Article 1 (Application)

This privacy policy (hereinafter referred to as the "Policy") shall apply to all personal information provided to the Company. This Privacy Policy (hereinafter referred to as the "Policy") shall be applied when personal information is provided to the Company. In the event that the Company has established separate terms, rules, precautions, etc. (hereinafter collectively referred to as "individual terms") regarding the protection of personal information, such terms, rules, precautions, etc. shall be governed by the terms of this Policy. In the event that there are separate terms, rules, precautions, etc. (hereinafter collectively referred to as "Individual Terms") regarding the protection of personal information, and in the event that there is a difference between the content of this policy and the content of the Individual Terms, the content of the Individual Terms shall take precedence, unless otherwise specified.

This Policy does not apply to personal information provided in connection with services commissioned by other ANA Group Companies, such as ticket information for air transportation services.

Article 2 (Personal Information)

Personal Information" means "Personal Information" as defined in the Act on the Protection of Personal Information (Act No. 57 of 2003, hereinafter referred to as the "Personal Information Protection Act"). Personal information" means information about a living individual that can identify a specific individual by name, date of birth, or other description, etc., or that contains a personal identification code, as defined in the Act on the Protection of Personal Information (Act No. 57 of 2003).

Article 3 (Purpose of Use of Personal Information)

We will collect and use your personal information to the extent necessary for the following purposes. If we wish to use your personal information beyond the scope of the following purposes, we will obtain your prior consent in an appropriate manner. Even within the scope of the purpose, we will not use your personal information in a way that may encourage or induce illegal or unjust acts.

1. (1) To provide information on various events operated by the Company, to provide information, and to conduct and administer questionnaires.
2. (2) To respond to inquiries, requests, etc.
3. (3) For all operations incidental or related to the above operations.
4. In addition to the above, the Company may use personal information for the purposes described in "Article 7. Shared Use of Personal Information".

Article 4 (Personal Information to be Obtained)

In order to achieve the purposes of use stipulated in the preceding article, the Company shall acquire the following personal information of customers by appropriate and fair means

1. (1) Personal information, contact information, etc.
   Customer's name, address, telephone number, fax number, e-mail address, etc.
2. (2) Details of inquiries and comments to us
   Information contained in correspondence with the customer, the contents of inquiries, requests and opinions (including their causes and solutions) etc.

The Company shall not acquire or use sensitive information of customers such as race, creed, social status, medical history, criminal history, or the fact that a customer has been a victim of a crime (hereinafter referred to as "Sensitive Information"), unless otherwise required by law or agreed to by the customer.

Article 5 (Disclosure and Provision to Third Parties)

Personal information shall be strictly managed and shall not be disclosed or provided to third parties without the consent of the customer, except in the following cases. In the case of joint use or provision through outsourcing, it does not fall under the category of disclosure or provision to a third party.

1. (1) Cases in which the provision of personal information is necessary for the protection of the life, body, or property of an individual and in which it is difficult to obtain the customer's consent
2. (2) Cases in which the provision of personal information is particularly necessary for improving public health or promoting the sound growth of children and in which it is difficult to obtain the customer's consent
3. (3) Cases in which it is necessary to cooperate with a national agency, a local government, or an individual or entity entrusted by either a national agency or local government to execute affairs prescribed by law, and in which obtaining your consent may impede the execution of such affairs
4. (4) Cases in which personal information is provided as a result of the succession of business due to merger or other reasons
5. (5) Other cases permitted by law.

Article 6 (Entrustment of Handling of Personal Information)

We may outsource all or part of the handling of personal information within the scope necessary to achieve the purpose of use. In such cases, the Company shall thoroughly examine the eligibility of the consignee, stipulate confidentiality obligations in the contract, and exercise necessary and appropriate supervision over the consignee.

Article 7 (Joint Use of Personal Information)

ANA may jointly use customers' personal information within the following scope and for the following purposes.

