This privacy policy (this “Privacy Policy”) is made to: (i) protect personal information as defined below, (ii) establish certain rules and procedures to protect personal information, and (iii) ensure that our employees observe and understand the importance of protecting personal information and taking the necessary measures to protect such personal information carefully, including by promoting such protection.

Article 1 (Personal Information)

“Personal Information” in this Privacy Policy means “personal information (kojin jouhou)” as defined in the Act on the Protection of Personal Information of Japan (Act No. 57 of May 30, 2003; “Personal Information Protection Act”); and therefore, means information which can identify a specific living individual by name, date of birth or other description contained in such information; or which includes a code that can identify a specific individual.

Article 2 (Purpose of Use of Personal Information)

We may acquire and use Personal Information of users (individually “User” or collectively “Users”) of our services (the “Services”) within the scope necessary for the following purposes. If we seek to use such Personal Information beyond the following purposes, we will obtain the prior written consent of the User whose Personal Information is concerned:

(1)To provide JASRI’s services (hereinafter referred to as the “Services”) (2) To provide the Services

(2)To improve and enhance the contents of this service or develop new services

(3)To provide information on new features, updates, campaigns, etc. of this service and other information for users, etc. (including sending e-mails, flyers, and other direct mailings)

(4)To contact you as necessary for maintenance, important notices, etc.

(5)To respond to opinions, inquiries, etc. from users, etc. regarding the Service (including to confirm the identity of the user)

(6)To report the status of use of this service to users, etc.

(7)To request your cooperation in surveys and interviews related to this service, to request your participation in various events, and to report the results of such events.

(8)To investigate and analyze the usage history of the Service and use the results for the improvement and development of the Service and delivery of advertisements.

(9)Provision of personal information to companies, etc. participating in JASRI-sponsored events based on the consent or application of the User, etc.

(10)To identify users who have violated the Terms of Use or users who intend to use the Service for fraudulent or unjust purposes, and to refuse their use of the Service.

(11)To provide personal information to RIKEN for the purpose of authorization of use and user management by RIKEN of SPring-8/SACLA owned by RIKEN (hereinafter referred to as “RIKEN”) (11)To provide personal information to RIKEN for the purpose of authorization of use and user management by RIKEN of SPring-8/SACLA owned by RIKEN (hereinafter referred to as “RIKEN”)

(12)National Institute of Quantum Science and Technology (“QST”) and Photon Science Innovation Center (“PhoSIC”) (12)Regarding NanoTerasu owned by the National Institute of Quantum Science and Technology (“QST”) and the Photon Science Innovation Center (“PhoSIC”) (12)To provide personal information to QST and PhoSIC in order to authorize QST and PhoSIC to use NanoTerasu and to manage users of NanoTerasu owned by QST and PhoSIC.

Article 3 (Management and Protection of Personal Information)

We will carefully and closely manage Personal Information and will not disclose or provide such Personal Information to any third parties without the prior written consent of Users whose Personal Information is concerned, except in the following circumstances and shall take precautional and correctional measures to an illegal access to personal information, risks of loss, destruction or leakage of personal information considering a security perspective:

(1) When necessary to protect the life, body, or property of an individual and when it is difficult to obtain the consent of the user, etc.

(2)Cases in which the provision of personal information is particularly necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the consent of the user, etc.

(3)When it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and obtaining the consent of the user or others may impede the execution of such affairs.

(4)When permitted by other laws and regulations

Article 4 (Entrustment of Handling of Personal Information)

We may entrust an individual or a business operator to handle Users’ personal data in whole or in part. In such case, we will examine their eligibility sufficiently, obligate such individual or business operator to maintain confidentiality obligations by contract, and will perform the necessary and appropriate supervision over such individual or business operator.

Article 4-2 (Joint Use of Personal Information)

　JASRI may share Users’ personal information for the following purposes and to the extent necessary to achieve the purposes of use.

[Purpose of joint use

The same as the purposes of use of personal information set forth in Article 2 (1) through (10) and (12).

[Scope of personal information to be shared

All personal information of users, etc.

[Scope of joint use

(hereinafter referred to as “QST”), the National Institute of Quantum Science and Technology (“NIST”), and the Photon Science Innovation Center (“PhoSIC”). (“QST”) and Photon Science Innovation Center (“PhoSIC”)

(Persons responsible for the management of personal information)

Shigeo Koyasu, President, QST 4-9-1 Inage-Anagawa, Chiba-shi, Chiba 263-8555, Japan

Masaki Takada, President, PhoSIC 468-1 Aoba, Aramaki, Aoba-ku, Sendai 980-0845, Japan

Article 5 (Disclosure of Personal Information)

Upon a request of a User (only the person whose information is concerned; the same will be hereinafter applied.), we will promptly disclose such User’s Personal Information held by us. However, we may keep all or part of such Personal Information undisclosed, if such disclosure falls under any of the following categories; and in this case, we will promptly notify such User:

(1)When there is a risk of harm to the life, body, property, or other rights or interests of the user or a third party

(2)When there is a risk of significant hindrance to the proper conduct of JASRI’s business

(3)When it would violate other laws and regulations

Article 6 (Correction, etc. of Retained Personal Data)

Users may request that JASRI correct, add to, or delete (hereinafter referred to as “Correction, etc.”) their personal information if the personal information in JASRI’s possession is incorrect. (1) Users may request that JASRI correct, add or delete (hereinafter referred to as “Correction, etc.”) their personal information if it is inaccurate.

