1

Principles of processing personal data

HANKYU HANSHIN EXPRESS (the “Company”) shall process personal data in accordance with the following principles.
*‘HHE’ means HANKYU HANSHIN EXPRESS CO.,LTD..
*‘HHE Group’ means HANKYU HANSHIN EXPRESS CO.,LTD. and its subsidiaries and affiliates.

The Company shall:

> Process personal data lawfully, fairly and in a transparent manner in relation to a data subject.
> Process personal data only to the extent necessary for achieving the purposes specified in advance.
> Store personal data for the period necessary for achieving the purposes.
> Maintain personal data accurately and kept up to date to the extent necessary for the purposes.
> Process personal data by implementing appropriate technical and organisational measures.

2

The purposes of personal data processing

The purposes of processing the personal data processed by the Company are as follows:

> For personal data of the general public and persons from business counterparties
 (1) For a contact to a customer about an offer of service
 (2) For contract discharge arrangements of the service you covenanted
 (3) For responding to customer requests etc.
 (4) For smoothly operating the service provided by this website,we will use limitedly the cookies (Cookie), IP address, type of browser and access date and time and etc. which be obtained on our website.
 And for use as reference
 Name, address, phone number, fax number, and e-mail address and contact information

 > For personal data of employees of the Company and the HHE Group
 (1) Engaging in work management, employee welfare, and health and safety
 (2) Providing education and training
 (3) Communication and notifications
 Name, address, phone number, fax number, and e-mail address and contact information. Family information, job and carrier information, financial information & etc.

3

Legal basis of processing personal data

The Company shall process personal data based on one of the following legal bases:

> For personal data of the general public and persons from business counterparties
 The processing is necessary to secure legitimate interests pursued by the Company.
> For personal data of employees of the Company and the HHE Group
 The processing is necessary to perform the obligations under the contract with the data subject.
 The processing is necessary to secure legitimate interests pursued by the Company.

4

Providing personal data to a third party

> If the Company provides personal data concerning a data subject to a third party, it shall communicate the information of the recipient to the data subject as part of the processing of personal data based on the applicable legal basis.

> If the Company transfers personal data from the territory of European Economic Area (EEA) to outside the EEA, it shall implement safeguards required under applicable laws and regulations.

5

Obtaining personal data from a third party

The descriptions and source of personal data that the Company obtains from a third party are specified as follows:
There is no indirect obtaining personal data from a third party.

6

Taking actions on the rights of data subjects

The Company shall take appropriate actions on the data subject’s requests on the processing of personal data concerning him or her in accordance with applicable laws and regulations. The requests of the data subject shall include: (according to GDPR)
> Access to the personal data
 Right of access by the data subject (GDPR Article 15)
> Rectification or erasure of the personal data
 Right to rectification and Right to erasure ('right to be forgotten') (GDPR Article 16 and Article 17)
> Restriction on the processing of the personal data
 Right to restriction of processing (GDPR Article 18)
> Lodging a complaint against the processing of the personal data
 The data subject may lodge a complaint with the supervisory authority.
 Right to lodge a complaint with a supervisory authority (GDPR Article 14 2. (e))
> Data portability of the personal data
 Right to data portability (GDPR Article 20)
> Withdrawal of consent on the processing of the personal data
 Right to withdraw consent at any time, without affecting the lawfulness of processing
 based on consent before its withdrawal (GDPR Article 14 2. (d))
> Contest against the processing of the personal data
 Right to object (GDPR Article 21)

7

Retention Periods

> The Company retains Personal Data for the period of time necessary to use or otherwise process that Personal Data. The period of time that Personal Data is retained is determined based on the purposes of use and the necessity to retain it under applicable laws and regulations.

8

Safeguards for the protection of personal data

> The Company shall implement appropriate, necessary measures including measures against, including but not limited to, illegal access, computer viruses to prevent incidents such as loss, destruction, manipulation or leakage of personal data. The Company shall also provide appropriate, necessary supervision over its employees, contracted processors, etc. to ensure the protection of personal data.

9

Cookie policy

> A 'cookie' is a small unit of information which can be passed to your browser while you are using the Website and/or another Hankyu Hanshin website. In most cases, cookies are used to ensure an efficient use of the Website. If you do not want websites to use cookies with your browser, you may deny the cookies (this only applies for cookies for which an explicit consent is required) for each website, and/or change the settings on your internet browser so that the cookies are deleted or deactivated. If you do not allow the use of cookies and have deactivated the cookies or arranged to have the cookies deactivated, this may have consequences for the ease of use of a Website.

 The Website automatically generates log files that register the use by you and other users of the Website. Hankyu Hanshin maintains user data, such as source addresses of pages requested, IP (internet protocol) addresses and domain names, dates and times of page requests, links from other websites and other parameters in the URLs (universal resource locators). These log files and data will be used, on an anonymous basis, for statistical purposes and for improving the services offered via the Hankyu Hanshin website, such as the Website.

10

About Google Analytics

> In order to improve the website, we use “Google Analytics” to collect browsing information on our websites.When a user accesses a website using a browser, these services collect and process data by using cookies.The data collected and processed by this service does not contain any personal information that identifies our guest.

* Please refer to the following websites for explanations on the terms of service for each service.

11

Change to the Privacy Statement

> Note that the Privacy Statement is subject to change by HANKYU HANSHIN EXPRESS CO., LTD. when necessary. Any changes made to the Privacy Statement in the future will be posted on this page.

12

Inquiry contacts

> HANKYU HANSHIN EXPRESS Co., Ltd.
 General Affairs & Human Resources Division, General Affairs Department
 9F, KHD TOKYO Building, 3-3-9, Shimbashi, Minato-ku, Tokyo 105-0004 Japan
 Phone : +081-3-6745-1451 (Representative)
 FAX : +081-3-6745-1458 (Representative)
 Office hours: 10:00 to 17:00 (closed on Saturday, Sunday and public holidays)