you.
Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities.
Debug products to identify and repair errors that impair existing intended functionality.
Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law.
Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 seq.).
Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, when the information's deletion may likely render impossible or seriously impair the research's achievement, if you previously provided informed consent.
Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us.
Comply with a legal obligation.
Make other internal and lawful uses of the personal information that are compatible with the context in which you provided it.

Correction of Inaccurate Personal Information Request Rights

Opt-Out Rights

You have the right to opt-out of the sale of your personal information or the use or disclosure of your Sensitive Personal Information for cross-context behavioral advertising purposes. However, we do not sell or disclose or use your personal information for those purposes, so there is no need for you to opt out of such practices. Please contact us as provided below if you have concerns about your Opt-Out Rights.

Exercising Access, Data Portability, and Deletion Rights

To exercise the access, data portability, deletion and correction rights described above, please submit a verifiable consumer request to us by either:

Contacting us via our website at Inquiry Form
Sending a written request to Corporate Communications Division at 6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.

Response Timing and Format

Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights. Unless permitted by the CPRA, we will not:

Deny you goods or services.
Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
Provide you a different level or quality of goods or services.
Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

Sales or Sharing of Personal Information for Cross-context Advertising Purposes

In the preceding twelve (12) months, we have not sold or shared for cross-context advertising purposes any personal information of Prospective Employees.

Changes to Our Privacy Notice

We reserve the right to amend this Notice at our discretion and at any time. When we make changes to this privacy Notice, we will indicate that the Notice has been updated on our website. Your continued use of the Kyocera website following the posting of changes constitutes your consent to and acceptance of such changes.

Contact Information

Website: Inquiry Form
Postal Address: KYOCERA Corporation
Attn: Corporate Communications Department
6, Takeda-tobadono-cho, Fushimi-ku, Kyoto city, Kyoto Prefecture, Japan

Effective as of June 30, 2023