Privacy Notice 3Dexpert Co., Ltd.

Summary of Opt Privacy Notice

This Privacy Notice summarizes our detailed Full Notice (further below) which describes our practices with respect to the processing of your personal data in connection with Opt websites, our business processes and applications.

I

How and to whom does this Notice Apply?

Our Privacy Notice applies to all Opt websites and those web-based or desktop apps that reference this Privacy Notice. It applies to the processing of personal information by visitors and users of the various Opt sites, attendees of Opt events, customers and prospective customers and their representatives; subscribers to Opt newsletters; and suppliers and business partners and their representatives. For more details, see Full Notice.

II

Types of personal data processed

We process the following personal data as data controller, which we collect during website visits, marketing interactions, app use and in the course of agreements with you or your employer: your name, name of the company you work for, email address, other identifiable data, payment information, IP address, behavioral data. For more details, see the Full Notice.

III

Processing purposes

We process your personal data for the following purposes: performance of agreements with you or your employer, administration of apps and website, monitoring website, app and email campaign performance, security and fraud prevention, online advertisement, analysis of behavior, use in marketing, and profiling. For more details, see the Full Notice.

IV

Legal justifications for the processing of your personal data

To the extent applicable to you, EU privacy law requires any processing of personal data to have a legal justification. We generally rely on the following legal justifications: (i) you consented to the processing; (ii) the performance of an agreement with you; (iii) compliance with a legal obligation; and (iv) pursuing our legitimate interests not overriding your interests and rights and freedoms. For more details on the purposes or processing and corresponding legal justifications see the Full Notice below.

V

Data transfers and Recipients

We may transfer your personal data to our group companies and third parties (e.g., business partners, resellers), acquiring or acquired entities, service providers, and, in accordance with applicable law, governmental authorities, courts, external advisors, and similar third parties. Some data transfers may cross national borders. For more details, see the Full Notice.

VI

Storage Retention periods and deletion

Your personal data will be deleted once it is no longer needed for the purposes of the original processing or as required by applicable law. For more details, see the Full Notice.

VII

Changes of this Privacy Notice

This Summary and Full Notice are subject to change.

VIII

How to contact us

If you wish to exercise your data subject rights, have questions concerning this Summary Notice or the Full Notice, or would like to discuss our handling of your personal data, please call us or send email to us.

FULL NOTICE

I. How and to whom does this Notice Apply?

Our Privacy Notice applies to all Opt websites and to our web-based or desktop apps that reference this notice, either in the information provided with them or the contractual terms that govern your use of these apps. Some web-based apps may have a more specific privacy notice. Generally, 3DキスパートCo.,Ltd. and its affiliates are responsible for the processing of your personal information.

This Privacy Notice applies to the processing of personal information submitted to us by, provided to us by, or otherwise collected by us from visitors and users of the various Opt products, sites, services, attendees of Opt events, customers and prospective customers and their representatives; subscribers to Opt newsletters; and suppliers and business partners and their representatives. This Privacy Notice describes how we process personal data for our own purposes. We also process personal data on behalf of our customers subject to a written contract. We do not control the data processing or protection practices of our customers (who may be your employer, service provider to you or your business partner), which may differ from those set out in this Privacy Notice.

II. What information about You does Opt Process?

A. General Description:

Opt processes information that identifies you which is submitted to us, provided to us, or otherwise collected by us. This includes information such as:

▪ Your name and contact information (national, email);

▪ Data relating to previous or ongoing business transactions, payment methods;

▪ IP address and information that may be derived from IP addresses or other device identifiers, such as geographic location;

▪ Information about a device you use, such as browser, device type, operating system, the presence or use of "apps", screen resolution, and the preferred language;

For California residents, information on the categories of personal information Opt collects about consumers is located in our Notice at Collection for California residents which is incorporated by reference into and is made a part of this Privacy Notice.

B. How Does Opt Obtain Your Information

Information is collected directly from you through personal interactions, registrations for events or Apps, or correspondence with us. Information is collected from your interactions with and use of our websites, apps, and products and services. We obtain information through our resellers and other channel partners. We complement information we receive directly from you with information from other sources, in accordance with applicable law. For example, we use data about the company you work for together with the information received from you to better understand the industry that you are working in.

C. Some Processing Practices explained in Detail

User ID

User ID is our single sign on functionality on Opt website. We process your contact details and login details such as user name and password. The purpose of this processing is to provide you access to our products and services to which you or your employer have purchased or subscribed.

