Privacy Policy

Last updated: April 1, 2026

ATEC Co., Ltd. (below, the “Company”) recognizes the protection of personal information as an important responsibility, complies with laws and regulations concerning the appropriate handling and protection of personal information, and hereby establishes the Privacy Policy (below, the “Policy”) as described below and will comply with it.

“Personal information” in the Policy means information about a living individual as defined in the Act on the Protection of Personal Information (below, the “Personal Information Protection Act”), which can identify a specific individual by name, date of birth, or other descriptions, or which includes a personal identification code.

The Company acquires the following information by lawful and fair means.

• Name of person, company, department, and position
• Contact information such as address, telephone number, email address, etc.
• Bank account information and other payment-related information necessary for payment processing, billing, and settlement operations, etc.
• Details of inquiries, contracts, and transaction history
• Identifying information such as website access logs and cookies (see Article 9)

• Name, date of birth, address, contact information
• Facial photograph, educational background, employment history, qualifications, skills, resume, etc.
• Sensitive personal information such as health status
  （Except in cases permitted by laws and regulations, explicit consent of the individual will be obtained when acquiring it）
• Other information necessary for employment selection and job offer procedures

The Company uses the personal information acquired only within the scope of the following purposes and does not use it for any other purpose.

• Responding to inquiries and consultations
• Responding to payment processing, billing, and settlement operations, etc.
• Execution and performance of contracts and transaction management
• Analysis of the usage of services and improvement of services by understanding usage trends
• Notification and reporting based on laws and regulations, and other legal compliance responses
• Performance of operations incidental or related to each of the above purposes

• Employment selection and sharing of selection information within the Company
• Contacting applicants and sending related materials
• Employment procedures after a recruitment decision
• Notification and verification procedures in accordance with laws and regulations
• Performance of operations incidental or related to each of the above purposes

Although the provision of personal information is voluntary, if the necessary information is not provided, it may hinder the Company’s provision of services, response to inquiries, employment selection, etc.

The Company will not provide personal information to third parties without obtaining the prior consent of the individual concerned, except in cases based on the Personal Information Protection Act or other laws and regulations. However, the following cases may not constitute provision to a third party or may not require the consent of the individual concerned.

• When it is necessary to protect the life, body, or property of a person and it is difficult to obtain the consent of the individual concerned
• When a national or local government agency, etc., needs cooperation to perform affairs prescribed by laws and regulations, and obtaining the consent of the individual concerned is likely to hinder the performance of such affairs
• When providing information to a contractor to the extent necessary in connection with business outsourcing
  （In this case, the Company will appropriately manage and supervise the relevant contractor）

As of the present, the Company does not engage in joint use of the acquired personal information with other businesses or other entities.

When outsourcing part of its business and it becomes necessary to handle personal information, the Company will clearly define the selection criteria for the contractor and exercise appropriate management and supervision through contracts or other means.

The Company will take necessary and appropriate security control measures to prevent leakage, loss, or damage of personal information and to manage personal information appropriately. The main measures are as follows.

• Organizational security control measures: Appointment of a personal information protection manager, establishment of handling regulations, and management of access rights
• Human security control measures: Implementation of education and training for employees and thorough maintenance of confidentiality
• Physical security control measures: Entry/exit management and locked storage of documents and recording media
• Technical security control measures: Access control, encryption of communications, logging and monitoring, and terminal management

On the Company’s website, cookies and other similar technologies (below, “cookies, etc.”) may be used for purposes such as improving user convenience, analyzing website usage status, and improving content.

Information obtained through cookies, etc. does not include information that directly identifies an individual, such as name, address, or telephone number. However, if a specific individual can be identified by cross-referencing with other information held by the Company, such information will be treated as personal information in accordance with the Personal Information Protection Act.

The Company may provide information acquired through cookies, etc. to external service providers such as access analysis services within the scope of the above purposes. In this case, the Company will comply with relevant laws and regulations, obtain the individual’s consent or take appropriate measures such as providing the individual with an opportunity to make a choice through appropriate means, as necessary.

A user may restrict or disable the use of cookies, etc. by changing the browser settings. Please refer to the provider of each browser for setting methods.

The Company retains personal information for the following periods and, after the retention period ends, promptly disposes of or deletes it by appropriate means.

If the individual concerned or a legitimate agent requests disclosure, correction, addition, deletion, suspension of use, or suspension of provision to third parties, etc., of personal information held by the Company based on the Personal Information Protection Act, the Company will respond appropriately in accordance with laws and regulations.
Note that, for such requests, the submission of necessary documents may be requested for verification of the identity of the individual concerned (including verification of agency authority in the case of an agent).

The Company will conduct regular inspections and reviews of the personal information protection system and handling procedures and will strive for continuous improvement.

If the Company changes the Policy, it will notify the revised content and the update date by displaying them on the Company website or by other appropriate means.

For questions, consultations, complaints, or requests for disclosure, etc., regarding the handling of personal information, please contact the following.