(1) When acquiring Personal data from within the EU or the UK

We will not collect sensitive information (racial or ethnic origin, political ideology, religious or philosophical beliefs, information on labor union membership, genetic data, biological data, health-related data, information on sex life or sexual orientation) and information related to criminal offenses except in cases specified by the GDPR or by the Act on the Protection of Personal Information.

(2) When receiving Personal data from within the EU or the UK

We will confirm and record the circumstances of acquisition of such Personal data, including the purpose of use specified at the time of receipt of such Personal data.

(3) When receiving Personal data from another business operator handling Personal data who has received such Personal data from within the EU or the UK

We will confirm and record the circumstances of acquisition of such Personal data, including the purpose of use specified at the time of receipt of such Personal data.

(4) Personal data acquired in accordance with 2 and 3 above will be used for purposes specified within the scope of the purpose of use specified when the Personal data is initially or subsequently provided, and used within that scope.

(5) Personal data acquired in accordance with 2 and 3 above will be handled as retained Personal data regardless of the period of time during which it is supposed to be erased.