Opt Products, Software Services, Apps and Subscription Websites

Opt offers various services to our customers. The data processed in the context of these services is processed generally on behalf of our customers (who may be your employer). When you use these services, Opt will process the following data:

▪ Usage Details. When you access our websites or use our apps, we may automatically collect certain details of your access to and use of the websites and apps, including location data, logs, back-end information and server calls, communication data, and the resources that you access and use on or through the websites and apps. The purpose for processing this information is to manage, secure and improve our products and services.

▪ Device Information. Our servers may receive data from your browser or device when you visit one of our websites or use an app. That data can include your IP address (which may tell us generally where you are located), device ID, operating systems, pages viewed, time spent, the type of browser and device you used, and if applicable, the search terms that led you to our website.

We require some of this usage and device information to provide you and our customers with certain functionality of our products, software, services, websites and apps. If you do not want us to collect or process this usage and device information, do not use our products, software, services, access our websites, or download our app, or delete our app from your device if already downloaded.

Also, we use automated systems to analyze your use of our products, software, services, websites and apps using techniques such as machine learning in order to improve our products, software, services, apps and websites. This analysis may occur as the content is sent or received using an online feature of a Opt app or website, or when the content is stored on Opt servers.

Opt Emails and Marketing Automation

Opt uses marketing automation platforms for sending emails. These platforms and other email clients track behavior related to those emails, including whether you have received or opened the email, opened an attachment or clicked a link in the email, or forwarded the email. If you do not want us to collect this information from future Opt marketing emails, you can opt out of receiving Opt marketing emails using the “Manage Preferences” or “Unsubscribe” link on the bottom of the email you received (either option may apply).

Stored Information and Files

Opt may use cookies, web beacons or other tracking mechanisms to collect information about how you have used our websites and apps, and our servers may collect similar information when you are logged in to the app or website. Depending on the website or app, we work to collect this information, depending on the website and the app, on an anonymous basis, or it may include references to you. We may also access metadata and other information associated with other files stored on your device. This may include, for example, cached image files.

Opt social community

Opt participates in social community sites and provides our information there (for example, our LinkedIn pages).

You may also be able to sign-in to a Opt app or website using a social networking account, such as a Google account. When you use these sign-on features, we may collect information on you from the relevant social vendor for providing account access, including a unique identifier, email, first and last name.

Opt places paid ads on social sites like LinkedIn or Facebook for engaging marketing thought leadership. Related content may also be offered. We require personal information as a part of webform submissions to provide access for downloading those materials.

III. For what Purposes do we use this information?

Opt uses the information we collect about you (including Usage Information) in a number of ways, such as:

▪ Providing you with our apps and websites for which you have registered or which you have purchased or licensed, as well as any products, software, services, support, or information you have requested, purchased or licensed from us;

▪ Performing our obligations to our clients which have purchased or licensed products, software and/or services used by you;

▪ To deliver you services, products, and support as necessary to perform the contract governing your use of our applications or to communicate with you;

▪ Improving our products, software, services, websites and apps and their user experience by analyzing their use to deliver a more personalized experience;

▪ Generating de-identified and/or anonymized information about you or other users, and information that does not identify any individual or device, which may be used by us, our affiliates, and others without restriction;

▪ Diagnosing problems in our products, software, services, apps and websites and notifying you of fixes;

▪ Tailoring a website, app, or Opt ad to your likely interests;

▪ Providing you with functionality and/or marketing specific to your location;

▪ Communicating with you with regards to your business relationship with us, for example, when a contract is established or performed, or notifying you when subscriptions expire;

▪ Keeping you informed about our company, our product updates, new app releases, special offers, and similar information;

▪ Conducting market research about our customers, their interests, and the effectiveness of our marketing campaigns;

▪ Using your personal and behavioral data, to improve user experience of our products, software, services, websites and apps and to identify other persons that respond similarly;

▪ Implementing cybersecurity initiatives, including reducing fraud, software and IP piracy, and protecting the confidentiality of your information;

▪ As further described in supplemental privacy notices provided by us.

▪ Monitoring usage and interaction statistics of our products, software, services, websites or apps, and/or to perform data analytics in order to assess and enhance our products, software, services, websites and/or apps; and

▪ Monitoring and/or process automatic crash reporting or other technical issues.

IV

On what basis does Opt collect and process this information?

For personal information collected about you in the EU, our basis for processing is the following:

▪ In order to communicate adequately with you and to respond to your requests, we need to process information about you and therefore have a legitimate interest in processing this information.

▪ In order to engage in transactions with customers, suppliers and business partners, and to process purchases and downloads of our products and services, we need to process information about you as necessary to enter into or perform a contract with you.