2. Upon receipt of a request as described in the preceding paragraph, JASRI shall conduct the necessary investigation without delay, and if, as a result, it is determined that there is a reason for the request as described in the preceding paragraph, JASRI shall correct the relevant personal information, etc. without delay.

3. JASRI shall, without delay, notify the Users, etc. of its decision to make or not to make corrections, etc. based on the preceding paragraph.

Article 7 (Suspension of Use of Personal Information, etc.)

1. a User, etc. may request JASRI to stop using, erase, or stop providing to a third party (hereinafter referred to as “Stop Use, etc.”) the personal data held by JASRI. The User may request JASRI to stop using, erase, or stop providing to a third party (hereinafter referred to as “Suspension of Use, etc.”) personal data held by JASRI.

2. Upon receiving a request set forth in the preceding paragraph, JASRI shall conduct the necessary investigation without delay, and if, as a result of such investigation, JASRI determines that there is a reason for the request set forth in the preceding paragraph, JASRI shall suspend the use of the relevant personal data, etc. However, in cases where the suspension of use, etc. of personal data requires a large amount of expense or is otherwise difficult, and alternative measures necessary to protect the rights and interests of the Users, etc. can be taken, these alternative measures will be taken.

3. JASRI shall, without delay, notify the Users, etc. of its decision to implement or not to implement the Suspension of Use, etc. in accordance with the preceding paragraph.

Article 8 (Procedures for Changing the Personal Information Protection Policy)

We will review the content of this Privacy Policy appropriately and endeavor to improve this Privacy Policy. The content of this Privacy Policy can be amended unless otherwise stipulated in laws, regulations, and this Privacy Policy. The amended Privacy Policy will be valid when notified to all Users or uploaded on our website in accordance with our procedures.

Article 9 (Compliance with Laws, Regulations and Codes of Conduct)

We will comply with the laws and regulations in Japan and other rules that are applicable to the use of Personal Information we retain.

Article 10 (Response to complaints and consultations)

We will respond to any complaints from Users and will provide consultation to any User whose Personal Information is concerned as to the handling of his or her Personal Information. We will respond properly and promptly to any request for disclosure, correction, addition, deletion, refusal of use or provision regarding Personal Information.

Article 11 (Security Control Measures)

As to Personal Information provided by Users to the Company shall be protected from illegal access, lost, destruction, falsification, leakage and other issues through organizational, physical, personal and technical measures such as restricting access to Personal Information files, recording access logs, and taking security measures to prevent illegal access from outside. If, by chance, any leakage and other incidents are occurred, we will make report to relevant authorities in accordance with the Personal Information Protection Act and relevant guidelines, and as per instructions to be given by the authorities, will take required measures to avoid an occurrence of similar incidents or the same type of incidents.

Article 12 (Address of the Company, Name of Representative, Personal Information Protection Manager)

JASRI’s address, representative and the name of the Personal Information Protection Manager are as follows

Address: 1-1-1, Kouto, Sayo-cho, Sayo-gun, Hyogo Prefecture

Representative: President, Yoshiyuki Amemiya

Personal Information Protection Manager: Shigeru Kimura, Director, Utilization Promotion Dept.

Article 13 (Contact for Inquiries)

For inquiries regarding ASRI’s handling of personal information, please contact the following

Japan Synchrotron Radiation Research Institute

1-1-1, Kouto, Sayo-cho, Sayo-gun, Hyogo 679-5198 [Address

TEL: 0791-58-0961

Mail: sp8jasri@spring8.or.jp

Enacted and effective October 1, 2023

Amended on September 1, 2024

Internet security

1. SSL

The User Information Website uses secure socket layer (SSL) encryption technology to protect personal information. If you use an SSL-compatible browser, the personal information you provided, such as name, address, and phone number, will be automatically encrypted when it is transmitted.Should the data be intercepted by a third party, SSL prevents the data from being read or modified. (Because of the characteristics of the Internet, JASRI cannot warrant or guarantee 100% security in data transmission, thus you are advised to take every precaution to protect personal information when you are using the Internet. For example, inform JASRI promptly of any possibility of unauthorized use of personal information.)

2. System protection

JASRI’s systems are equipped with multiple checking systems and firewalls to prevent unauthorized access. In addition, JASRI limits its employee access to personal information as an internal security measure.

Collection and Analysis of Access Logs and Use of Cookies

Google Analytics, a service of Google LLC, is used in order to understand the status of utilization of this website. Google Analytics uses cookies to collect information on browsing activity for this website. Such collected information is collected on an anonymous basis and is not intended to identify individuals. You can reject such collection of information by adjusting the browser settings and disabling Google Analytics. Please also see the Google Analytics website for an explanation of the Google Analytics Terms of Service and Google Privacy Policy website.