Scope of joint users

ANA Group Companies

Purpose of use by those who use the information

1. (1)To provide air transportation services, travel services such as tours and hotels, and other products and services handled by the Company or the companies with which the Company shares personal information.
2. (2)To send direct mail, to provide information on products and services, and to conduct questionnaires, etc.
3. (3)To analyze sales and conduct other surveys and research, and to develop new products and services
4. (4)To communicate and transfer information to the company in charge in the event of a customer inquiry, application for use, or other request regarding products or services provided by the Company or a company with which the Company jointly uses personal information.
5. (5)To ensure the appropriate and smooth performance of transactions with customers by the Company or jointly using companies.
6. (6)For management and internal administration of the ANA Group

Items of personal information to be shared

Customer's name, address, telephone number, fax number, e-mail address, information contained in correspondence with the customer, contents of inquiries, requests and opinions (including their causes and solutions) etc.

Name, address and name of representative of the party responsible for the management of personal information ANA Holdings, Inc.

Postal Code 105-7140
Shiodome City Center, 1-5-2 Higashi-Shinbashi, Minato-ku, Tokyo
Koji Shibata, President and Representative Director

Article 8 (Transfer outside Japan)

When we provide your personal information to third parties such as business entities outside of Japan, including subcontractors and joint users, we will do so based on your consent, except in the following cases.

1. (1) When the third party is located in a country that is stipulated by law as having a personal information protection system of a level equivalent to that of Japan
2. (2) Where the third party has established a system necessary for the third party to continuously take measures equivalent to those required to be taken by business operators handling personal information in Japan.
3. In the case of (2) above, we will take necessary and appropriate measures to ensure the continuous implementation of equivalent measures by the third party.

Article 9 (Management of Personal Information)

The Company shall properly manage customers' personal information and take necessary security control measures to prevent leakage, loss, falsification, etc. of such information. In addition to providing internal training to directors and employees regarding the protection and appropriate handling of customers' personal information, the Company shall set retention periods for personal information in accordance with the purposes of use, and dispose of such information in an appropriate manner when the purposes of use have been achieved.

Article 10 (Requests Regarding Handling of Personal Information)

When we receive a request from a customer for disclosure, correction, deletion, addition, suspension of use, erasure, or provision of information on personal information protection measures (hereinafter referred to as "disclosure, etc.") regarding the customer's personal information held by us, we shall confirm the identity of the customer who made the request, and shall respond to the request within a reasonable period and scope as follows

1. (1) Requests for disclosure
   Requests for disclosure We will disclose the items of personal information requested by the customer, the purpose of use, or records of provision to third parties.
2. (2) Requests for correction, deletion, or addition
   After confirming the contents of the request, we will correct, delete, or add to the contents of the customer's personal information to the extent appropriate and possible.
3. (3) Request for Suspension of Use or Deletion
   In accordance with the content of the request, we will stop using the items of personal information specified by the customer to the extent appropriate and possible, and if the customer so requests, we will delete the information.
   Please note that suspension of use or deletion may make it impossible to provide services that were previously available or services that meet the customer's request. Please be aware of this before making a request.
4. (4) Request for information on personal information protection measures
   We will provide the following information in accordance with your request
   • ① Details of security control measures taken by the Company
   • ② Details of measures taken by the Company to provide personal information of customers to third parties outside of Japan

We may not be able to respond to a customer's request if it would cause significant hindrance to our normal business operations, if it would violate laws or regulations, or if it would harm the life, body, property, or other rights or interests of the customer or a third party.

Article 11 (Procedure for Changing Privacy Policy)

The Company will review and improve this Privacy Policy from time to time. The Company reserves the right to change this Privacy Policy, except as otherwise provided in laws and regulations or in this Policy. The revised Privacy Policy shall become effective when notified to customers or posted on the Company's website in a manner prescribed by the Company.

Article 12 (Contact for Inquiries)

Please contact the following for requests or inquiries regarding the Company's handling of personal information.
General Affairs Department, ANA Airport Service Co.
3-4-2 Haneda Airport, Ota-ku, Tokyo 144-8525, Japan

Enacted and enforced on April 1, 2022