▪ We process personal information for marketing and sales activities based on your consent where so indicated on our sites at the time your personal information was collected, or further to our legitimate interest to market and promote our products and services.

▪ We rely on our legitimate interest to analyze, develop, improve and optimize our sites, products and services, and to maintain the security of our sites, networks and systems.

▪ In order to comply with applicable laws and regulations, such as to comply with a subpoena or other legal process, or to process an opt-out request.

V

Data Transfers

A. Data Access

Opt relies on other companies for a variety of reasons. We work with third party service providers, such as specialist companies in the area of processing credit card payments, providing software solutions, providing hosting services, or supporting our business processes. Some of these third party providers have access to your personal information in order to provide services to you on our behalf, in order to help us manage or improve our products and services, and/or in order to provide you with a satisfactory user experience. Under our contracts with these service providers, they are not permitted to use your information for their own purposes (but may be permitted to use and disclose anonymized and de-identified information provided you are not identified as the source of the information).

Opt may also share your personal information:

▪ With our affiliates (i.e. other companies of the Opt group of companies) for the same purposes described in this privacy notice;

▪ With third party providers (i.e. contractors or agencies) hired to deliver Opt marketing programs on behalf of Opt;

▪ With our resellers or other authorized sales partners for the purpose of following up on your requests or marketing communications;

▪ In legal proceedings in which we are a party or a third party, in compliance with lawful requests;

▪ When we have a good faith belief that the disclosure is necessary to protect ourselves against fraud, for reasons of cyber defense, or otherwise protect the property and safety of Opt, our affiliates, our customers and users;

▪ If a company buys us or merges with us or we sell a part of our business and transfer customer information as part of this business: and

▪ When you agree to the sharing.

B. Does Opt transfer my personal information across national borders?

We may transfer your personal information across national borders to other countries in compliance with applicable laws.

By default, all personal information data will be stored on Opt's servers located in Japan.

If the content or data that you store on or through Opt software, services, apps or websites contains the personal information of individuals from the EEA, you agree that you have the legal authority to transfer the personal information to Opt, including the transfer to countries such as the United States where the privacy protections and rights of authorities to access personal data may not be equivalent to those in the EEA.

The information above applies to Opt users that have agreed to the Opt Privacy Notice. More information is available for our business customers that want to learn more about European data transfers.

VI

Data Retention, Storage and Security

A. Retention periods

Your personal data will be retained as long as necessary to provide you with the services requested. When we no longer need to use your personal data to comply with contractual or statutory obligations, we will remove it from our systems and records and/or take steps to properly anonymize it so that you can no longer be identified from it, except as required under applicable legal or regulatory obligations, e.g. statutory retention periods which can result from tax requirements and other compliance requirements and usually contain retention periods up to 10 years, or if we need it to preserve evidence within the statutes of limitation, which is usually up to 7 years.

B. Is my personal information secure?

We understand that the security of your personal information is important. We provide reasonable administrative, technical, and physical security controls to protect your personal information. However, despite our efforts, no security controls are 100% effective and Opt cannot ensure or warrant the security of your personal information.

We restrict access to your personal information to our authorized employees, agents, and/or third party providers as necessary to fulfill our legal and business obligations and to provide you with our products, software, websites, services and apps.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) user log-in credentials (i.e. a user ID and password) for access to certain parts of our services or apps, you are responsible for keeping these user account credentials confidential. We ask you not to share your password with anyone. You are solely liable for the protection of user account credentials and for all use of your user account credentials.

Please note that we do not have any control over or responsibility for information or communications you share through our products, software, services, websites or apps, including for any third party websites accessed or linked through them.

C. Where does Opt store my personal information?

Currently, your personal information is stored on Opt's servers as well as on the servers of third-party service providers we engage. In the future, we will establish servers globally, and the companies we hire to assist us in conducting our business may be located worldwide. As a result, your personal information may be transferred across borders.

VII

Will this Privacy Notice change?

Occasionally, we may change this privacy Notice (or other documents in the Opt Privacy Center) to allow Opt to use or share your personal information in a different way. If we do, the links to the Notice on our websites (which are generally found in the footer of the website) will indicate that the Notice has been changed. For new users, the change will become effective upon posting. For existing users, if the change is significant, it will become effective 30 days after posting. We encourage you to periodically review the Opt Privacy Center for the latest information on our privacy practices.

VIII

Who can I contact with questions or concerns?

If you have a privacy question or concern, please contact us by email at info@3dexpert.jp.

Privacy NoticeOpt3ds

FULL NOTICE